ℹ️ Your Privacy Matters: This Privacy Policy explains how zp888 collects, uses, stores and protects your personal data when you use our Platform. Please read it carefully alongside our Terms & Conditions. By registering an account or using the Platform, you confirm that you have read and understood this Policy.
This Privacy Policy ("Policy") sets out how zp888, operated by the Operator (as defined in Section 2), collects, processes, uses, discloses and protects personal data belonging to users ("you") of the zp888 online gaming and sports betting platform accessible at zp888.cam and any associated services (the "Platform").
The Operator is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection legislation. We collect only the data necessary to provide and improve the Platform's services, fulfil our legal and regulatory obligations, and deliver a safe, fair gaming environment for all users including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar as well as international users.
This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gambling Policy, both of which are incorporated by reference into this Policy.
Pakistan Note: Pakistan's Personal Data Protection Act (PDPA) and related regulations govern the processing of personal data of individuals in Pakistan. Where this Policy refers to applicable data protection law, that includes relevant Pakistani legislation as well as the data protection laws of the jurisdiction in which the Operator is incorporated or licensed. This Policy is not legal advice. If you have questions about your rights under Pakistani law, you are encouraged to seek independent legal advice.
In this Policy, the following terms carry the meanings set out below:
The Operator collects the following categories of Personal Data in connection with your use of the Platform:
| Category | Examples of Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number (for Pakistan users), passport number, photograph | Yes — for KYC |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Karachi, Lahore, Islamabad) | Yes — for account |
| Account Data | Username, hashed password, account preferences, notification settings, responsible gambling limit settings | Yes |
| Financial Data | Deposit and withdrawal amounts, transaction IDs, payment method type (e.g., bank transfer, mobile wallet reference — not full account credentials), currency denomination (PKR) | Yes — for transactions |
| KYC Documents | Scanned copies or photographs of CNIC, passport, proof of address, proof of payment method ownership | Yes — before withdrawal |
| Gaming & Betting Data | Wager amounts, game types played, betting history, win/loss records, session durations, responsible gambling limit activity | Yes — automatically generated |
| Technical Data | IP address, browser type and version, device type and OS, screen resolution, time zone, referral URL | Yes — automatically generated |
| Communications Data | Content of support tickets, live chat transcripts, email correspondence with the Operator | Where applicable |
| Marketing Preferences | Opt-in / opt-out status for promotional communications, preferred contact channel | Optional |
We do not collect sensitive personal data (such as health data, religious beliefs or biometric data) except where strictly required by applicable law for specific compliance purposes, in which case we will obtain your explicit consent.
Personal Data is collected through the following channels:
The Operator processes your Personal Data for the following purposes:
The Operator does not use automated decision-making that produces solely automated legal or similarly significant effects in relation to your Account, except where required by law or where you have been notified of and consented to such processing.
The Operator relies on the following legal bases for processing your Personal Data:
The Operator does not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only to the extent necessary for the stated purpose:
All third-party Data Processors are required to process Personal Data only for the specified purpose, under written instruction from the Operator, and in compliance with applicable data protection law.
The Operator and some of its third-party service providers may be located in, or process data in, countries outside Pakistan or the jurisdiction in which you reside. Where Personal Data is transferred internationally, the Operator will ensure that adequate safeguards are in place, which may include:
You may request information about the specific safeguards applied to international transfers of your Personal Data by contacting the support team using the details in Section 16.
The Operator retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years following closure | Legal obligation / AML compliance |
| KYC Documents | 5 years from date of document submission or account closure (whichever is later) | Legal obligation |
| Financial Transaction Records | 5–7 years from transaction date | Legal obligation / audit requirements |
| Gaming & Betting History | Duration of account plus 3 years | Legitimate interest / legal obligation |
| Support Interaction Records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Preferences | Until withdrawal of consent or account closure | Consent |
| Technical / Log Data | Up to 12 months | Legitimate interest / security |
Following the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be attributed to an identified individual.
The Platform uses cookies and similar tracking technologies (collectively "Cookies") to provide core Platform functionality, analyse usage, personalise your experience and — where you have consented — deliver relevant promotional content. A summary of the Cookie categories used is set out below:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Authentication, session management, security, account login persistence, responsible gambling tool operation | No — strictly necessary | |
| Remembering your language preference, currency display (PKR), notification settings and game interface preferences | No — where strictly necessary; Yes — where optional | |
| Measuring page traffic, identifying performance bottlenecks, understanding navigation patterns across the Platform | Yes | |
| Delivering personalised promotional content based on your Platform activity and preferences (only where you have opted in to marketing communications) | Yes |
You may manage your Cookie preferences through the Cookie consent banner displayed when you first access the Platform, or through your browser settings. Please note that disabling Essential Cookies will impair or prevent your ability to use core Platform features including account login and bet placement.
