za88 takes the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect from Pakistani players, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own data. Reading this document in full before registering an Account is strongly encouraged.
Six core commitments that underpin za88's approach to Pakistani player data privacy.
Every data transmission between your device and za88 — logins, deposits, withdrawals, and account updates — is encrypted using 256-bit SSL. The same standard used by Pakistan's major commercial banks.
za88 does not sell, rent, or trade your personal information to third-party marketing companies. Your data exists to operate your Account and comply with licensing obligations — nothing more.
Identity documents submitted for KYC verification (CNIC, selfies) are stored in encrypted, access-controlled environments and are accessible only to authorised compliance personnel on a need-to-know basis.
You control whether za88 sends you promotional communications. Marketing consent can be withdrawn at any time from your Account settings or by contacting za88 support directly. Withdrawal of marketing consent does not affect Account functionality.
za88 retains personal data only for as long as is necessary for the stated purpose or as required by applicable licensing and anti-money-laundering regulations. Data is securely deleted or anonymised when retention periods expire.
za88's data practices are governed by applicable international gaming licensing standards, which include mandatory data protection requirements. Players benefit from the regulatory framework — not just policy promises.
1.1 This Privacy Policy applies to all personal data processed by za88 in connection with the za88 platform accessible at za88.lol, including all associated account services, payment processing, customer support interactions, bonus systems, and marketing communications.
1.2 For the purposes of applicable data protection principles, za88 acts as the data controller in respect of personal data collected directly from Players during registration, KYC verification, gameplay, and account management. Where za88 engages third-party processors to handle specific data functions (such as payment processing or identity verification), those processors act on za88's instructions and are contractually bound to maintain appropriate data protection standards.
1.3 This policy is intended for Pakistani players and users of the za88 platform. Where specific provisions of local data protection legislation apply to Pakistani residents, za88 will comply with those provisions to the extent they are applicable to an internationally licensed gaming operator.
1.4 This Privacy Policy should be read alongside za88's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how za88 handles player information.
2.1 za88 collects personal data across several categories depending on the nature of the interaction. The following table sets out what data is collected, when, and why:
| Category | Data Points Collected | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, mobile number, email address, username, account password (hashed). | At account creation. |
| Identity Verification (KYC) | CNIC number and images (front/back), selfie photograph holding CNIC, proof of address where requested. | Before first withdrawal or upon za88's request. |
| Financial Data | Deposit amounts, payment method identifiers (JazzCash/EasyPaisa mobile number, bank account details), transaction histories, withdrawal requests. | On each financial transaction. |
| Gameplay Data | Game session records, wagers placed, game outcomes, bet histories, bonus usage, sports bets placed and settled. | Throughout platform use. |
| Technical Data | IP address, device type, operating system, browser type and version, session duration, pages visited, referral source. | Automatically on each platform visit. |
| Communications Data | Content of support chat transcripts, email correspondence, dispute records, and any information voluntarily shared during support interactions. | When contacting za88 support. |
| Marketing Preferences | Opt-in/opt-out status for promotional SMS, email, and push notifications; bonus claim history. | At registration and updated as preferences change. |
2.2 za88 does not knowingly collect sensitive personal data beyond what is strictly required for KYC compliance, responsible gaming monitoring, and anti-money laundering obligations. Health data, religious or political beliefs, and racial or ethnic origin data are not collected or processed by za88.
3.1 za88 uses personal data collected from Pakistani players for the following purposes:
4.1 za88 processes personal data on the following legal bases, which may apply cumulatively depending on the processing activity:
5.1 KYC identity verification is a mandatory requirement of za88's international gaming licence. za88 is obligated to verify the identity and age of all Players before processing withdrawals and to conduct ongoing due diligence for AML purposes.
5.2 For Pakistani players, KYC verification requires submission of a valid NADRA-issued Computerised National Identity Card (CNIC). Document images are transmitted over encrypted channels, stored in a secure, access-controlled environment, and are accessible only to authorised compliance personnel.
5.3 za88 may use third-party identity verification service providers to process KYC documents. These providers are contractually bound to process data only on za88's instructions, maintain equivalent security standards, and delete data upon completion of the verification function.
5.4 KYC data is retained for a minimum of five years following Account closure, as required by applicable AML regulations. Following the mandatory retention period, KYC documents are securely and permanently deleted.
6.1 za88 processes financial transaction data — including deposit amounts, payment method identifiers, withdrawal requests, and transaction timestamps — as a necessary component of operating the gaming platform and meeting AML monitoring obligations.
6.2 Payment method identifiers (such as JazzCash mobile numbers, EasyPaisa wallet details, or bank account numbers) are stored in encrypted form and used solely to process your transactions and verify payment ownership during the withdrawal process.
6.3 za88 does not store full card numbers, CVV codes, or PIN numbers for card-based payments. Card transactions are processed through PCI-DSS compliant payment gateways, and za88 receives only a tokenised reference rather than raw card data.
6.4 USDT TRC20 cryptocurrency transactions are recorded by wallet address. Blockchain transactions are publicly visible by nature; za88 has no control over the public visibility of on-chain transaction data.
6.5 Transaction records are retained for a minimum of five years following each transaction, as required by applicable AML and gaming licence record-keeping obligations.
7.1 za88 uses cookies and similar tracking technologies on the za88.lol platform. Cookies are small data files stored on your device that help za88 operate the platform correctly, remember your preferences, and analyse usage patterns.
