zf88 Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data processed by zf88 in connection with the operation of the platform at zf88.bet, including the online casino, sportsbook, live dealer games, cashier services, promotional activities, customer support communications, and any mobile-optimised interfaces associated with the zf88 brand.

This Policy applies to all individuals who visit the zf88 website, register an account, make deposits or withdrawals, participate in promotions, or otherwise interact with the Platform — including players located in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

zf88 is the data controller responsible for the personal data you provide or that is collected in connection with your use of the Platform. As data controller, zf88 determines the purposes for which and the means by which your personal data is processed, in compliance with the data protection obligations applicable under its internationally recognised gaming licence and associated regulatory frameworks.

All data-related queries, access requests, and complaints can be directed to the zf88 support team using the contact details provided in Section 15 of this Policy. We aim to respond to all privacy-related requests within 30 calendar days of receipt.

3. What Data We Collect

zf88 collects and processes the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used for mandatory age verification — players must be 21 or older);
• Residential address, including city (e.g. Karachi, Lahore, Rawalpindi) and postal code;
• Email address and mobile phone number;
• Copies of identity documents submitted for KYC verification (CNIC, passport, driving licence).

3.2 Financial Data

• Payment method details — including JazzCash wallet numbers, EasyPaisa account identifiers, HBL/UBL/Meezan Bank account details, and USDT TRC20 wallet addresses;
• Transaction history, including deposit amounts, withdrawal requests, and processing dates;
• Source-of-funds documentation submitted during enhanced KYC reviews.

3.3 Gaming & Behavioural Data

• Game play history, including games played, bet amounts, win/loss records, and session durations;
• Sports betting activity, including events wagered on, stake values, and bet outcomes;
• Bonus and promotion participation history;
• Responsible gaming tool usage, including deposit limits set, cooling-off periods, and self-exclusion requests.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and Platform usage patterns;
• Cookie identifiers and tracking pixel data (see Section 10).

3.5 Communications Data

• Records of all communications between you and the zf88 support team, including live chat transcripts, email exchanges, and Messenger/Viber interactions;
• Survey and feedback responses where provided voluntarily.

4. How We Collect Data

zf88 collects your personal data through the following means:

Collection Method	Examples
Direct submission	Registration form, KYC document uploads, cashier transactions, support contact forms
Automated technical collection	Cookies, server logs, IP detection, session tracking as you navigate the Platform
Payment processors	Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processors
Third-party identity verification	KYC verification providers used to validate CNIC or passport data against official databases
Fraud prevention services	Device fingerprinting and risk-scoring data received from third-party fraud detection partners

5. Why We Use Your Data

zf88 processes your personal data for the following specific purposes:

• Account creation and management — to register your account, verify your identity, and maintain your player profile on the Platform;
• Service delivery — to provide access to casino games, live dealer tables, the sportsbook, and all other Platform features;
• Payment processing — to facilitate deposits via JazzCash, EasyPaisa, and bank transfers, and to process verified withdrawal requests to your registered payment method;
• KYC and age verification — to verify that you are at least 21 years of age and to confirm your identity in accordance with anti-money laundering obligations;
• Fraud prevention and security — to detect and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access;
• Responsible gaming compliance — to administer deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy;
• Customer support — to respond to your queries, complaints, and requests via live chat, email, Messenger, and Viber;
• Marketing communications — to send you promotional offers, bonus notifications, and Platform updates where you have provided consent or where we have a legitimate interest in doing so (subject to your opt-out rights);
• Legal and regulatory compliance — to comply with obligations under our gaming licence, applicable anti-money laundering regulations, and any court orders or regulatory directions requiring disclosure.

6. Legal Basis for Processing

For each category of processing activity, zf88 relies on one or more of the following legal bases:

7. Data Sharing & Disclosure

zf88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your personal data may be disclosed to third parties only in the following strictly limited circumstances:

• Payment processors and banking partners — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners receive only the transaction data strictly necessary to process your deposits and withdrawals;
• KYC and identity verification providers — specialist third-party providers engaged to verify identity documents and confirm age eligibility, operating under strict data processing agreements with zf88;
• Fraud prevention and risk management services — third-party providers who assist in detecting suspicious activity, bonus abuse, and account security threats;
• Gaming software and platform providers — the third-party game studios and live casino providers whose software powers the games on the Platform may receive minimal session data necessary for game function and certification audit purposes;
• Regulatory and law enforcement authorities — where zf88 is required by law, court order, or regulatory direction to disclose your data, including reporting obligations under applicable anti-money laundering regulations;
• Professional advisors — legal counsel, auditors, and compliance consultants engaged by zf88, subject to binding confidentiality obligations.

