z288 Privacy Policy —
How We Collect, Use & Protect Your Data

For the purposes of this Privacy Policy, z288 — the operator of the website z288.bid and all associated gaming and betting services — acts as the data controller in respect of all personal data collected from users of the platform. As data controller, z288 determines the purposes and means by which personal data is processed and is responsible for ensuring that processing is carried out in accordance with applicable data protection principles.

All data protection enquiries, subject access requests, and requests to exercise any rights described in this Privacy Policy should be directed to z288's support team, whose contact details are provided in Section 15 of this document.

z288 collects personal data across several categories depending on your interaction with the platform. The following table describes the categories of data collected, the specific data points within each category, and the context in which each is collected.

z288 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when registering your z288 account, completing KYC verification, submitting a support request, or responding to a promotional communication.
• Automated Collection: Technical and activity data collected automatically through cookies, session tracking, and server logs when you access and use the z288 platform. This data is collected regardless of whether you are logged in to your account.
• Payment Processing: Financial data generated during deposit and withdrawal transactions, including payment method type, transaction amounts, timestamps, and tokenised payment references, received from our payment processing partners.
• Identity Verification Partners: During KYC verification, z288 may receive confirmation data from identity verification service providers engaged to verify documents submitted by account holders.
• Support Interactions: Data generated through live chat, email correspondence, and other support communications with the z288 support team, including chat transcripts retained for service quality and dispute resolution purposes.

z288 processes personal data only for specific, legitimate purposes. The following table sets out the primary purposes for which we use the personal data we collect:

• Account Management: To create, maintain, verify, and manage your z288 account, including processing your z288 Login credentials, account settings, and responsible gaming limits.
• Service Delivery: To provide access to z288's gaming and betting services — including cricket betting, live casino, slots, poker, and instant games — and to process bets, calculate outcomes, and record your gaming history.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain transaction records for your account history and our financial compliance obligations.
• Identity & Age Verification (KYC): To verify that you are who you claim to be, that you are at least 21 years of age, and that your payment methods are legitimately owned by you — as required under international gaming compliance standards.
• Responsible Gaming: To identify patterns of play that may indicate problem gambling behaviour and to enforce responsible gaming limits, deposit caps, and self-exclusion requests in accordance with z288's Responsible Gaming Policy.
• Fraud & AML Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in the z288 Terms and Conditions.
• Customer Support: To provide and improve customer support services, respond to enquiries, resolve disputes, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to account holders who have not opted out of marketing communications. You may opt out at any time through your account notification settings.
• Platform Improvement: To analyse usage patterns, game performance data, and player feedback to improve the z288 platform, optimise game library selection, and enhance the overall player experience — in particular for Pakistani players using the platform on local networks and devices.
• Legal Compliance: To comply with applicable laws, regulations, licensing conditions, and lawful requests from competent authorities.

In accordance with internationally recognised data protection principles, z288 processes personal data only where a valid legal basis exists for doing so. The legal bases on which z288 relies are as follows:

• Contractual Necessity: Processing required to perform our obligations under the z288 Terms and Conditions — including account management, service delivery, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations — including KYC/AML requirements, responsible gaming obligations, and any lawful direction from a competent authority — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, and platform improvement is carried out on the basis of z288's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications is carried out on the basis of your consent, which you may withdraw at any time through your account notification settings or by contacting z288 support.

z288 does not sell or commercially transfer your personal data to third parties. z288 shares personal data with third parties only where necessary and only with parties who are contractually bound to handle that data in accordance with standards consistent with this Privacy Policy. The categories of third parties with whom z288 may share data are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the personal and financial data necessary to process deposit and withdrawal transactions. Each payment processor is subject to its own regulatory requirements and data protection standards applicable to Pakistani financial services.
• Identity Verification Services: CNIC data and identity document images submitted for KYC verification may be shared with contracted third-party identity verification providers engaged solely for the purpose of verifying your identity and age.
• Game Providers: Technical data required to deliver game sessions — including session tokens and game round data — may be shared with z288's licensed game providers for the purpose of delivering and auditing game outcomes. Game providers do not receive personally identifiable information beyond what is technically necessary.
• Fraud Prevention & AML Services: Transaction and account data may be shared with specialist fraud detection and anti-money laundering screening services as part of z288's compliance obligations.
• Legal Authorities: z288 may disclose personal data to competent courts, law enforcement agencies, or regulatory authorities where required to do so by applicable law, court order, or regulatory direction.

