Privacy Policy

za88 is Pakistan's premier online gaming destination, offering sports betting, live casino games, slot titles, and instant-win games including Super Keno and Monster Crash. Our Platform is designed and operated to serve English-speaking players across Pakistan, including major urban centres such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.

This Privacy Policy applies to all personal data collected from users who access or interact with the za88 Platform in any capacity — whether as a registered player, a visitor browsing the site, or a user engaging with our customer support channels. It describes the types of personal data we collect, the purposes for which we process it, the legal bases we rely upon, how we protect it, and the rights you have in relation to your data.

For any privacy-related enquiries, please contact our dedicated data protection team at [email protected] with the subject line "Privacy Enquiry".

za88 collects personal data through several channels: directly from you when you register an account or interact with our services, automatically through your use of the Platform, and in limited circumstances from third-party sources for the purposes of verification and fraud prevention.

2.1 Data You Provide Directly

2.2 Data We Collect Automatically

When you access and use the za88 Platform, we automatically collect certain technical and behavioural data to ensure the Platform functions correctly, to detect fraud, and to improve your experience:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage & Behavioural Data: Pages visited, features used, games played, betting history, session duration, click patterns, and navigation paths within the Platform.
• Transaction Data: Complete records of all deposits, withdrawals, bonus activations, bets placed, and game results associated with your account.
• Log Data: Server-side logs recording login events, API calls, error reports, and security events associated with your account activity.

2.3 Data from Third Parties

In limited circumstances, za88 may receive personal data about you from third-party sources, including:

• Identity verification and Know Your Customer (KYC) service providers who cross-reference the information you provide against official databases to confirm your identity and age.
• Anti-fraud and anti-money laundering (AML) screening services that flag accounts associated with known fraudulent activity or sanctioned individuals.
• Payment processors and wallet providers (such as JazzCash and EasyPaisa) who may share transaction confirmation data with za88 to reconcile deposits and withdrawals.

za88 uses your personal data only for the specific, legitimate purposes described below. We do not use your data in ways that are incompatible with the purposes for which it was originally collected without first obtaining your explicit consent or ensuring a separate legal basis applies.

• Account Registration & Management: Creating and maintaining your za88 account, verifying your identity and age (21+ requirement), processing your login credentials, and communicating important account-related updates.
• Service Delivery: Enabling you to access and play all games, place bets on cricket (including PSL matches and international fixtures), football, and other sports markets, and use all Platform features.
• Financial Transaction Processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20; processing withdrawal requests; and maintaining complete transaction records for accounting and regulatory compliance purposes.
• KYC & AML Compliance: Verifying player identities, screening against sanctions lists, detecting and preventing money laundering, fraud, and other financial crimes, and fulfilling our obligations under applicable anti-money laundering regulations.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, enforcing deposit and loss limits, processing self-exclusion requests, and ensuring that players who have self-excluded are not able to access the Platform.
• Customer Support: Responding to your enquiries, resolving disputes, handling complaints, and maintaining records of interactions for quality assurance and training purposes.
• Platform Improvement & Analytics: Analysing usage patterns, game performance, and betting trends to improve our products, fix bugs, personalise your experience, and develop new features.
• Marketing & Promotions: Sending you promotional emails, bonus offers, and Platform updates where you have consented to receive such communications. You may withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting support.
• Legal & Regulatory Compliance: Fulfilling our obligations under applicable laws, responding to lawful requests from regulatory authorities, courts, or law enforcement agencies, and enforcing our Terms & Conditions.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, cheating, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.

za88 processes your personal data on the following legal bases, depending on the specific purpose of processing:

Where za88 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of this assessment by contacting us at [email protected].

za88 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate the Platform, enhance your experience, and gather analytics data. Below is a summary of the types of cookies we use:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling functional or analytics cookies will reduce the quality of your experience but will not prevent you from accessing the Platform.

za88 may share your personal data with the following categories of third parties:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable financial regulations.
• Identity Verification Providers: Third-party KYC and AML service providers receive identity and document data solely for the purpose of verifying your eligibility to play on za88 and screening against sanctions lists.
• Game Content Providers: Certified third-party game developers and providers may receive anonymised session data (such as player tier and bet amounts) to facilitate game delivery and RTP calculations. They do not receive your name, contact details, or payment information.
• Technology & Infrastructure Partners: Cloud hosting providers, content delivery networks, and cybersecurity service providers who process data on za88's behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or valid regulatory request, za88 will disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and accountants who are bound by professional confidentiality obligations and who access personal data only to the extent necessary to provide their professional services to za88.

