At zs88, we understand that your personal information is exactly that — personal. This Privacy Policy explains in plain, honest terms what data we collect from Pakistani players, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information. We don't sell your data. We don't rent it. We protect it.
Six core data protection principles that underpin everything we do at zs88 with Pakistani player information.
zs88 does not sell, rent, or trade your personal information to any third-party commercial entity — ever. Your name, mobile number, CNIC details, and transaction history are held solely for the purposes of providing you with the zs88 gaming service, complying with our licensing obligations, and preventing fraud. That is the full list. Nothing else.
All personal and financial data transmitted between your device and zs88 servers is protected by 256-bit SSL encryption — the same standard used by HBL and Meezan Bank for their online banking portals. Data at rest on zs88 servers is encrypted using AES-256. Cryptographic key management follows industry-standard rotation protocols.
zs88 collects only the personal information that is genuinely required to provide the gaming service, verify your identity under our international licensing obligations, and process your financial transactions. We do not collect data for the sake of it. Each category of data we hold has a clearly defined purpose, retention period, and legal basis.
Pakistani players registered on the zs88 Platform have meaningful rights over their personal data — including the right to access what we hold, correct inaccuracies, restrict processing in certain circumstances, and request erasure where legally permissible. All data rights requests are handled within 30 days of written submission to our compliance team.
Your data is not kept indefinitely. zs88 operates defined retention periods for each category of personal data, balancing our legitimate operational needs and legal obligations against your right to not have your data held longer than necessary. Account closure triggers a structured data deletion process within the retention windows described in this Policy.
zs88 sends marketing communications only to Players who have affirmatively opted in. You can withdraw marketing consent at any time by updating your Account notification preferences. Self-excluded Players are automatically removed from all marketing lists immediately upon exclusion activation. We do not send unsolicited SMS or email promotions to Pakistani phone numbers or email addresses.
SCOPE OF THIS POLICY: This Privacy Policy ("Policy") applies to all personal data processed by zs88 ("zs88", "we", "us", "the Company") in connection with your use of the zs88 Platform at zs88.biz and all associated services. This Policy forms part of the zs88 Terms & Conditions and is incorporated by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree, you must not use the zs88 Platform.
zs88 is committed to protecting the privacy and security of all personal data entrusted to us by our Players. This Policy sets out a comprehensive and transparent account of how we handle personal information collected from players who register and use the zs88 online gaming platform, which primarily serves English-speaking players located across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and Quetta.
This Policy applies to:
This Policy does not apply to third-party websites, payment processors, or game studios whose own privacy policies govern their independent data processing activities. Where zs88 links to third-party services within the Platform, we encourage you to review those parties' privacy policies directly.
For the purposes of applicable data protection law, the Data Controller responsible for personal data processed under this Policy is zs88, operating the Platform at zs88.biz under international gaming license standards. The Data Controller is responsible for determining the purposes and means by which your personal data is processed.
All data protection enquiries, subject access requests, erasure requests, and formal complaints should be addressed to the zs88 Privacy Team in writing. Contact details are provided in Section 15 of this Policy.
Note: Where zs88 engages third-party service providers (such as payment processors, KYC verification services, or game studios) to process data on its behalf, those third parties act as Data Processors under instruction from zs88 as Data Controller. zs88 maintains data processing agreements with all third-party processors to ensure appropriate data protection standards are maintained.
