zk888 Privacy Policy

For the purposes of this Privacy Policy, "zk888," "we," "us," or "the Company" refers to the legal entity that owns and operates the zk888 online casino and sports betting platform accessible at zk888.net and all associated sub-domains and digital properties.

zk888 operates under a gaming licence issued by an internationally recognised gaming regulatory authority. The Company acts as the data controller in respect of personal data collected through the zk888 platform, meaning we determine the purposes and means by which your personal data is processed.

The zk888 platform is specifically designed and operated for Pakistani players, with a PKR-native wallet, local payment method integration (JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank), and a support team with direct knowledge of the Pakistani market. This local focus does not diminish our obligations under international data protection standards — if anything, it heightens our responsibility to handle Pakistani players' data with appropriate care and transparency.

This Privacy Policy applies to all personal data collected, processed, and stored by zk888 in connection with:

• Registration and maintenance of a zk888 player account.
• Use of any game, product, or service available on the zk888 platform — including live casino games powered by Ezugi, slot games, Mermaid Fishing and arcade games, and the zk888 cricket and PSL sportsbook.
• Any financial transaction conducted through the zk888 PKR wallet, including deposits via JazzCash or EasyPaisa and withdrawal requests.
• Participation in the zk888 Black Diamond VIP programme.
• Any communication between you and zk888, including live chat interactions, email correspondence, and support tickets.
• Visits to the zk888.net website, including browsing behaviour captured through cookies and analytics tools.

This Policy does not govern the data practices of third-party game providers, payment processors, or any other external services whose own privacy policies govern their respective data processing activities. Where zk888 shares your data with such third parties, this Policy describes the circumstances and safeguards applied.

zk888 collects personal data in the following categories. We collect only the minimum data necessary for each defined purpose in accordance with the principle of data minimisation.

zk888 does not collect or store full payment card numbers or CVV codes at any point. Payment transactions via JazzCash and EasyPaisa are processed through those providers' own secure systems; zk888 retains only the transaction reference and amount.

zk888 collects personal data through the following methods:

• Directly from you: Information you provide during account registration, KYC submission, deposit and withdrawal requests, support communications, and VIP programme participation.
• Automatically during platform use: Technical and behavioural data collected via server logs, cookies, and analytics tools when you access and interact with the zk888 platform.
• From payment providers: Transaction confirmation data (reference numbers, timestamps, and amounts) received from JazzCash, EasyPaisa, Raast, and participating banks when you initiate a deposit or withdrawal.
• From identity verification services: Where zk888 uses third-party KYC or AML screening services to verify identity documents or screen against sanctions lists, we receive confirmation results from those services.
• From game providers: Session-level gaming data (game type, duration, wager totals) transmitted from Ezugi and other software providers to zk888's platform systems for wallet management and VIP tier calculation purposes.

zk888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to deliver the zk888 platform services you have contracted for — including operating your account, processing deposits and withdrawals, and providing access to games and the sportsbook.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC identity verification, anti-money laundering (AML) transaction monitoring, and regulatory reporting obligations under our gaming licence conditions.
• Legitimate Interests: Processing carried out to pursue zk888's legitimate business interests where these are not overridden by your data protection rights — including fraud detection and prevention, platform security, responsible gaming monitoring, and analytics to improve the platform.
• Consent: Processing based on your freely given consent — primarily in relation to optional marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

zk888 uses collected personal data for the following defined purposes:

• Account creation and management: Creating your zk888 player account, maintaining your PKR wallet, processing login authentication, and managing your account profile and security settings.
• Service delivery: Providing access to casino games, the sports betting sportsbook, and all other zk888 platform features in accordance with your account tier and eligibility.
• Financial transaction processing: Processing deposits through JazzCash, EasyPaisa, Raast, and bank transfers; processing withdrawal requests to your verified payment methods; maintaining your complete PKR transaction history.
• Identity verification and KYC compliance: Verifying your identity against CNIC documentation, confirming your age (21+), and conducting AML and sanctions screening as required by our gaming licence.
• Fraud detection and security: Monitoring login activity, transaction patterns, and gameplay behaviour to detect and prevent fraud, account takeover, money laundering, and terms of service violations.
• Responsible gaming: Monitoring for behavioural patterns associated with problem gambling, applying player-requested limits and self-exclusions, and fulfilling our licence obligations regarding player protection.
• VIP programme management: Calculating qualifying wagering volumes to determine and update your Black Diamond VIP tier, delivering tier-specific benefits, and facilitating communication with your personal account manager where applicable.
• Customer support: Responding to queries, resolving disputes, and maintaining support records for quality assurance and compliance purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news to registered players who have not opted out of such communications. You may unsubscribe at any time.

