za888 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data

This Privacy Policy describes how za888 ("za888", "we", "us", "our") collects, uses, stores, and protects the personal data of Pakistani players who access the za888 platform at za888.games, including all services accessible through za888 Login — the za888 Casino, Jackpot Slots, Cockfighting, Accumulator betting, and all associated platform features.

za888 is committed to handling Pakistani players' personal data responsibly, transparently, and in accordance with applicable data protection principles. We apply internationally recognised data protection standards across all personal data processing activities, including those involving PKR transaction data and identity verification records obtained from Pakistani players.

By registering a za888 account and using za888 services, you acknowledge that you have read this Privacy Policy in full and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you should not register a za888 account or use za888 services.

za888 collects personal data from Pakistani players through several channels: directly during registration and za888 Login, through platform usage activity, and through identity verification processes. The categories of personal data za888 collects are set out in the table below:

za888 does not collect or store full payment card numbers. Where bank transfer or mobile wallet reference data is received as part of PKR transaction processing, only the minimum information required to verify and complete the transaction is retained.

za888 uses the personal data of Pakistani players exclusively for the following purposes:

• Account Management: To create, maintain, and administer your za888 account, process za888 Login requests, and manage your PKR balance.
• Identity Verification: To verify that you are aged 18 or above, to confirm your identity in accordance with anti-money laundering (AML) requirements, and to validate your CNIC details against your registration information.
• PKR Transaction Processing: To process PKR deposits via Easypaisa, JazzCash, Raast, HBL, and UBL, and to execute PKR withdrawal requests to your registered payment method.
• Gaming Service Delivery: To provide access to za888 Casino games, Jackpot Slots, Cockfighting markets, Accumulator betting, and all other za888 platform features following za888 Login.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, and unauthorised za888 Login attempts on your account.
• Responsible Gaming Monitoring: To monitor gaming activity patterns for indicators of problem gambling behaviour and to apply responsible gaming tools in accordance with your preferences and za888's obligations.
• Customer Support: To respond to za888 support enquiries, resolve disputes, and provide assistance to Pakistani players via live chat and email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve za888 platform performance, game offerings, and user experience for Pakistani players.
• Marketing Communications: To send you information about za888 promotions, new game launches, and PKR bonus offers, where you have consented to receive such communications. You may withdraw consent at any time.
• Legal Compliance: To meet za888's obligations under applicable anti-money laundering legislation, financial crime prevention requirements, and any other applicable legal obligations.

za888 processes the personal data of Pakistani players on the following legal bases:

• Contractual Necessity: Processing required to fulfil za888's obligations under the Terms and Conditions you accepted at registration — including processing your za888 Login, managing your PKR account balance, and executing PKR transactions.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering legislation, CNIC verification obligations, and tax reporting requirements as applicable.
• Legitimate Interests: Processing carried out in pursuit of za888's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and PKR transaction risk management — where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in to receive za888 promotional emails or SMS messages. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

za888 shares Pakistani players' personal data only in the limited circumstances described below. In all cases, za888 requires any recipient of personal data to maintain appropriate security standards and to use the data only for the specified purpose:

• Payment Processors: Easypaisa, JazzCash, Raast, HBL, UBL, and USDT processing providers receive the minimum personal and transaction data required to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and data security obligations.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers receive CNIC and identity data for the purpose of verifying the identity and age of Pakistani players who trigger za888's identity verification requirements.
• Game Content Providers: Licensed game studios whose titles appear in the za888 Casino and Jackpot Slots lobby receive aggregated, anonymised gaming data for technical performance and audit purposes. Individual Pakistani player identities are not disclosed to game studios.
• Fraud Prevention Services: za888 may share technical data (including IP address and device fingerprint data) with specialist fraud prevention and anti-money laundering service providers to protect Pakistani players and the integrity of the za888 platform.
• Legal and Regulatory Authorities: za888 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, valid legal process, or court order. za888 will notify affected Pakistani players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of za888's assets, personal data of Pakistani players may be transferred to the acquiring entity, subject to the acquiring entity assuming obligations under this Privacy Policy.

Given that all za888 transactions are denominated in Pakistani Rupee (PKR), za888 handles payment data from the specific Pakistani payment infrastructure used by players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities. The following specific policies apply to PKR payment data:

Easypaisa and JazzCash: When you deposit or withdraw PKR via Easypaisa or JazzCash, za888 receives your registered mobile wallet number and transaction reference. za888 uses this information solely to match your deposit to your za888 account or to send your withdrawal. za888 does not store your Easypaisa or JazzCash PIN or any authentication credentials.

HBL and UBL Bank Transfers: When you make a PKR bank transfer from HBL or UBL, za888 receives the bank account reference and transaction amount. This data is used to verify and credit your za888 PKR balance. Bank account details are retained for the period required under za888's anti-money laundering obligations.

USDT Transactions: For Pakistani players who choose to transact in USDT (converted to PKR at the prevailing market rate), za888 records the wallet address and transaction hash for each USDT deposit or withdrawal. This data is retained in accordance with za888's financial record-keeping obligations.

