Privacy Policy

01 Introduction

ZF88 (the "Platform", "Operator", "we", "us" or "our") is committed to protecting the privacy and personal data of all users who access or use its online sports betting and casino services (the "Services"). This Privacy Policy describes our practices regarding the collection, processing, storage, sharing and protection of personal data relating to registered players and visitors (collectively, "you" or "User").

This Policy applies to all personal data processed in connection with your use of the ZF88 website and any associated mobile interface or application, regardless of the device or network you use to access the Services.

By registering a ZF88 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to these practices, you must not use the ZF88 Services.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or indirectly (e.g., name, email address, device identifier, IP address).
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" — ZF88, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of ZF88 under a contractual arrangement and according to ZF88's instructions.
• "KYC" — Know Your Customer: the identity and age verification process applied to ZF88 account holders in fulfilment of regulatory obligations.
• "Cookies" — small text files placed on your device by the ZF88 platform for the purposes of session management, analytics and user experience optimisation.
• "Sensitive Data" — a subset of personal data warranting heightened protection, such as government-issued identification numbers, financial account details and source-of-funds documentation.

03 Data We Collect

ZF88 collects personal data across several categories. The specific data collected depends on how you interact with the platform and the stage of your account lifecycle:

Where you provide data about third parties (for example, a nominated contact for responsible gambling purposes), you confirm that you have their consent to share that data with ZF88.

04 How Data Is Collected

ZF88 collects personal data through the following channels:

• Direct provision: Data you actively submit when registering, completing KYC, making a deposit or withdrawal, submitting a support request, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, server logs and similar tracking technologies as you navigate the platform.
• Third-party sources: Data received from identity verification providers, payment processors, fraud prevention services and, where applicable, publicly available sources — used solely to verify your identity or assess risk.
• Device permissions: If you access ZF88 via a mobile interface and grant relevant permissions, certain device data (such as location or push-notification tokens) may be collected. These permissions are optional and can be revoked via your device settings.

05 Legal Basis for Processing

ZF88 processes your personal data on one or more of the following legal grounds, consistent with applicable data protection law under the Operator's licensing jurisdiction:

• Contractual necessity: Processing required to create and manage your account, process bets and transactions, and fulfil our obligations under the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML), counter-terrorist financing (CTF), know-your-customer (KYC) and responsible-gambling regulations imposed by the Operator's licensing authority.
• Legitimate interests: Processing necessary for fraud prevention, platform security, product improvement and responsible-gambling monitoring, where these interests are not overridden by your data protection rights.
• Consent: Where ZF88 relies on your consent for specific processing activities — such as certain marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Data

ZF88 uses personal data for the following specific purposes:

• Creating and administering your ZF88 account, including verifying your identity and age.
• Processing deposits, withdrawals and all related financial transactions, including applying payment reference context for familiar methods used by Pakistani players such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. References to these providers are for operational context only and do not imply affiliation or endorsement.
• Detecting and preventing fraud, money laundering, account abuse and other prohibited conduct as defined in the Terms & Conditions.
• Monitoring betting and gaming activity for responsible-gambling indicators and intervening proactively where patterns suggest potential harm.
• Communicating with you regarding account activity, support queries, bonus offers (where you have opted in), policy updates and security alerts.
• Analysing platform usage patterns to improve the user experience, fix bugs and develop new features.
• Meeting legal and regulatory reporting requirements imposed by the Operator's licensing authority.

07 Data Sharing & Disclosure

ZF88 does not sell your personal data. We may share personal data with third parties only in the following limited circumstances:

• Service providers and processors: Identity verification platforms, payment processors, hosting providers, IT security partners and customer support tools — all of whom are bound by data processing agreements and prohibited from using your data for their own purposes.
• Regulatory and law enforcement authorities: Where required by the licensing authority, a court order or applicable law, ZF88 may disclose personal data to regulators, law enforcement agencies or other public bodies.
• Fraud and AML networks: ZF88 may share data with recognised fraud-prevention and anti-money-laundering shared-intelligence services where there is a legitimate basis to do so under applicable law.
• Corporate transactions: In the event of a merger, acquisition or sale of all or part of ZF88's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

In all cases, data sharing is limited to what is strictly necessary for the stated purpose. ZF88 does not disclose personal data to advertisers or data brokers.

