zd888 Privacy Policy
— Your Data, Handled with Care

zd888 is an online casino and sports betting platform operating at zd888.org, serving registered players across Pakistan including major cities such as Karachi, Lahore, Islamabad, and Faisalabad. zd888 acts as the data controller in respect of all personal data collected and processed through the platform.

As data controller, zd888 determines the purposes and means by which your personal data is processed. We are committed to handling your data in a responsible, transparent, and secure manner consistent with our obligations under our international gaming licence framework and applicable data protection principles.

If you have any questions about how zd888 processes your personal data, or if you wish to exercise any of your data rights as described in Section 9 of this Policy, please contact our Data Protection team via the details provided in Section 14.

zd888 collects personal data from you in several ways — directly when you register and use our platform, automatically through your interaction with the site, and in some cases from trusted third-party sources. The categories of personal data we collect are as follows:

When you create a zd888 account, we collect your full legal name, date of birth, email address, Pakistani mobile number, and a username and password of your choosing. If you proceed through our KYC (Know Your Customer) verification process, we additionally collect copies of government-issued identity documents such as your Pakistani CNIC, proof of address documentation, and proof of payment method ownership.

We collect records of all deposits, withdrawals, bets, game play, and bonus transactions conducted through your zd888 account. We also collect payment method identifiers associated with your transactions — such as your JazzCash or EasyPaisa mobile wallet number, HBL or UBL account reference, or Meezan Bank transfer references — to the extent necessary to process and verify payments. We do not store full card numbers; card payment processing is handled by our certified payment service providers.

When you contact our customer support team — whether via live chat, email, or any other channel — we retain records of those communications, including the content of messages, timestamps, and any resolutions provided. This data helps us resolve disputes, improve our support quality, and maintain regulatory compliance.

Where you interact with our responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or initiating self-exclusion — we record those instructions and the corresponding actions taken on your account. This data is essential to ensuring your responsible gaming elections are properly enforced.

zd888 uses the personal data we collect for the following clearly defined purposes:

• Account Creation & Management: To register your account, verify your identity, manage your profile, and provide you with access to zd888's full range of gaming and betting services;
• Payment Processing: To process deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard), verify transaction legitimacy, and maintain accurate financial records;
• KYC & AML Compliance: To verify your age, identity, and source of funds as required under our gaming licence obligations and anti-money laundering (AML) procedures;
• Service Provision & Personalisation: To deliver and personalise your gaming experience, including recommending relevant games, providing cricket and PSL betting markets, and tailoring promotional offers where you have opted in to receive them;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct on the platform;
• Responsible Gaming Enforcement: To monitor your gaming activity for indicators of problem gambling, enforce any deposit limits or self-exclusion instructions you have set, and provide appropriate interventions where necessary;
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our support services;
• Legal & Regulatory Obligations: To comply with applicable laws, regulatory requirements, licensing conditions, and any lawful requests from competent authorities;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve site performance, fix bugs, develop new features, and optimise the player experience;
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about zd888 products and events. You may withdraw this consent at any time via your account settings.

zd888 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our contractual obligations to you under our Terms & Conditions — including account registration, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, and our gaming licence obligations — including KYC verification, AML checks, and age verification;
• Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your data protection rights — including fraud detection, platform security, responsible gaming monitoring, and platform improvement. We conduct a proportionality assessment before relying on this basis;
• Consent: Processing based on your freely given, specific, and informed consent — such as the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Your personal data may be shared with the following categories of recipients:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing partners, to the extent necessary to process your deposits and withdrawals. These providers process only the financial data required for each transaction;
• Identity Verification Providers: Third-party KYC and AML screening services that assist us in verifying player identities and conducting required due diligence checks in compliance with our gaming licence obligations;
• Game Studio Providers: Licensed third-party game developers and live casino studio operators whose games are available on the zd888 platform. These providers may receive session and game-play data necessary to operate the games and resolve disputes;
• Regulatory & Licensing Authorities: Our international gaming licence authority and any competent regulatory body that has a lawful right to request or receive information about our operations or players;
• Law Enforcement & Legal Process: Government agencies, law enforcement authorities, or courts where we are required or permitted by law to disclose your data in connection with legal proceedings, investigations, or orders;
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and IT infrastructure partners who provide technical services necessary for the operation of the zd888 platform. These providers process data strictly on our instructions under contractual data processing agreements;
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where access to personal data is required in the course of providing professional services to zd888.

We do not share your personal data with any advertising networks, data brokers, or unrelated third-party commercial entities.