zs88 collects and processes the following categories of personal data from Pakistani players, collected at different stages of your relationship with the Platform:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie photograph with CNIC | Registration & KYC verification |
| Contact Data | Pakistani mobile number (03XX format), email address | Account registration |
| Financial Data | JazzCash/EasyPaisa wallet number, bank account details (for withdrawals), USDT wallet address, deposit/withdrawal history, transaction amounts in PKR | First deposit & withdrawal requests |
| Gaming Activity Data | Game session records, bets placed, outcomes, win/loss history, sport markets accessed, bonus usage history, real-time balance | Ongoing Platform use |
| Technical Data | IP address, device type and model, browser type and version, operating system, session timestamps, login location data | All Platform access events |
| Communications Data | Live chat transcripts, support email content, complaint records, feedback submissions | Any customer support interaction |
| Responsible Gaming Data | Deposit limits set, loss limits, self-exclusion status and dates, session time settings, responsible gaming alerts triggered | When RG tools are used |
| Source of Funds Data | Payslips, bank statements, business documents (for large transactions requiring AML compliance review) | When compliance review is triggered |
We do not knowingly collect sensitive personal data beyond CNIC information (which is required for identity verification purposes under our licensing obligations). We do not collect biometric data, health data, religious beliefs, or political opinions from our Players.
zs88 collects personal data through the following channels and methods:
The majority of personal data we hold is provided directly by you during account registration, the KYC verification process, financial transaction requests, and any communication you initiate with our support team. This includes your name, CNIC, contact details, and payment information.
When you access and use the zs88 Platform, our servers automatically record technical data including your IP address, device characteristics, browser information, session duration, and navigation paths within the Platform. This data is collected through server logs and first-party analytics tools.
When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, our payment processors transmit transaction confirmation data to zs88, including the transaction reference number, amount, timestamp, and associated wallet or account identifiers. zs88 does not store full bank account numbers or JazzCash PINs.
Where zs88 engages third-party KYC verification providers to authenticate CNIC documents or confirm identity information, those providers may transmit verification results and associated identity data to zs88. These providers are engaged under data processing agreements and are bound by equivalent data protection obligations.
zs88 uses first-party cookies and similar technologies to maintain your session state, remember your platform preferences, and measure Platform performance. See Section 8 for full details of our cookie practices.
zs88 processes your personal data on the following legal bases, each applied to specific processing activities as appropriate:
Important: Where processing is based on legal obligation (particularly KYC and AML requirements under our gaming license), you cannot opt out of such processing while maintaining a zs88 Account. If you do not wish for this processing to occur, you must not register or must request Account closure. zs88 cannot waive its licensing compliance obligations even upon request.
zs88 uses the personal data we collect for the following specific and defined purposes:
To create and maintain your zs88 Account, verify your identity and eligibility (including 21+ age verification), process deposits and withdrawals in PKR, provide access to cricket betting, live casino, slot, and crash game services, and deliver customer support via live chat and email in Urdu and English.
To verify your identity against your submitted CNIC documentation, comply with Anti-Money Laundering (AML) obligations, conduct Enhanced Due Diligence on accounts where required by our gaming license, meet regulatory reporting obligations, and prevent fraud and financial crime. This processing is mandatory under our international gaming license and cannot be waived.
To monitor gaming patterns for indicators of problematic gambling behaviour, implement player-requested responsible gaming controls (deposit limits, self-exclusion, session reminders), enforce the 21+ age restriction across all Platform products, and provide proactive responsible gaming interventions where patterns suggest a player may be at risk.
To detect and prevent fraudulent activity, account takeover attempts, and bonus abuse; to monitor for unusual transaction patterns; to investigate security incidents; and to enforce the zs88 Terms & Conditions where violations are suspected.
To understand how Pakistani players interact with the Platform, identify technical issues, improve game performance on Pakistani mobile networks (Jazz, Zong, Telenor, Ufone), and optimise the user experience for the devices and browsers most commonly used by our players across Karachi, Lahore, Islamabad, and other cities.
To send promotional offers, bonus notifications, and platform updates to Players who have explicitly opted in to marketing communications. Marketing is sent via the contact channels you registered with (email or SMS to your Pakistani mobile number). zs88 does not engage in cold marketing to unregistered Pakistani mobile numbers or email addresses.
zs88 does not sell, rent, or trade personal data with any third-party commercial entity. We share personal data with external parties only in the following clearly defined circumstances:
Your financial information is shared with the payment service providers required to process your transactions — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors. These processors receive only the data necessary to execute and confirm the transaction. Each processor is subject to its own data protection obligations and is not authorised to use your data for any purpose other than the transaction in question.
