z2888 Privacy
Policy

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is z2888, the operating entity behind the platform accessible at https://z2888.org. z2888 holds an international gaming licence under which it is authorised to provide online casino and sports betting services to eligible players.

All queries relating to how z2888 processes your personal data — including subject access requests, correction requests and deletion requests — should be directed to our support team at [email protected]. We have a dedicated data privacy team that handles all such requests in accordance with the timelines set out in Section 10 of this policy.

z2888 collects the following categories of personal data from players who register and use the Platform:

z2888 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by a regulatory obligation, in which case you will be separately notified.

z2888 collects your personal data through the following channels:

• Direct Submission: Information you provide when registering your z2888 Account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated Technologies: Technical data collected automatically when you access the Platform, including through cookies, session tracking, and server log files. See Section 7 for full details on our cookie practices.
• Third-Party Verification Partners: Identity and address verification data returned to z2888 by our licensed KYC service providers following document checks.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay and cryptocurrency processing services in connection with deposits and withdrawals on your Account.
• Fraud and AML Screening Services: Risk-scoring and sanctions screening data from third-party anti-money laundering and fraud prevention partners where required by our compliance obligations.

z2888 uses your personal data only for defined, legitimate purposes. The following table sets out the primary purposes for which each category of data is processed:

• Account Management: To create, maintain and administer your z2888 Account, including processing login authentication and applying account settings and preferences you have selected.
• Identity Verification (KYC): To verify your identity, confirm your age eligibility (21+), and comply with our anti-money laundering and Know Your Customer obligations as required under our international gaming licence.
• Payment Processing: To process deposits and withdrawal requests securely through your chosen payment method, whether that is JazzCash, EasyPaisa, HBL, Meezan Bank, USDT TRC20 or SadaPay.
• Fraud and AML Prevention: To detect, investigate and prevent fraudulent activity, money laundering, collusion and other prohibited conduct on the Platform.
• Customer Support: To respond to your queries, complaints and support tickets in a timely and personalised manner.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, so that appropriate support tools such as deposit limits and self-exclusion can be offered proactively.
• Marketing Communications: To send you promotional offers, bonus notifications and platform updates by email or SMS, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve z2888's games, features, and overall user experience for all Pakistani players.

z2888 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — primarily account administration, game delivery and payment processing.
• Legal Obligation: Processing required to comply with anti-money laundering laws, KYC regulations, and reporting obligations imposed by our gaming licence authority.
• Legitimate Interests: Processing carried out in pursuit of z2888's legitimate business interests — specifically fraud detection, platform security and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
• Consent: Processing of data for marketing communications and certain cookie-based tracking activities, where your explicit consent has been obtained and can be withdrawn at any time.

z2888 does not sell, rent or trade your personal data to any third party for their own independent marketing or commercial purposes. Your data may be shared only in the following circumstances and only to the extent necessary:

• KYC & Identity Verification Providers: Licensed third-party services that process identity documents on z2888's behalf under strict data processing agreements and equivalent security standards.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay and cryptocurrency payment processors, solely for the purpose of executing your requested transactions.
• Fraud Prevention & AML Screening Services: Third-party compliance tools used to screen transactions and accounts against sanctions lists and fraud databases, as required under our licensing obligations.
• Game Content Providers: Licensed game studios and RNG certification bodies may receive anonymised, aggregated session data for the purpose of game performance analysis and certification compliance.
• Regulatory and Law Enforcement Authorities: z2888 will disclose personal data to competent regulatory bodies, courts, or law enforcement agencies where required to do so by applicable law, a valid court order, or our gaming licence conditions.
• Business Transfers: In the event of a merger, acquisition, or sale of z2888's business assets, personal data held by z2888 may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notification to affected players.

z2888 uses cookies and similar tracking technologies on its Platform to ensure functionality, maintain session security and improve the overall player experience. The categories of cookies used by z2888 are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged into your z2888 Account. These cookies cannot be disabled without impairing core functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most, where navigation issues arise, and how game sessions progress. This data is used exclusively to improve z2888's services.
• Functional Cookies: Store your Platform preferences such as language settings, game display options and responsible gaming tool settings between sessions.
• Security Cookies: Assist in detecting and preventing fraudulent logins, bot activity and session hijacking attempts on your Account.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impact your ability to use the z2888 Platform. z2888 does not currently deploy third-party advertising or behavioural targeting cookies.

z2888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the lifetime of your z2888 Account and for a minimum period thereafter as required by AML and gaming licence regulations — typically five (5) years following account closure.
• KYC Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, in compliance with anti-money laundering legislation applicable under z2888's international gaming licence.
• Transaction Records: Retained for a minimum of five (5) years for AML and financial audit purposes.
• Support Communications: Retained for two (2) years following the closure of the support interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following withdrawal of consent, as evidence of the consent having been lawfully obtained and subsequently withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

z2888 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and z2888 servers.
• Encryption at rest for all sensitive personal data and KYC documents stored on z2888 infrastructure.
• Role-based access controls ensuring that only authorised z2888 personnel with a specific operational need can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication required for all internal z2888 staff access to systems containing player data.
• Automated intrusion detection and anomaly monitoring with 24/7 alerting.

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data z2888 holds about you:

• Right of Access: You may request a copy of the personal data z2888 holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data z2888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly through your account settings.
• Right to Erasure: In certain circumstances you may request the deletion of your personal data. Note that z2888 may be required to retain certain data for regulatory and AML compliance purposes even following an erasure request — in such cases we will inform you of what data must be retained and why.
• Right to Restriction: You may request that z2888 restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Object: You have the right to object to processing based on z2888's legitimate interests, including profiling for responsible gaming purposes. z2888 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time with effect going forward.

To exercise any of the above rights, please contact z2888 at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing your request.

If you are a parent or guardian and believe that a minor has registered a z2888 Account, please contact us immediately at [email protected]. z2888 will investigate and take immediate action to close the account and securely delete the minor's personal data.

z2888 operates under an international gaming licence and, as a result, your personal data may be processed and stored on servers located outside of Pakistan. Where such international transfers occur, z2888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by leading data protection frameworks.

Safeguards used by z2888 for international transfers include contractual clauses in data processing agreements with all third-party processors, requiring them to maintain security and privacy standards consistent with this Privacy Policy. z2888 does not transfer personal data to jurisdictions with materially inadequate data protection standards without the implementation of such contractual protections.

z2888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, z2888 will notify registered players via the email address associated with their Account and by posting a prominent notice on the Platform.

The effective date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the z2888 Platform following the publication of any revised policy constitutes your acceptance of those changes.

If you have any questions, concerns or complaints regarding how z2888 handles your personal data, or if you wish to exercise any of your data rights, please contact our privacy team:

If you are not satisfied with z2888's response to your privacy complaint, you have the right to escalate the matter to the supervisory authority or dispute resolution body associated with z2888's international gaming licence. Details of the relevant authority will be provided upon request.

For matters relating to responsible gaming, self-exclusion or account closure, please refer to our dedicated Responsible Gaming page. For the full terms governing your use of z2888, please review our Terms & Conditions.