Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Data Sharing
- 7. Data Retention
- 8. International Transfers
- 9. Cookies & Tracking
- 10. Your Rights
- 11. Minors & Age Verification
- 12. Data Security
- 13. Third-Party Links
- 14. Policy Amendments
- 15. Contact Us
1 Introduction
This Privacy Policy applies to the z288 online gaming platform, accessible at https://z288.cam (the "Platform"), and governs the collection, processing, storage and disclosure of personal data relating to all users of the Platform, including registered players and visitors (collectively, "you" or "User").
z288 (the "Operator", "we", "us" or "our") is committed to protecting your personal data and handling it in a responsible, transparent and lawful manner. This Policy has been prepared with Pakistani users in mind — acknowledging that a significant portion of our users are located across cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and seeks to provide clarity on your data rights and our obligations.
This Privacy Policy should be read in conjunction with our Terms & Conditions. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, you should not use the Platform.
Pakistan data notice: Pakistan's data protection landscape is evolving. The Personal Data Protection Bill has been under consideration. Where applicable, z288 adopts data handling standards consistent with internationally recognised data protection principles. This Policy does not constitute legal advice regarding Pakistani data protection law.
2 Definitions
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | z288, as the entity that determines the purposes and means of processing personal data collected via the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of z288 under a contractual agreement, such as payment gateway providers or KYC verification services. |
| "KYC" | Know Your Customer — the identity and age verification process required before withdrawal processing and for compliance purposes. |
| "Cookies" | Small text files placed on your device by the Platform to store session state, preferences and analytics data. |
| "Special Category Data" | Sensitive personal data categories that attract heightened protection, such as health data, which may arise in responsible gambling contexts. |
3 Data We Collect
z288 collects personal data through various interactions with the Platform. The categories of data collected are set out below:
3.1 Registration & Account Data
- Full legal name
- Date of birth (for age verification)
- Email address
- Residential address (city, country — including Pakistani cities)
- Username and hashed password
- Phone number (where provided or required)
- Preferred currency (PKR for Pakistani users)
3.2 KYC & Identity Verification Data
- Government-issued photo ID — for Pakistani users, typically CNIC (Computerised National Identity Card) or passport
- Proof of address documentation (utility bills, bank statements)
- Selfie or liveness check images where required by the verification provider
- Payment method ownership documentation
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records (amounts in PKR, timestamps, method references)
- Payment method identifiers (e.g., masked mobile wallet references for Easypaisa or JazzCash, partial bank account details for HBL, UBL, Meezan Bank, Bank Alfalah — used for transaction matching only; not stored in full where not required)
- Bonus claims and wagering activity records
- Account balance history
Payment context note: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this Policy are for context and transaction identification purposes only. z288 does not claim any formal partnership with or endorsement from these institutions.
3.4 Gameplay & Betting Data
- Wager history, game session logs and bet results
- Sports betting selections (including cricket, PSL, ICC markets, football, UFC)
- Live casino session data
- Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)
3.5 Technical & Usage Data
- IP address and geolocation data (country and city level)
- Device type, operating system and browser information
- Pages visited, session duration, click paths and Platform navigation behaviour
- Login timestamps and access logs
3.6 Communications Data
- Content of support interactions (live chat transcripts, email correspondence)
- Complaint or dispute records
- Marketing preference settings (opt-in or opt-out status)
4 Legal Basis for Processing
z288 processes personal data on the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual necessity | Processing required to provide account services, process deposits and withdrawals, settle bets, and administer your account under our Terms & Conditions. |
| Legal obligation | KYC/AML compliance, age verification, fraud prevention, regulatory reporting and record-keeping obligations. |
| Legitimate interests | Platform security, fraud detection, abuse prevention, gameplay analytics to improve user experience, and responsible gambling monitoring. |
| Consent | Marketing communications, non-essential cookies, and certain data analytics where you have provided explicit opt-in consent. Consent may be withdrawn at any time. |
5 How We Use Your Data
Personal data collected by z288 is used for the following purposes:
5.1 Account & Service Delivery
- Creating, verifying and maintaining your player account
- Processing deposits and withdrawals through available payment channels
- Settling sports bets and casino game outcomes
- Administering bonuses, promotional offers and VIP programme benefits
- Providing customer support in English and Urdu
5.2 Compliance & Legal Obligations
- Performing identity and age verification (KYC) to confirm you are 18+ or the applicable minimum age
