Privacy Policy – How zj88 Collects, Uses, and Protects Your Personal Data

1 Data Controller

1.1 For the purposes of this Privacy Policy, the data controller responsible for the personal data of zj88 players is the operating entity behind the zj88 platform, accessible at zj88.asia. References to "zj88", "we", "us", or "the Platform" in this document refer to this operating entity.

1.2 zj88 operates under an internationally recognised offshore gaming licence. The platform is designed and operated to serve players in Pakistan, and this Privacy Policy has been drafted with Pakistani player circumstances specifically in mind, including the use of JazzCash, EasyPaisa, and Pakistani bank payment methods that carry their own data handling characteristics.

1.3 Any questions regarding the processing of personal data by zj88 may be directed to the Data Protection Officer (DPO) via the contact details provided in Section 14 of this Policy.

2 Data We Collect

2.1 zj88 collects the following categories of personal data from players:

2.2 zj88 does not intentionally collect sensitive personal data categories (such as biometric data, health data, or political affiliations) from players. If any such data is voluntarily disclosed during a support interaction, it will not be stored beyond the immediate operational purpose and will not be processed for any secondary use.

3 How Data Is Collected

3.1 zj88 collects personal data through the following mechanisms:

• Directly from you: Information you provide during account registration, the KYC identity verification process, deposit and withdrawal requests, and communications with our support team.
• Automated technical collection: IP addresses, device fingerprints, session data, and cookie data collected automatically when you access the zj88 website or mobile platform.
• Payment processors: Transaction reference data and payment confirmation details received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors when processing your deposits and withdrawals.
• Fraud and verification services: Data received from third-party identity verification and fraud screening services engaged to support the zj88 KYC and anti-money-laundering compliance process.
• Responsible gaming monitoring: Data generated by the platform's responsible gaming monitoring systems, including session duration data, deposit frequency analysis, and self-exclusion records.

4 Purposes of Processing

4.1 zj88 processes personal data for the following specific purposes:

• Account creation and management: Setting up, maintaining, and securing your zj88 player account, including authentication and session management.
• Identity verification (KYC): Verifying your age and identity to comply with gaming licence obligations, anti-money-laundering regulations, and responsible gaming requirements.
• Payment processing: Executing deposits and withdrawals to and from your account via your chosen Pakistani payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20).
• Gaming services delivery: Providing access to casino games, sports betting markets, and all other gaming features of the zj88 platform.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
• Regulatory compliance: Meeting obligations under the terms of the zj88 gaming licence, including reporting requirements to the relevant licensing authority.
• Responsible gaming enforcement: Monitoring player behaviour patterns to identify potential problem gambling indicators, and enforcing self-exclusion and cooling-off requests.
• Customer support: Responding to player queries, complaints, and dispute resolution requests.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided your consent or where it is permitted under applicable law on a legitimate-interest basis.
• Platform improvement: Analysing anonymised usage data to improve the performance, design, and game selection of the zj88 platform.

5 Legal Basis for Processing

5.1 zj88 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Performance of a contract: Processing necessary to deliver the gaming services you have contracted for when creating your zj88 account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money-laundering record-keeping, and regulatory reporting to the gaming licence authority.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, and anonymised analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where zj88 relies on consent as the legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing & Third Parties

6.1 zj88 does not sell personal data. We share personal data only with the following categories of third parties, and only to the extent strictly necessary for the purposes described:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive transaction reference data required to execute your deposits and withdrawals. These processors operate under their own privacy policies and are responsible for their own data handling practices.
• Identity verification providers: Third-party KYC and fraud screening services receive the identity documents and personal data required to complete the account verification process. These providers are contractually bound to process data only for the KYC purpose and not to retain data beyond what is operationally necessary.
• Regulatory and licensing authorities: zj88's gaming licence authority may receive player data as required under the terms of the licence, including for audit, compliance verification, and investigation of suspected violations.
• Law enforcement and legal processes: Personal data may be disclosed to law enforcement agencies, courts, or other competent authorities where zj88 is legally required to do so under a valid legal process, warrant, court order, or equivalent regulatory directive.
• Game software providers: The third-party game studios whose titles appear on zj88 may receive anonymised technical session data required to render and operate their games correctly. These providers do not receive personally identifiable information in the standard course of platform operation.

7 Data Retention

7.1 zj88 retains personal data for the following periods, after which data is securely deleted or anonymised unless a longer period is required by law:

• Account and identity data: Retained for the duration of your active account plus 5 years following account closure, to comply with anti-money-laundering record-keeping obligations under the gaming licence.
• Financial transaction records: Retained for 7 years from the date of each transaction, in compliance with standard financial record-keeping requirements.
• KYC documents: Retained for 5 years from the date of submission or the date of account closure, whichever is later.
• Gaming and wagering history: Retained for the duration of the active account plus 3 years following account closure.
• Support communications: Retained for 3 years from the date of the last interaction in the relevant support thread.
• Marketing consent records: Retained for the duration of the active consent plus 2 years following withdrawal, to demonstrate compliance with consent requirements.
• Technical and session data: Retained for 13 months from the date of collection, consistent with standard web analytics retention practices.