All third parties with whom za88 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with za88's documented instructions and applicable data protection law.

za88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Our standard data retention schedule is as follows:

When personal data reaches the end of its retention period, za88 will securely delete it using industry-standard data destruction methods, or anonymise it so that it can no longer be associated with any identifiable individual. Data that has been anonymised may be retained indefinitely for statistical and analytical purposes.

As a player on the za88 Platform, you have the following rights in relation to your personal data. These rights apply subject to any overriding legal obligations that may restrict their exercise in specific circumstances (for example, where data must be retained for AML compliance purposes).

• Right of Access: You have the right to request a copy of all personal data that za88 holds about you, along with information about how it is being processed. za88 will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update many of your account details directly through your za88 profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request that za88 delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you withdraw your consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to za88's legal obligations to retain certain data under AML and gaming regulations.
• Right to Restriction of Processing: You may request that za88 suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on za88's legitimate interests where you believe your rights and freedoms override those interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: za88 does not make solely automated decisions that have a significant legal or similarly significant effect on you. Where automated tools are used in fraud detection or responsible gaming monitoring, human review is available upon request.

za88 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the za88 Platform is encrypted in transit using TLS 1.3, the current industry gold standard for connection security.
• AES-256 Encryption at Rest: Personal data and financial records stored on za88 servers are encrypted using AES-256, ensuring that data remains protected even in the event of a storage-level breach.
• Access Controls & Least Privilege: Access to personal data within za88's internal systems is restricted to authorised personnel who have a legitimate operational need. All internal access is logged and subject to regular audit.
• PCI-DSS Compliant Payment Processing: All payment transactions are routed through PCI-DSS Level 1 certified gateways. za88 does not store raw card numbers, CVV codes, or banking credentials on its own servers.
• Multi-Factor Authentication (MFA): za88 offers MFA for player account logins and requires it for all internal staff accessing player data systems.
• Intrusion Detection & Monitoring: za88 operates 24/7 security monitoring with automated intrusion detection systems that flag and respond to unusual activity patterns in real time.
• Regular Security Audits: za88 engages independent cybersecurity firms to conduct penetration testing and security audits on a regular basis. Critical vulnerabilities are remediated within 48 hours of identification.

While za88 takes every reasonable precaution to protect your data, no Internet transmission or electronic storage system is 100% secure. You also play a role in keeping your account safe — please use a strong, unique password for your za88 account and never share your login credentials with anyone.

During the registration process, za88 requires all prospective players to confirm their date of birth and submits this information to third-party age and identity verification services. Accounts where verification reveals the holder to be under 21 years of age will be closed immediately, all pending withdrawals will be cancelled, deposited funds will be returned to the original payment source, and all data collected will be securely deleted subject to any mandatory legal retention requirements.

If you are a parent or guardian and you believe that your child has accessed or registered on the za88 Platform without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take these reports extremely seriously and will investigate and resolve the matter as a priority.

za88 also recommends that parents and guardians install parental control software on devices accessible to minors. Tools such as internet filtering software can help prevent accidental or intentional access to age-restricted online platforms.

za88 operates globally and, as such, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Pakistan. This may occur when we use cloud infrastructure providers, game content providers, or KYC service providers whose servers are located in other countries.

Wherever personal data is transferred internationally, za88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Transfers to countries that have been determined to offer an adequate level of data protection.
• Standard contractual clauses or equivalent contractual protections incorporated into our agreements with third-party data processors located in third countries.
• Binding corporate rules where transfers occur within a group of companies that has adopted such rules.

You may request details of the specific safeguards in place for any particular international transfer by contacting us at [email protected].

za88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The current version of this Privacy Policy, along with the effective date of the most recent revision, will always be available on this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — za88 will provide at least 14 days' advance notice by sending an email to your registered address and by displaying a prominent notice on the Platform. Minor clarifications or corrections may be implemented without prior notice.

Your continued use of the za88 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Privacy Policy, you should stop using the Platform and close your account. Any balance held in your account at the time of closure will be processed for withdrawal in accordance with the standard procedures described in our Terms & Conditions.

If you have any questions, concerns, or complaints about how za88 handles your personal data, or if you wish to exercise any of your privacy rights, please get in touch with our data protection team through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 within the za88 Platform — ask to be connected to the Data Protection team
• Response Time: We acknowledge all privacy-related contacts within 5 business days and aim to fully resolve them within 30 days

za88 is committed to resolving all privacy complaints fairly and efficiently through our internal process. If, after engaging with our support team, you remain dissatisfied with our handling of your complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the regulatory body overseeing za88's gaming licence.