Your Privacy
Matters at 888zh

1.1   This Privacy Policy applies to all personal data collected, processed, and stored by 888zh in connection with the 888zh online gaming platform, including the website at https://888zh.net, any associated mobile applications, and all related services offered to users in Pakistan and internationally.

1.2   By registering an 888zh account or accessing any 888zh service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, please do not register or continue using the 888zh platform.

1.3   This policy should be read alongside the 888zh Terms & Conditions and the 888zh Responsible Gaming Policy, both of which are incorporated by reference.

2.1   Registration Data: When you create an 888zh account, we collect your full name, date of birth, email address, mobile number, and residential address. This data is mandatory — without it, we cannot create or verify your account.

2.2   Identity Verification (KYC) Data: To comply with our Anti-Money Laundering and Know Your Customer obligations, we may collect copies of your CNIC (Computerised National Identity Card), proof of address documents, and source of funds documentation. KYC verification is required before any withdrawal is processed.

2.3   Financial Data: We collect records of all deposits, withdrawals, and transaction histories associated with your 888zh account. We also record the payment methods used (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). 888zh does not store full payment card numbers; payment processing is handled by our certified payment partners.

2.4   Gaming Activity Data: We collect records of all bets placed, games played, session durations, win/loss histories, and bonus usage. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5   Technical Data: We automatically collect device information, IP address, browser type and version, operating system, and interaction logs when you access 888zh. This data is used for security, fraud prevention, and platform improvement.

2.6   Communication Data: We retain records of all communications between you and 888zh, including live chat transcripts, email correspondence, and support ticket histories. These records are used for service quality, dispute resolution, and compliance purposes.

2.7   Preference Data: With your consent, we may collect data about your gaming preferences, promotional preferences, and communication preferences to personalise your 888zh experience.

3.1   888zh collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in any promotion.
• Automatically: Through cookies, web beacons, and server logs when you browse or interact with the 888zh platform.
• Third-party verification services: Identity and document verification providers used to complete KYC checks may share verification results with us.
• Payment processors: Our licensed payment partners share transaction confirmation data necessary to credit or debit your 888zh account balance.
• Fraud prevention and AML screening services: We may receive risk signals about known fraudulent identities or sanctioned individuals from third-party screening services as part of our compliance obligations.

4.1   888zh processes your personal data for the following purposes:

• Account management: Creating, maintaining, and closing your 888zh account; verifying your identity; and processing deposits and withdrawals in PKR.
• Service delivery: Enabling you to place bets, play casino games, access slot titles, and participate in promotions on the 888zh platform.
• Legal and regulatory compliance: Fulfilling our KYC, AML, and responsible gaming obligations; responding to regulatory enquiries; and co-operating with law enforcement where required by law.
• Fraud prevention and security: Detecting, investigating, and preventing unauthorised access, fraud, collusion, and other prohibited activities on the 888zh platform.
• Responsible gaming: Monitoring gaming patterns to identify players who may be exhibiting signs of problem gambling and enabling self-exclusion and limit-setting tools.
• Customer support: Resolving queries, disputes, and complaints submitted to 888zh support.
• Platform improvement: Analysing usage patterns and technical performance data to improve the 888zh user experience for Pakistani players.
• Marketing (with consent): Sending you promotional offers, bonus notifications, and product updates relevant to your interests — only where you have explicitly opted in.

5.1   888zh processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC information, financial transaction records, and gaming activity data is necessary to perform the 888zh service agreement with you.
• Legal obligation: Processing required by applicable laws, including AML legislation, responsible gaming regulations, and data retention requirements mandated by our licensing authority.
• Legitimate interests: Processing for fraud prevention, platform security, dispute resolution, and service improvement, where such processing does not override your fundamental rights.
• Consent: Processing for direct marketing communications, optional personalisation features, and non-essential cookies — where we have obtained your explicit prior consent.

6.1   888zh does not sell, trade, or rent your personal data to any unaffiliated third parties. Data sharing is limited to the categories of recipients described below, and is governed by data processing agreements that bind recipients to confidentiality and security standards consistent with this policy.

6.2   Categories of data recipients:

• Licensed game providers: Game data (player ID and session tokens) is shared with certified game providers to deliver casino and slot content. No personally identifiable information beyond a pseudonymous player identifier is shared for this purpose.
• Payment processors: Transaction data is shared with our licensed payment partners (including processors for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) solely to facilitate deposits and withdrawals.
• KYC and identity verification services: Identity documents are shared with certified third-party KYC providers for verification purposes only. These providers are prohibited from using your data for any other purpose.
• Fraud prevention and AML screening services: Transaction and behavioural data may be shared with screening services to identify and prevent financial crime.
• Regulatory and law enforcement authorities: 888zh will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law or a valid legal order. Players will not be notified in advance of such disclosures where prohibited by law.

7.1   888zh uses cookies and similar tracking technologies on the platform to enable essential functionality, improve performance, and (with your consent) deliver a personalised experience.