- Conducting AML screening and transaction monitoring
- Responding to legally mandated disclosure requests from competent authorities
- Maintaining records required by applicable licensing and regulatory frameworks
5.3 Security & Fraud Prevention
- Detecting and preventing fraudulent transactions, account takeovers and collusion
- Monitoring for multiple account creation and bonus abuse
- Geolocation-based access controls to restrict use from prohibited jurisdictions
5.4 Responsible Gambling
- Monitoring gameplay patterns for indicators of problem gambling behaviour
- Enforcing player-set deposit limits, session timers and loss limits
- Processing self-exclusion requests and maintaining exclusion records
- Communicating responsible gambling information where appropriate
5.5 Marketing (Consent-Based Only)
- Sending promotional communications about bonuses, events and offers — only where you have explicitly opted in
- Personalising Platform content based on your activity and preferences
- You may withdraw marketing consent at any time by contacting support or updating your account preferences
6 Data Sharing & Disclosure
z288 does not sell your personal data to third parties. We may share your data in the following circumstances:
6.1 Service Providers (Data Processors)
We engage third-party service providers who process data on our behalf under contractual data protection obligations. These include:
- Payment processors: To facilitate deposit and withdrawal transactions.
- KYC/identity verification providers: To perform identity, age and document checks.
- AML screening services: To screen transactions and users against watchlists.
- IT infrastructure and hosting providers: For Platform operation and data storage.
- Customer support platform providers: For live chat and ticketing systems.
- Analytics providers: For aggregated, anonymised usage analytics.
6.2 Legal Disclosures
z288 may disclose personal data to competent authorities, regulators or law enforcement agencies where required to do so by applicable law, court order, or in connection with the prevention or investigation of financial crime.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of the z288 business, user data may be transferred to the acquiring entity. Users will be notified of any such transfer through a notice on the Platform or via email where practicable.
What we do not do: z288 does not sell, rent, or trade your personal data to third-party marketers. We do not share your data with social media platforms for advertising purposes without your consent. We do not disclose your individual gambling records to parties unrelated to your account operations, compliance requirements or dispute resolution.
7 Data Retention
z288 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to legal and regulatory obligations that may require retention for defined periods.
| Data Category | Indicative Retention Period |
|---|---|
| Account registration data | Duration of account plus a minimum period after closure as required by applicable compliance obligations. |
| KYC documentation | Minimum of 5 years from account closure, or longer if required by applicable AML/regulatory frameworks. |
| Transaction records | Minimum of 5 years from the date of each transaction. |
| Gameplay and betting logs | Minimum of 3 years from the relevant gaming session. |
| Support communications | Up to 2 years from the date of last interaction, unless required for longer in connection with a dispute. |
| Marketing preferences | Until consent is withdrawn, then promptly removed from active marketing lists (suppression records may be retained). |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
8 International Data Transfers
z288 is an internationally operating platform. Your personal data may be transferred to, stored in, and processed in countries outside Pakistan, including the jurisdiction in which z288 holds its operating licence and the locations of our third-party service providers.
Where personal data is transferred internationally, z288 takes reasonable steps to ensure that appropriate safeguards are in place — such as contractual obligations on data processors — to protect your data to a standard consistent with internationally recognised data protection principles.
By using the Platform, you acknowledge that your data may be processed outside Pakistan. If you have questions about the safeguards applied to international transfers, you may contact us using the details in Section 15.
9 Cookies & Tracking Technologies
z288 uses cookies and similar tracking technologies on the Platform to maintain session state, remember your preferences, analyse usage patterns and, where you have consented, deliver relevant promotional content.
9.1 Types of Cookies Used
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for Platform operation — login session management, security tokens, load balancing. Cannot be disabled without breaking core Platform functionality. |
| Functional | Remember your preferences such as language settings, odds format selection and responsible gambling tool configurations. |
| Analytics | Collect aggregated, anonymised data on Platform usage — page views, session duration, navigation paths — to improve the user experience. |
| Marketing | Used only with your consent to deliver relevant promotional messages and measure the effectiveness of marketing communications. |
9.2 Managing Cookies
You can control non-essential cookies through your browser settings or, where applicable, through a cookie preference centre on the Platform. Disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without impacting your ability to use the Platform.