7.2 za88 uses the following categories of cookies:
7.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair core platform functionality including login and payment processing. Instructions for managing cookies are available in your browser's help documentation.
8.1 za88 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Data sharing with third parties occurs only in the following defined circumstances:
8.2 All third-party data processors engaged by za88 are contractually required to process data only for the specified purpose, implement appropriate security measures, and not retain data beyond what is necessary for the processing function.
9.1 za88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable licensing, AML, and record-keeping regulations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of Account plus 5 years after closure. | Licensing obligation / AML regulation. |
| KYC Identity Documents | 5 years from Account closure or last transaction. | AML / licensing mandatory requirement. |
| Financial Transaction Records | 5 years from each transaction date. | AML / licensing mandatory requirement. |
| Gameplay & Bet History | 5 years from Account closure. | Licensing / dispute resolution. |
| Support Chat Transcripts | 3 years from the date of interaction. | Dispute resolution / quality assurance. |
| Marketing Preferences | Duration of Account; deleted on Account closure. | Consent management. |
| Technical / Log Data | 13 months on a rolling basis. | Security monitoring / fraud prevention. |
9.2 Upon expiry of the relevant retention period, personal data is either securely and permanently deleted or anonymised such that it can no longer be associated with any individual Player.
10.1 za88 implements a layered set of technical and organisational security measures designed to protect Player data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:
10.2 While za88 takes all reasonable steps to protect your data, no digital system is entirely immune to risk. Players are responsible for maintaining the confidentiality of their own login credentials, enabling 2FA, and notifying za88 promptly of any suspected unauthorised Account access.
11.1 za88 recognises the following data rights for Players in respect of their personal data. Requests to exercise these rights can be submitted to support@za88.lol and will be processed within 30 days:
You may request a copy of the personal data za88 holds about you, along with information about how it is being processed and the legal basis for processing.
You may request correction of inaccurate or incomplete personal data held by za88. Corrections to name, date of birth, or CNIC details must be supported by documentary evidence.
You may request deletion of personal data where it is no longer necessary for the purpose collected, consent has been withdrawn, or processing is unlawful. This right is subject to mandatory retention obligations under AML and gaming licensing regulations, which may prevent immediate deletion of certain records.
You may request that za88 restrict certain processing activities while a rectification or objection request is being assessed.
You may request that za88 provide your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to direct marketing, za88 will cease that processing immediately without requiring justification.
12.1 za88 does not knowingly collect personal data from individuals under the age of 21. The za88 platform is strictly intended for adults aged 21 and above. Age is verified at the KYC document stage using government-issued CNIC — not merely a self-declaration checkbox during registration.
12.2 Where za88 discovers or is informed that an Account has been registered by a person under 21 years of age, the Account will be immediately closed, all deposits will be returned to the originating payment method, all accrued winnings will be voided, and all personal data associated with the Account will be deleted to the extent permitted by applicable regulations.
12.3 Parents or guardians who become aware that a minor has registered an Account with za88 should contact za88 support immediately at support@za88.lol. za88 will act on all such notifications promptly.
13.1 za88 may send promotional communications — including bonus offers, free spin promotions, PSL betting specials, and platform announcements — to Players who have opted in to marketing communications during registration or subsequently through Account settings.
13.2 Marketing communications from za88 may be delivered via: SMS to your registered mobile number; email to your registered email address; and push notifications if you have enabled these on a mobile-optimised platform session.
13.3 You may withdraw consent to marketing communications at any time by: updating your preferences in your za88 Account settings; clicking the unsubscribe link in any za88 marketing email; or contacting za88 support at support@za88.lol with a written opt-out request. Opt-out requests are processed within 5 business days. Withdrawal of marketing consent does not affect your Account access, gameplay, or withdrawal rights.
13.4 za88 does not conduct cold marketing outreach to individuals who have not registered an Account. All za88 marketing is directed only at registered Players who have provided consent.
14.1 za88 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, regulatory requirements, or data processing practices. The current version of the Privacy Policy — together with its effective date — is always available at za88.lol/privacy-policy.
14.2 Material changes to this Privacy Policy will be communicated to registered Players via the email address on their Account with a minimum of 14 days' advance notice, except where changes are necessitated on shorter notice by applicable regulatory or legal obligation.
14.3 Continued use of the za88 platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should cease using za88 and contact support to request Account closure.
15.1 For all privacy-related enquiries, data rights requests, or concerns about how za88 handles your personal data, please contact the za88 Data Privacy team:
15.2 za88 aims to resolve all privacy complaints within 30 calendar days. Where a complaint cannot be resolved to your satisfaction, you retain the right to escalate your concern to the relevant supervisory authority in your jurisdiction or to za88's applicable gaming licensing regulator.
15.3 For responsible gaming-related privacy concerns — such as how your gameplay data is used for responsible gaming monitoring, or how self-exclusion data is handled — please visit the za88 Responsible Gaming page or contact support directly. Self-exclusion data is handled with the highest level of confidentiality and is never used for any commercial purpose.
Your data is protected, your identity is secure, and your withdrawals go straight to your JazzCash or EasyPaisa. One za88 account unlocks cricket betting, live casino, 200+ slots, Pool Rummy, and Double Fortune. 21+ only.
Access za88 Securely21+ only. Real money gaming. International licensing standards apply. Please gamble responsibly.