1. Who We Are
zh88 ("the Platform", "we", "us", "our") operates zh88.life — an online gaming and sports betting platform built for players in Pakistan. When this Privacy Policy refers to "zh88", it means the entity responsible for operating zh88.life and for all personal data processing activities described herein.
This Privacy Policy applies to all personal data zh88 collects and processes in connection with your use of zh88.life — including the account registration process, game play, payment transactions, customer support interactions, and marketing communications. It applies to all current and former zh88 members, as well as individuals who visit the platform without registering an account.
By registering an account on zh88 or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read this document and that you consent to the data practices described within it. If you do not agree with how zh88 handles your data, you should not register and should not continue to use the platform.
This Policy should be read alongside zh88's Terms and Conditions and Responsible Gaming page, both of which form part of the overall agreement between you and zh88.
Plain English: We're telling you upfront — zh88 collects data to run the platform properly, keep it secure, and comply with legal obligations. We don't sell your data to third parties. Ever.
2. Data We Collect
zh88 collects personal data in several ways: information you provide directly when registering or using the platform, information generated automatically through your use of zh88, and in some cases information received from third parties such as payment processors and identity verification services. The specific categories are set out below.
2.1 Registration & Identity Data
- Full legal name (as it appears on your CNIC)
- CNIC number — collected during identity verification for withdrawals and compliance checks
- Date of birth — to verify you meet the minimum age requirement of 18
- Mobile phone number — used for account security, OTP verification, and support contact
- Email address — for account communications, promotional updates (if opted in), and verification
- Residential address in Pakistan — collected during KYC for compliance purposes
- Username and encrypted password
2.2 Payment & Financial Data
- Deposit and withdrawal amounts and timestamps
- Payment method type (e.g. Easypaisa, JazzCash, bank account)
- Transaction reference numbers for reconciliation purposes
- Account balance history on zh88
zh88 does not store your full card numbers, Easypaisa PIN, JazzCash PIN, or internet banking credentials. Payment processing is handled through encrypted, tokenised integrations with certified payment processors. Your actual payment credentials never pass through or reside on zh88 servers.
2.3 Gaming Activity Data
- Game sessions played, including start time, duration, and game type
- Bet amounts placed, results, and winnings across all zh88 game categories
- Bonus activations, wagering progress, and promotion usage history
- Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
2.4 Technical & Usage Data
- IP address and approximate geographic location (city level)
- Device type, operating system, and browser version
- Pages visited on zh88.life, time spent, and navigation patterns
- Session logs for security monitoring and fraud detection
2.5 Support Interaction Data
- Live chat transcripts — retained to maintain service quality and resolve disputes
- Email correspondence with zh88 support
- Records of complaints, disputes, and their resolutions
| Data Type |
Collected By zh88? |
Stored on zh88 Servers? |
Shared with Third Parties? |
| Name & CNIC |
Yes |
Encrypted |
KYC provider only |
| Payment Credentials (PIN/card) |
Never |
Never |
Never |
| Transaction History |
Yes |
Encrypted |
Payment processor |
| Gaming Activity |
Yes |
Encrypted |
Not shared |
| IP Address / Device Info |
Yes |
Anonymised |
Not shared |
| Support Chat Transcripts |
Yes |
Encrypted |
Not shared |
3. Why We Collect Your Data
zh88 only collects data that serves a genuine, specific purpose. We are not in the business of collecting information speculatively or building profiles to sell on. Every category of data zh88 holds is tied to one or more of the following purposes:
3.1 Platform Operation
To create and maintain your zh88 account, process your deposits and withdrawals in PKR, run game sessions, apply bonuses, and ensure your experience on the platform works as intended — all of this requires basic identity and transaction data. Without it, zh88 simply cannot function.
3.2 Identity Verification & Compliance
zh88 is required to verify the identity of members as part of its anti-money laundering (AML) and know-your-customer (KYC) obligations. CNIC verification and address confirmation are collected specifically to fulfil these requirements. zh88 takes these obligations seriously — they protect the platform and every legitimate member on it.
3.3 Security & Fraud Prevention
IP addresses, device fingerprints, and session logs are used to detect suspicious activity — including unauthorised account access, multi-account creation, payment fraud, and bot activity. This data protects honest zh88 members from bad actors on the platform.
3.4 Customer Support
Support interaction records allow zh88's team to handle disputes, answer account queries, and provide context when resolving complaints. Without these records, zh88 would be unable to assist members effectively or fairly.