Subject to applicable data protection law and any lawful restrictions (such as legal retention obligations or ongoing investigations), you have the following rights in relation to your Personal Data:
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your Account or our records.
Request deletion of your Personal Data where there is no lawful basis for continued processing (subject to retention obligations).
Request that we restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
Receive your Personal Data in a structured, commonly used and machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including for direct marketing purposes. You may opt out of marketing at any time.
Withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Request human review of any automated decision that significantly affects you, where applicable.
To exercise any of these rights, please contact the Operator using the details in Section 16. The Operator will respond to verified requests within the timeframe required by applicable law (generally within 30 calendar days, extendable in complex cases). We may request proof of identity before processing a rights request to prevent unauthorised disclosure.
The Platform is strictly for adults only. Persons under 18 years of age — or the higher minimum age required by the Operator's license jurisdiction — are prohibited from using the Platform. The Operator does not knowingly collect Personal Data from minors.
If we become aware that Personal Data has been collected from a person under the applicable minimum age without verified parental or guardian consent where required, we will take immediate steps to delete such data and close the associated Account. If you believe that a minor has provided Personal Data to the Platform, please contact us immediately using the details in Section 16.
Parental Guidance: Parents and guardians are encouraged to use parental control software to restrict access to gambling websites. The Operator deploys age-verification procedures during registration and KYC to help prevent underage access, but these measures are not a substitute for parental oversight.
The Operator implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:
While the Operator takes all reasonable precautions, no data transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your Account credentials. Do not share your password with any third party. If you suspect unauthorised access to your Account, contact support immediately.
The Platform may contain references to or integrations with third-party services, including game content providers and payment processing interfaces. These third-party services have their own privacy policies and terms of use which are separate from and independent of this Policy. The Operator is not responsible for the privacy practices of third-party services.
Payment providers referenced on the Platform — including but not limited to services associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — operate independently and are subject to their own privacy policies. References to these providers are for contextual familiarity only and do not imply that the Operator has access to your accounts, credentials or transaction history held by those providers beyond what is necessary to confirm a deposit or withdrawal.
The Operator reserves the right to amend this Policy at any time in response to changes in applicable data protection law, regulatory guidance, operational practices or Platform functionality. When material changes are made, the Operator will provide notice through the Platform (such as a login notification or homepage banner) at least 7 days before the revised Policy takes effect, except where immediate changes are required by law or for security reasons.
The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and request Account closure.
For all data protection enquiries, rights requests or privacy complaints, please contact the zp888 data team through the following channels:
If you are not satisfied with the Operator's response to a data complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to you. For users in Pakistan, this may include relevant authorities under the Personal Data Protection Act framework as it applies at the time of your complaint.
Before exercising formal complaint rights, we encourage you to raise the matter directly with our support team first. Most data concerns are resolved quickly at this stage without the need for escalation.
Six core commitments that underpin how we handle personal data for every player on the Platform, regardless of whether you are in Karachi or anywhere else in Pakistan.
All data transmitted between your browser or app and our servers is protected by TLS/SSL encryption. Sensitive stored data — including KYC documents — is encrypted at rest using industry-standard protocols.
We collect only the Personal Data genuinely necessary to operate your Account, process transactions and comply with legal obligations. We do not collect data speculatively or share it with advertisers for profit.
Promotional communications are only sent to users who have actively opted in. You can withdraw consent at any time via your account settings or by contacting support — no lengthy unsubscribe processes.
Data is not kept indefinitely. Clear retention schedules govern how long each category of Personal Data is held, after which it is securely deleted or anonymised in accordance with this Policy.
Every third-party service provider that processes data on our behalf — from KYC providers to analytics platforms — is bound by a data processing agreement that restricts their use of your data to the specified purpose only.
Access, rectification, erasure, portability and objection rights are meaningful, not cosmetic. Submit a rights request to our support team and receive a substantive response within the applicable legal timeframe.
If any part of this Privacy Policy is unclear, or if you would like to exercise a data right, our support team is available around the clock. You can also explore the FAQ for quick answers about account data and security.