Your identity documents (CNIC and associated photographs) may be transmitted to third-party identity verification service providers engaged by zs88 to authenticate KYC submissions. These providers operate under data processing agreements and are contractually bound not to use your identity data for any purpose other than the verification service they are contracted to provide for zs88.
zs88 may disclose personal data to regulatory bodies, gaming license authorities, law enforcement agencies, or courts where disclosure is required by law, court order, or formal regulatory request. In such cases, zs88 will disclose the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the Player of the disclosure.
Live casino and slot games on the zs88 Platform are provided by third-party studio partners including PG Soft, Pragmatic Play, Habanero, and JDB. These studios may collect limited technical and gameplay data directly within their game environments, governed by their own privacy policies. zs88 does not share your identity or financial data with game studio providers.
zs88 may share relevant personal data with legal advisors, auditors, or compliance consultants where required in connection with legal proceedings, regulatory audits, or internal compliance reviews. Such disclosure is subject to professional confidentiality obligations.
Absolute Restriction: zs88 will never sell, license, or share your personal data with commercial advertisers, data brokers, or marketing agencies. This is an unconditional commitment and not subject to exception based on commercial arrangements.
zs88 uses cookies and similar client-side technologies to maintain the functionality of the Platform and understand how players interact with it. The following categories of cookies are in use on the zs88 Platform:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Maintaining your login session, remembering language preferences, enabling game load functionality, CSRF security tokens | No — essential to Platform operation |
| Functional | Remembering your game lobby preferences, last visited game category, display settings | No — operational improvement |
| Analytics | Understanding page load performance on Pakistani networks, identifying technical errors, measuring feature usage rates to prioritise improvements | Yes — first-party analytics only |
| Marketing | Identifying returning visitors for relevant promotional display on the Platform (first-party only — no third-party ad networks) | Yes — opt-in required |
zs88 does not use third-party advertising networks, retargeting pixels from social media platforms, or cross-site tracking cookies of any kind. Your browsing activity on the zs88 Platform is not shared with external advertising platforms.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality — your session cannot be maintained without them. Cookie preference settings on the zs88 Platform can be adjusted within your Account Settings after login.
zs88 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, destruction, or loss. Our security architecture includes:
Your Role in Security: While zs88 maintains robust technical safeguards on our end, the security of your Account also depends on you keeping your login credentials private and enabling two-factor authentication on your zs88 Account. If you suspect your Account has been accessed without your authorisation, contact our 24/7 support team immediately.
zs88 retains personal data only for as long as is necessary for the stated purposes and as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 7 years post-closure | Gaming license regulatory obligation |
| KYC Documents (CNIC) | Duration of Account + 7 years post-closure | AML regulatory retention mandate |
| Financial Transaction Records | 7 years from transaction date | AML/financial compliance obligation |
| Gaming Activity Data | 5 years from last gaming activity | Responsible gaming monitoring & dispute resolution |
| Technical Logs (IP, device) | 12 months from collection date | Security monitoring & fraud prevention |
| Support Communications | 3 years from last interaction | Dispute resolution & quality assurance |
| Marketing Consent Records | Until withdrawal of consent + 3 years | Evidence of valid consent |
| Self-Exclusion Records | Permanent retention after exclusion | Player protection & responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised and aggregated data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.
Pakistani players registered on the zs88 Platform hold the following rights in respect of their personal data, exercisable by submitting a written request to the zs88 Privacy Team (contact details in Section 15):
You have the right to request a copy of all personal data that zs88 holds about you, together with information about the purposes for which it is processed, the legal basis, retention periods, and any third parties with whom it has been shared. zs88 will respond to verified access requests within 30 days.
You have the right to request correction of any personal data that we hold about you that is inaccurate or incomplete. For KYC-related data, corrections require updated documentation submission. Non-KYC contact information (such as email address) can be updated directly through your Account Settings.
