z288 Privacy Policy

z288 is an internationally licensed online casino and sports betting platform operating at z288.bio. z288 acts as the data controller in respect of all personal data collected from users of the z288 platform. As data controller, z288 determines the purposes for which personal data is collected and the manner in which it is processed.

z288 is operated under an international gaming license and is required under the conditions of that license to maintain robust data protection, anti-money laundering, and age verification processes. Compliance with these obligations necessarily involves the collection and processing of certain categories of personal data from all registered account holders.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via the channels listed in Section 14 of this Policy.

z288 collects and processes the following categories of personal data. The specific data points collected from any individual user will depend on how they interact with the z288 platform and the stage of the account lifecycle they are at.

z288 collects personal data through the following channels:

• Directly from you: When you register a z288 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or use any responsible gaming tools.
• Automatically via platform technology: When you access and use the z288 platform, we automatically collect technical data such as your IP address, device identifiers, browser type, and session activity logs through cookies and similar tracking technologies. See Section 7 for full details on cookies.
• From third-party identity verification providers: z288 may use third-party identity verification services to cross-reference identity documents submitted during KYC. These services provide a verification result (pass/fail) and, where necessary, additional identity data to satisfy our regulatory obligations.
• From payment processors: When you use JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, the relevant payment provider may share transaction confirmation data with z288 to enable your deposit or withdrawal to be correctly processed and reconciled.
• From fraud and AML screening services: z288 may cross-reference user data against publicly available sanctions lists and fraud databases as part of its AML compliance obligations.

z288 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and z288 — i.e., to provide you with access to the z288 platform, process your deposits and withdrawals, and deliver gaming and betting services.
• Legal obligation: Processing that z288 is required to carry out under its international gaming license conditions, applicable anti-money laundering regulations, and age verification requirements. This includes the collection and retention of identity documents and financial transaction records.
• Legitimate interests: Processing carried out in the legitimate interests of z288 and its users, including fraud prevention, platform security, responsible gaming monitoring, and improvement of z288 services — provided those interests are not overridden by your fundamental data rights.
• Consent: For certain non-essential processing activities — such as receiving promotional communications from z288 — we will seek your explicit consent in advance. You may withdraw any consent given at any time by contacting our support team or updating your account communication preferences.

z288 uses the personal data we collect for the following purposes:

• Account creation and management: To register, maintain, and authenticate your z288 account, and to communicate with you about your account.
• Age and identity verification: To verify that you meet the minimum age requirement of 21 years and that the identity you have provided is genuine, as required under our international gaming license.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records of all transactions.
• Gaming service delivery: To provide access to cricket betting, live dealer games, slots, poker, lottery, and all other z288 platform products.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as required under our gaming license and applicable financial crime regulations.
• Responsible gaming: To monitor gaming activity for signs of problematic behaviour and to administer responsible gaming tools including deposit limits, self-exclusion, and cool-off periods.
• Customer support: To respond to your support enquiries and complaints, and to maintain a record of those interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated, anonymised platform usage data to improve the z288 user experience, performance, and product offering.
• Promotional communications: Where you have consented, to send you information about z288 promotions, bonuses, and new product launches by email or SMS.

z288 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. z288 may share your personal data with the following categories of third parties only where strictly necessary and only to the extent required:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, as necessary to process your financial transactions on the z288 platform.
• Identity verification providers: Third-party KYC and age verification service providers used to verify your CNIC or other identity documents as required under z288's gaming license conditions.
• Game software providers: Third-party casino game and sports data providers who supply games and betting content to the z288 platform. These providers may receive limited technical session data necessary to deliver their game products.
• Regulatory and law enforcement authorities: z288 may disclose personal data to regulators, licensing authorities, tax authorities, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Fraud and AML screening services: Third-party sanctions screening and fraud detection service providers used to fulfil z288's AML compliance obligations.
• IT infrastructure and security providers: Cloud hosting, database management, and cybersecurity service providers who process personal data on behalf of z288 under strict data processing agreements.

