ZS288 Privacy Policy

This Privacy Policy ("Policy") is issued by ZS288 ("Platform", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your use of the website located at zs288.cam and any associated services, features or functionality ("Platform Services").

ZS288 operates as an English-language online gaming information and service platform primarily targeting users in Pakistan. We are committed to processing your personal data responsibly, transparently and in compliance with applicable data protection principles.

By registering an account or otherwise using the Platform Services, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with our Terms & Conditions, which form part of the broader legal framework governing your use of ZS288.

For the purposes of this Policy, the following definitions apply:

ZS288 acts as the Data Controller in respect of Personal Data collected and processed through the Platform Services. As Data Controller, ZS288 determines the purposes for which your Personal Data is processed and the means by which that processing is carried out.

Where ZS288 engages third-party service providers to perform processing activities on its behalf — such as identity verification vendors, payment processors or analytics providers — those providers act as Data Processors under binding contractual data processing agreements. ZS288 remains responsible for ensuring that such processors handle your Personal Data in a manner consistent with this Policy.

For all data protection enquiries or to exercise your rights as described in Section 12, please contact ZS288 through the channels set out in Section 16.

ZS288 collects Personal Data through various means in the course of providing Platform Services. The categories of data collected are set out below:

• Full legal name, date of birth and gender (as relevant to account eligibility).
• Email address, phone number and chosen username.
• Residential address, city and country (including Pakistani city references such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar).
• Account password (stored in hashed, non-recoverable form).

• Government-issued identity document — CNIC (Computerised National Identity Card), passport or equivalent.
• Proof of address documentation where required.
• Liveness check imagery or video to confirm the identity document belongs to you.
• Source of funds documentation where required for AML compliance.

• Deposit and withdrawal records including amounts in PKR, timestamps and payment method references.
• Payment method identifiers (e.g., partial account numbers, wallet references). Full card numbers or full account numbers are not stored by ZS288 directly — these are handled by regulated payment processors.
• Bonus and promotional credit activity records.

• IP address, device type, operating system and browser information.
• Session logs, page views, navigation paths and feature interaction data.
• Login timestamps, session durations and geolocation data derived from IP address.

• Support chat transcripts and email correspondence with ZS288 support.
• Feedback, complaints and dispute records.

ZS288 processes your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:

ZS288 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining and administering your ZS288 user account.
• Identity Verification: Conducting KYC checks to confirm your identity, age and eligibility to use the platform.
• Transaction Processing: Handling deposits, withdrawals and bonus crediting in PKR and other applicable currencies through available payment channels.
• Compliance & Regulatory Obligations: Fulfilling AML/CTF monitoring requirements, responding to regulatory enquiries and maintaining required records.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, unauthorised account access and platform abuse.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling behaviour and applying responsible gambling tools (deposit limits, self-exclusion etc.) where appropriate.
• Customer Support: Responding to enquiries, resolving disputes and managing complaints.
• Platform Improvement: Analysing usage patterns to improve platform features, performance and user experience.
• Communications: Sending transactional and account-related notifications. Marketing communications are sent only where you have given explicit consent or where a legitimate interest applies under applicable law.

ZS288 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, subject to appropriate contractual safeguards:

• Identity Verification Providers: Third-party KYC and AML compliance vendors who process identity documents and liveness checks on our behalf.
• Payment Processors: Regulated payment service providers facilitating deposit and withdrawal transactions. These may include processors connected to payment rails commonly used in Pakistan. Payment processors are subject to their own regulatory obligations and privacy policies.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, security and analytics vendors operating under data processing agreements with ZS288.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory request, ZS288 will disclose Personal Data to competent authorities. Such disclosures are made only to the extent required and in accordance with applicable legal process.
• Professional Advisors: Legal, accounting and audit professionals, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations.

In order to deliver Platform Services, your Personal Data may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction.

Where such transfers occur, ZS288 takes appropriate steps to ensure that your Personal Data remains protected to a standard consistent with this Policy. These steps may include:

• Entering into standard contractual clauses or equivalent data transfer agreements with recipient entities.
• Transferring data only to processors located in jurisdictions that maintain adequate data protection standards.
• Implementing additional technical and organisational safeguards where required.

If you have questions about specific cross-border transfers, please contact us through the channels in Section 16.