z288 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or licensing conditions. The following general retention principles apply:

• Active Account Data: Personal data associated with an active z288 account is retained for the duration of the account's active life. Upon account closure, personal data is reviewed against our retention schedule.
• KYC and Identity Records: Identity and KYC documentation is retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering regulations.
• Financial Transaction Records: Transaction records — including deposits, withdrawals, and bet history — are retained for a minimum of five (5) years following the date of each transaction for financial compliance, audit, and dispute resolution purposes.
• Support Correspondence: Live chat transcripts and email correspondence with z288 support are retained for up to three (3) years from the date of the interaction for service quality, training, and dispute resolution purposes.
• Preference and Marketing Data: Marketing preference data is retained until you withdraw your consent or until two (2) years following your last interaction with z288 marketing communications, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

z288 uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, analyse platform usage, and detect security threats. A cookie is a small data file stored on your device by your browser when you access the z288 website.

z288 uses the following categories of cookies:

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent core z288 platform functions — including z288 Login and game access — from operating correctly. Non-essential cookies may be disabled without affecting core functionality.

z288 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the z288 platform.
• Encrypted storage of sensitive account data, including tokenised payment references and hashed authentication credentials.
• Role-based access controls ensuring that z288 personnel can access personal data only to the extent required for their specific operational role.
• Regular security audits and penetration testing conducted by independent security specialists.
• Incident response procedures to identify, contain, and notify affected users in the event of a confirmed data breach, in accordance with applicable notification obligations.

As an internationally operated platform serving Pakistani players, z288 may transfer personal data to and process it in jurisdictions outside Pakistan where our servers, service providers, or game content partners are located. Where such transfers occur, z288 ensures that adequate protections are in place to safeguard your personal data to a standard consistent with this Privacy Policy.

These protections may include contractual data processing agreements with international service providers that impose data protection obligations equivalent to those described in this Privacy Policy, and technical safeguards ensuring that your data remains encrypted during any international transfer.

Subject to applicable legal exceptions and limitations, you hold the following rights in respect of your personal data held by z288. To exercise any of these rights, contact z288 support at [email protected] with your request. z288 will respond within 30 days of receiving a valid, verifiable request.

• Right of Access: You have the right to request a copy of the personal data z288 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data z288 holds about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to z288's legal retention obligations.
• Right to Restrict Processing: You have the right to request that z288 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive personal data you have provided to z288 in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You have the right to object to z288's processing of your personal data on the basis of legitimate interests, and to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where z288 processes your data on the basis of consent — specifically marketing communications — you may withdraw that consent at any time through your account notification settings or by contacting support.

z288 services are strictly restricted to individuals aged 21 and above. z288 does not knowingly collect personal data from any person under the age of 21. Any account found to be held by a person under 21 will be closed immediately, all associated personal data will be deleted as soon as reasonably practicable, and deposited funds will be returned through the original payment method.

The z288 platform may contain references to the services of third-party payment providers — including JazzCash, EasyPaisa, and partner banking institutions. These third parties operate under their own privacy policies and terms of service, which are independent of this Privacy Policy. z288 is not responsible for the privacy practices of any third-party service and recommends that you review the privacy policy of any third party whose service you access in connection with your use of z288.

z288 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where a material change is made, z288 will publish the updated Privacy Policy at z288.bid/privacy-policy and where practicable notify registered account holders via their registered contact details.

The effective date at the top of this document will be updated each time the Privacy Policy is revised. We recommend reviewing this Privacy Policy periodically to remain informed of how z288 handles your personal data. Continued use of z288 services following a published update constitutes acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by z288, please contact our support team through any of the following channels. z288 targets a response to all data protection requests within 30 days of receipt of a verifiable request.

• Email: [email protected] — use the subject line "Privacy Request" for fastest routing to the relevant team.
• Live Chat: Available 24/7 through the z288 platform. For data subject requests via live chat, our support team will collect your request details and confirm the formal submission in writing.
• Priority Support Hours: 9 AM to 2 AM Pakistan Standard Time (PKT) for complex data requests requiring specialist handling.