The z288 platform uses cookies and similar tracking technologies to operate correctly and to improve the user experience. The following categories of cookies may be set when you access z288.bio:

• Strictly necessary cookies: Essential to the operation of the z288 platform. These cookies enable core functions such as account login session management, security, and fraud prevention. They cannot be disabled without impairing the functionality of the platform.
• Functional cookies: Used to remember your preferences and settings — such as your preferred language, display settings, and last-used payment method — to deliver a more personalised experience on return visits.
• Analytics cookies: Used by z288 to collect aggregated, anonymised data about how users interact with the platform, which pages are most visited, and where users encounter difficulty. This data is used solely to improve z288's platform and services.
• Marketing cookies: Used, where you have consented, to track your interaction with z288 promotional content and to measure the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time via the z288 cookie preference centre.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the z288 platform. For more information on how z288 uses cookies, please contact our support team.

z288 retains personal data for the following periods, after which it is securely deleted or irreversibly anonymised unless a longer retention period is required or permitted by law:

Where z288 is involved in legal proceedings, regulatory investigations, or dispute resolution processes, relevant personal data may be retained for longer than the standard periods above for the duration of those proceedings and for a reasonable period thereafter.

z288 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption: All data transmitted between your device and the z288 platform is encrypted in transit using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive personal data — including identity documents, CNIC data, and financial information — is stored in encrypted form on z288's secure servers.
• Access controls: Access to personal data within z288's systems is strictly limited to personnel who require it for their specific job function, and is governed by role-based access control policies.
• Regular security audits: z288 conducts periodic security audits and penetration testing to identify and remediate vulnerabilities in its data infrastructure.
• Incident response: z288 maintains a formal data breach response procedure. In the event of a breach that poses a risk to users' rights, affected users will be notified without undue delay.

As a z288 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of access: You have the right to request a copy of the personal data that z288 holds about you and information about how it is being processed. z288 will respond to verified access requests within 30 days.
• Right to rectification: You have the right to request that z288 correct any personal data we hold about you that is inaccurate or incomplete. You may update basic account details directly from within your z288 account dashboard at any time.
• Right to erasure: In certain circumstances, you have the right to request that z288 delete your personal data. Note that this right is subject to z288's legal obligations — where we are required by our gaming license or AML regulations to retain data, we cannot fulfil an erasure request in respect of that data until the applicable retention period has expired.
• Right to restriction: You have the right to request that z288 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data we hold about you.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive the personal data you provided to z288 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to z288 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to processing for marketing, z288 will cease that processing immediately upon receiving your objection.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

z288 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The z288 platform is strictly restricted to individuals who are 21 years of age or older. z288 does not knowingly collect personal data from anyone under the age of 21. All account registrations are subject to mandatory age verification using valid government-issued identification.

If z288 becomes aware or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended pending investigation. Any funds associated with that account will be withheld and the account will be permanently closed following investigation.

As an internationally licensed gaming platform, z288 operates infrastructure and engages service providers across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan. z288 takes the following steps to ensure that any such international transfers are conducted lawfully and with appropriate protections in place:

• Where personal data is transferred to a third-party service provider located in another jurisdiction, z288 requires that provider to enter into a data processing agreement imposing equivalent data protection standards to those described in this Privacy Policy.
• z288 selects service providers whose data protection practices have been assessed as meeting an adequate standard of protection relative to the sensitivity of the data being transferred.
• Where required under applicable data protection law, z288 will implement additional transfer mechanisms — such as standard contractual clauses — to legitimise the transfer of personal data to third countries.

By registering a z288 account and submitting your personal data, you acknowledge that your data may be transferred internationally in accordance with the safeguards described in this section.

z288 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. When material changes are made, we will update the effective date at the top of this page and, where practicable, notify registered account holders via the contact details associated with their z288 account.

We encourage you to review this Privacy Policy periodically to stay informed of how z288 is protecting your data. Your continued use of the z288 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the z288 platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a privacy-related complaint, please contact the z288 Data Protection team using the following channels:

• Live Chat: Available 24/7 from within your z288 account dashboard. This is the fastest route to our support team for all privacy-related enquiries.
• Email (plain text — not a clickable link): [email protected]

z288 will acknowledge all privacy complaints within 5 business days and will endeavour to resolve them within 30 calendar days. Where a complaint cannot be resolved within 30 days, we will keep you informed of progress and provide an expected resolution date.

If you are not satisfied with z288's response to your privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority or to the licensing authority under whose jurisdiction z288 operates.

This Privacy Policy was last reviewed on 1 January 2026 and supersedes all previous versions. z288 — z288.bio — Operated under international gaming license. Must be 21+ to play.