10 Your Rights
Subject to applicable law and the legal bases on which we process your data, you have the following rights in relation to your personal data held by z288:
Right of Access
Request a copy of the personal data z288 holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account or our records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to legal retention obligations.
Right to Restrict Processing
Request that processing of your data be restricted in certain circumstances, such as while a dispute about data accuracy is being resolved.
Right to Data Portability
Request that data you have provided to z288 be provided to you in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests — including profiling — and to the use of your data for direct marketing purposes.
To exercise any of these rights, contact z288 support via the details in Section 15. We will respond within a reasonable period in accordance with applicable data protection obligations. We may require identity verification before processing your request. Some rights are subject to legal limitations — for example, data required for AML compliance or active dispute resolution may not be eligible for erasure.
11 Minors & Age Verification
z288 is an adults-only platform strictly for individuals aged 18 and above — or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.
Age verification is a mandatory part of the KYC process. Where a user is found — at any point — to be below the applicable minimum age, their Account will be immediately closed and any deposited funds returned in accordance with the Operator's procedures. Winnings accumulated by underage users will be forfeited.
If you become aware that a minor has registered on z288 using false information, please notify our support team immediately at .
Pakistan note: Being of legal adult age does not automatically make gambling lawful under applicable Pakistani legislation, including the Prevention of Gambling Act, 1977. Players must assess their own legal position before registering or depositing. This is not legal advice.
12 Data Security
z288 implements technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:
- Encryption: Data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols.
- Password hashing: Passwords are stored using cryptographic hashing — z288 staff cannot view your plain-text password.
- Access controls: Personal data is accessible only to authorised personnel on a need-to-know basis.
- Secure document storage: KYC documents are stored in secured environments with restricted access.
- Incident response: z288 maintains procedures for detecting, reporting and responding to personal data breaches.
While z288 takes appropriate steps to protect your data, no system is completely immune to security threats. You also bear responsibility for maintaining the security of your own account credentials. Do not share your password with anyone. If you suspect unauthorised access to your account, contact support immediately.
13 Third-Party Services & Links
The z288 Platform may reference third-party services — including payment methods, game software providers and compliance services — in the course of its operation. This Privacy Policy applies exclusively to data processed by z288. Third-party services operate under their own privacy policies, which are independent of this document.
z288 does not control and is not responsible for the privacy practices of third-party service providers. If you interact directly with a third-party service accessed through or referenced by the Platform, you should review their privacy policy independently.
14 Policy Amendments
z288 reserves the right to update or revise this Privacy Policy at any time. The "Last Updated" date at the top of the sidebar reflects the date of the most recent revision. Where changes are material, z288 will take reasonable steps to notify registered users via email or via a notice on the Platform.
Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. We encourage you to review this Policy periodically to stay informed about how your data is being handled.
15 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by z288, please contact us through the following channels:
- Live Chat: Available 24/7 directly on the Platform — the fastest route for urgent data requests.
- Email: — for written data access, rectification or erasure requests. Please include your registered account email and the nature of your request.
- Response Language: Support is available in English and Urdu.
- Response Time: We aim to acknowledge data requests within 5 business days. Full responses may take longer depending on the complexity and volume of requests.
For matters relating to responsible gambling, self-exclusion or account closure, see our Responsible Gambling page. For general platform terms, refer to our Terms & Conditions.
Our Privacy Commitments at a Glance
We Don't Sell Your Data
Your personal data is never sold, rented or traded to third-party marketers. We share data only where operationally or legally required.
Encrypted in Transit
All data sent between your device and z288 is encrypted via TLS. Your account credentials are stored using cryptographic hashing.
You Control Your Data
Access, correct, export or request deletion of your personal data at any time by contacting our support team — subject to legal retention obligations.
Consent-Based Marketing
Promotional communications are sent only where you have explicitly opted in. You can withdraw marketing consent at any time.
Clear Retention Periods
We retain data only as long as necessary for operational and legal purposes — and securely delete or anonymise it when it is no longer needed.
Dedicated Privacy Support
Our support team handles privacy requests in English and Urdu, 24/7. Data requests are acknowledged promptly and handled with care.