7.2   888zh uses the following categories of cookies:

• Strictly necessary cookies: Required for the 888zh platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to understand how players interact with the 888zh platform — such as which pages are visited most and where errors occur. These cookies help us improve the platform experience for Pakistani users. Consent is required before these are set.
• Preference cookies: Used to remember your language preference, display settings, and other customisation choices. Consent is required.
• Marketing cookies: Used to deliver promotions relevant to your interests. 888zh does not use third-party advertising cookies. First-party marketing cookies may be set with your consent to personalise bonus offers shown within the platform.

7.3   You can manage your cookie preferences through the 888zh cookie settings panel, accessible from the footer of the platform. Please note that disabling non-essential cookies may limit some personalisation features.

8.1   888zh retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure — as required by AML regulations applicable to internationally licensed gaming operators.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, as required by our regulatory obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity records: Retained for three (3) years from the date of activity, unless required for longer by a regulatory order or active dispute.
• Communication records (support, chat): Retained for two (2) years from the date of the last communication, unless related to an unresolved dispute.
• Marketing consent records: Retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

8.2   Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures. Anonymised data (which cannot be used to identify you) may be retained indefinitely for statistical and analytical purposes.

9.1   888zh implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 888zh servers.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Role-based access controls ensuring that only authorised 888zh personnel with a demonstrable operational need can access personal data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection and monitoring systems that operate continuously to identify and respond to suspicious activity on 888zh infrastructure.
• Multi-factor authentication required for all staff accessing backend systems that contain personal data.

9.2   In the event of a personal data breach that poses a risk to your rights and freedoms, 888zh will notify affected users without undue delay and, where required, will report the breach to the relevant supervisory authority within the timeframe mandated by applicable law.

9.3   While 888zh takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is entirely secure. You are encouraged to use strong, unique passwords for your 888zh account and to enable two-factor authentication to reduce the risk of unauthorised access.

10.1   As an 888zh account holder, you have the following rights with respect to your personal data. These rights may be exercised at any time, free of charge, by contacting 888zh support:

• Right of Access: You may request a copy of all personal data 888zh holds about you. We will provide this within 30 days of your verified request.
• Right to Rectification: If any personal data held by 888zh is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections will require re-verification through KYC.
• Right to Erasure: You may request that 888zh delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that data subject to a mandatory regulatory retention period cannot be deleted until that period expires.
• Right to Restriction of Processing: You may request that 888zh restrict processing of your data in certain circumstances, such as while the accuracy of data is under dispute.
• Right to Data Portability: You may request a copy of the personal data you provided to 888zh in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications without affecting your platform access.
• Right to Lodge a Complaint: If you are dissatisfied with how 888zh has handled your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

11.1   888zh is strictly a platform for adults. Access to and use of 888zh is prohibited for any person under the age of 21 years. 888zh does not knowingly collect or process personal data belonging to individuals under 21.

11.2   If 888zh becomes aware that personal data has been collected from a person under 21, that data will be permanently deleted, the associated account will be closed, and any deposits will be returned to the verified source of payment after deduction of any wagers placed.

11.3   If you are a parent or guardian and believe that a minor under your care has registered on 888zh, please contact support immediately. We will investigate and act without delay.

11.4   As part of our responsible gaming commitment, 888zh employs age verification checks at the point of registration and again before processing any withdrawal. These checks use both self-declared date of birth and KYC document verification to enforce the 21+ requirement as a hard technical gate.

12.1   888zh operates as an internationally licensed gaming platform, and as such, some of your personal data may be processed by servers or service providers located outside Pakistan. Where international data transfers occur, 888zh ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy.

12.2   Such safeguards include contractual protections (data processing agreements), the use of certified service providers who maintain internationally recognised security standards, and transfer mechanisms approved under applicable data protection frameworks.

12.3   888zh will not transfer your data to jurisdictions that do not offer adequate data protection unless the specific transfer is covered by appropriate safeguards and your rights can be effectively enforced.

13.1   888zh reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they affect how your data is used or your rights in relation to that data — 888zh will notify registered users by email and via a prominent notice on the platform at least seven (7) days before the revised policy takes effect.

13.2   The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of 888zh following the effective date of any revision constitutes your acceptance of the updated policy.

13.3   We encourage all 888zh players across Pakistan to review this Privacy Policy periodically, particularly whenever you receive a notification of an update.

14.1   If you have any questions, concerns, or requests relating to this Privacy Policy or the way 888zh handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry – [Your Username]".
• Live Chat: Available 24/7 on the 888zh platform when logged in to your account.
• Postal correspondence: Address written requests to the Data Protection team at 888zh's registered address (available on request via the support channel above).

14.2   888zh has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and applicable data protection law. All formal data rights requests and privacy complaints are routed through the DPO for review and resolution.

14.3   888zh will acknowledge receipt of all privacy-related correspondence within two (2) business days and provide a substantive response within 30 days, unless the complexity of the matter requires an extension, in which case we will notify you of the revised timeline.