Introduction
This Privacy Policy ("Policy") describes how za888 ("za888", "we", "us", "our"), the operator of the online gaming platform accessible at https://za888.cam, collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who register an account, browse the Platform, or interact with any service provided by za888.
This Policy forms part of our broader legal framework alongside the Terms & Conditions and Responsible Gambling Policy. By creating an account or using our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
Note for Pakistani Players: za888 is not subject to Pakistani data protection legislation and does not claim to be regulated by any Pakistani authority. This Policy reflects our own data governance standards and the requirements of our operating jurisdiction. Users in Pakistan access this Platform at their own discretion and should be aware of applicable local laws. This is not legal advice.
If you have questions about this Policy or wish to exercise any of your rights, please refer to Section 15 (Contact & Complaints) for our contact details.
Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, IP address, and device identifiers.
- "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means za888 in its capacity as the entity that determines the purposes and means of processing personal data.
- "KYC" (Know Your Customer) means the identity and address verification procedures that za888 is required to perform under its licensing obligations.
- "Cookie" means a small text file placed on your device by the Platform to enable certain functionality and analytics.
- "Third-Party Service Provider" means a company contracted by za888 to assist in delivering services, such as payment processors, identity verification providers, and analytics platforms.
- "PKR" means Pakistani Rupee, the primary display currency of the Platform.
Data We Collect
za888 collects the following categories of personal data in connection with the operation of the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC/passport number, photograph | KYC verification, age verification, account registration |
| Contact Data | Email address, mobile phone number, residential address | Account communication, support, verification |
| Financial Data | Transaction history, deposit and withdrawal amounts in PKR, payment method reference identifiers | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type and OS, browser type and version, session tokens | Platform security, fraud detection, geographic access control |
| Usage Data | Pages visited, games played, bet history, session duration, clickstream data | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, dispute resolution, quality improvement |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, push notifications, SMS | Managing communication preferences, compliance with opt-out requests |
How We Collect Data
za888 collects personal data through the following channels:
4.1 Directly from You
When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or interact with any feature of the Platform that requires you to submit information.
4.2 Automatically via Technology
When you access the Platform, we automatically collect technical and usage data through cookies, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, and navigation patterns within the Platform.
4.3 From Third Parties
We may receive data from identity verification service providers during the KYC process, from fraud prevention and anti-money-laundering screening services, and from analytics partners. All third-party data sharing is governed by contractual data processing agreements that require those parties to handle your data lawfully and securely.
Legal Basis for Processing
za888 processes personal data on the following legal bases:
- Contractual Necessity: Processing required to register your account, operate your balance, process deposits and withdrawals, and fulfil our obligations under the Terms & Conditions;
- Legal Obligation: Processing necessary to comply with KYC, anti-money-laundering, and other regulatory requirements imposed by our licensing jurisdiction;
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and improving the service, where those interests are not overridden by your rights;
- Consent: Processing for direct marketing communications, where we have obtained your prior consent. You may withdraw consent at any time by updating your communication preferences in your account settings or contacting support.
How We Use Your Data
za888 uses collected personal data for the following purposes:
- Registering and managing your Player Account;
- Verifying your identity and age in compliance with KYC requirements;
- Processing deposits, withdrawals, and in-platform transactions denominated in PKR;
- Detecting and preventing fraud, money laundering, and unauthorised account access;
- Monitoring account activity for responsible gambling indicators and applying appropriate safeguards;
- Delivering platform updates, security notifications, and service-related communications;
- Sending promotional communications and personalised offers where you have opted in;
- Analysing aggregated and anonymised usage data to improve Platform performance and user experience;
- Responding to support requests, complaints, and dispute resolution;
- Complying with legal, regulatory, and licensing obligations.
za888 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review. Responsible gambling flags and fraud alerts may be generated automatically but are reviewed by our team before any account restriction is applied.
Data Sharing & Disclosure
za888 does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. We share personal data only in the following circumstances:
7.1 Service Providers
We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include payment processing partners, identity and KYC verification services, fraud detection providers, cloud infrastructure providers, and customer support platforms. All such providers are bound by data processing agreements requiring compliance with applicable data protection standards.
