zc288 Privacy Policy

1. Who We Are

zc288 is an internationally licensed online gaming platform operating under the domain zc288.vip. zc288 serves players primarily based in Pakistan, offering cricket betting, live casino games, slots, and a full sportsbook — all denominated in Pakistani Rupees (PKR) and accessible through local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

For the purposes of this Privacy Policy, zc288 acts as the data controller in respect of all personal information collected from players and website visitors. Any questions regarding data control, data processing, or the exercise of your rights under this Policy should be directed to our Data Protection contact at [email protected].

2. Personal Data We Collect

zc288 collects the following categories of personal data from players and prospective players:

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (used for mandatory age verification — 21+ requirement)
• Pakistani CNIC number or passport number
• Gender (where voluntarily provided)
• Profile username chosen at registration

2.2 Contact Information

• Pakistani mobile phone number
• Email address
• Current residential address (city, province, and postal code)

2.3 Financial & Payment Data

• JazzCash, EasyPaisa, or mobile wallet account numbers
• Bank account details for HBL, UBL, or Meezan Bank transfers
• Deposit and withdrawal transaction history
• Account balance history and bet history

2.4 Identity Verification (KYC) Documents

• Scanned copy or photograph of CNIC (front and back) or valid passport
• Proof of address document dated within the last three months
• Selfie or liveness verification image where required by our KYC partner

2.5 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on zc288.vip
• Referring URL and search terms used to find the zc288 platform
• Login timestamps and account activity logs

2.6 Communications Data

• Records of live chat conversations with the zc288 support team
• Email correspondence between you and zc288
• Responsible gaming self-assessments or self-exclusion requests submitted

3. How We Collect Your Data

zc288 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting a responsible gaming request.
• Automated collection: Technical data collected automatically when you visit zc288.vip, including via cookies, web server logs, and analytics tools. See Section 7 for full details on cookies.
• Third-party sources: Identity and fraud-check data received from our licensed KYC verification partners when you submit documents for account verification.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners when you initiate deposits or withdrawals.

4. How We Use Your Personal Data

zc288 uses the personal data we collect for the following specific purposes:

5. Legal Basis for Processing

zc288 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to enter into and perform the contract with you as a registered zc288 player — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations — including KYC identity verification, AML reporting, and age verification.
• Legitimate interests: Processing necessary for zc288's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and improving our products — where those interests do not override your fundamental privacy rights.
• Consent: Processing based on your explicit opt-in consent — including the sending of promotional emails, SMS marketing, and bonus notifications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

zc288 does not sell or trade your personal information. We share data only where strictly necessary for the provision of our services or as required by law. The categories of third parties with whom data may be shared are as follows:

• KYC & Identity Verification Partners: Licensed third-party providers that assist zc288 in verifying player identities and ages in compliance with our regulatory obligations. These providers receive only the data necessary for verification and are contractually prohibited from using it for any other purpose.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transactional and identity data necessary to process your deposits and withdrawals. These entities operate under their own privacy frameworks and are independently regulated.
• Game Content Providers: Third-party casino game and sportsbook providers may receive anonymised session data to deliver game content. No directly identifiable personal data such as CNIC or payment details is shared with game providers.
• Legal and Regulatory Authorities: zc288 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by a valid legal order, court order, or applicable AML legislation. zc288 will notify affected players of such disclosure where legally permitted.
• Fraud Prevention Services: Where zc288 has reasonable grounds to suspect fraudulent activity, relevant data may be shared with licensed fraud prevention agencies and industry shared databases to protect all players and the integrity of the platform.

7. Cookies & Tracking Technologies

zc288 uses cookies and similar tracking technologies on the zc288.vip website. Cookies are small text files placed on your device that help us operate the platform effectively, remember your preferences, and understand how players use the site.