You may request deletion of your personal data. zs88 will honour erasure requests where the data is no longer necessary for its original purpose and where no legal retention obligation requires us to retain it. Note that KYC, financial transaction, and gaming activity data are subject to regulatory retention requirements (Section 10) and cannot be deleted within those mandatory retention periods.
In certain circumstances (for example, where you contest the accuracy of data or have objected to processing), you may request that zs88 restricts processing of your data to storage only, pending resolution of the underlying issue. This right is subject to limitations where processing is legally mandated.
Where processing is based on your consent or on contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), allowing you to transmit it to another service if you wish.
You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. zs88 will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms — or where processing is necessary for legal claims.
Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal of marketing consent takes effect within 48 hours and removes you from all zs88 promotional communication lists.
Exercising Your Rights: To exercise any of the above rights, submit a written request to the zs88 Privacy Team at the contact details in Section 15. Include your registered Account email address or mobile number and a description of the right you wish to exercise. We will verify your identity before processing any rights request and respond within 30 days of receipt of a valid, verified request.
AGE RESTRICTION — 21+: The zs88 Platform is strictly intended for individuals aged 21 years and above. zs88 does not knowingly collect or process personal data from individuals under the age of 21. Age is verified through mandatory CNIC submission during registration, which includes date of birth information.
If zs88 discovers that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:
Parents and guardians who believe their child may have accessed or created a zs88 Account should contact our support team immediately. We take underage gambling and underage data collection with the utmost seriousness and respond to all such reports as a priority matter.
The zs88 Platform serves Pakistani players, and our primary player data processing activities are designed to operate within our international gaming license jurisdiction. However, due to the nature of online gaming infrastructure, some data processing may occur in server locations outside Pakistan.
Where personal data is transferred internationally, zs88 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as would apply within Pakistan, including:
zs88 does not transfer personal data to jurisdictions with demonstrably inadequate data protection standards without implementing additional contractual and technical safeguards sufficient to compensate for any identified deficiencies.
zs88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. The current version of this Policy is always published at zs88.biz/privacy-policy, and the effective date of the current version is displayed at the top of this document.
Where we make material changes to this Policy — changes that significantly affect how we process your personal data or the rights available to you — we will notify registered Players via the email address or mobile number registered on their Account at least 14 days before the changes take effect. Notification of minor, non-material amendments will be provided through a notice on the Platform.
Continued use of the zs88 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the updated Policy, you must discontinue use and may request Account closure, which will trigger the standard account closure and data handling procedure described in this Policy.
For all privacy-related enquiries, data rights requests, and formal complaints regarding zs88's data processing practices, please use the following contact channels. All contact information is presented as plain text — none of the below are clickable links:
We encourage you to contact us directly in the first instance to resolve any privacy concern. If you are not satisfied with our response, you may have the right to escalate your complaint to the data protection supervisory authority applicable under the zs88 gaming license jurisdiction. Information on the applicable supervisory authority is available from the zs88 compliance team upon written request.
This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 2.1). The most current version is always available at zs88.biz/privacy-policy. Previous versions are archived and available from the Privacy Team upon written request, including a documented change log explaining the differences between versions.
The zs88 Platform processes personal data only from verified players aged 21 and above. CNIC-based age verification is mandatory at registration. If you have questions about how your data is used in connection with responsible gaming monitoring or self-exclusion, visit our Responsible Gaming page for full details.
Privacy and player protection go hand in hand at zs88. Our responsible gaming data — including your deposit limits, self-exclusion status, and gaming session records — is used only to protect you, never sold or used for commercial profiling. If gambling is affecting your life, please seek support through appropriate services in Pakistan.
Internationally licensed, 256-bit encrypted, zero data sales — your privacy is protected at zs88. Cricket betting, live casino, slots, and crash games in PKR with JazzCash and EasyPaisa. 21+ only. By continuing to use zs88, you confirm your acceptance of this Privacy Policy.
Login to zs88 Terms & Conditions