Legal Document

Privacy Policy

This Privacy Policy explains how ZC888 collects, uses, stores and protects the personal data of users who access our platform. Your privacy matters to us — this document tells you exactly what data we hold and why, in plain English.

Last Updated: 1 January 2026  |  Effective Date: 1 January 2026
256-bit SSL encryption on all data
No data selling to third parties
Data retained only as required by law
You may request data access at any time
Cookies managed by your browser
Section 01

Introduction

ZC888 (referred to herein as "the Platform", "we", "us" or "our") is an English-language online gaming platform designed for Pakistani users, offering sports betting, live casino games, slot titles and instant games. We are committed to protecting the privacy and personal data of all individuals who access or use our services ("User", "you" or "your").

This Privacy Policy ("Policy") sets out, in formal legal-register English, how ZC888 collects, processes, stores and protects personal data. It applies to all data collected through the ZC888 website at zc888.cam, our mobile-optimised interface, and any associated support or communication channels.

By creating an Account or continuing to use the ZC888 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process your data, you should discontinue use of the Platform and contact us to request Account closure and data deletion where applicable.

Note for Pakistani Users: ZC888 does not claim to be regulated by the Government of Pakistan, the Pakistan Telecommunication Authority, the State Bank of Pakistan, or any Pakistani provincial authority. Data processing practices described herein are governed by the applicable law of the jurisdiction in which ZC888 holds its operating licence. This Policy does not constitute legal advice.

Section 02

Definitions

The following terms, when used in this Privacy Policy, carry the meanings set out below:

  • "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, CNIC number, device identifiers, IP addresses and financial transaction data.
  • "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure and destruction.
  • "Data Controller" — the entity that determines the purposes and means of processing personal data. In the context of this Policy, the Data Controller is ZC888.
  • "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
  • "Consent" — freely given, specific, informed and unambiguous agreement to the processing of personal data for a stated purpose.
  • "KYC" — Know Your Customer — the identity and age verification process applied to registered users.
  • "Cookies" — small data files placed on your device by the Platform to enable functionality, analytics and session management.
  • "AML" — Anti-Money Laundering obligations requiring ZC888 to monitor and report suspicious financial activity.
Section 03

Data Controller

ZC888 acts as the Data Controller in respect of personal data collected through the Platform. This means ZC888 determines why and how your personal data is processed. Where ZC888 engages third-party Data Processors — such as payment technology providers, identity verification services or analytics platforms — those processors operate under contractual obligations that restrict their use of your data to the specific purposes authorised by ZC888.

If you have any questions about how ZC888 processes your data, or to exercise any of your data rights, please contact us at: [email protected] (plain text — not a clickable link).

Section 04

Data We Collect

ZC888 collects personal data through several channels and at different stages of your interaction with the Platform. The categories of data we collect are summarised below:

Data Category Specific Examples Collection Point
Identity Data Full name, date of birth, CNIC or passport number, nationality Registration & KYC
Contact Data Email address, mobile number, city of residence (e.g., Karachi, Lahore, Islamabad) Registration & Account settings
Financial Data Deposit and withdrawal records, payment method references, transaction amounts in PKR or cryptocurrency Cashier & payment processing
Verification Documents Scanned CNIC or passport image, selfie/liveness capture, proof of address KYC verification portal
Technical Data IP address, device type, browser, operating system, session duration, geolocation Automatic on site access
Usage Data Games played, bet history, wagering frequency, pages visited, time on Platform Platform activity tracking
Communications Data Support chat transcripts, email correspondence, feedback submissions Support & communication channels
Marketing Preferences Opt-in / opt-out status, communication preferences, preferred sports or game categories Account settings & form selections
4.1 — Data You Provide Voluntarily

Some data is provided directly by you — such as registration details, KYC documents and support communications. You are not obligated to provide this data, but without it ZC888 cannot create and maintain a functional, verified Account.

4.2 — Data Collected Automatically

Technical and usage data is collected automatically when you access the Platform, using cookies, server logs and analytics tools. See Section 10 (Cookies & Tracking) for full details.

