za88 Privacy
Policy

01 Introduction

This Privacy Policy ("Policy") describes how za88 ("za88", "we", "us", "our") collects, processes, stores, and protects personal information about individuals ("you", "your", "Player") who register for and use the za88 online gaming platform accessible at za88.fyi.

By creating a za88 account or using any of our services — including cricket betting, UFC wagering, Jackpot Slots, live casino, Cockfighting markets, and PKR payment processing — you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read together with the za88 Terms & Conditions, which govern your use of the platform overall. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

02 Data Controller

za88 is the data controller responsible for the personal information collected through za88.fyi. As data controller, za88 determines the purposes for which and the means by which your personal data is processed.

For all privacy-related queries, requests, or complaints, please contact our Data Protection team at [email protected] (plain text only — not a clickable link). We aim to acknowledge all privacy-related communications within 48 hours and provide a substantive response within 30 calendar days.

03 Data We Collect

za88 collects the following categories of personal data, depending on how you interact with our platform:

We do not knowingly collect special categories of sensitive personal data (such as health records, religious beliefs, or political opinions) through the za88 platform.

04 How We Collect Data

za88 collects personal data through the following channels:

• Direct submission: Information you provide when registering your account, completing KYC verification, making deposits or withdrawals, or contacting support.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with za88.fyi, including via cookies and server logs.
• Payment processors: Transaction references and confirmation data received from Easypaisa, JazzCash, Raast, HBL, and USDT network providers when you make deposits or request withdrawals.
• Third-party identity verification services: Where we engage specialist KYC/AML providers to verify identity documents, we receive the result of that verification check.
• Fraud detection systems: Behavioural and technical signals collected to identify suspicious activity or potential breaches of our Terms & Conditions.

05 Why We Use Your Data

za88 processes your personal data for the following purposes, each supported by a lawful basis:

• Account creation and management: To register and maintain your za88 account, authenticate your identity at login, and manage account preferences.
• Transaction processing: To process deposits and withdrawals in PKR via your chosen payment method and to maintain an accurate transaction ledger.
• Age and identity verification: To comply with our obligation to verify that all players are aged 18 or over before allowing real-money wagering.
• Anti-Money Laundering (AML) compliance: To monitor transactions, detect suspicious activity, and meet our regulatory obligations under applicable AML frameworks.
• Fraud prevention and platform security: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Customer support: To respond to your queries, complaints, and dispute submissions in English and to maintain records of our communications.
• Responsible gaming: To identify at-risk players, administer self-exclusion requests, and enforce deposit limits or cooling-off periods as requested.
• Platform improvement: To analyse aggregated usage patterns and improve the za88 product, game selection, and user experience.
• Marketing communications: To send you za88 promotions and offers, where you have given your consent to receive such communications. You can opt out at any time.

06 Data Sharing

za88 does not sell your personal data. We share your information only with the following limited categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, Raast, HBL, and USDT network providers receive the minimum data necessary to execute your transactions.
• Identity verification providers: Third-party KYC/AML service providers who verify identity documents on our behalf under strict data processing agreements.
• IT infrastructure providers: Cloud hosting and security service providers who process data solely on za88's instructions and are bound by confidentiality obligations.
• Game content providers: Licensed game studios whose software powers our casino and slot games receive anonymised session data for technical troubleshooting purposes only.
• Legal and regulatory authorities: We will disclose personal data to government agencies, law enforcement, or regulators where we are legally required to do so, including in response to valid court orders or AML reporting obligations.
• Business transfers: In the event of a merger, acquisition, or asset sale involving za88, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance.

07 Data Retention

za88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and operational obligations. The following indicative retention periods apply:

• Active account data: Retained for the duration of your account and for 12 months after account closure, unless a longer period is required by law.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction to comply with AML and financial record-keeping requirements.
• KYC verification documents: Retained for 5 years from the date of verification, or for the duration of any ongoing regulatory investigation, whichever is longer.
• Support communications: Retained for 3 years from the date of last correspondence.
• Technical logs: Retained for 12 months for security monitoring and fraud investigation purposes.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction.

08 Security Measures

za88 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases, including financial information
• Multi-factor authentication (MFA) for administrative access to player data systems
• Regular third-party penetration testing and vulnerability scanning
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• 24/7 security monitoring with automated intrusion detection and alerting
• Secure data backup processes with encrypted offsite storage

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, za88 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

09 Cookies & Tracking Technologies

za88 uses cookies and similar tracking technologies on za88.fyi. A cookie is a small text file placed on your device when you visit our platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: We use first-party analytics cookies to understand how players navigate za88.fyi — which pages are visited most, where users drop off, and how features are used. This data is aggregated and does not identify you individually.
• Preference cookies: Used to remember your display settings, language preference, and notification choices so you do not have to re-enter them on each visit.
• Security cookies: Used by our fraud detection systems to recognise returning devices and flag unusual login patterns.

za88 does not use third-party advertising cookies or cross-site tracking cookies. You can manage your cookie preferences through your browser settings at any time, though disabling strictly necessary cookies will affect your ability to use the platform.

10 Your Privacy Rights

As a za88 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] (plain text only — not a clickable link). We will respond to verified requests within 30 calendar days.

Where your data is processed on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To unsubscribe from za88 marketing emails, click the unsubscribe link in any marketing email or contact support directly.

11 Minors

The za88 platform is strictly intended for adults aged 18 years and over. za88 does not knowingly collect personal data from persons under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete that data immediately and close the associated account.

12 International Data Transfers

Some of za88's infrastructure providers and game content partners operate outside Pakistan. Where personal data is transferred internationally, za88 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure your data receives an equivalent level of protection regardless of where it is processed.

za88 does not transfer your payment instrument data (such as Easypaisa or JazzCash account references) outside Pakistan except as strictly required for fraud prevention or regulatory compliance purposes.

13 Third-Party Links

The za88 platform may reference third-party services (such as payment providers). While za88 takes care to partner with reputable organisations, this Privacy Policy applies only to data collected and processed directly by za88. za88 is not responsible for the privacy practices of third-party providers, and we encourage you to review their privacy policies independently.

14 Changes to This Policy

za88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email and/or a prominent notice on za88.fyi at least 7 days before the changes take effect.

Your continued use of the za88 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting support.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to the za88 Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7, 365 days a year
• Response language: English
• Response time: Acknowledgement within 48 hours; full response within 30 calendar days

When submitting a privacy request, please include your za88 registered username and a brief description of your request so we can locate your records and respond efficiently.