08 Cookies & Tracking Technologies

ZF88 uses cookies and similar tracking technologies on its platform. These fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. They cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how users interact with the platform — which pages are visited most, where users encounter errors and how navigation paths flow. Data is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences, such as language settings and responsible-gambling limit configurations, to improve your experience across sessions.
• Marketing cookies: Only deployed where you have provided explicit consent. Used to measure the effectiveness of promotional campaigns. No marketing cookies are placed without opt-in.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. A dedicated cookie consent mechanism is presented upon your first visit to the ZF88 platform.

09 Data Retention

ZF88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Data is retained throughout the lifetime of an active account and for a defined period following account closure, typically five (5) years, to satisfy AML and regulatory record-keeping obligations.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years post-transaction in compliance with anti-money-laundering regulations.
• KYC documents: Identity verification documents are retained for the duration required by the licensing authority's AML framework, generally five (5) years from the end of the customer relationship.
• Support correspondence: Customer service records are retained for up to three (3) years from the date of last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained only while you are subscribed to marketing communications. Removed promptly upon withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Data Security

ZF88 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and ZF88 servers.
• Encryption of sensitive data fields at rest within ZF88's database infrastructure.
• Role-based access controls ensuring that staff access to personal data is restricted to those with a legitimate operational need.
• Regular internal security reviews and vulnerability assessments.
• Two-factor authentication options available to users for additional account protection.
• Incident response procedures designed to detect, contain and report data breaches in accordance with applicable regulatory requirements.

Despite these measures, no internet transmission is completely secure. ZF88 cannot guarantee absolute security and accepts no liability for breaches attributable to factors outside its reasonable control, including compromised user devices or networks.

If you suspect that your account has been accessed without authorisation, contact ZF88 support immediately at [email protected].

11 Your Rights

Subject to applicable law and the Operator's regulatory obligations, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data ZF88 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent, or where processing was unlawful — subject to ZF88's legal retention obligations.
• Right to restrict processing: You may request that ZF88 temporarily limits its processing of your data while a rectification or erasure request is under review.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of your data.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. ZF88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of these rights, contact the ZF88 support team at [email protected]. ZF88 will respond to verified requests within a reasonable timeframe consistent with applicable data protection law — ordinarily within thirty (30) calendar days. Requests that are complex or numerous may take longer, in which case you will be notified of the extension.

12 Minors & Age Restriction

The ZF88 platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the Operator's license jurisdiction. ZF88 does not knowingly collect, process or retain personal data relating to individuals below the minimum age threshold.

Where ZF88 discovers or has reasonable grounds to believe that a minor has registered an account or provided personal data, the account will be immediately suspended, all associated data will be deleted as soon as practicable, and any deposits made will be returned via the original payment method.

If you believe a minor has accessed the ZF88 platform using falsified information, please contact support at [email protected] immediately.

13 International Data Transfers

ZF88 operates under international licensing and may process or store personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, ZF88 takes steps to ensure that appropriate safeguards are in place consistent with the data protection standards of the Operator's licensing jurisdiction, including:

• Contractual data processing agreements with third-party processors that impose data protection obligations equivalent to those under which ZF88 operates.
• Transfer to processors located in jurisdictions that provide an adequate level of data protection as assessed under applicable law.
• Implementation of supplementary technical and organisational measures where required by the specific risk profile of the transfer.

By using the ZF88 platform, you acknowledge that your personal data may be transferred to, processed in and stored in countries outside Pakistan, including countries whose data protection laws may differ from those applicable in Pakistan.

14 Policy Amendments

ZF88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ZF88 will notify registered users via a platform notification or by email to the address associated with your account, prior to the changes taking effect.

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the ZF88 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you must discontinue use of the platform and may request account closure by contacting our support team.

We encourage you to review this page periodically so that you remain informed about how ZF88 protects your personal data.

15 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or to the personal data ZF88 holds about you, please contact our support team using the details below. Note that contact details are provided as plain text — email addresses are not clickable links.

• Support Email: [email protected]
• Live Chat: Available 24/7 directly through the ZF88 platform interface.
• Response Time: Within 24 hours for general queries via email; data rights requests will be acknowledged promptly and resolved within 30 calendar days.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling page, both of which form part of the overall framework governing your relationship with ZF88.