zv888 Privacy Policy

zv888 ("we," "us," "our," "the Platform") is an online casino and sports betting platform operating under an international gaming licence and accessible at zv888.bio. zv888 serves registered players primarily across Pakistan, including major cities such as Karachi, Lahore, Faisalabad, and Islamabad, offering a comprehensive range of gaming services including live casino games, cricket and PSL betting, slot games, and fishing games.

For the purposes of this Privacy Policy, zv888 acts as the data controller in respect of all personal data collected from users of the zv888 platform. As data controller, zv888 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection principles.

If you have any questions about how zv888 handles your personal data, or if you wish to exercise any of your data rights described in Section 10 of this policy, you may contact our Data Protection Officer at [email protected].

zv888 collects personal data across several categories. The specific data points collected depend on the nature of your interaction with the platform — whether you are browsing as a guest, completing registration, verifying your identity, making a financial transaction, or contacting our support team.

zv888 collects personal data through the following methods and touchpoints across the platform lifecycle:

• Direct Registration: Data you provide when creating your zv888 account, including name, date of birth, email address, and Pakistani mobile number.
• KYC Verification Process: Identity and address documents you submit when completing account verification or prior to processing your first withdrawal.
• Financial Transactions: Payment details and transaction records generated each time you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank.
• Platform Usage: Technical and behavioural data collected automatically as you browse, play games, and interact with the zv888 interface, including through cookies, log files, and analytics tools.
• Customer Support Interactions: Data exchanged during live chat sessions, email correspondence, or any other support contact you initiate with the zv888 team.
• Promotional Participation: Information collected when you opt into or participate in a zv888 promotion, bonus offer, or loyalty programme activity.
• Responsible Gaming Tools: Data relating to your use of deposit limits, session time limits, self-exclusion requests, and other responsible gaming features, which is retained for compliance and player protection purposes.

zv888 does not purchase personal data from third-party data brokers or marketing list providers. All personal data held by zv888 is collected directly from you or generated as a result of your use of the platform.

zv888 uses personal data only for the specific, documented purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent:

• Account Creation and Management: Processing your registration, authenticating your identity at login, and maintaining your account throughout its lifecycle.
• KYC and Age Verification: Verifying that you are at least 21 years of age and confirming your identity in compliance with our licensing obligations and anti-money laundering requirements.
• Payment Processing: Executing your deposit and withdrawal requests via your chosen payment method and maintaining accurate financial records of all transactions.
• Gaming Operations: Delivering the games, betting markets, and associated features you access on the platform, and maintaining the integrity and fairness of all gaming activity.
• Fraud Prevention and Security: Monitoring account activity for signs of fraudulent transactions, money laundering, multi-accounting, bonus abuse, or any other behaviour that violates our Terms & Conditions.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance through our 24/7 support channels.
• Regulatory Compliance: Meeting our obligations under the terms of our international gaming licence, including mandatory reporting requirements and record-keeping obligations.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, administering player-requested self-exclusion and limit-setting tools, and contacting players where we have welfare concerns.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the zv888 platform experience, optimise game performance, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and news about new games or events — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

zv888 processes your personal data only where a lawful basis exists for doing so. The legal bases upon which zv888 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform our contractual obligations to you as a registered zv888 player — including account management, payment processing, and delivery of gaming services. Without this processing, we cannot provide our services.
• Legal Obligation: Processing required to comply with our obligations under our gaming licence, anti-money laundering regulations, KYC requirements, and other applicable laws — including mandatory record-keeping and reporting to regulatory authorities.
• Legitimate Interests: Processing undertaken for our legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, IT system maintenance, and aggregated analytics for service improvement.
• Consent: Processing for which you have given specific, freely-given, informed, and unambiguous consent — principally for the receipt of direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without detriment to your account.

zv888 does not sell your personal data to any third party, period. We share personal data with third parties only where strictly necessary for the operation of the platform, legal compliance, or the protection of zv888 and its players. The categories of third parties with whom data may be shared are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, solely for the purpose of processing your deposit and withdrawal transactions. These providers are contractually bound to use your financial data only for this specific purpose.
• KYC and Identity Verification Providers: Licensed third-party identity verification services that assist zv888 in processing document-based KYC checks. These providers operate under strict data processing agreements.
• Gaming Software Providers: The studios and technology providers that supply the live casino games, slots, and fishing games available on zv888. Game interaction data is shared only to the extent required to deliver, audit, and certify game outcomes.
• Regulatory Authorities: Our licensing authority and any other competent governmental or regulatory body, where disclosure is required by law, court order, or valid legal process.
• Fraud Prevention and AML Services: Third-party anti-fraud and anti-money laundering screening services used to identify suspicious transactions and ensure compliance with financial crime prevention obligations.
• IT Infrastructure and Security Providers: Hosting providers, cybersecurity services, and cloud infrastructure partners who process data on our behalf under strict data processing agreements with contractual data protection obligations.

zv888 uses cookies and similar tracking technologies on its platform to ensure proper functionality, enhance your user experience, and gather anonymised analytics data. The types of cookies used on the zv888 platform are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, game lobby layout, and notification settings, so that you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymised data about how players interact with the platform — including pages visited, time on site, and navigation paths — to help us improve the platform experience. This data is aggregated and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection, multi-account identification, and suspicious login pattern analysis.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the platform, but may affect certain personalisation features. Strictly necessary cookies cannot be disabled as they are essential to platform security and session management.

