z288 Privacy Policy

1.1 Identity of the Controller

z288 ("z288", "we", "us", or "our") is the data controller responsible for personal data collected through the z288 platform at z288.org. z288 operates under applicable international gaming regulations and is committed to handling personal data in accordance with recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

1.2 Scope of This Policy

This Privacy Policy applies to all personal data collected from players who register an account on z288, visitors who browse z288.org without registering, and individuals who contact z288 support. It covers data collected through the website, in-platform activity, and communications via email or live chat. Third-party game providers and payment processors operate under their own separate privacy frameworks; z288 is not responsible for their data practices.

2.1 Registration Data

When you create a z288 account, we collect: full legal name, date of birth, email address, username, and the country of residence you declare at registration. This data is required to open and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) requirements and to verify your age, z288 may collect: copies of government-issued identification documents (national ID, passport, or driver's licence), proof of address documentation, and proof of payment method ownership. This data is processed exclusively for regulatory compliance and fraud prevention purposes.

2.3 Financial Transaction Data

z288 records deposit and withdrawal transactions including the amount, payment method, transaction reference, and timestamp. For JazzCash and Easypaisa transactions, wallet numbers are recorded. For bank transfers via HBL, UBL, Meezan Bank, or Bank Alfalah, account details sufficient to process the transaction are recorded. Full payment instrument credentials (e.g. complete card numbers) are never stored directly by z288 – these are processed by our certified payment partners.

2.4 Gaming Activity Data

z288 records all bets placed, games played, session durations, win/loss outcomes, and responsible gaming tool settings. This data is used for account management, dispute resolution, fraud detection, and regulatory reporting obligations.

2.5 Technical and Device Data

When you access z288, we automatically collect: IP address, browser type and version, operating system, device type, referring URL, pages visited, and session duration. This data is used for platform security, fraud detection, and performance optimisation. We do not use this data to build commercial advertising profiles.

2.6 Communications Data

When you contact z288 support via live chat or email, the content of those communications is stored for quality assurance, dispute resolution, and regulatory audit purposes. Support communications are retained for a minimum of three years.

3.1 Purposes of Processing

z288 processes your personal data for the following purposes:

• Account creation, management, and authentication;
• Processing deposits and withdrawals via JazzCash, Easypaisa, and bank transfers;
• KYC identity verification and age confirmation as required by applicable regulations;
• Anti-money laundering (AML) monitoring and fraud prevention;
• Responsible gaming monitoring, including application of deposit limits and self-exclusion;
• Resolution of disputes and investigation of complaints;
• Regulatory reporting to applicable licensing and compliance authorities;
• Platform security, including detection of unauthorised access attempts;
• Service communications including account notifications, security alerts, and support responses;
• Technical platform maintenance and performance analysis.

3.2 Marketing Communications

z288 may send promotional communications to registered players who have not opted out of marketing contact. You can withdraw consent for marketing communications at any time by updating your account notification preferences or by contacting z288 support. Withdrawal of marketing consent does not affect the lawfulness of prior processing.

4.1 Contractual Necessity

The majority of data processing carried out by z288 is necessary for the performance of the contract between z288 and the player – specifically the provision of gaming, betting, and payment services. Without this processing, z288 cannot operate a player account or process transactions.

4.2 Legal Obligation

Certain processing – particularly KYC identity verification, AML transaction monitoring, and regulatory reporting – is carried out because z288 is legally required to do so under applicable international gaming regulations. Players cannot opt out of this processing without closing their account.

4.3 Legitimate Interests

z288 processes technical and device data, fraud detection signals, and security monitoring data on the basis of its legitimate interest in maintaining platform integrity and protecting players and the business from fraudulent or malicious activity.

4.4 Consent

Where z288 relies on consent as a legal basis – for example, for optional marketing communications or non-essential cookies – players may withdraw consent at any time without affecting the legality of prior processing.

5.1 Third-Party Service Providers

z288 shares personal data with the following categories of third-party processors, strictly on a need-to-know basis and subject to data processing agreements: payment processors (including JazzCash, Easypaisa, and banking partners); game software providers for game delivery and dispute resolution; KYC and identity verification service providers; fraud detection and AML monitoring providers; and cloud infrastructure and hosting providers. All third-party processors are contractually required to protect data to standards consistent with this policy.

5.2 Regulatory Disclosure

z288 may disclose personal data to applicable regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory mandate. Such disclosures are made only to the extent required and are not subject to player consent or notification where legally prohibited.

5.3 No Commercial Sale of Data

z288 does not sell, rent, lease, or commercially transfer personal data to any third party for their independent marketing or commercial use. Player data is not shared with advertising networks, data brokers, or social media platforms for targeting purposes.

6.1 Retention Periods

z288 retains personal data for as long as an account is active and for a minimum period of five years following account closure, in compliance with applicable AML and gaming regulatory requirements. KYC documentation is retained for a minimum of five years from the date of the last transaction. Support communications are retained for a minimum of three years. Technical log data is retained for a minimum of 12 months.

6.2 Post-Retention Deletion

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7.1 Technical Measures

z288 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting internal access to personal data on a role-based, need-to-know basis, regular security assessments and vulnerability testing, and two-factor authentication support for player accounts.

7.2 Data Breach Response

In the event of a personal data breach that presents a risk to player rights and freedoms, z288 will notify affected players and, where required, applicable regulatory authorities, within the timeframes prescribed by applicable data protection law. Players are encouraged to maintain secure, unique passwords for their z288 accounts and to enable two-factor authentication to reduce the risk of unauthorised access.

8.1 Player Rights

Subject to applicable data protection law and regulatory obligations, z288 players have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data z288 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to z288's regulatory retention obligations;
• Right to restriction: You may request that z288 restrict processing of your data in certain circumstances;
• Right to data portability: Where technically feasible and legally applicable, you may request a machine-readable copy of data you have provided;
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of the above rights, contact z288 support. Requests will be acknowledged within 72 hours and responded to within 30 days. Some requests may be declined where z288 is legally obligated to retain or continue processing the relevant data.

9.1 Cookie Usage

z288 uses cookies and similar technologies to maintain player sessions, detect fraud, and improve platform performance. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without rendering the z288 platform inoperable.
• Performance cookies: Used to collect anonymised data about how players use z288, including pages visited and session duration, for the purpose of improving the platform.
• Functional cookies: Used to remember player preferences such as language settings and responsible gaming tool configurations.

z288 does not use advertising-network cookies or cross-site behavioural tracking cookies. You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to z288.

10.1 Under-18 Policy

z288 does not knowingly collect, process, or retain personal data belonging to individuals under 18 years of age. z288 is an adult platform and registration is restricted to persons aged 18 or over. Where z288 identifies that personal data has been provided by or on behalf of a person under 18, that data will be deleted immediately and the associated account will be permanently closed. Any balances or winnings in such accounts will be forfeited. If you believe a minor has accessed z288 using your account details, contact support immediately.

11.1 Right to Amend

z288 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Material changes will be communicated to registered players via the email address associated with their z288 account and via a notice on the platform. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of z288 following notification of changes constitutes acceptance of the revised Privacy Policy.

12.1 Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or z288's handling of your personal data, contact the z288 support team. Support is available 24/7 via live chat on the z288 platform. Email enquiries regarding data protection should be directed to the support email address listed in the footer of this page. z288 will acknowledge data-related enquiries within 72 hours and provide a substantive response within 30 days.