The zd888 platform uses cookies and similar tracking technologies to ensure the site functions correctly, to secure your session, and to understand how players interact with our platform. The categories of cookies we use are:

Most web browsers allow you to control or block cookies through browser settings. Please note that disabling strictly necessary cookies may prevent core zd888 platform functionality from operating correctly, including your ability to log in and access your account.

zd888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with our gaming licence requirements and AML obligations;
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with applicable financial record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification process, or longer where required by applicable law;
• Communications Records: Retained for up to three (3) years following the communication, or longer where relevant to an ongoing legal dispute or regulatory matter;
• Technical & Usage Logs: Generally retained for up to thirteen (13) months for analytical and security purposes, then aggregated or deleted;
• Self-Exclusion Records: Retained indefinitely where a permanent self-exclusion has been applied, to prevent re-registration in violation of the exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

zd888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• TLS Encryption: All data transmitted between your device and the zd888 platform is encrypted using Transport Layer Security (TLS), ensuring your personal and financial information cannot be intercepted in transit;
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to personal data within zd888 is strictly role-based and limited to staff members who have a legitimate operational need for access. All internal access is logged and audited;
• Password Security: Account passwords are stored using one-way cryptographic hashing (bcrypt). Plain-text passwords are never stored or accessible;
• Vulnerability Management: The zd888 platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities;
• Incident Response: zd888 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities in accordance with applicable obligations.

While we take every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You also have a responsibility to keep your zd888 login credentials confidential and to notify us immediately if you suspect any unauthorised access to your account.

Subject to applicable law and certain limited exceptions, you have the following rights in respect of your personal data held by zd888:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is being used. We will respond to verified access requests within 30 days;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account information, you may update your details directly within your account settings;
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal and regulatory obligations — we are required to retain certain data for a minimum period under our gaming licence and AML obligations, and erasure requests will be assessed against these obligations;
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed;
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time via your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our customer support team via live chat at zd888.org or by email at [email protected]. We may need to verify your identity before processing your request. We will respond within 30 days and will notify you if additional time is required.

zd888 takes its age verification obligations extremely seriously. All registered players are required to verify their age as part of the KYC process before withdrawals are processed, and we may request age verification documentation at any stage of the registration or account lifecycle.

If we have reason to believe that a registered account belongs to a person under the age of 21, that account will be immediately suspended pending urgent age verification. Any funds deposited and any winnings accrued by a person found to be under 21 will be forfeited in accordance with our Terms & Conditions.

If you believe that a minor may have registered on the zd888 platform or may be accessing a zd888 account without authorisation, please contact our support team immediately via live chat or at [email protected] so that we can investigate and take appropriate action without delay.

As an internationally licensed gaming platform, zd888 may transfer your personal data to servers, processors, or service providers located in countries outside Pakistan. Where such transfers occur, zd888 ensures that appropriate safeguards are in place to protect your data to a standard that is consistent with the data protection principles set out in this Privacy Policy.

Appropriate safeguards for international data transfers may include:

• Binding contractual obligations imposed on the recipient under a data processing agreement;
• Transfers to countries or organisations that maintain an equivalent level of data protection as recognised under applicable standards;
• Any other safeguard mechanism recognised as appropriate under applicable data protection frameworks.

You may request further information about the international transfer safeguards applicable to your personal data by contacting our support team.

The zd888 platform may, from time to time, contain references to or integrations with third-party game studio providers and payment processors. These third parties operate under their own privacy policies and data practices, which are entirely independent of zd888's Privacy Policy.

zd888 is not responsible for the privacy practices, data collection, or content of any third-party service providers accessible in connection with your use of the platform. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with your zd888 account.

zd888 reserves the right to update, revise, or supplement this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our gaming licence obligations. Where changes are material, we will notify registered players via email or through a prominent notice on the zd888 platform prior to the changes taking effect.

The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the zd888 platform following the publication of any update constitutes your acknowledgement of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how zd888 is protecting your personal data. If you have any concerns about an update to this policy, please contact our support team before continuing to use the platform.

If you have any questions, concerns, or requests related to this Privacy Policy or to zd888's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on zd888.org — average response time 3–5 minutes, in Urdu and English
• Email: [email protected]

Our customer support and data protection team is available around the clock to assist players across Pakistan — whether you are reaching out from Karachi, Lahore, Islamabad, or Faisalabad. We are committed to responding to all data-related enquiries promptly and transparently.

For formal data subject rights requests (access, erasure, portability, etc.), please include your full name, registered email address, and a description of your request so that we can verify your identity and process your request efficiently.