z2888 Privacy Policy

This Privacy Policy ("Policy") describes how the operator of the z2888 Platform ("z2888", "Operator", "we", "us", "our") collects, processes, stores, uses and discloses personal data relating to individuals ("User", "you", "your") who access or use the website located at https://z2888.cam and all associated services (collectively, the "Platform").

z2888 is an English-language online betting and casino platform serving Pakistani users. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein, to the extent that consent is the applicable legal basis. Where processing is carried out on other legal bases (such as contractual necessity or legal obligation), your consent is not required, but this Policy keeps you informed of all processing activities regardless.

This Policy should be read alongside the z2888 Terms & Conditions, which govern your overall use of the Platform.

For the purposes of this Privacy Policy, the following defined terms apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or indirectly.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, the z2888 Operator.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, under instruction.
• "KYC" means Know Your Customer — the identity and document verification process required to comply with AML/regulatory obligations.
• "Cookies" means small text files stored on your device by the Platform for functional, analytical or marketing purposes.
• "Platform" means the z2888 website at https://z2888.cam and all associated services and features.

We collect the following categories of personal data from or about you in the course of operating the Platform:

We do not collect special categories of personal data (such as health data, racial or ethnic origin, political opinions or biometric data) unless specifically required for KYC compliance in exceptional circumstances and with appropriate safeguards applied.

We collect personal data through the following means:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support or updating your account profile.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies. See Section 8 for details on cookies.
• Third-Party Sources: Identity verification data from KYC/AML service providers; fraud and risk-screening data from specialist security providers; and payment transaction data from payment processing intermediaries.

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are as follows:

1. Contractual Necessity: Processing required to perform the contract between you and the Operator — including account operation, transaction processing, wager settlement and withdrawal processing.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML reporting obligations, record-keeping requirements and responses to lawful regulatory or law-enforcement requests.
3. Legitimate Interests: Processing necessary for the Operator's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, security monitoring, platform improvement and responsible gambling monitoring.
4. Consent: Where you have provided specific, informed and freely given consent for processing activities such as marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

We use the personal data we hold about you for the following purposes:

• To create, maintain and manage your Account on the Platform;
• To verify your identity and age in compliance with KYC obligations;
• To process deposits, withdrawals and wager settlements in PKR and other supported currencies;
• To monitor your account activity for responsible gambling purposes, including identifying patterns that may indicate gambling-related harm;
• To detect, prevent and investigate fraud, money laundering and other illegal or prohibited activities;
• To communicate with you regarding your account, including transactional notifications, security alerts and support responses;
• To send you promotional communications where you have opted in to receive them (you may opt out at any time);
• To comply with legal and regulatory obligations imposed on the Operator;
• To analyse usage patterns for the purpose of improving Platform performance, features and user experience;
• To enforce the Terms & Conditions and resolve disputes.

z2888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and subject to appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party services that process your identity documents and perform AML screening on our behalf as Data Processors acting under our instruction.
• Payment Processing Intermediaries: Transaction data shared with payment processing partners to facilitate deposits and withdrawals. These partners process data under their own privacy policies.
• Fraud Prevention & Security Services: Specialist providers that analyse technical and behavioural data to detect fraudulent or prohibited activity on the Platform.
• Regulatory & Law Enforcement Authorities: Where required by applicable law or pursuant to a lawful order, we may disclose personal data to regulators, law enforcement agencies or competent governmental bodies.
• Professional Advisers: Lawyers, auditors and compliance advisers under obligations of professional confidentiality where necessary for the conduct of their services.
• Corporate Transactions: In the event of a merger, acquisition, sale of assets or corporate restructuring, personal data may be transferred to the relevant successor entity subject to equivalent data protection obligations.

The Platform uses cookies and similar tracking technologies to operate essential platform functions, analyse usage and, where applicable with your consent, deliver relevant content. The categories of cookies used are as follows:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair or prevent access to the Platform. Disabling analytical or marketing cookies will not affect your ability to use core Platform functionality.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any mandatory retention periods imposed by applicable law or regulatory obligations.