7.2 Where a player exercises their right to erasure, zj88 will assess the request against applicable legal retention obligations. Where legal obligations require retention of specific data categories beyond the erasure request, those data categories will be retained in a restricted format used solely for compliance purposes, and the player will be informed of this.

8 Security Measures

8.1 zj88 implements the following technical and organisational security measures to protect personal data against unauthorised access, loss, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and zj88 servers;
• Encrypted storage of personally identifiable information and financial data at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication available to players for account access;
• Regular security audits and penetration testing of platform infrastructure;
• Automated fraud detection and account anomaly monitoring systems;
• Secure deletion procedures for data that has passed its retention period.

8.2 Notwithstanding the security measures in place, no internet transmission or electronic storage system is 100% secure. zj88 cannot guarantee absolute security of personal data and encourages players to maintain strong, unique passwords, enable SMS OTP two-factor authentication, and log out of their zj88 account after each session — particularly on shared devices.

9 Cookies & Tracking Technologies

9.1 zj88 uses cookies and similar tracking technologies on its website. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the platform to function, including session authentication cookies, load-balancing cookies, and security cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and recently played games to enhance your platform experience.
• Analytics cookies: Anonymised data used to understand how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data informs platform improvement decisions.
• Responsible gaming cookies: Track session duration on-device to support the accurate display of session time information and the enforcement of session time limits where set by the player.

9.2 zj88 does not use third-party advertising or retargeting cookies. You will not be tracked across other websites for advertising purposes via zj88 cookies.

9.3 You may manage cookie preferences via your browser settings. Blocking strictly necessary cookies will impair your ability to use core zj88 platform functions including login. Blocking analytics cookies will not affect your ability to play games or manage your account.

10 Your Data Rights

10.1 Depending on the applicable data protection law, you may hold the following rights over the personal data zj88 holds about you:

• Right of access: Request a copy of the personal data zj88 holds about you.
• Right of rectification: Request correction of inaccurate or incomplete personal data.
• Right of erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: Request that zj88 restricts the processing of your personal data in specified circumstances.
• Right to data portability: Request a machine-readable copy of personal data you have provided to zj88 for transmission to another controller.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw previously given consent for processing activities that rely on consent as their legal basis.

10.2 To exercise any of the rights listed above, contact the zj88 Data Protection Officer using the details in Section 14. zj88 will respond to all verified data rights requests within 30 calendar days. Identity verification may be required before processing a data rights request to ensure that data is not disclosed to or deleted at the request of an unauthorised party.

11 Minors & Age Restriction

11.1 zj88 enforces a strict 21+ age restriction through documentary identity verification (CNIC, passport, or driving licence) required during the KYC process. Date of birth information provided at registration is verified against documentary evidence before withdrawal rights are activated on any account.

11.2 If a parent or guardian becomes aware that their child has submitted personal data to zj88 and created an account, they should contact our support team immediately via live chat or at [email protected] so that the account can be closed and all associated data deleted without delay.

12 International Data Transfers

12.1 zj88 is an internationally operated platform. Personal data processed by zj88 may be stored on servers located outside of Pakistan. Where personal data is transferred internationally, zj88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses between zj88 and the receiving data processor;
• Binding corporate rules where data is shared within a corporate group;
• Ensuring that the destination country provides an adequate level of data protection as determined by the applicable supervisory authority.

12.2 Transfers to payment processors based in Pakistan (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay) involve only the minimum data required to process the specific transaction, and those processors are subject to Pakistani financial regulation regarding data handling.

13 Policy Amendments

13.1 zj88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via the mobile number or email address on their account, or via a platform notification, at least 7 days before the updated Policy takes effect.

13.2 The current version of this Privacy Policy is always accessible at zj88.asia/privacy-policy. The "Last Updated" date at the top of this document will be revised with each amendment. Continued use of the zj88 platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

14 Contact the Data Protection Officer

14.1 For all privacy-related queries, data rights requests, or concerns regarding the handling of your personal data by zj88, please contact the Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the chat icon on zj88.asia — mark your message as "Privacy / Data Rights Request" for priority routing to the DPO team.
• Email: [email protected] — subject line "Privacy Policy Enquiry – [Your Username]". Response within 3 business days for standard enquiries; within 24 hours for urgent breach-related matters.

14.2 zj88 commits to handling all privacy enquiries with confidentiality and to responding within the timeframes specified. If you are not satisfied with the response to your data rights request, you may escalate the matter to the data protection supervisory authority in the relevant jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the zj88 Privacy Policy.