7.2 Legal and Regulatory Disclosure
We may disclose personal data to regulatory authorities, law enforcement agencies, licensing bodies, or courts where we are legally required or permitted to do so — for example, in connection with anti-money-laundering investigations, fraud prevention, or court orders.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a material part of za888's business assets, personal data held by us may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Players will be notified of any material change in data controller via the contact email on file.
References to payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as contextual references only. za888 does not share your personal data with these institutions for their own marketing or commercial purposes.
International Transfers
za888 operates internationally, and your personal data may be transferred to and processed in countries other than your country of residence, including countries outside Pakistan. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection through appropriate safeguards, which may include:
- Data processing agreements incorporating standard contractual clauses or equivalent protections;
- Transfers to jurisdictions that provide an adequate level of data protection as determined by our licensing authority; or
- Other legally recognised transfer mechanisms as appropriate.
By using za888, you acknowledge and agree that your personal data may be transferred internationally as described in this section.
Data Retention
za888 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law, regulatory obligations, or licensing requirements. The following general retention periods apply:
- Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering regulatory requirements;
- Transaction Records: Retained for a minimum of five (5) years following the transaction date;
- KYC Documents: Retained for the period required by the applicable licensing jurisdiction, typically five (5) years post-account closure;
- Support Communications: Retained for three (3) years from the date of the communication, or longer where required for dispute resolution;
- Marketing Preferences: Retained until you withdraw consent or close your account, plus a reasonable period to process opt-out requests.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.
Security Measures
za888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
- Encryption of sensitive personal and financial data at rest;
- Role-based access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis;
- Multi-factor authentication requirements for Platform access by staff handling personal data;
- Regular security assessments, penetration testing, and vulnerability scanning;
- Incident response procedures including breach notification protocols where required by applicable law.
No method of transmission over the internet or electronic storage is 100% secure. While za888 employs commercially reasonable security measures, we cannot guarantee the absolute security of your data. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
Cookies & Tracking Technologies
za888 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies may be set when you visit the Platform:
Strictly Necessary Cookies
Essential for the Platform to function. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without impairing core Platform functionality.
Functional Cookies
Enable personalised features such as remembering your preferred language, display settings, and responsible gambling limit configurations. Disabling these may reduce the quality of your experience.
Analytical Cookies
Allow us to measure how the Platform is used — which pages are most visited, where users encounter errors, and how navigation flows. This data is aggregated and anonymised and is used solely to improve the Platform. We use analytics tools that do not share this data with unaffiliated third parties.
You may manage your cookie preferences through your browser settings. Blocking all cookies may prevent certain Platform features from functioning correctly.
Your Rights
Depending on the applicable data protection laws of the jurisdiction governing our operations, you may have some or all of the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict
Request that we limit the processing of your data in certain circumstances, such as while a rectification request is being assessed.
Right to Portability
Request a machine-readable export of personal data you have provided to us, where technically feasible.
Right to Object
Object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
To exercise any of these rights, please contact our support team at [email protected]. We will respond within the timeframe required by applicable law — typically within thirty (30) days of receipt of a valid request. We may request proof of identity before processing certain requests to prevent unauthorised disclosure.
Minors
za888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the applicable licensing jurisdiction. Age verification is performed as part of the account registration and KYC process.
If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account or submitted personal data on our Platform, please notify us immediately at [email protected].
Policy Amendments
za888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Players via the email address on file no less than seven (7) days before the revised Policy takes effect.
The effective date at the top of this document will be updated to reflect any revision. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact support to close your account.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how za888 has handled your personal data, please contact us through the following channel:
Data Enquiries — Support Email
[email protected]
Please include "Privacy Request" in the subject line and provide sufficient detail to allow us to identify your account and respond appropriately. Do not include full payment credentials or sensitive passwords in your email.
Response Timeframe
We aim to acknowledge all privacy-related enquiries within 72 hours and to provide a substantive response within thirty (30) days of receiving a complete and valid request. Where a request is complex or high in volume, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
This Privacy Policy was last updated on 1 January 2026. Version 1.0. The current version supersedes all previous versions of this document.