Privacy Policy — zd888 Online Casino

1. Introduction & Scope

zd888 operates as an internationally licensed online gaming platform serving registered Members, with a particular focus on delivering a tailored experience to players across Pakistan — including cities such as Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and Quetta. This Policy applies to all personal data processed by zd888 in connection with the operation of its website, mobile interface, gaming services, payment processing systems, customer support channels, and promotional activities.

This Policy should be read alongside the zd888 Terms & Conditions and Responsible Gaming Policy. Where these documents overlap or interact, this Policy governs matters specifically related to personal data and privacy. zd888 is the data controller in respect of personal data processed under this Policy, meaning zd888 determines the purposes and means by which your personal data is processed.

zd888 is committed to processing personal data lawfully, fairly, and transparently. We do not collect data that we do not need, and we do not retain data for longer than is necessary for the purposes described in this Policy.

2. Data We Collect

zd888 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data we collect and typical examples within each category.

zd888 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where specifically required by applicable anti-money laundering regulations or where you voluntarily provide such information in the context of a responsible gaming request (e.g., disclosing a gambling addiction in a self-exclusion application).

3. How We Collect Data

zd888 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly to zd888 when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our customer support team, participate in a promotion, or update your account profile. This is the primary source of Identity Data, Contact Data, and Financial Data.

3.2 Automated Collection

Data collected automatically when you access and use the zd888 platform, including Technical Data and Usage Data. This collection is facilitated through cookies, web beacons, server logs, and similar tracking technologies described further in Section 7 of this Policy. Automated collection begins from the moment you land on any zd888 page, whether or not you are logged in to your account.

3.3 Third-Party Sources

In limited circumstances, zd888 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit during account registration.
• Payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme operators) who share transaction confirmation data with zd888 to facilitate deposits and withdrawals.
• Fraud prevention and anti-money laundering screening services that cross-reference your identity against sanction lists and politically exposed person (PEP) registers.
• Analytics and attribution partners that help zd888 understand how Members discovered the platform (e.g., through organic search, referral links, or promotional campaigns).

Data received from third-party sources is handled under the same standards and safeguards as data collected directly from you.

4. Purposes & Legal Basis

zd888 processes personal data only where there is a lawful basis for doing so. The table below maps each primary processing purpose to the applicable legal basis.

5. Sharing Your Data

zd888 does not sell your personal data to third parties. We do not share your data for third-party marketing purposes without your explicit consent. However, in order to operate the platform and fulfil our legal obligations, zd888 shares personal data with the following categories of recipients:

5.1 Service Providers

zd888 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors (JazzCash, EasyPaisa, bank transfer partners, card scheme operators), KYC and identity verification providers, IT infrastructure and cloud hosting providers, customer support platform operators, and email communication service providers. All service providers are contractually required to process personal data only for the purposes specified by zd888 and to maintain appropriate security standards.

5.2 Game Providers

Certain technical and usage data is shared with the third-party game providers whose content is available on the zd888 platform (including slot providers, live dealer studios, and fishing game developers) to facilitate gameplay, resolve technical disputes, and maintain game integrity. Game providers do not receive financial data or identity documents.

5.3 Regulatory & Law Enforcement Authorities

zd888 may disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent strictly necessary to comply with the relevant legal obligation.

5.4 Fraud Prevention & AML Partners

zd888 shares identity and transaction data with fraud prevention networks and anti-money laundering screening services as part of its legal obligations to prevent financial crime. Information shared in this context may be retained by those services and used to assess risk in connection with other organisations' services where permitted by law.

5.5 Business Transfers

In the event that zd888 undergoes a merger, acquisition, restructuring, or sale of some or all of its assets, personal data held by zd888 may be transferred to the acquiring entity as part of that transaction. zd888 will notify affected Members of any such transfer and the privacy terms that will apply following the transfer.

