Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how zu888 ("Platform", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to users ("User", "you", "your") of the website https://zu888.cam and all associated services.

Privacy is a genuine commitment at zu888, not a regulatory formality. We collect your data to operate the Platform effectively, to comply with legal and compliance obligations, and to provide you with a secure, functional gaming environment. We do not collect data beyond what is reasonably necessary for these purposes.

By accessing the zu888 Platform, creating an Account, or making a deposit, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please do not register or continue using the Platform.

Note for Pakistani Users: Pakistani data protection law is evolving. The Personal Data Protection Bill and related instruments may apply to your data processing rights in Pakistan. This Policy is written to align with internationally recognised data protection principles. It does not constitute legal advice. If you have specific concerns about data protection rights applicable in Pakistan, please seek independent legal guidance.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial details and device identifiers.
"Processing"	Any operation performed on personal data, including collection, storage, use, transmission, disclosure or deletion.
"Data Controller"	The entity that determines the purposes and means of processing personal data — in this case, zu888.
"Data Processor"	A third party that processes personal data on behalf of the Data Controller under a contractual arrangement (e.g., KYC verification providers, payment processors).
"KYC"	Know Your Customer — the identity verification process required by the Platform and applicable compliance obligations.
"Cookies"	Small text files placed on your device by the Platform that store session data, preferences and usage analytics.
"Sensitive Data"	A sub-category of personal data requiring heightened protection, including national identity numbers and financial account information.

3. Data Controller

zu888 acts as the Data Controller for personal data collected through the Platform at https://zu888.cam. As Data Controller, zu888 determines the purposes for which your personal data is processed and the means by which such processing is carried out.

Where zu888 engages third-party service providers (payment processors, KYC verification services, analytics providers, game studios) to process data on its behalf, those providers act as Data Processors under contractual data processing agreements that require them to handle your data in accordance with applicable data protection standards.

For all data-related enquiries, requests and complaints, contact the zu888 Data Protection contact at: [email protected] (plain text — not a clickable link).

4. Categories of Data We Collect

zu888 collects the following categories of personal data in the course of providing the Platform and fulfilling compliance obligations:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, CNIC/passport number	Account registration, age verification, KYC compliance
Contact Data	Email address, phone number, residential address (e.g., Karachi, Lahore, Islamabad)	Account management, support communications, withdrawal notifications
Financial Data	Deposit amounts, withdrawal requests, transaction history, payment method references	Payment processing, fraud detection, financial compliance obligations
KYC Documentation	Copies of government-issued ID, proof of address, source of funds documentation	Regulatory compliance, anti-money laundering (AML) obligations
Gaming Activity Data	Game session logs, bet history, wagering patterns, win/loss records	Account management, responsible gambling monitoring, dispute resolution
Technical Data	IP address, device type, browser version, operating system, session timestamps	Platform security, fraud prevention, technical troubleshooting
Preference Data	Language settings, notification preferences, responsible gambling limit selections	Personalisation of platform experience, responsible gambling tool delivery
Communications Data	Support chat transcripts, email correspondence, complaint records	Support delivery, dispute resolution, quality assurance

zu888 does not intentionally collect special category data (health, religion, political views, biometric data) beyond what may incidentally appear in KYC documentation. Where such data appears in submitted documents, it is processed only for the purpose of identity verification and is handled with heightened security controls.

5. How We Collect Personal Data

Personal data is collected through the following channels:

5.1 — Direct Collection

You provide data directly when you:

Complete the Account registration form
Submit KYC verification documents
Make a deposit or withdrawal request
Contact the support team via live chat or email
Set responsible gambling limits or request self-exclusion
Respond to surveys or promotional communications (where applicable)

5.2 — Automated Collection

Certain data is collected automatically when you use the Platform:

Technical device and connection data collected via server logs and platform analytics
Session data collected via cookies and similar tracking technologies (see Section 10)
Gaming activity data generated as a by-product of game sessions, bets placed and account interactions

5.3 — Third-Party Sources

In limited circumstances, we may receive data from third parties including:

KYC and identity verification service providers who confirm the authenticity of submitted documents
Payment processors who confirm transaction status and payment method ownership
Fraud detection and AML screening services that provide risk indicators

6. Legal Basis for Processing

zu888 processes personal data on the following legal bases, depending on the category of data and the purpose of processing:

Contractual Necessity: Processing required to create and manage your Account, process transactions and deliver the services you have requested — without which zu888 cannot provide the Platform.
Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations under the operator's license jurisdiction and applicable anti-fraud requirements.
Legitimate Interests: Processing carried out for the legitimate interests of zu888 and its users, including Platform security, fraud prevention, responsible gambling monitoring and operational analytics — where such interests are not overridden by your rights.
Consent: Where you have provided explicit consent for a specific processing purpose (e.g., optional marketing communications), consent serves as the legal basis. Consent may be withdrawn at any time without affecting prior lawful processing.

