zt888 Privacy Policy

This Privacy Policy ("Policy") is issued by zt888 ("zt888", "we", "us", "our") and applies to all personal data collected through the zt888 website at zt888.ws, the zt888 mobile platform, and any associated services made available to registered account holders or visitors. This Policy forms an integral part of the zt888 Terms & Conditions.

zt888 is Pakistan's PKR-native online gaming destination, built specifically for Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. Because we handle financial data alongside identity verification documents, we take our data protection obligations seriously — not just as a regulatory requirement under our international gaming licence, but as a fundamental commitment to the players who trust us with their personal information.

By registering an account with zt888, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not use the zt888 platform.

zt888 collects personal data through three primary channels: information you provide directly during registration and account use; information generated automatically through your interaction with the platform; and information received from regulated third-party service providers where legally permitted.

zt888 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health records, except where the submission of a government-issued identity document incidentally reveals such information during the KYC process. In that case, the data is used solely for identity verification and is not retained for any other purpose.

zt888 uses the personal data it collects strictly for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

• Account Management: Creating and maintaining your zt888 account, verifying your identity, processing login authentication, and communicating essential account notifications.
• Transaction Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, SadaPay, and Pakistani bank transfers; reconciling transaction records; and investigating disputed transactions.
• Regulatory Compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations required under our international gaming licence, including identity verification and transaction monitoring.
• Platform Delivery: Providing access to cricket betting markets, live casino tables, slot games, and arcade titles; personalising your in-platform experience; and maintaining game history records.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour; administering self-exclusion requests, deposit limits, and cooling-off periods; and sending responsible gaming reminders.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, and other prohibited conduct described in the zt888 Terms & Conditions.
• Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions for quality and compliance purposes.
• Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience. Individual player data is not used for this purpose in identifiable form.
• Marketing Communications: Sending promotional offers, bonus notifications, and PSL / cricket betting promotions to players who have opted in to receive marketing communications. You may opt out at any time via your account settings or by emailing [email protected].

zt888 processes your personal data under one or more of the following lawful bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered zt888 account holder — including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations under our international gaming licence.
• Legitimate Interests: Processing carried out for zt888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental data rights.
• Consent: Processing carried out on the basis of your explicit consent, including marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zt888 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment Service Providers: JazzCash, EasyPaisa, SadaPay, HBL, UBL, and Meezan Bank receive only the transaction data necessary to process your deposit or withdrawal request. zt888 does not share your full identity record with payment processors beyond what is required for transaction execution.
• KYC & Identity Verification Providers: zt888 may use a regulated third-party identity verification service to authenticate CNIC or passport documents submitted during the KYC process. Such providers operate under strict data protection agreements and may not use your data for any independent purpose.
• Gaming Software Providers: Game outcome data and bet history may be shared with the licensed software providers whose games appear on the zt888 platform, solely for the purposes of result verification and RNG audit compliance. No personally identifiable information is shared beyond a pseudonymous player identifier.
• Regulatory & Law Enforcement Authorities: zt888 is legally obligated to disclose personal data to competent regulatory authorities, financial intelligence units, or law enforcement agencies upon receipt of a valid legal order or where required by our gaming licence AML obligations. zt888 will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and insurers retained by zt888 may access relevant account data in the course of providing professional services, subject to professional confidentiality obligations.

zt888 uses a minimal set of cookies to keep the platform functional and secure. We do not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies of any kind.

You may configure your browser to block or delete cookies at any time. Note that disabling session and security cookies will prevent you from logging in to your zt888 account, as these are technically essential for platform operation.

zt888 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required under our international gaming licence and applicable AML regulations.

• Active Account Data: Retained for the full duration of your zt888 account plus a minimum of five (5) years following account closure, as required by AML record-keeping obligations.
• KYC Documents: Identity verification documents (CNIC, passport, proof of address) are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations under our gaming licence.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: If you have opted in to marketing communications, your contact preferences are retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual account holder.

As a zt888 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account ID]".

zt888 implements a layered, defence-in-depth security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the zt888 platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encrypted Data-at-Rest: Sensitive personal data stored in zt888 databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Control: Access to personal data within zt888's internal systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative accounts.
• Security Monitoring: zt888's platform infrastructure is continuously monitored for anomalous activity. Intrusion detection systems alert our security team to potential threats in real time.
• Vulnerability Management: Regular security assessments and penetration testing are conducted against zt888's platform to identify and remediate potential vulnerabilities before they can be exploited.
• Staff Training: All zt888 personnel with access to personal data undergo mandatory data protection and security awareness training as part of their onboarding and annual compliance review.

zt888 does not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and KYC verification procedures are specifically designed to identify and reject underage applicants. Any account found to belong to a person under 21 will be immediately closed and all associated data deleted, except where retention is required by regulatory obligation.

If you are a parent or guardian and believe that a minor in your care has registered with zt888 without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action within two (2) business days of notification.

zt888 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data practices, applicable regulations, or licensing requirements. Where a change is material — meaning it significantly affects your rights or how we use your personal data — we will notify you via the registered email address on your zt888 account at least fourteen (14) days before the changes take effect.

Non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of the Policy, may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continued use of the zt888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not accept a revised Policy, you must close your account before the effective date and withdraw any remaining PKR balance.

For any questions, concerns, or formal requests relating to this Privacy Policy or the way zt888 handles your personal data, please contact our dedicated data protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for general questions or "Data Rights Request — [Account ID]" for formal data subject requests.
• Live Chat: Available inside your zt888 account dashboard, 24 hours a day, 7 days a week, staffed on Pakistan Standard Time.

zt888 does not provide telephone support for data protection matters. All formal data rights requests must be submitted in writing via email to ensure a proper audit trail and timely resolution.