3.5 Responsible Gaming
Gaming activity data — including session frequency, deposit patterns, and bet sizes — is used by zh88's responsible gaming systems to identify potential problem gambling behaviours and trigger support interventions where appropriate. This is one of the most important uses of data at zh88.
3.6 Marketing Communications
If you have opted in to receive marketing from zh88, your email and mobile number will be used to send you information about promotions, new game launches, and special offers tailored to Pakistani players. You can opt out of these communications at any time from your account settings — opting out does not affect your account status or access to zh88.
4. Legal Basis for Processing
zh88 processes your personal data under the following legal grounds:
- Contract performance: Processing your registration data, payment data, and gaming activity data is necessary to deliver the services you have contracted with zh88 to receive by creating an account.
- Legal obligation: KYC verification, transaction record-keeping, and AML reporting are required by law and cannot be declined by members without affecting their ability to use the platform.
- Legitimate interests: Security monitoring, fraud prevention, platform improvement, and responsible gaming monitoring are conducted based on zh88's legitimate interest in maintaining a safe, fair, and well-functioning platform for all Pakistani members.
- Consent: Marketing communications are sent only where you have explicitly opted in. Consent can be withdrawn at any time without affecting your account.
5. Data Sharing
zh88 does not sell, rent, or trade your personal data to any third party for commercial purposes. This is a firm commitment — not a policy subject to exceptions for "business partners" or "affiliated companies". Your data is your data.
zh88 does share limited data with the following categories of third parties, only to the extent necessary to operate the platform:
5.1 Payment Processors
When you make a deposit or withdrawal on zh88, your transaction details are shared with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank — solely to process the transaction. zh88 shares only the minimum information required for processing and does not share your gaming activity or balance with any payment provider.
5.2 Identity Verification Providers
For members undergoing KYC verification, zh88 uses a certified identity verification service to validate CNIC documents. This provider receives your document image and extracted identity data solely for the purpose of verification and is contractually prohibited from using your data for any other purpose.
5.3 Legal & Regulatory Authorities
zh88 will disclose member data to law enforcement or regulatory authorities when legally compelled to do so — for example, in response to a valid court order or regulatory investigation. zh88 will not voluntarily disclose data to authorities without legal compulsion, but it cannot refuse a lawful disclosure request.
Important: If zh88 is acquired, merged with, or substantially restructures its operations, member data may be transferred to the successor entity as part of that transaction. You will be notified via email before any such transfer takes effect if it materially changes how your data is handled.
6. Data Retention
zh88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods zh88 applies are as follows:
- Active account data — retained for the duration of your membership on zh88 plus a minimum of 5 years after account closure, as required for AML compliance.
- Transaction records — retained for 7 years from the date of each transaction in accordance with financial record-keeping requirements.
- KYC documents — retained for 5 years after account closure or last transaction, whichever is later.
- Support interaction records — retained for 3 years from the date of the last interaction.
- Marketing opt-in records — retained until you withdraw consent, then deleted within 30 days.
- Technical logs (IP, device data) — retained for 12 months from collection date, then anonymised or deleted.
After the applicable retention period expires, zh88 permanently deletes or irreversibly anonymises the relevant data. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for aggregate analytics and platform improvement purposes.
7. Security Measures
zh88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction.
7.1 Technical Safeguards
- 256-bit SSL/TLS encryption on all data transmitted between your device and zh88.life
- Encrypted data storage for all sensitive fields including CNIC numbers, identity documents, and financial records
- Tokenised payment processing — your payment credentials never pass through or reside on zh88 servers
- Two-factor authentication (2FA) available for all zh88 accounts — strongly recommended for all members
- Automated fraud detection systems monitoring for unusual login patterns, transaction anomalies, and device changes
- Regular third-party security audits of zh88's infrastructure and data handling practices
7.2 Organisational Safeguards
Access to personal data within zh88 is restricted on a strict need-to-know basis. Support agents can only access the specific account information needed to handle your query — they cannot view your full CNIC number, payment credentials, or unrelated account history. All zh88 staff with data access are subject to confidentiality obligations and receive regular data protection training.
7.3 Your Responsibility
While zh88 takes every reasonable step to protect your data on its end, account security also depends on you. Use a strong, unique password for your zh88 account. Enable two-factor authentication. Do not share your login credentials with anyone. Log out of shared or public devices after each session. If you believe your account has been compromised, contact zh88 support immediately and change your password.