Section 06

How We Use Your Data

ZC888 uses personal data for the following purposes. We do not use your data in ways that are incompatible with the purpose for which it was collected:

6.1 — Account Management & Service Delivery
  • Creating, verifying and maintaining your registered Account;
  • Processing deposits, withdrawals and bet settlements;
  • Providing access to games, sports markets and Platform features;
  • Delivering customer support via live chat and email.
6.2 — Legal & Regulatory Compliance
  • Verifying your identity and age in compliance with KYC requirements;
  • Monitoring transactions for AML purposes and filing required reports;
  • Maintaining records for the period required by the applicable licence jurisdiction;
  • Responding to lawful requests from regulatory authorities or courts.
6.3 — Responsible Gambling
  • Monitoring usage patterns for signs of problem gambling;
  • Enforcing deposit limits, session restrictions and self-exclusion periods;
  • Sending responsible gambling alerts or support communications where appropriate.
6.4 — Security & Fraud Prevention
  • Detecting and investigating suspicious or fraudulent Account activity;
  • Enforcing the single-account rule and preventing duplicate registrations;
  • Protecting against unauthorised Account access.
6.5 — Platform Improvement & Analytics
  • Analysing aggregated, anonymised usage data to improve Platform performance;
  • Understanding player preferences to improve game and feature offerings;
  • Conducting A/B testing and performance monitoring.
6.6 — Marketing Communications (Consent-Based)

With your explicit consent, ZC888 may send promotional communications about bonuses, new games, sports events (including Pakistan cricket, PSL T20 and ICC tournaments) and Platform updates. You may opt out of marketing communications at any time by updating your Account preferences or contacting support.

Section 07

Data Sharing & Disclosure

ZC888 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

  • Identity Verification Providers: Regulated KYC and AML service providers who process your identity documents and liveness data solely for the purpose of verifying your identity. These providers operate under strict data processing agreements.
  • Payment Technology Providers: Technical intermediaries involved in processing deposit and withdrawal transactions. Payment provider names referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned as familiar local context only and do not imply any data-sharing relationship with or endorsement from those institutions.
  • Fraud & Security Services: Technology providers that assist ZC888 in detecting fraudulent activity, bot access and suspicious transaction patterns.
  • Analytics Platforms: Aggregated, anonymised usage data may be shared with analytics tools to improve Platform performance. No individually identifiable data is shared for this purpose.
  • Regulatory & Legal Authorities: Where ZC888 is required by law, court order or regulatory direction to disclose personal data, we will comply while informing you where legally permitted to do so.
  • Business Transfers: In the event of a merger, acquisition or sale of assets, personal data held by ZC888 may be transferred to the acquiring entity, subject to equivalent data protection standards.

ZC888 will never sell your personal data. All third-party Data Processors are bound by contractual obligations limiting their use of your data strictly to the purposes for which it was shared.

Section 08

Data Retention

ZC888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and as required by applicable law and licence obligations. The general retention principles are:

  • Account Data & KYC Documents: Retained for the duration of your active Account relationship with ZC888, and for a minimum period following Account closure as required by the applicable licensing jurisdiction (typically 5–7 years for AML compliance purposes).
  • Transaction Records: Financial transaction data is retained for the minimum period required by applicable AML and financial record-keeping obligations.
  • Support Communications: Chat and email support records are retained for a reasonable period to enable continuity of support and to assist in dispute resolution.
  • Technical & Usage Data: Aggregated usage logs are typically retained for up to 12 months. Anonymised analytics data may be retained indefinitely.
  • Marketing Preferences: Opt-out records are retained indefinitely to ensure ZC888 does not re-contact users who have withdrawn consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

Section 09

International Data Transfers

ZC888 and certain of its Data Processors may operate in jurisdictions outside Pakistan. Where personal data is transferred internationally, ZC888 ensures that appropriate safeguards are in place, which may include:

  • Standard contractual clauses governing data processing obligations;
  • Binding corporate rules where applicable;
  • Transfer to jurisdictions that provide an adequate level of data protection under the applicable licensing framework.

ZC888 does not claim that Pakistani data protection law applies to its operations. Users should be aware that their data may be processed and stored outside Pakistan. If you have concerns about international data transfers, please contact us at [email protected].

Section 10

Cookies & Tracking Technologies

ZC888 uses cookies and similar tracking technologies to enable Platform functionality, manage your session, measure performance and, where you have consented, to serve relevant promotional content.

You may manage and disable non-essential cookies through your browser settings at any time. Disabling essential cookies may affect Platform functionality. Most browsers allow you to view, manage and delete cookies via their settings menu. Please refer to your browser's help documentation for specific instructions.

Section 11

Your Data Rights

Depending on the applicable data protection law of the jurisdiction in which ZC888 holds its operating licence, you may hold some or all of the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected].

ZC888 will respond to verified data rights requests within 30 days of receipt. We may need to verify your identity before processing your request.

Section 12

Children & Minors

ZC888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the operator's applicable licence jurisdiction. Access by minors is prohibited.

As part of our KYC process, ZC888 verifies the date of birth and identity of all registered users. If ZC888 discovers or has reason to believe that a minor has registered or accessed the Platform, the Account will be immediately suspended, all funds will be held pending verification and any confirmed underage Account will be permanently closed.

