zh8 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal information is zh8, operating the online casino and sports betting platform accessible at zh8.onl ("the Platform"). All references to "zh8", "we", "us", or "our" in this document refer to zh8 in its capacity as data controller.

zh8 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. zh8 is committed to ensuring that all personal data collected is handled responsibly, transparently, and in strict accordance with this Privacy Policy.

If you have any questions about how zh8 handles your personal data, or if you wish to exercise any of your data rights, you may contact zh8's support team 24 hours a day, 7 days a week, in both English and Urdu via the in-platform live chat or by writing to the email address displayed in the footer of this page.

zh8 collects personal data that is necessary to provide its services, maintain account security, comply with legal obligations, and improve the player experience. The categories of data zh8 may collect are set out in the table below.

zh8 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless this is strictly necessary for responsible gambling purposes (for example, a self-exclusion request referencing a gambling-related condition) and only with your explicit consent where required.

zh8 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a zh8 survey or promotion.
• Automated technologies: When you visit or use the zh8 Platform, technical and usage data is collected automatically via cookies, server logs, web beacons, and similar tracking technologies. See Section 8 (Cookies & Tracking) for full details.
• Payment providers: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, zh8 receives confirmation and reference data from the relevant payment provider to validate and record the transaction. Full financial credentials are not passed to zh8 in this process.
• Identity verification services: zh8 may use third-party identity verification providers to cross-check the information you provide during KYC against official databases. These providers act as data processors on zh8's behalf and are bound by strict data processing agreements.
• Fraud prevention and analytics partners: zh8 works with fraud detection services to analyse patterns of Platform usage. Data shared with these partners is pseudonymised wherever possible and is used solely to protect zh8 and its players from fraudulent activity.

zh8 processes your personal data only where there is a valid legal basis for doing so. The primary purposes for which zh8 processes personal data, and the corresponding legal basis for each, are as follows:

Where zh8 relies on consent as the legal basis for processing (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your preferences in your zh8 account settings or contact support via live chat.

zh8 does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. However, zh8 may share your data with the following categories of recipients where necessary and proportionate:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers, solely to process your deposit and withdrawal transactions. Each provider is subject to its own privacy policy and applicable financial regulation.
• Identity verification providers: Third-party KYC service providers acting as data processors on zh8's behalf, bound by strict contractual data protection obligations. These providers verify your identity details against authorised databases and return a verification result to zh8.
• Game software providers: Licensed game studios whose titles are available on zh8 may receive pseudonymised gameplay data (such as bet amounts and game outcomes) for the purposes of game certification, RNG auditing, and technical support. These providers do not receive your name, contact details, or payment information.
• Fraud prevention and cybersecurity services: zh8 uses specialist fraud detection and platform security providers to protect the integrity of the Platform. Data shared with these services is pseudonymised and used solely for security purposes.
• Regulatory and law enforcement authorities: zh8 may be required by applicable law, court order, or regulatory directive to disclose certain player data to competent authorities. zh8 will comply with such obligations and, where legally permitted, will endeavour to notify the affected player of such disclosure.
• Business successors: In the event of a merger, acquisition, or sale of all or part of zh8's business assets, player data may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy.

zh8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The general retention periods applied by zh8 are as follows:

• Active account data: Retained for the full duration of your account's active status on zh8, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for a minimum of seven (7) years following the date of the transaction.
• KYC and identity documents: Retained for the duration of the account and for a minimum of five (5) years post-closure, or longer where required by the regulatory requirements of zh8's licensing jurisdiction.
• Support communications: Chat and email records relating to support interactions are retained for a minimum of three (3) years from the date of the interaction.
• Marketing data: Where consent for marketing has been withdrawn or an account is closed, marketing profile data is suppressed within 30 days and deleted within 12 months.
• Technical and usage logs: Server logs and technical usage data are retained for up to 13 months for security and analytics purposes, after which they are aggregated and anonymised.