7. Purposes of Data Processing

zu888 uses personal data for the following defined purposes:

Account Creation and Management: Registering and maintaining your Account, verifying your identity and age, and managing Account preferences.
Transaction Processing: Facilitating deposits and withdrawals, reconciling financial records and communicating transaction status.
KYC and Compliance: Verifying identity, screening against applicable sanctions and PEP (politically exposed person) lists, and meeting anti-money laundering obligations.
Responsible Gambling: Monitoring gaming activity patterns for indicators of problem gambling, enforcing self-exclusion and account limits, and delivering responsible gambling tool functionality.
Platform Security and Fraud Prevention: Detecting and preventing unauthorised access, account fraud, bonus abuse, collusion and money laundering activity.
Customer Support: Responding to queries, managing disputes and delivering the support services you request.
Platform Improvement: Using aggregated, anonymised analytics data to improve Platform performance, user experience and content quality.
Legal and Regulatory Compliance: Retaining records as required by applicable law; responding to lawful requests from regulatory or law enforcement authorities.
Communications: Sending transactional communications (account alerts, deposit confirmations, withdrawal notifications). Where you have consented, sending promotional communications about bonuses or platform updates — consent may be withdrawn at any time.

8. Data Sharing & Third-Party Disclosure

zu888 does not sell or commercially transfer personal data to third parties. We share personal data only in the following circumstances:

8.1 — Service Providers (Data Processors)

We engage third-party service providers to perform functions on our behalf. These providers are contractually bound to process personal data only for specified purposes and in accordance with data protection standards. Categories of third-party processors include:

Identity verification and KYC service providers
Payment processing and fraud detection services
Cloud hosting and data storage infrastructure providers
Analytics and platform performance monitoring tools
Customer support platform providers
Game content providers (limited session and account data only)

8.2 — Legal and Regulatory Disclosure

We may disclose personal data to competent authorities where required by law, court order, regulatory instruction or legitimate law enforcement request. We will only disclose the minimum data necessary to comply with such requirements.

8.3 — Business Transfers

In the event of a merger, acquisition, sale of assets or restructuring, personal data may be transferred to a successor entity. Where such a transfer occurs, users will be notified via email or in-platform communication prior to their data being transferred to and subject to a different privacy policy.

Important: zu888 does not share personal data with advertising networks, data brokers, social media platforms or any third party for commercial targeting purposes unless you have explicitly consented to such use. Consent for marketing communications is optional and separate from Platform access.

9. Payment Data & Pakistani Payment References

When you make a deposit or withdrawal, financial transaction data is processed by zu888 and by any applicable third-party payment processor engaged to facilitate the transaction. The following applies to all payment data processing:

Payment card details (where applicable) are processed directly by PCI-DSS compliant payment processors. zu888 does not store full card numbers on its own systems.
Transaction records (amounts, timestamps, payment method categories, status) are retained for financial compliance and dispute resolution purposes.
Proof of payment method ownership may be requested as part of KYC verification before withdrawals are processed.

9.1 — Pakistani Payment Method References

zu888 references familiar Pakistani payment channels — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as contextual payment categories only. These references do not imply that these providers endorse gambling, support this operator, or have any data-sharing relationship with zu888. Actual payment method availability is determined by the Platform's live payment options. None of these named providers are data processors for zu888 unless a specific payment integration is live and disclosed.

Payment transaction data involving deposits and withdrawals is subject to applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations in the operator's license jurisdiction. zu888 may be required by law to report suspicious financial activity to relevant authorities without notifying the account holder.

10. Cookies & Tracking Technologies

zu888 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly, remember your session, and provide usage analytics.

10.1 — Types of Cookies Used

Strictly Necessary Cookies: Required for core Platform functionality — login sessions, security tokens, load balancing. These cannot be disabled without impairing Platform use.
Functional Cookies: Remember your preferences such as language settings, responsible gambling limit choices and display settings.
Analytical Cookies: Aggregate, anonymised data about how users navigate the Platform, which pages are visited and where technical errors occur. Used to improve Platform performance.
Security Cookies: Used for fraud detection, bot identification and session integrity verification.

10.2 — Cookie Management

For cookies that are not strictly necessary, you may manage or withdraw consent through your browser settings. Note that disabling certain cookies may impair Platform functionality. You may also clear cookies from your device at any time through your browser's privacy settings. Detailed cookie management instructions are browser-specific.

11. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. The following general retention principles apply:

Active Account Data: Retained throughout the duration of your Account relationship with zu888.
KYC and Identity Documents: Retained for the period required by applicable AML and regulatory obligations — typically a minimum of five years following Account closure, or longer where required by law.
Financial Transaction Records: Retained for the period required by applicable financial regulations — typically five to seven years, or as required by the operator's license jurisdiction.
Support Communications: Retained for a period reasonably necessary for dispute resolution and quality assurance purposes, after which they are deleted or anonymised.
Marketing Consent Records: Retained for the duration of the consent and for a defined period thereafter as evidence of compliance with consent requirements.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

12. Data Security

zu888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include:

Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform
Encryption of sensitive data at rest within our infrastructure
Role-based access controls limiting internal data access to authorised personnel with a legitimate need
Regular security assessments of Platform infrastructure and third-party integrations
Incident response procedures for detecting and addressing potential data breaches
Two-factor authentication options available for Account login

Data Breach Notification: In the event of a personal data breach that is likely to result in a significant risk to your rights and freedoms, zu888 will notify affected users without undue delay in accordance with applicable obligations. Notification will be provided via the email address registered to your Account. You are encouraged to keep your registered email address current.