If you believe a minor has accessed the ZC888 Platform, please contact us immediately at [email protected]. We take underage access extremely seriously.

Section 13

Data Security

ZC888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
  • Encrypted storage of sensitive personal and financial data at rest;
  • Access controls limiting staff access to personal data on a strict need-to-know basis;
  • Regular security assessments and vulnerability testing;
  • Secure, HTTPS-only KYC document submission portal — documents are never accepted via unsecured email or chat;
  • Incident response procedures to manage and notify of data breaches in accordance with applicable obligations.

No security system is entirely infallible. In the event of a data breach that is likely to affect your rights and freedoms, ZC888 will notify affected users and the applicable regulatory authority as required by law.

You also have a role in protecting your data. Use a strong, unique password for your ZC888 Account, never share your credentials, and log out after each session — especially on shared devices. Contact support immediately if you suspect unauthorised access.

Section 14

Third-Party Services

The ZC888 Platform may integrate with third-party services — such as payment processors, identity verification providers, analytics tools and game content studios — to deliver a complete gaming experience. This Privacy Policy applies solely to ZC888's own data processing activities.

Third-party providers operate under their own privacy frameworks. ZC888 does not control how those providers handle data beyond the boundaries of the contractual obligations ZC888 imposes on them as Data Processors. Users are encouraged to review the privacy policies of any third-party services where their data may be transmitted.

References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made solely as familiar local references for Pakistani users. ZC888 does not have a formal data-sharing partnership with any of these institutions and does not imply their endorsement of the Platform or its data practices.

Section 15

Amendments to This Policy

ZC888 reserves the right to update this Privacy Policy at any time. The most current version will always be published at zc888.cam/privacy-policy, with the effective date clearly displayed at the top of this document.

Where changes are material — for example, a change in how we use your data or a new category of data collection — ZC888 will take reasonable steps to inform registered users, such as displaying a notice within the Platform or sending an email notification where a valid address is on file. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not accept the revised Policy, you should discontinue use of the Platform and contact us to request Account closure and, where applicable, data deletion.

Section 16

Contact & Data Requests

To exercise any of your data rights, to submit a privacy-related question or concern, or to request a copy of this Policy in an alternative format, please contact the ZC888 data team through the following channel:

Privacy & Data Requests — Support Email (plain text, not a link):

[email protected]

Live Chat Support:

Available 24/7 via the on-site widget

Response Timeframe for Data Requests:

Within 30 days of receipt of a verified request

For questions about your Account terms, please see our Terms & Conditions. For responsible gambling tools, visit our Responsible Gambling page.

Your Rights Under This Privacy Policy

Depending on applicable data protection law, you may hold the following rights. Contact us at [email protected] to exercise any right.

Right of Access

You may request a copy of the personal data ZC888 holds about you, along with information about how it is used.

Right of Rectification

If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.

Right to Restrict Processing

You may request that processing of your data be restricted in certain circumstances — for example, while accuracy is disputed.

Right to Data Portability

Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.

Right to Object

You may object to processing based on legitimate interests, including direct marketing. Your objection will be assessed against our legitimate interests.

How ZC888 Protects Your Data

End-to-End Encryption

All data exchanged between your device and ZC888 is protected by 256-bit SSL/TLS encryption. KYC documents are submitted through a dedicated HTTPS-only secure portal — never via unsecured email or chat.

No Data Selling

ZC888 will never sell, rent or trade your personal data to any third party for their own commercial purposes. Data sharing is limited strictly to service delivery and legal compliance — nothing more.

Minimal Retention

We keep your data only for as long as the law or your Account relationship requires. After retention periods expire, data is securely deleted or fully anonymised — it cannot be linked back to you.

Access Controls

Staff access to personal data is restricted on a strict need-to-know basis. Every ZC888 team member with data access is subject to confidentiality obligations and regular data protection training.

Exercisable Data Rights

Your rights to access, correct, delete and port your data are real and actionable. Contact our support team at any time and we will respond within 30 days of your verified request.

Breach Notification

If a data breach is likely to affect your rights, ZC888 will notify you and the relevant regulatory authority promptly, in accordance with applicable obligations. We do not conceal security incidents.

Your Data, Your Control

Questions About Your Privacy at ZC888?

Our support team is available 24/7 to handle data access requests, answer privacy questions or help you manage your Account and preferences. Reach us any time at [email protected] — or visit the homepage to explore the Platform.

18+ only. Gambling involves financial risk. Local laws in Pakistan may restrict gambling. Understand applicable law before participating.