Security reminder: zh88 will never ask for your password via email, live chat, or phone. Any message claiming to be from zh88 that requests your login credentials should be treated as a phishing attempt and reported to our support team.
8. Cookies & Tracking Technologies
zh88 uses cookies and similar tracking technologies on zh88.life. A cookie is a small text file placed on your device when you visit a website. zh88 uses cookies to keep you logged in between sessions, remember your preferences, and understand how the platform is being used so we can improve it.
8.1 Types of Cookies zh88 Uses
Strictly Necessary Cookies — These cookies are essential for zh88 to function. They maintain your session state, keep you logged in while you navigate the platform, and support security features like CSRF protection. These cannot be disabled without breaking core platform functionality.
Functional Cookies — These remember your preferences on zh88 — such as your last selected game category, preferred language, or table settings — so you don't have to re-enter them every session.
Analytics Cookies — zh88 uses anonymised analytics to understand how pages on zh88.life are used — which sections receive the most attention, where users encounter friction, and how the platform performs across different device types. This data is aggregated and cannot be used to identify individual members.
Marketing Cookies — Only set for members who have opted in to marketing communications. These cookies help zh88 measure the effectiveness of promotional campaigns and avoid showing the same member an offer they have already received.
Your Current Cookie Preferences (demo)
This is a visual demonstration. Manage your actual cookie settings from your zh88 account preferences after logging in.
9. Your Rights Over Your Data
As a zh88 member, you hold specific rights over your personal data. zh88 is committed to honouring these rights promptly and without creating unnecessary obstacles. To exercise any of the rights below, contact zh88 support via live chat or email with your request.
Right to Access
You can request a full copy of the personal data zh88 holds about you at any time. zh88 will provide this within 30 days of a valid request, free of charge for standard requests.
Right to Correction
If any data zh88 holds about you is inaccurate or outdated, you have the right to request its correction. Update basic account information directly in your account settings, or contact support for identity and verification data.
Right to Deletion
You can request deletion of your personal data. Note that zh88 is legally required to retain certain data (transaction records, KYC documents) for defined periods — deletion requests cannot override these legal obligations, but all non-required data will be removed.
Right to Object
You can object to zh88 processing your data for marketing purposes at any time. You can also object to processing based on legitimate interests, though in some cases zh88 may have compelling grounds that override your objection.
Right to Data Portability
You can request your account data in a structured, machine-readable format (CSV or JSON). This includes your gaming history, transaction records, and account settings. Portability requests are fulfilled within 30 days.
Right to Restriction
You can request that zh88 restricts processing of your data in certain circumstances — for example, while a dispute about data accuracy is being investigated. During restriction, zh88 may store but not actively process the relevant data.
To submit a data rights request, contact zh88 support via live chat available 24/7 from zh88.life, or email support@zh88.life. zh88 will acknowledge all rights requests within 48 hours and provide a full response within 30 calendar days. zh88 will verify your identity before fulfilling any request that involves disclosing or modifying personal data.
10. Minors
zh88 is strictly an adult platform. No person under the age of 18 is permitted to register an account on zh88.life or use any of its services. zh88 does not knowingly collect personal data from any individual under the age of 18.
During registration, all new zh88 members are required to confirm they are at least 18 years of age. For withdrawals above Rs 50,000 — and at any point where our compliance team deems it necessary — zh88 requires CNIC-based age verification to confirm this. Any account found to belong to or be operated by a person under 18 will be immediately suspended, all data will be securely deleted as rapidly as legally permissible, and the account will be permanently banned.
If you are a parent or guardian and believe your child has registered an account on zh88, please contact our support team immediately at support@zh88.life. We will investigate and take immediate action.
Parents & Guardians: If you share devices at home, consider using browser parental controls or device access restrictions to prevent minors from accessing gambling websites, including zh88. Our Responsible Gaming page includes links to third-party parental blocking tools.
11. Changes to This Policy
zh88 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we operate the platform. When material changes are made — meaning changes that significantly affect how your personal data is collected or used — zh88 will notify you via the email address registered to your account at least 7 days before the changes take effect.
Non-material updates (corrections, clarifications, or formatting changes that do not alter the substance of our data practices) may be made without prior notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.
Your continued use of zh88 after an updated Privacy Policy has come into effect constitutes your acknowledgement of the revised Policy. If you disagree with any material change, you have the right to close your account and request deletion of non-legally-required data before the changes take effect.