No system is completely immune from security incidents. You are responsible for maintaining the security of your own Account credentials and for notifying support immediately if you suspect unauthorised access.

13. Your Data Rights

Subject to applicable law and verification of your identity, you have the following rights regarding your personal data held by zu888:

👁️

Right of Access

Request a copy of the personal data zu888 holds about you and information about how it is being used.

✏️

Right to Rectification

Request correction of inaccurate or incomplete personal data held in your Account.

🗑️

Right to Erasure

Request deletion of your personal data where there is no longer a legal obligation or legitimate reason to retain it. Note: regulatory retention obligations may limit erasure requests.

⏸️

Right to Restrict Processing

Request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of your data is under review.

📦

Right to Portability

Where processing is based on consent or contract and carried out by automated means, request your data in a commonly used, machine-readable format.

🚫

Right to Object

Object to processing based on legitimate interests or direct marketing. Marketing communications may be opted out of at any time via the unsubscribe mechanism in the communication.

🤖

Rights re: Automated Decisions

Where significant decisions are made solely by automated means (e.g., automated fraud detection resulting in account restriction), you may request human review.

↩️

Right to Withdraw Consent

Where processing is based on consent (e.g., marketing), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior consent-based processing.

To exercise any of these rights, contact [email protected] (plain text — not a clickable link) with a clear description of your request and sufficient information for us to verify your identity. We will respond within a reasonable timeframe. We reserve the right to decline requests that are manifestly unfounded, excessive or that conflict with applicable legal retention obligations.

14. Minors & Age Policy

The zu888 Platform is strictly for adults aged 18 and above, or the higher minimum age required by the operator or applicable license jurisdiction. zu888 does not knowingly collect personal data from persons under this age threshold.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an Account on zu888 or submitted personal data to the Platform, please contact us immediately at [email protected]. Upon confirmation, we will take prompt steps to close the Account and delete any associated personal data, subject to applicable legal retention requirements.

Age verification is a mandatory step in the zu888 KYC process. Providing false age information constitutes a serious breach of the Terms & Conditions. In Pakistan, being 18 years of age does not by itself make participation in online gambling lawful — applicable local law must be consulted. This is not legal advice.

15. International Data Transfers

zu888 operates internationally and may use service providers located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in and processed in countries other than Pakistan.

Where personal data is transferred internationally, zu888 ensures that appropriate safeguards are in place, which may include:

Contractual clauses requiring data processors to maintain data protection standards equivalent to those described in this Policy
Transfers to jurisdictions that maintain adequate data protection frameworks as assessed by applicable regulatory standards
Use of encryption and access controls that protect data regardless of the physical location of the processing infrastructure

By using the zu888 Platform, you acknowledge that your data may be processed internationally as described. If you have concerns about specific international transfers, contact [email protected].

16. Pakistan-Specific Privacy Context

Pakistani users are advised of the following considerations specific to the Pakistan market:

Pakistan's data protection legislative framework is developing. The Personal Data Protection Bill, if enacted, may introduce specific rights and obligations applicable to Pakistani residents. zu888 will update this Policy in response to applicable legislative changes.
The Pakistan Telecommunication Authority (PTA) may exercise authority over data-related matters affecting Pakistani internet users. zu888 does not represent that its data processing is regulated or approved by the PTA.
Pakistani users who choose to use familiar payment methods such as Easypaisa, JazzCash, Raast, or banking services with HBL, UBL, Meezan Bank or Bank Alfalah should be aware that those providers operate under their own privacy policies and data protection frameworks. Any data shared with those providers in the course of a transaction is governed by their respective policies. None of these providers endorse gambling or have any special data-sharing relationship with zu888 beyond the scope of individual transactions, where applicable.
This Policy is not legal advice. Pakistani users with specific concerns about how their personal data may be affected by Pakistani law should consult an independent legal adviser.

17. Changes to This Privacy Policy

zu888 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — changes that significantly affect how your personal data is collected, used or shared — we will provide advance notice via:

Email to the address registered to your Account, or
A prominent notification displayed within the Platform upon login, or
Both of the above, where the significance of the change warrants it.

Minor administrative updates (such as contact information changes or clarifications that do not alter our data practices) may be made without formal notification, though the "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you should cease using the Platform and close your Account.

18. Contact Us — Data & Privacy Enquiries

For all data protection and privacy-related enquiries, requests to exercise your data rights, or to raise a privacy concern, please contact the zu888 support and data team:

Privacy Enquiries:
[email protected]
Email displayed as plain text only — not a clickable link. Copy and paste into your email client.

When contacting us regarding a data rights request, please include your Account username, the specific right you wish to exercise, and any relevant details that will help us identify and verify your identity. We will confirm receipt of your request and provide a response within a reasonable timeframe.

If you are not satisfied with our response to a data privacy concern, you may have the right to raise a complaint with a competent data protection supervisory authority in the applicable jurisdiction. zu888 will cooperate with any such process.