• Active Account Data: Retained for the duration of your Account and for a minimum period thereafter as required by applicable AML, gaming and financial record-keeping regulations.
• KYC Documentation: Retained for the period required by applicable AML legislation, typically a minimum of five (5) years following the end of the business relationship, unless a longer period is required.
• Transaction Records: Financial transaction records are retained for the period required under applicable financial record-keeping obligations.
• Support Communications: Retained for a reasonable period to manage complaints, disputes and service improvement purposes.
• Closed Account Data: Where an account is voluntarily closed, certain data categories must be retained for regulatory compliance purposes even after closure.

When data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised.

z2888 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS/TLS Encryption: All data transmitted between your device and the Platform is encrypted via HTTPS using current TLS standards.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis with role-based access controls applied.
• Two-Factor Authentication: Available to users for account login — strongly recommended for all accounts.
• Monitoring & Logging: System activity and access logs are maintained and monitored to detect anomalous behaviour.
• Vendor Security Standards: Third-party processors are required to maintain equivalent data security standards.

Subject to applicable law and the legal basis on which we process your personal data, you may have the following rights with respect to your personal data held by z2888:

1. Right of Access: The right to request a copy of the personal data we hold about you and information about how it is processed.
2. Right of Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account details through your Account profile; for other corrections contact support.
3. Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (including AML/KYC requirements which prevent erasure of certain data categories).
4. Right to Restriction: The right to request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of data is contested.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, the right to receive your personal data in a structured, machine-readable format.
6. Right to Object: The right to object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the support team using the details in Section 16. We will respond to verified requests within a reasonable timeframe consistent with applicable law. We may require identity verification before processing a request.

The Platform is strictly intended for adults. We do not knowingly collect personal data from individuals under the age of 18 (or such higher minimum age as applies under the Operator's licensing jurisdiction or applicable local law).

Age verification is a mandatory component of our KYC process. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete that data and close the associated Account. Any funds deposited by a minor will be handled in accordance with applicable law.

The Platform may integrate with or reference third-party services, including payment processing intermediaries and identity verification providers. These third parties operate their own privacy policies and data processing practices, which z2888 does not control.

Payment method names referenced on the Platform for the contextual familiarity of Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are independent services with their own terms and privacy policies. Their mention on this Platform does not imply a data-sharing partnership, endorsement of gambling, or affiliation with z2888. Users should review the privacy policies of any payment provider they use to fund their Account.

z2888 is not responsible for the privacy practices of third-party services and recommends that users review those policies independently.

In the course of operating the Platform, your personal data may be transferred to, stored in or processed in countries outside of Pakistan. These jurisdictions may have data protection laws that differ from those applicable in Pakistan.

Where personal data is transferred internationally, the Operator takes steps to ensure that adequate safeguards are in place to protect your personal data, which may include contractual protections with recipient entities (such as standard contractual clauses) or transfers to jurisdictions recognised as providing adequate levels of data protection.

z2888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is indicated in the "Last Updated" notice at the top of this page.

Material changes to this Policy will be communicated to registered users via the email address associated with their Account or by prominent notice on the Platform prior to the change taking effect. Where required by applicable law, we will seek renewed consent for material changes to consent-based processing activities.

Your continued use of the Platform following notification of an amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically to stay informed of how we handle your personal data.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how we handle your personal data, please contact the z2888 support team using the details below. Do not send sensitive financial information or full ID document copies by email without encrypting them.

• Support Email: [email protected]
• Live Chat: Available within the Platform during published operating hours.
• Response Time: We aim to acknowledge data-rights requests within a reasonable period and provide a full response as promptly as circumstances allow.
• Language: English-language support. Urdu assistance may be available on request.

For questions about our Terms of Use, please refer to the Terms & Conditions. For responsible gambling enquiries, visit our Responsible Gambling page.