zal888 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data

1.Introduction

This Privacy Policy ("Policy") describes how zal888 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals who register accounts or otherwise interact with the zal888 platform at zal888.net.

zal888 is an online casino and sports betting platform serving registered users across Pakistan, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and all other cities and regions of the country. We are committed to protecting the privacy of every account holder in a manner consistent with applicable data protection principles and best-practice standards for online platforms.

This Policy should be read alongside the zal888 Terms & Conditions, which govern your use of the platform more broadly. By registering a zal888 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein.

2.Data Controller

zal888 acts as the data controller in respect of personal data collected through the zal888 platform. As data controller, zal888 determines the purposes and means of processing your personal data. Where processing is carried out by third-party service providers (for example, payment processors such as JazzCash or Easypaisa), those providers act as data processors operating under data processing agreements with zal888 that bind them to appropriate security and confidentiality standards.

For questions or requests related to your personal data, please contact the zal888 Data Privacy team using the contact details set out in Section 15 of this Policy.

3.Personal Data We Collect

The categories of personal data zal888 collects depend on how you interact with the platform. The following table summarises the principal categories and the context in which they arise.

4.How We Collect Your Data

zal888 collects personal data through the following channels:

• Direct collection — data you provide when registering your account, completing identity verification, making deposits or withdrawals, or contacting our support team.
• Automated collection — technical data gathered automatically when you access the zal888 platform, including IP addresses, device identifiers, browser session data, and cookie-based analytics.
• Third-party collection — data received from payment providers (JazzCash, Easypaisa, HBL, UBL, MCB Bank, Raast) when you initiate a PKR transaction, or from identity verification partners where KYC checks are required.

5.How We Use Your Personal Data

zal888 uses your personal data for the following purposes:

• Creating and managing your zal888 account, including authentication and login security.
• Processing PKR deposits and withdrawals via your chosen payment method.
• Verifying your identity to comply with anti-money laundering and know-your-customer obligations.
• Providing customer support in English via Live Chat, WhatsApp, Telegram, and email.
• Personalising your gaming experience, including game recommendations and bonus offers relevant to your preferences and activity history.
• Detecting and preventing fraud, bonus abuse, and other prohibited activities described in our Terms & Conditions.
• Administering responsible gaming tools including deposit limits, session timers, and self-exclusion as set by you in your account settings.
• Sending service communications (account updates, security alerts, withdrawal confirmations) via SMS or email.
• Sending marketing communications about zal888 bonuses and promotions where you have opted in to receive such communications.
• Complying with applicable legal and regulatory obligations.

6.Legal Basis for Processing

zal888 processes your personal data on the following legal bases:

• Contractual necessity — processing required to operate your account, process payments, and deliver the services you have contracted with zal888 to receive.
• Legal obligation — processing required to comply with anti-money laundering laws, KYC requirements, and any other regulatory obligations applicable to zal888's operations.
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where such processing does not override your privacy rights.
• Consent — processing for optional activities such as marketing communications, where we will obtain your explicit consent and you may withdraw that consent at any time.

7.Sharing Your Personal Data

zal888 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment providers — transaction data is shared with JazzCash, Easypaisa, HBL, UBL, MCB Bank, and Raast solely to process your requested PKR transactions.
• Identity verification providers — identity documents and verification data may be shared with authorised KYC partners where account verification is required.
• Game content providers — limited gameplay data may be shared with licensed game providers to deliver game services. These providers do not receive your identity or financial data.
• Legal and regulatory authorities — we may be required to disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where we receive a valid legal request or where disclosure is required by law.
• Business transfers — in the event of a merger, acquisition, or sale of substantially all zal888 assets, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third-party service providers with whom zal888 shares personal data are bound by contractual data processing agreements that require them to process the data only as directed by zal888 and to maintain appropriate security standards.

8.Payment Data and PKR Transactions

All financial transactions on zal888 are processed in Pakistani Rupee (PKR). When you make a deposit or request a withdrawal via JazzCash, Easypaisa, or a bank transfer through HBL, UBL, MCB Bank, or Raast, your transaction data is processed by the relevant payment provider under their own terms of service and privacy policies.

zal888 does not store full bank account numbers, JazzCash PINs, or Easypaisa M-PINs. Payment details are processed by the payment provider directly, and zal888 retains only the reference data necessary to reconcile transactions and maintain your PKR balance accurately.