6. International Transfers

As an internationally operated platform serving Pakistani players, zd888 may transfer personal data to countries outside your country of residence. Where personal data is transferred internationally, zd888 ensures that appropriate safeguards are in place to protect the data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection by relevant regulatory standards.
• The use of standard contractual clauses or equivalent binding transfer mechanisms between zd888 and the recipient organisation.
• Transfers to recipients who are certified under recognised privacy frameworks or who are subject to binding corporate rules that meet applicable data protection standards.

By using the zd888 platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. zd888 takes all reasonable steps to ensure that any international transfer is conducted lawfully and that your data receives the same level of protection as it would under this Policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and gather information about how you use the site. zd888 uses both first-party cookies (set directly by zd888) and third-party cookies (set by our service providers).

7.2 Types of Cookies Used by zd888

7.3 Managing Cookies

You may manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of the zd888 platform. Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly. For analytics and marketing cookies, your consent is obtained upon your first visit to the platform and can be revised at any time.

8. Data Retention

zd888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of the membership and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory audit requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of last interaction, or longer where a complaint or dispute remains unresolved.
• Technical and Usage Data: Typically retained for up to twenty-four (24) months in identifiable form, after which it may be anonymised and retained indefinitely for statistical purposes.
• Marketing Preference Records: Retained for the duration of the membership and for one (1) year following account closure, to demonstrate compliance with consent obligations.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by permanently self-excluded Members and to comply with responsible gaming obligations.

Where personal data is no longer required, zd888 securely destroys or anonymises it in accordance with our data disposal procedures.

9. Security Measures

zd888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end TLS encryption for all data transmitted between your device and the zd888 platform.
• Encryption of sensitive data at rest, including financial data and identity document copies.
• Role-based access controls ensuring that staff members can only access personal data necessary for their specific job function.
• Multi-factor authentication requirements for all internal systems that hold personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Formal data breach response procedures with defined notification timelines for affected Members and regulatory authorities where applicable.
• Staff training on data protection obligations and information security best practices, conducted on a regular and recurring basis.

10. Your Rights

As a data subject whose personal data is processed by zd888, you hold the following rights. You may exercise any of these rights by contacting the zd888 support team via live chat or email. zd888 will respond to all valid requests within thirty (30) days, extendable by a further sixty (60) days in cases of complexity or high volume, with notice provided of any extension.

11. Children & Minors

The zd888 platform is strictly for adults aged 21 years and above. zd888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and zd888 conducts ongoing age verification checks as part of its KYC programme.

If zd888 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated account will be suspended, and any funds held in that account will be subject to a regulatory review before any return is processed. Parents or guardians who believe their minor child has registered on the zd888 platform should contact the support team immediately.

zd888 also encourages parents and guardians to make use of third-party parental control and internet filtering tools to prevent minors from accessing online gambling platforms.

12. Third-Party Services

The zd888 platform integrates with a number of third-party services necessary to deliver its full range of gaming and payment features. While zd888 carefully selects and vets these providers, each third-party service operates under its own privacy policy and is an independent data controller in respect of data it collects through its own systems.

Third-party services integrated into zd888 include payment gateways (JazzCash, EasyPaisa, bank partners), game content providers, live dealer studio operators, customer support platform software, and analytics services. zd888 is not responsible for the privacy practices of these third parties beyond the scope of the data processing agreements in place between zd888 and each provider.

zd888 does not embed links to unaffiliated external websites. All links on the zd888 platform direct to internal pages within the zd888 domain.

13. Policy Amendments

zd888 reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. Where material changes are made to this Policy — meaning changes that significantly affect your rights or the ways in which your data is processed — zd888 will notify you via the email address registered to your account at least seven (7) days before the changes take effect.

Non-material amendments, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without advance notice. The "Effective Date" displayed at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the zd888 platform following the effective date of any revision constitutes your acknowledgment of the updated Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how zd888 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the zd888 platform — for immediate assistance with any privacy-related query.
• Email: [email protected] — for formal data subject requests, complaints, and written correspondence regarding your personal data.

zd888 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 48 hours and aim to provide a substantive response within 30 days. If you are not satisfied with zd888's response to your complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your situation.