ze88 Privacy Policy —
Your Data, Protected & Respected

1 Who We Are

ze88 ("we", "us", "our", "the Company") is the operator of the online gaming and sports betting platform accessible at ze88.vu and all associated sub-domains and mobile-optimised versions thereof. ze88 operates under international gaming licensing and is the data controller responsible for the personal information collected from Players ("you", "your", "the Player") who register accounts or interact with the Platform.

For all privacy-related queries, requests, and complaints, the ze88 data protection contact is reachable at [email protected]. Please use the subject line "Privacy Enquiry" to ensure your communication is routed correctly within the ze88 team.

2 Personal Data We Collect

ze88 collects personal data that falls into the following categories. Not all categories apply equally to all Players — the data collected from any individual Player depends on how they interact with the Platform and the Services they use.

3 How We Collect Your Data

ze88 collects personal data through the following primary channels:

• Direct Registration: Data provided by you when completing the ze88 account registration form, including name, mobile number, and date of birth.
• KYC Submission: Identity documents and photographs submitted through the account verification section of the Platform.
• Payment Transactions: Financial data associated with deposits and withdrawals processed through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors.
• Platform Usage: Technical and behavioural data collected automatically as you navigate the ze88 Platform, including page visits, game launches, betting activity, and session duration.
• Cookies and Similar Technologies: Session and tracking data collected through cookies placed on your device when accessing ze88.vu (see Section 7 for full details).
• Customer Support Interactions: Information you provide when contacting ze88 support via live chat, email, or any other channel.
• Third-Party Providers: In limited circumstances, ze88 may receive supplementary verification data from identity verification service providers to support KYC compliance.

4 How ze88 Uses Your Personal Data

ze88 processes personal data for the following purposes. Processing for each purpose is conducted on the legal basis identified in Section 5.

• Account Creation and Management: To register your ze88 account, maintain your Player profile, and provide access to all Platform Services.
• Identity and Age Verification (KYC): To verify that you are 21 years of age or older as required by ze88's licensing obligations and to confirm your identity prior to processing withdrawals.
• Payment Processing: To process your deposits and withdrawals via your chosen Pakistani payment method, and to maintain accurate financial records associated with your account.
• Security and Fraud Prevention: To monitor account activity for signs of unauthorised access, account takeover, bonus abuse, collusion, money laundering, and other prohibited activities.
• Customer Support: To respond to your enquiries, investigate complaints, process disputes, and provide assistance with account issues.
• Regulatory Compliance: To meet ze88's obligations under its operating licence, including anti-money laundering (AML) requirements, responsible gaming obligations, and data retention mandates.
• Responsible Gaming: To monitor usage patterns for indicators of problematic gambling behaviour, to enforce player-set limits and self-exclusion instructions, and to support player welfare interventions.
• Platform Improvement: To analyse how Pakistani players use ze88 in aggregate — which game categories are most popular, which interface features create friction, and how the cashier flow can be improved.
• Marketing Communications (Consent-Based): To send promotional communications about ze88 bonuses, new game releases, PSL betting markets, and special offers, where you have provided marketing consent. You may withdraw consent at any time.

5 Legal Basis for Processing

ze88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between ze88 and you as a registered Player — including account creation, game access, payment processing, and support services.
• Legal Obligation: Processing required to comply with ze88's regulatory obligations, including KYC identity verification, AML monitoring, responsible gaming compliance, and data retention as mandated by ze88's licensing authority.
• Legitimate Interests: Processing necessary for ze88's legitimate business interests, including fraud detection, security monitoring, platform improvement, and protecting the integrity of the gaming environment, where these interests are not overridden by your privacy rights.
• Consent: Processing for which you have provided explicit, informed consent — primarily marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third-Party Disclosure

ze88 does not sell personal data. ze88 shares personal data with third parties only in the following limited circumstances:

• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with ze88's integrated payment providers, including JazzCash, EasyPaisa, and banking partners. These providers process data under their own privacy policies and applicable financial regulations.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with licensed third-party KYC service providers engaged by ze88 to support identity verification and AML compliance.
• Game Content Providers: Game session data is shared with ze88's licensed game studio partners (such as Pragmatic Play and Evolution Gaming) to the extent technically necessary to deliver game content and calculate outcomes. These providers do not retain personally identifiable information beyond what is required for session integrity.
• Regulatory and Law Enforcement Authorities: ze88 will disclose personal data to regulatory authorities, law enforcement agencies, and licensing bodies where required to do so by law, court order, or regulatory demand. ze88 will notify affected Players of such disclosure where legally permissible.
• Professional Advisors: In limited circumstances, personal data may be disclosed to ze88's legal advisors, auditors, or compliance consultants under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of ze88's assets, personal data held by ze88 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

7 Cookies & Tracking Technologies

ze88 uses cookies and similar browser-based technologies to operate the Platform and improve the player experience. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session, and security cookies that detect and prevent fraudulent login attempts. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences — such as your preferred language display and notification settings — so that you do not need to re-configure them at each login.
• Analytical Cookies: Used by ze88 to collect aggregate, anonymised data about how Players navigate the Platform — which pages are most visited, where drop-offs occur in the registration flow, and which game categories generate the most engagement. This data informs platform improvements.
• Security and Fraud Detection Cookies: Used to identify device fingerprints and detect account activity patterns consistent with multi-accounting, bot usage, or coordinated bonus abuse.