zv888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active life, plus a minimum of 5 years following account closure, in compliance with our gaming licence requirements and anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial regulatory requirements applicable to licensed gaming operators.
• KYC Documents: Retained for a minimum of 5 years following the end of the customer relationship, as required under applicable anti-money laundering legislation.
• Customer Support Correspondence: Retained for 2 years from the date of the last interaction, unless the correspondence relates to an open dispute or legal proceeding, in which case it is retained until final resolution.
• Marketing Consent Records: Retained for 3 years from the date consent was given or last renewed, to provide evidence of consent in the event of a regulatory inquiry.
• Self-Exclusion Records: Retained indefinitely where a player has requested permanent self-exclusion, to prevent re-registration. Time-limited self-exclusion records are retained for 5 years from expiry.
• Technical / Log Data: Retained for 12 months in rolling logs for security and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Players may request early deletion of their data under the rights described in Section 10, subject to our overriding legal retention obligations.

zv888 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Transport Layer Security: All data transmitted between your device and zv888's servers is encrypted using TLS 1.3 with 256-bit AES encryption. Our SSL certificate is maintained and renewed without lapse.
• Data Storage Encryption: Personal data stored in our databases is encrypted at rest. Encryption keys are managed separately from encrypted data using a dedicated key management system.
• Access Controls: Access to personal data within zv888 is governed by strict role-based access control (RBAC). Only staff who require access to specific categories of data to perform their duties are granted access, on a least-privilege basis.
• Two-Factor Authentication: All internal zv888 administrative systems require two-factor authentication for staff access. Players are also encouraged to enable 2FA on their accounts for additional protection.
• Regular Penetration Testing: zv888 commissions independent cybersecurity firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: zv888 maintains a formal data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.
• Staff Training: All zv888 staff who handle personal data receive regular training on data protection obligations, secure data handling practices, and phishing awareness.

As a zv888 player and data subject, you have the following rights in relation to your personal data. zv888 is committed to honouring all valid rights requests promptly and without charge:

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your registered account email address and a description of the right you wish to exercise. We will respond within 30 days of receipt of a valid request. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case we will notify you.

zv888 services are strictly intended for adults aged 21 and above. zv888 does not knowingly collect personal data from individuals under the age of 21, and has no intention of doing so. Our registration and KYC processes are specifically designed to identify and reject underage applicants.

If zv888 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration, the use of a parent or guardian's identity documents, or any other means — the following steps will be taken immediately:

• The account will be permanently closed without delay
• All associated funds will be frozen pending investigation
• Any winnings generated by the underage player will be forfeited
• All personal data relating to the underage individual will be deleted, except where retention is required for regulatory reporting purposes
• The matter may be reported to relevant child protection or regulatory authorities

The zv888 platform integrates with a number of third-party service providers to deliver core gaming functionality, payment processing, and technical infrastructure. While zv888 carefully vets all third-party partners and requires them to comply with data protection standards equivalent to our own, zv888 cannot accept responsibility for the independent privacy practices of third-party organisations operating their own separate systems.

Third-party service providers integrated with the zv888 platform may include:

• Game Studios and Software Providers: The independent game developers and live casino studios whose content is available on zv888. These providers may collect limited technical data (such as session identifiers and game outcome logs) to operate and certify their games.
• Payment Gateway Providers: JazzCash, EasyPaisa, and connected banking partners process payment transactions independently on their own secure infrastructure. Your interactions with these payment systems are governed by those providers' own privacy policies and terms of service.
• Analytics Services: zv888 may use privacy-respecting analytics tools to generate aggregated, anonymised data about platform performance. Such tools are configured to minimise personal data exposure and do not build individual behavioural profiles for advertising purposes.

zv888 does not embed external social media widgets, third-party advertising networks, or affiliate tracking pixels on its platform pages that would allow external parties to collect data about your browsing behaviour on zv888 without your knowledge.

zv888 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the evolution of our platform and services. All changes will be published on this page at zv888.bio/privacy-policy with a revised "Last Updated" date at the top of the document.

Where a proposed change is material — meaning it significantly affects how we use your personal data, your rights, or our data sharing practices — zv888 will provide advance notice through one or more of the following channels:

• A prominent notice displayed on the zv888 platform upon your next login
• An email notification sent to the registered email address associated with your account
• An in-platform notification via your zv888 account message centre

Your continued use of the zv888 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material changes to this policy, you should discontinue use of the platform and contact our support team to close your account and request deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zv888 processes your personal data, you are welcome to contact our Data Protection Officer directly. We are committed to responding to all privacy-related enquiries within 3–5 business days.

• Email: [email protected]
• Live Chat: Available 24/7 via the zv888 platform — ask to be connected to the Data Protection team
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" as your subject line to ensure your message is routed directly to the correct team
• Response Time: Standard enquiries — within 3–5 business days. Formal data rights requests — within 30 calendar days as required by applicable law

When submitting a data rights request or privacy complaint, please include your registered zv888 username, the email address associated with your account, a clear description of your request or concern, and any supporting documentation where relevant. This will allow us to process your request as efficiently as possible and minimise the need for follow-up clarifications.