Where zh8 is no longer required to retain personal data, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual.

zh8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and zh8's servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that zh8 staff can only access personal data that is strictly necessary for their role.
• Regular security audits and penetration testing by independent cybersecurity specialists.
• Multi-factor authentication requirements for zh8 staff accessing systems that process player data.
• Incident response procedures to detect, investigate, and respond to data security incidents in a timely manner.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, zh8 will notify affected players without undue delay and in accordance with the obligations imposed by applicable data protection law. Notification will be provided via the email address registered on your account.

zh8 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, improve performance, and — where you have given consent — deliver relevant content. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other files on your device.

The categories of cookies used by zh8 are as follows:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They include session management cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: These collect anonymised data about how players navigate and use the Platform — such as which pages are visited most frequently, session duration, and error events — to help zh8 improve the user experience.
• Functional cookies: These remember your preferences such as language selection (English / Urdu), display settings, and last visited game category, so that your experience is personalised on return visits.
• Marketing and tracking cookies: Only placed where you have given explicit consent. These are used to deliver promotional content relevant to your interests. You may withdraw consent at any time via your browser settings or zh8 account preferences.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be alerted when new cookies are set. Please note that disabling certain categories of cookie may affect the functionality of some parts of the zh8 Platform.

As a zh8 player, you have a number of rights in relation to your personal data. zh8 is committed to honouring these rights in a timely and transparent manner. Your rights are summarised below:

To exercise any of the above rights, please contact zh8 through the in-platform live chat or via the email address shown in the footer. zh8 will respond to all valid requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and you will be notified accordingly. zh8 will not charge a fee for exercising your rights unless a request is manifestly unfounded, excessive, or repetitive.

zh8 operates a strict 21+ age policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age is verified at the point of registration and zh8 may request documentary evidence of age at any subsequent point during the account lifecycle.

If zh8 discovers — through KYC checks, age verification procedures, or any other means — that personal data has been collected from an individual under the age of 21, zh8 will take the following steps immediately:

• Permanently close the associated account without further notice.
• Forfeit any balance, including winnings, held in the account at the time of closure.
• Securely delete all personal data associated with the underage account, except where retention is required by law for anti-fraud or regulatory purposes.
• Report the matter to relevant authorities where required by applicable law or regulatory guidelines.

Parents and guardians who believe a minor under their care has accessed zh8 are strongly encouraged to contact zh8 support immediately. zh8 will act promptly to investigate and close any identified underage account. zh8 also recommends the use of parental control software to prevent minors from accessing gambling websites.

zh8 operates internationally and may store or process personal data on servers located outside Pakistan. Where your personal data is transferred to and processed in a country outside your country of residence, zh8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding that which would be applied in Pakistan.

Safeguards used by zh8 for international data transfers include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into zh8's agreements with all data processors handling international transfers.
• Transfer only to jurisdictions that maintain adequate data protection standards as recognised by zh8's licensing authority or applicable international frameworks.
• Encryption of all data in transit across international networks using industry-standard protocols.

If you would like more information about the specific safeguards in place for any particular international transfer of your personal data, please contact zh8 support through the live chat facility available within the Platform.

zh8 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published on this page, with the effective date updated accordingly at the top of the document. Where changes are material — for example, changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — zh8 will notify registered players via email or an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how zh8 is protecting your information. Continued use of the zh8 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms.

If you have any questions, concerns, or complaints relating to this Privacy Policy or zh8's handling of your personal data, please contact zh8 in the first instance via the in-platform live chat. Support is available 24 hours a day, 7 days a week in both English and Urdu, with an average response time of 3–5 minutes.

For written correspondence, you may use the email address displayed in the footer of this page. Please include "Privacy Query" or "Data Request" in the subject line of your email to ensure your message is directed to the appropriate team within zh8.

zh8 takes all privacy complaints seriously and will investigate and respond to each complaint in a fair, timely, and transparent manner. If you are not satisfied with zh8's response to your complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the dispute resolution mechanism provided by zh8's licensing authority.