The za888 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your za888 Login session, to remember your language and display preferences, and to analyse platform usage patterns to improve the experience for Pakistani players.

za888 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the za888 platform to function and cannot be disabled. They include session cookies that maintain your za888 Login state, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable platform performance.
• Functional Cookies: These cookies remember your za888 preferences, including language settings, display preferences, and responsible gaming tool configurations. Disabling functional cookies may limit certain za888 platform features.
• Analytics Cookies: za888 uses analytics tools to collect anonymised, aggregated data on how Pakistani players navigate and use the za888 platform. This data helps za888 identify areas for improvement and optimise the PKR gaming experience. Analytics data is not linked to individual player identities.
• Marketing Cookies: With your consent, za888 may use marketing cookies to track the effectiveness of za888 promotional campaigns and to deliver relevant za888 content to Pakistani players. You may withdraw consent for marketing cookies at any time through your za888 cookie preference settings.

You can manage your cookie preferences through your web browser settings. Note that disabling strictly necessary cookies will prevent you from accessing za888 services, including za888 Login and PKR transactions.

za888 retains personal data of Pakistani players only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active Account Data: Retained for the duration of your za888 account plus a period of 5 years following account closure, to comply with financial record-keeping and anti-money laundering obligations.
• PKR Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial crime prevention legislation.
• Identity Verification Records (CNIC): Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Gaming Activity Logs: Retained for a minimum of 3 years from the date of each gaming session, for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Communications: Retained for 2 years from the date of each za888 support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the period of your za888 account and for 1 year following account closure, as evidence of consent where applicable.

Following the expiry of applicable retention periods, za888 will securely delete or anonymise personal data in a manner that prevents recovery or reconstruction of individual Pakistani player information.

za888 implements a comprehensive set of technical and organisational security measures to protect the personal data of Pakistani players against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption on all data transmitted between Pakistani players' devices and the za888 platform, including all za888 Login sessions and PKR transaction requests.
• Encryption of sensitive personal data fields — including CNIC numbers and password hashes — in za888's database infrastructure, using industry-standard encryption algorithms.
• Two-factor authentication (2FA) availability for all za888 Login sessions, providing an additional layer of security for Pakistani player accounts.
• Strict access controls limiting za888 staff access to personal data on a need-to-know basis, with full audit logging of all internal data access events.
• Regular security assessments, vulnerability scanning, and penetration testing of the za888 platform infrastructure.
• Incident response procedures that include notification to affected Pakistani players in the event of a data breach that is likely to result in a risk to their rights and freedoms.

The za888 platform is strictly intended for adults aged 18 years and above. za888 does not knowingly collect personal data from any person under the age of 18. If za888 discovers or is notified that personal data has been collected from a person under 18, za888 will immediately and permanently close the associated account, delete all associated personal data to the extent permitted by law, and report the matter as appropriate.

If you are a parent or guardian and believe that your child under 18 has registered a za888 account or provided personal data to za888, please contact za888 support immediately via live chat. za888 will take immediate action to investigate and, where confirmed, to close the account and delete the minor's personal data.

za888 uses age verification procedures, including CNIC verification, during the za888 registration process to prevent minors from accessing za888 services.

Pakistani players wishing to exercise any of the data rights described in this Privacy Policy — including the rights to access, correct, delete, restrict, or port personal data, or to object to processing — may do so by contacting za888 support through the following channels:

• Live Chat: Available 24/7 inside the za888 member dashboard after za888 Login. This is the fastest channel for data rights requests.
• Email: [email protected] — please include "Data Rights Request" in your subject line and provide your registered za888 account email address to help za888 identify your account.

za888 will acknowledge all data rights requests within 5 business days and will respond substantively within 30 calendar days of receiving a verified request. Where the complexity or volume of requests requires additional time, za888 will notify the requesting Pakistani player and provide an updated response timeline.

za888 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or amended by an unauthorised person. Identity verification may involve confirming your registered za888 account email address, Pakistani mobile number, or CNIC details.

za888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in za888's data processing practices, changes in applicable law, or improvements to za888 platform services for Pakistani players. When material changes are made to this Privacy Policy, za888 will notify Pakistani players by sending an email to their registered za888 account email address and by displaying a notice on the za888 platform at the time of next za888 Login.

The effective date at the top of this Privacy Policy indicates when the most recent version came into effect. Continued use of the za888 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy. za888 encourages Pakistani players to review this Privacy Policy periodically.

For any questions, concerns, or requests relating to this Privacy Policy or to za888's handling of your personal data, Pakistani players may contact za888 through the following channels. za888 privacy-related enquiries are handled by the za888 data protection team:

• Live Chat: Available 24 hours a day, 7 days a week inside the za888 member dashboard after za888 Login. For urgent data protection concerns, live chat is the recommended contact method.
• Email: [email protected] — za888 aims to acknowledge all privacy-related email enquiries within 24 hours and to respond substantively within 5 business days.

za888 support is available in English, around the clock, for all Pakistani players whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or any other city in Pakistan.