zt88 Privacy Policy

Effective Date: 1 June 2026

1. About This Policy and the Data Controller

This Privacy Policy ("Policy") sets out how zt88, operating the Platform at zt88.club ("zt88", "we", "us", or "our"), collects, processes, stores, and discloses personal data relating to users of the Platform ("you" or "the User").

zt88 acts as the data controller in respect of personal data collected through the Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time, subject to the provisions of Section 10 below.

This Policy applies to all personal data collected via the zt88 website at zt88.club, including data collected during registration, account use, payment processing, customer support interactions, and any communications between you and zt88. It does not apply to third-party websites or services that may be referenced on the Platform.

2. Personal Data We Collect

zt88 collects the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full name, date of birth, CNIC/passport number, photograph	KYC verification
Contact Data	Mobile number, email address, city of residence	Registration
Financial Data	Payment method details, transaction history, account balance	Deposit / withdrawal
Technical Data	IP address, device type, browser type, operating system	Platform access
Usage Data	Game history, bet history, login timestamps, session duration	Active platform use
Communications Data	Live chat transcripts, support emails, in-platform messages	Support interactions
Responsible Gaming Data	Deposit limit settings, self-exclusion status, cool-off records	Player protection tools

3. How We Collect Your Data

zt88 collects personal data through the following means:

• Direct submission: Data you actively provide during registration, KYC verification, payment transactions, form submissions, and support communications;
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and device fingerprinting when you access the Platform;
• Third-party sources: Identity verification data returned by our licensed KYC partners; payment confirmation data from Easypaisa, JazzCash, and banking partners; fraud detection signals from security service providers.

4. Purposes and Legal Bases for Processing

zt88 processes personal data only where a valid legal basis exists. The primary purposes and corresponding bases are:

• Contract performance: Processing necessary to register your account, manage your gaming activity, process deposits and withdrawals, and provide customer support — all required to fulfil our contractual obligations to you;
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, age verification requirements, and fraud prevention — including KYC document verification and transaction monitoring;
• Legitimate interests: Platform security monitoring, fraud detection, responsible gaming analytics, and service improvement — where our legitimate interests are not overridden by your rights;
• Consent: Sending promotional communications via SMS or email where you have opted in. You may withdraw consent for marketing communications at any time by contacting support or updating your account notification preferences.

5. How We Share Your Data

zt88 does not sell or rent personal data. Data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to data processing agreements:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, Meezan Bank, and Bank Alfalah — solely to process financial transactions initiated by you;
• KYC and identity verification partners: Licensed third-party providers used to verify identity documents submitted during account verification;
• IT infrastructure providers: Cloud hosting and server management providers who process data as data processors under instruction from zt88;
• Fraud prevention and security services: Providers used to detect and prevent fraudulent activity, money laundering, and account abuse;
• Legal and regulatory authorities: Where disclosure is required by applicable law, court order, or regulatory demand — including financial intelligence authorities.

All third-party service providers engaged by zt88 are contractually bound to process personal data only as instructed, to implement appropriate security measures, and to refrain from using your data for their own commercial purposes.

6. International Data Transfers

zt88 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, zt88 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with internationally recognised privacy standards — to provide a level of data protection equivalent to that described in this Policy. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence.

7. Data Retention

zt88 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:

• Account data is retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with AML and financial record-keeping obligations;
• KYC documentation is retained for a minimum of 5 years after the end of the customer relationship or after the last transaction, whichever is later;
• Transaction records are retained for a minimum of 5 years from the date of transaction;
• Support communications are retained for up to 3 years;
• Technical and usage logs are typically retained for up to 12 months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8. Cookies and Tracking Technologies

zt88 uses cookies and similar technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and fraud prevention signals. These cannot be disabled;
• Functional cookies: Remembering your language preference, login state, and account settings between sessions;
• Analytics cookies: Aggregated, anonymised data about how users interact with the Platform — used to identify areas for improvement. No individual user behaviour is shared with advertising networks.

zt88 does not use third-party advertising cookies or cross-site behavioural tracking cookies. You may manage non-essential cookies through your browser settings; however, disabling strictly necessary cookies may prevent the Platform from functioning correctly.

9. Security of Your Data

zt88 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zt88 Platform;
• Encrypted storage of personal data and financial records at rest;
• Bcrypt hashing of account passwords — passwords are never stored in recoverable form;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication options for user accounts and internal systems.

While zt88 takes all reasonable precautions, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own account credentials.

10. Your Rights Over Your Personal Data

Subject to applicable law and certain legal exemptions, you have the following rights in relation to your personal data held by zt88:

• Right of access: You may request a copy of the personal data zt88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to restriction: You may request that processing of your data be restricted in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the zt88 Data Protection team via the support email listed in Section 13. Requests will be acknowledged within 5 business days and responded to within 30 days. zt88 may require identity verification before fulfilling data subject requests.

11. Children's Privacy

The Platform is strictly for users aged 18 and over. zt88 does not knowingly collect personal data from individuals under the age of 18. If zt88 becomes aware that personal data has been collected from a minor, the account will be immediately closed and all personal data associated with it will be securely deleted. If you believe a minor has registered an account, please contact us immediately using the details in Section 13.

12. Changes to This Privacy Policy

zt88 reserves the right to update this Privacy Policy at any time. Material changes — for example, changes to the categories of data collected or the purposes for which it is used — will be communicated via a notice on the Platform and/or by SMS or email to your registered contact details, at least 7 days before the revised Policy takes effect. The "Last Updated" date at the top of this Policy will reflect the date of any revision. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. How to Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the zt88 Privacy and Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Privacy Request – [your registered mobile number]
• Live Chat: Available 24/7 via the Platform dashboard

zt88 will respond to all privacy-related enquiries within 5 business days of receipt and will resolve requests within 30 days, except where legal complexity requires an extension, in which case you will be informed accordingly.