Most web browsers accept cookies by default. You may configure your browser to reject or delete cookies; however, doing so may impair the functionality of ze88 — in particular, session persistence and account security features may be affected. ze88 does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

8 Data Security

ze88 implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and ze88's servers is encrypted using TLS 1.2 / 1.3 with 256-bit encryption keys.
• Encryption at Rest: Sensitive personal data, including financial information and identity documents, is encrypted at rest on ze88's servers using industry-standard encryption protocols.
• Access Controls: Access to personal data within ze88 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Infrastructure Security: ze88's servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular independent penetration testing.
• Two-Factor Authentication: All Player accounts have access to two-factor authentication via SMS OTP, and ze88 strongly recommends enabling this feature.

Notwithstanding these measures, no security system is impenetrable. In the event of a data breach that poses a risk to Player rights and freedoms, ze88 will notify affected Players and relevant regulatory authorities within the timeframe required by applicable data protection regulations.

9 Data Retention

ze88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law or regulation:

• Account Data: Retained for the duration of your active account plus a minimum of five years following account closure, as required by AML and licensing regulations.
• KYC Documents: Retained for a minimum of five years from the date of verification, in accordance with ze88's licensing authority requirements.
• Transaction and Betting Records: Retained for a minimum of five years from the date of the transaction or bet settlement, for compliance and dispute resolution purposes.
• Customer Support Records: Retained for three years from the date of the interaction, unless the interaction relates to a dispute subject to ongoing proceedings.
• Marketing Consent Records: Retained for the duration of your active account and for three years following account closure or withdrawal of consent.
• Technical and Session Data: Retained for 12 months from the date of collection, after which it is aggregated and anonymised.

Upon expiry of applicable retention periods, ze88 securely deletes or anonymises personal data so that it can no longer be associated with any individual Player.

10 Your Privacy Rights

As a ze88 Player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting ze88 at [email protected] with the subject line "Data Rights Request":

11 International Data Transfers

ze88's servers and data infrastructure are operated in jurisdictions that may differ from Pakistan. Where ze88 transfers personal data outside the jurisdiction of your residence, ze88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers include: use of standard contractual clauses recognised under applicable data protection frameworks; ensuring that recipient organisations maintain equivalent security and privacy standards; and limiting international transfers to those strictly necessary for the provision of Platform Services.

Financial data shared with Pakistani payment providers — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — is processed within Pakistan and subject to Pakistani financial regulatory requirements.

12 Children & Minors

ze88's Platform is strictly restricted to individuals who are 21 years of age or older. ze88 does not knowingly collect personal data from individuals under the age of 21. If ze88 becomes aware that personal data has been collected from an individual under the age of 21, ze88 will immediately delete such data and close the associated account.

If you are a parent or guardian and believe that a minor has registered a ze88 account or that ze88 has collected personal data from a minor without your consent, please contact [email protected] immediately. ze88 treats all such reports as high-priority and will respond within 24 hours.

13 Third-Party Links

The ze88 Platform may, from time to time, reference or contain links to third-party services, such as game provider studios or payment platform information pages. ze88 has no control over the privacy practices or content of third-party websites and is not responsible for their privacy policies.

If you navigate to a third-party website from ze88, you do so at your own risk and should review the applicable privacy policy of that third party independently. ze88 recommends that Players do not provide personal information on any website other than ze88.vu.

14 Changes to This Privacy Policy

ze88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulation, licensing requirements, or ze88's operational practices. Material changes will be communicated to registered Players via account notification at least seven days before the amended policy takes effect.

The current version of this Privacy Policy is always accessible at ze88.vu/privacy-policy. The version number and effective date at the top of this document indicate the currently operative version. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

15 Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding ze88's handling of your personal data, please contact:

• Data Protection Contact: [email protected] (subject line: "Privacy Enquiry")
• Data Rights Requests: [email protected] (subject line: "Data Rights Request")
• Response Target: Initial acknowledgement within 24 hours; substantive response within 30 days
• Live Chat: Available 24/7 from within your ze88 account for urgent privacy concerns

If you are not satisfied with ze88's response to a privacy complaint, you may have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction of ze88's licensing authority. ze88 will provide details of the applicable supervisory authority upon request.