7.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the zc288 platform to function. These enable secure login sessions, maintain your account state, and ensure payment processes work correctly. These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Help zc288 understand how players navigate the platform — which pages are visited most, where sessions end, and how features are used. This data is aggregated and anonymised. We use this to improve the zc288 experience for all players.
• Preference Cookies: Remember your settings and preferences, such as your selected language, preferred payment method displayed, and notification preferences.
• Marketing Cookies: Used only with your explicit consent to track the effectiveness of promotional campaigns and deliver relevant bonus offers. You may opt out of marketing cookies at any time.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling essential cookies will affect your ability to log in and use the zc288 platform normally. For detailed guidance on managing cookies, refer to your browser's help documentation.

8. Data Retention

zc288 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following permanent account closure.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, as required by AML legislation applicable to licensed gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years to satisfy financial reporting and AML compliance requirements.
• Customer support communications: Retained for three (3) years following the closure of the relevant support ticket or complaint.
• Marketing consent records: Retained for as long as you remain opted in, plus two (2) years following withdrawal of consent, to evidence compliance.
• Technical and usage logs: Retained for up to thirteen (13) months in identifiable form, after which they are anonymised for aggregate analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with zc288's internal data destruction procedures.

9. Your Data Rights

As a zc288 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". zc288 will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data held about you by zc288, along with information on how it is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some data — such as your registered CNIC number — may require documentary evidence before a correction can be applied.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing. Please note that zc288 may be legally obliged to retain certain data (e.g., AML records) regardless of an erasure request.
• Right to Restrict Processing: You may request that zc288 temporarily restrict processing of your data while accuracy is being verified, while an objection is being considered, or where you need data preserved for a legal claim.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for responsible gaming monitoring. zc288 will stop processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10. Children's Privacy

The zc288 platform is strictly restricted to individuals who are 21 years of age or older. zc288 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the zc288 registration process. If zc288 becomes aware that personal data has been collected from a person under 21 — whether through misrepresentation or error — the relevant account will be closed immediately, all data will be deleted as quickly as technically practicable, and any funds associated with the account will be handled in accordance with our Terms & Conditions and applicable law.

Parents or guardians who believe that their child may have registered an account on zc288 are encouraged to contact us immediately at [email protected] so that we can investigate and take prompt action.

11. Security Measures

zc288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and zc288 servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data — including CNIC numbers, financial records, and KYC documents — is encrypted in our databases using strong encryption standards.
• Access Controls: Access to player personal data within zc288 is strictly limited to authorised personnel who require it to perform their legitimate job functions. All internal access is logged and audited.
• Two-Factor Authentication: zc288 staff accounts with access to player data are protected by mandatory two-factor authentication (2FA).
• Regular Security Audits: The zc288 platform and its data infrastructure are subject to regular independent security audits and vulnerability assessments.
• Incident Response Plan: In the event of a personal data breach that poses a risk to affected players, zc288 has a formal incident response plan to contain the breach, assess its impact, notify affected individuals as required, and report to relevant authorities within the timeframes prescribed by applicable law.

While zc288 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their zc288 accounts and to notify us immediately at [email protected] if they suspect any unauthorised access to their account.

12. International Data Transfers

As a platform operating under an international gaming licence, zc288 may process or store certain player data on servers or through service providers located outside Pakistan. When such international transfers occur, zc288 ensures that adequate safeguards are implemented to protect the privacy and security of your personal data to a standard equivalent to that applied within Pakistan.

Safeguards employed for international transfers include contractual data processing agreements with all third-party providers, requiring them to maintain appropriate technical and organisational measures and to process data only for the purposes specified by zc288. Players who wish to obtain further information about the specific safeguards applied to international transfers of their data may request this information through our support team.

13. Changes to This Privacy Policy

zc288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or a prominent notice on the zc288.vip website at least fourteen (14) days before the changes take effect.

The effective date at the top of this page will be updated to reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the zc288 platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you disagree with the updated Policy, you should cease using the platform and request account closure before the effective date.

14. Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints about this Privacy Policy, or about how zc288 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 directly through the zc288.vip platform interface
• Response Time: zc288 acknowledges all privacy-related queries within 48 hours and provides a substantive response within 30 calendar days

If you are not satisfied with zc288's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under our gaming licence, or to seek independent dispute resolution as outlined in our Terms & Conditions.