zk888 does not sell, rent, or trade your personal data. We share data with third parties only in the circumstances described below, and only to the extent necessary for each stated purpose:

• Game software providers (including Ezugi, Pragmatic Play, NetEnt, Play'n GO, and Microgaming): Receive session identifiers and wallet balances necessary to operate game sessions within the zk888 environment. They do not receive your CNIC, mobile number, or full identity data.
• Payment processors (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank): Receive the transaction amount and account identifiers necessary to process your deposit or withdrawal. Payment providers operate under their own regulated privacy frameworks.
• KYC and AML service providers: Receive CNIC images and identity data for the purpose of automated identity verification and sanctions list screening. These providers are contractually bound to use your data solely for this purpose.
• Regulatory and licensing authorities: We may be required to disclose player data to our gaming licensing authority, law enforcement agencies, or financial intelligence units in response to valid legal requests, court orders, or regulatory requirements. zk888 will notify the affected player of such disclosure where legally permitted to do so.
• Analytics providers: Receive anonymised and aggregated behavioural data (no personally identifiable information) to support platform performance analysis. Raw personal data is never shared with analytics tools.
• Corporate group entities: Where zk888 operates within a corporate group structure, data may be shared between group entities for internal administrative purposes, subject to equivalent privacy standards.

Given that zk888 operates as a PKR-native platform with direct JazzCash and EasyPaisa integration, the following specific provisions apply to the handling of financial and payment data:

• zk888 stores transaction records — including the payment method used, the direction of the transaction (deposit/withdrawal), the amount in PKR, the date and time, and the transaction reference — for a minimum period of five years to satisfy gaming licence financial record-keeping obligations.
• JazzCash and EasyPaisa account numbers associated with your zk888 account are stored in encrypted form. zk888 staff with access to your account profile can see the last four digits of your registered mobile wallet number for customer service purposes but cannot see the full number without specific authorisation.
• Bank account details provided for bank-transfer withdrawals (HBL, UBL, Meezan Bank) are stored in encrypted form and used solely for processing the specific withdrawal to which they relate. You must provide bank details each time you request a bank-transfer withdrawal, or register them in your account settings for recurring use.
• zk888 applies transaction monitoring systems to identify patterns consistent with money laundering or suspicious financial activity. Where such patterns are detected, zk888 is obligated under its licence conditions to report them to relevant authorities without notifying the account holder where a "tipping off" restriction applies.

zk888 uses cookies and similar tracking technologies on the zk888.net platform. A cookie is a small text file placed on your device by a website to enable certain functionality and collect browsing information. The categories of cookies used by zk888 are as follows:

You may manage your cookie preferences through the cookie consent banner displayed on your first visit to the zk888 platform. You may withdraw or adjust consent at any time through your browser settings or the zk888 privacy preferences panel. Note that disabling strictly necessary cookies will impair the functionality of your zk888 account.

zk888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by our gaming licence, applicable law, or legitimate business need. The principal retention periods applied by zk888 are:

• Active account data (identity, contact, financial records): Retained for the duration of the active account relationship and for five (5) years following account closure, to satisfy gaming regulatory financial record-keeping requirements.
• KYC documentation (CNIC images, verification records): Retained for five (5) years following the date of verification or account closure, whichever is later.
• Gaming session logs: Retained for three (3) years from the date of the session, except where retained longer as part of an active dispute or regulatory review.
• Support communications: Retained for two (2) years from the date of the final response, to support quality assurance and any related dispute resolution.
• Anonymised analytics data: Retained indefinitely in anonymised aggregated form, as it no longer constitutes personal data following anonymisation.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year following opt-out to evidence prior consent.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with zk888's data deletion procedures.