ZS288 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

Following the expiry of the applicable retention period, Personal Data is securely deleted, anonymised or pseudonymised in accordance with ZS288's internal data lifecycle procedures.

ZS288 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Measures in place include:

• SSL/TLS encryption for all data transmitted between your browser/device and the ZS288 platform.
• Encryption of sensitive data at rest, including identity document files and financial records.
• Role-based access controls ensuring that only authorised personnel can access Personal Data on a need-to-know basis.
• Multi-factor authentication for internal system access by ZS288 personnel.
• Regular vulnerability assessments and security monitoring of the platform infrastructure.
• Incident response procedures for timely detection and notification of data security breaches where required.

While ZS288 applies robust security practices, no online platform can guarantee absolute security. Users are responsible for keeping their account credentials confidential and for notifying ZS288 immediately if they suspect unauthorised access to their account.

ZS288 uses cookies and similar tracking technologies to support platform functionality, maintain session state, understand user behaviour and improve the overall experience. The types of cookies used are:

You can manage your cookie preferences through the platform's cookie consent tool. Disabling optional cookies may affect certain non-essential features but will not prevent access to core platform functions.

Subject to applicable data protection law and certain exceptions, you have the following rights in relation to your Personal Data held by ZS288:

To exercise any of the rights above, please contact ZS288 through the channels described in Section 16. We will respond to valid requests within a reasonable timeframe (typically 30 days). We may ask you to verify your identity before processing a rights request. ZS288 does not charge a fee for rights requests unless they are manifestly unfounded or excessive.

The ZS288 platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction. The platform is not directed at, and does not knowingly collect Personal Data from, individuals under the applicable minimum age.

ZS288 employs age verification controls as part of the registration and KYC process to enforce the age requirement. Any account found to belong to a minor will be immediately suspended, all associated data will be processed for deletion (subject to legal obligations), and no winnings or bonus funds will be honoured.

If you believe that a minor has provided Personal Data to ZS288 or created an account on the platform, please contact us immediately through the support channels in Section 16 so that we can take appropriate action.

ZS288 serves Pakistani users and acknowledges the specific regulatory and cultural context of the Pakistani market. The following points are relevant to Pakistani users with respect to their Personal Data:

• Payment Data: Where Pakistani payment rails such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah are used for transaction processing, limited transaction data (such as wallet references or partial account numbers) may be shared with those processors solely for the purpose of completing the transaction. These providers are referenced as contextual examples only and their mention does not imply endorsement or affiliation with gambling services.
• Identity Documents: CNIC details submitted for KYC purposes are processed by ZS288 and/or its authorised KYC partner under strict data protection controls. CNIC data is never used for purposes beyond identity verification, compliance and fraud prevention.
• Applicable Law: Pakistan has gambling restrictions, including the Prevention of Gambling Act, 1977. ZS288 does not claim regulatory approval from the Government of Pakistan, PTA, State Bank of Pakistan or any provincial authority. Users are responsible for understanding the laws applicable to them. This Policy does not constitute legal advice.
• Data Localisation: Pakistani data protection regulations continue to evolve. ZS288 monitors relevant regulatory developments and will update this Policy as required to reflect any applicable obligations.

ZS288 reserves the right to update this Privacy Policy at any time to reflect changes in our processing activities, applicable law or platform features. The effective date at the top of this document will be updated when material changes are made.

Where changes are material, ZS288 will endeavour to notify registered users through on-platform notifications or email communication where contact details are held. Continued use of the Platform Services following publication of a revised Policy constitutes acceptance of the updated terms.

You are encouraged to review this Policy periodically. If you disagree with any changes, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

For all privacy-related enquiries, data rights requests or concerns about how your Personal Data is handled by ZS288, please contact us through the following channels:

• Live Chat: Available 24/7 via the platform interface. Recommended for real-time support and general privacy enquiries.
• Email: Data protection requests and formal privacy enquiries may be directed to [email protected]. Please include "Privacy Request" in the subject line. Responses are typically provided within 1–2 business days; complex rights requests may take up to 30 days.

When submitting a rights request or privacy concern, please include your registered email address and a clear description of your request. ZS288 may ask you to verify your identity before processing the request to protect against unauthorised access to account information.