9.Cookies and Tracking Technologies

zal888 uses cookies and similar technologies to operate the platform, maintain your login session, remember your preferences, and analyse how users interact with the site. The following categories of cookies are used:

• Essential cookies — required for the platform to function. These include your session authentication cookie, which keeps you logged in to your zal888 account. You cannot opt out of essential cookies while continuing to use the platform.
• Functional cookies — store your preferences such as your chosen language and responsible gaming settings so you do not need to re-enter them on every visit.
• Analytics cookies — help us understand how Pakistan players navigate the platform so we can improve the user experience. These cookies collect aggregated, anonymised data.
• Security cookies — used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your browser's cookie settings through your device's browser preferences. Please be aware that disabling certain categories of cookies may affect the functionality of the zal888 platform.

10.Data Retention

zal888 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy. The following general retention periods apply:

• Account data — retained for the lifetime of your active zal888 account, plus a post-closure period of up to seven years to satisfy regulatory and legal obligations.
• Transaction records — PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction for AML compliance purposes.
• Communication records — support chat transcripts and email correspondence are retained for up to three years from the date of the interaction.
• Technical logs — IP address logs and session data are retained for up to 12 months for security and fraud detection purposes.
• Marketing data — retained until you withdraw consent or for up to two years from the date of your last interaction with a marketing communication, whichever comes sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

11.Security Measures

zal888 implements a comprehensive suite of technical and organisational security measures to protect your personal data, including:

• TLS 1.3 (256-bit SSL) encryption for all data in transit between your device and zal888 servers.
• Encryption of sensitive data fields at rest within the zal888 database infrastructure.
• Strict access controls limiting internal access to personal data on a need-to-know basis, with access logging and audit trails.
• Two-factor authentication options for user accounts, reducing the risk of unauthorised account access.
• Automated brute-force protection and suspicious login detection with SMS alerts to registered Pakistan mobile numbers.
• Regular security audits and penetration testing of the zal888 platform infrastructure.

While zal888 employs robust security measures, no online platform can guarantee absolute security. You also play a role in protecting your data by keeping your login credentials confidential and notifying us promptly if you suspect any unauthorised access to your account.

12.Your Privacy Rights

As a zal888 account holder, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data zal888 holds about you.
• Right of rectification — you may request correction of any inaccurate or incomplete personal data.
• Right of erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing — you may request that we restrict the processing of your data in certain circumstances, for example while a correction request is pending.
• Right to withdraw consent — where processing is based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to data portability — where technically feasible, you may request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact the zal888 support team using the contact details in Section 15. We will acknowledge your request within 72 hours and aim to fulfil it within 30 days. Some requests may be subject to identity verification before they can be processed.

13.Minors and Age Restriction

The zal888 platform is strictly for adults aged 18 and above. zal888 does not knowingly collect or process personal data relating to individuals under the age of 18. If we become aware that a minor has provided personal data to zal888, we will take immediate steps to delete that data and close any associated account.

If you believe that a person under 18 has registered or attempted to register a zal888 account, please contact our support team immediately. For guidance on protecting minors from online gambling content, please visit our Responsible Gaming page.

14.Updates to This Privacy Policy

zal888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to registered account holders via the mobile number or email address on file at least 14 days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the zal888 platform following the effective date of an updated Policy constitutes your acceptance of that Policy.

15.Contact Us About Privacy

For any privacy-related queries, data subject rights requests, or concerns about how zal888 handles your personal data, please contact us through any of the following channels:

• Live Chat — available 24/7 within the zal888 platform. Fastest response channel.
• WhatsApp — message the zal888 support number listed in the platform's contact section for privacy queries.
• Telegram — reach the zal888 team via the official zal888 Telegram support channel.
• Email — [email protected] — please include "Privacy Request" in the subject line so your message is routed to the appropriate team.

Privacy requests submitted by email will be acknowledged within 24 hours of receipt and resolved within 30 days, unless the complexity of the request requires additional time, in which case zal888 will notify you of the revised timeline.