zk888 maintains a comprehensive data security programme appropriate to the sensitivity of the personal data we process and the risks presented by our operating environment. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and zk888 servers — the same encryption standard used by international banking and financial institutions.
• Encryption at rest applied to sensitive data fields including CNIC numbers, payment account identifiers, and passwords (which are stored as salted cryptographic hashes, never in plain text).
• Role-based access controls ensuring that zk888 staff can only access personal data fields necessary for their specific job function. No employee has unrestricted access to all data categories.
• Multi-factor authentication required for zk888 staff accessing systems containing player personal data.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities in the zk888 platform.
• Incident response procedures enabling zk888 to detect, contain, and report personal data breaches within the timeframes required by applicable law. Affected players will be notified of any breach that poses a material risk to their rights.

As an internationally operated platform, zk888 may transfer personal data to countries outside of Pakistan in connection with the operation of our services — for example, where game software providers or KYC service providers operate servers in other jurisdictions.

Where personal data is transferred internationally, zk888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in the jurisdiction of collection. Safeguards employed include standard contractual clauses, data processing agreements, and the use of service providers operating within adequacy-recognised frameworks where available.

By registering with zk888 and using our services, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan in connection with the delivery of our platform services, subject to the safeguards described in this Policy.

As a zk888 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with "Data Rights Request" in the subject line:

In the event that zk888 discovers that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all collected data will be deleted as promptly as applicable legal obligations allow, and any deposited funds will be returned to the originating payment method subject to fraud and AML review.

If you are a parent or guardian and you believe that a person under your care may have registered with zk888, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on all such reports with priority.

With your consent, zk888 may send you marketing communications by SMS to your registered Pakistani mobile number, by email to your registered address, or through in-platform notifications. These communications may include promotional bonus offers, VIP tier update notifications, new game announcements, and PSL or cricket sportsbook promotions.

You may unsubscribe from marketing communications at any time by:

• Using the unsubscribe link included in every zk888 marketing email.
• Replying STOP to any zk888 promotional SMS.
• Adjusting your communication preferences in your zk888 account settings.
• Contacting the zk888 support team via live chat or email and requesting removal from all marketing lists.

Opting out of marketing communications does not affect transactional communications — you will continue to receive account security alerts, deposit confirmations, withdrawal notifications, and responsible gaming communications regardless of your marketing preference setting.

The zk888 platform integrates with third-party services including game providers (Ezugi, Pragmatic Play, NetEnt, Play'n GO, and Microgaming), payment platforms (JazzCash, EasyPaisa, and participating banks), and analytics tools. While zk888 applies data sharing controls described in Section 7, these third parties operate under their own privacy policies that govern how they handle data within their own systems.

zk888 is not responsible for the privacy practices of third-party platforms whose services you access independently — for example, if you visit JazzCash's website to manage your mobile wallet, your interaction with that website is governed by JazzCash's own privacy policy, not by this document.

Where zk888 becomes aware that a third-party service provider has suffered a data incident that affects personal data shared by zk888, we will take prompt action in accordance with our data breach response procedures, including notifying affected players where required.

zk888 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or in response to player feedback. The version number and effective date at the top of this document confirm the currency of the version you are reading.

Where policy changes are material — meaning they affect the nature of data collected, the purposes for which it is used, or the rights available to players — zk888 will provide advance notice of at least 14 calendar days by publishing the revised Policy on the platform and notifying registered players via their registered email address or mobile number where practicable.

Continued use of the zk888 platform following the effective date of any policy revision constitutes acceptance of the updated Privacy Policy. If you do not accept the revised terms, you should close your account prior to the effective date.

For all privacy-related enquiries, data rights requests, or complaints regarding how zk888 handles your personal data, please contact us through the following channels:

• Email (Data Rights & Privacy): [email protected] — please use "Privacy Request" or "Data Rights Request" in your subject line to ensure routing to our data protection team.
• Live Chat: Available 24/7 on the zk888 platform for general privacy queries. For formal data rights requests, email is preferred to ensure a proper written record.

zk888 will acknowledge all privacy-related requests within 48 hours and will provide a substantive response within 30 calendar days. In complex cases where the 30-day period cannot be met, we will notify you of the extension and the reason before the initial deadline expires.

If you are dissatisfied with zk888's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the applicable jurisdiction, or to the gaming licensing authority under whose regulation zk888 operates.