All third parties to whom zf88 discloses personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to zf88.

8. Data Retention

zf88 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations. The following general retention periods apply:

Data Category	Retention Period	Basis
Account & identity data	Duration of active account, plus 5 years after closure	Regulatory / AML obligation
Financial transaction records	7 years from transaction date	Legal / AML obligation
Gaming history	5 years from last activity	Licence requirement
KYC documents	5 years after account closure	Regulatory obligation
Support communications	3 years from last interaction	Legitimate interest / dispute resolution
Marketing consent records	Until consent is withdrawn, plus 1 year	Consent / legal compliance
Self-exclusion records	Indefinitely (to prevent re-registration)	Responsible gaming obligation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with zf88's data destruction procedures.

9. Security Measures

zf88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption across all data transmission between your device and the zf88 Platform;
• Encryption at rest for sensitive personal and financial data stored on zf88 servers;
• Access controls — only authorised personnel with a documented business need are permitted access to personal data, enforced through role-based access management;
• Two-factor authentication for internal system access by zf88 staff and contractors;
• Regular security audits and penetration testing of the Platform infrastructure;
• Segregated fund storage ensuring your deposited PKR balance is held separately from zf88's operational funds.

Whilst zf88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials and for notifying zf88 immediately at [email protected] if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

zf88 uses cookies and similar tracking technologies on the Platform to deliver and improve our services. A cookie is a small text file placed on your device by the Platform when you visit. The following categories of cookies are used:

Cookie Type	Purpose	Consent Required
Strictly necessary	Session management, login authentication, security tokens, load balancing	No — essential for Platform operation
Functional	Language preferences, game settings, remembered deposit methods	No — necessary for personalised service
Analytics	Aggregate usage statistics, page performance, error tracking	Yes — opt-in consent required
Marketing	Retargeting, promotional campaign tracking, affiliate attribution	Yes — opt-in consent required

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or functional cookies may impair your ability to use certain features of the zf88 Platform, including the ability to log in or complete transactions.

11. International Data Transfers

As an online platform operating under an internationally recognised gaming licence, zf88 may transfer personal data to service providers and infrastructure partners located in countries outside Pakistan. Where such transfers occur, zf88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating recognised standard contractual clauses;
• Transfers to recipients located in jurisdictions that maintain data protection standards equivalent to or exceeding those applicable under zf88's licensing framework;
• Binding corporate rules where transfers occur within a corporate group.

All international transfers of personal data are conducted strictly for the purposes described in this Policy and are subject to the security measures outlined in Section 9.

12. Your Privacy Rights

As a user of the zf88 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond within 30 calendar days and may request identity verification before processing your request.

13. Minors & Age Verification

zf88 strictly prohibits the use of the Platform by any individual under the age of 21 years. We do not knowingly collect or process personal data belonging to minors. Age verification is conducted as a mandatory step during the KYC process, and accounts where age verification fails will be suspended immediately and any Funds balance held pending investigation.

If zf88 discovers that personal data has been inadvertently collected from an individual under the age of 21, that data will be deleted promptly and the associated account permanently closed. If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately at [email protected].

14. Changes to This Policy

zf88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our gaming licence obligations. Where changes are material, we will notify active account holders via the email address registered to their account and will display a prominent notice on the Platform for a reasonable period following the update. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any changes, you may request account closure in accordance with the process described in our Terms & Conditions.

15. Contact & Complaints

For all privacy-related queries, data access requests, data deletion requests, or complaints regarding the processing of your personal data by zf88, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly from the Platform — fastest response, average 3–5 minutes;
• Email: [email protected] — privacy-specific requests are treated as priority tickets;
• Languages: Support is available in both Urdu and English at all times.

All privacy-related requests will be logged, acknowledged within 3 business days, and resolved within 30 calendar days wherever possible. Where a request cannot be fulfilled within that timeframe due to complexity, we will notify you of the extended timeline and the reason for the delay.