zh889 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following definitions apply throughout this document:

• "zh889" / "we" / "us" / "our" refers to the zh889 online gaming platform and the entity operating it under an international gaming licence, accessible at zh889.bet.
• "Player" / "you" / "your" refers to any individual who registers an account with zh889 or accesses the zh889 platform in any capacity, including as a visitor without a registered account.
• "Personal Data" means any information that relates to an identified or identifiable natural person — that is, any data that could be used, alone or in combination with other data, to identify you as an individual.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" refers to zh889 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Third-Party Service Provider" refers to any external company or individual engaged by zh889 to provide a specific service — such as payment processing, identity verification, or customer support technology — that requires limited access to player data to perform that service.
• "KYC" stands for Know Your Customer — the regulatory identity verification process zh889 is required to conduct under its international gaming licence obligations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a defined purpose.

2 Who We Are

zh889 is an internationally licensed online gaming platform offering casino games, live dealer games, sports betting (including cricket, PSL, and international events), and slot games to registered adult players. zh889 operates with a particular focus on serving the Pakistani market — including players in Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan — offering PKR-denominated accounts and localised payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

As the operator of the zh889 platform, zh889 acts as the Data Controller in relation to the personal data of all registered players and website visitors. zh889 takes its data protection responsibilities seriously and processes all personal data in accordance with the principles described in this Privacy Policy and in compliance with applicable international data protection standards.

3 Information We Collect

3.1 — Information You Provide Directly

When you register an account with zh889, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any zh889 feature that requires input, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, CNIC number or passport number, and a copy of government-issued photo identification.
• Contact Data: Email address, mobile phone number, and current residential address.
• Financial Data: JazzCash or EasyPaisa mobile account number, bank account details (account number, IBAN, bank name), USDT wallet address, and transaction history on zh889.
• Identity Verification Documents: Copies of your CNIC, passport, or driving licence, utility bills or bank statements submitted as proof of address, and any additional documentation requested during enhanced KYC.
• Support Communications: The content of any messages, chat transcripts, or emails you exchange with zh889's support team.
• Responsible Gaming Data: Any deposit limits, loss limits, cooling-off periods, or self-exclusion requests you submit through your account settings.

3.2 — Information Collected Automatically

When you access the zh889 platform, certain technical data is collected automatically through standard server logging and analytics processes:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, session duration, betting activity logs, login timestamps, and navigation paths within the platform.
• Transaction Logs: Automated records of all deposits, withdrawals, bets placed, game outcomes, bonus activations, and wagering activity on your account.
• Cookie & Tracking Data: Data collected via cookies and similar tracking technologies as described in Section 8 of this policy.

3.3 — Information from Third Parties

zh889 may receive personal data about you from regulated third-party sources in the following circumstances:

• Identity verification agencies engaged by zh889 to cross-check your submitted KYC documents against official databases.
• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay) who confirm the status and ownership of payment methods you link to your account.
• Fraud prevention and anti-money laundering screening services that flag accounts or transactions associated with known fraudulent activity.
• Regulatory authorities or law enforcement agencies, where zh889 is legally required to receive and record information about a specific player.

4 How We Use Your Data

zh889 uses the personal data it collects for the following specific purposes. For each purpose, the corresponding legal basis under Section 5 is indicated in brackets:

5 Legal Basis for Processing

zh889 processes personal data only where a valid legal basis exists. The four legal bases relied upon by zh889 are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between zh889 and you as a registered player — including account creation, operating your account, processing your transactions, and delivering the games and services you have signed up to use.
• Legal Obligation: Processing that zh889 is required to carry out by applicable law or by the terms of its international gaming licence — including KYC identity verification, anti-money laundering transaction monitoring, age verification, and regulatory record-keeping.
• Legitimate Interests: Processing carried out in pursuit of zh889's legitimate business interests, provided those interests are not overridden by your fundamental privacy rights. Legitimate interests relied upon by zh889 include fraud prevention, platform security, network integrity, abuse prevention, and aggregate platform analytics. zh889 conducts a balancing test before relying on legitimate interests for any processing activity.
• Consent: Processing that you have explicitly opted into, specifically the receipt of marketing communications from zh889. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Sharing Your Data

zh889 does not sell, rent, or trade your personal data. The only circumstances under which zh889 shares your personal data with third parties are the following:

6.1 — Regulated Third-Party Service Providers

zh889 engages regulated third-party companies to deliver specific components of its platform services. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT network providers), identity verification and KYC service providers, fraud detection and anti-money laundering screening services, customer support platform providers, and cloud infrastructure and hosting providers. All third-party service providers are subject to contractual data processing agreements that restrict them from using your data for any purpose other than the specific service they are contracted to deliver for zh889.

6.2 — Legal and Regulatory Obligations

zh889 may be required to disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by applicable law, by a valid court order, by zh889's gaming licence obligations, or where zh889 has reasonable grounds to believe that disclosure is necessary to prevent fraud, financial crime, or serious harm. zh889 will notify affected players of such disclosures where it is legally permitted to do so.

6.3 — Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zh889's business assets, personal data held by zh889 may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, zh889 will ensure that the acquiring entity is bound by privacy obligations no less protective than those described in this policy, and will notify registered players prior to their data being transferred.

7 Data Retention

zh889 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or licensing obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either permanently deleted from zh889's systems or irreversibly anonymised such that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

8 Cookies & Tracking Technologies

zh889 uses cookies and similar tracking technologies to operate and improve the platform, personalise your experience, and support fraud prevention and security functions. The following categories of cookies are used on zh889:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit settings, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect aggregate, anonymised data about how players navigate zh889 — including which pages are visited, how long sessions last, and which features are most used. This data helps zh889 improve the platform experience for all players.
• Security & Fraud Prevention Cookies: Used to detect suspicious behaviour, identify potentially fraudulent account activity, and protect zh889 and its players from abuse, bot activity, and unauthorised access attempts.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use zh889. zh889 does not use third-party advertising cookies or cross-site tracking cookies.

9 Security Measures

zh889 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The following technical and organisational security measures are in place:

• TLS/SSL Encryption: All data in transit between your browser or app and zh889's servers is encrypted using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal data — including identity documents, financial data, and KYC records — is stored in encrypted form on zh889's servers.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their zh889 accounts. 2FA adds an additional verification step — typically an OTP sent to your registered mobile number — that prevents unauthorised access even if your password is compromised.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. zh889 employees may only access player data that is directly relevant to their job function. All internal data access is logged and auditable.
• Intrusion Detection: zh889's infrastructure is monitored continuously by automated intrusion detection systems that identify and respond to anomalous access patterns in real time.
• Data Breach Response: zh889 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player personal data, affected players will be notified without undue delay, and relevant regulatory authorities will be informed as required by licensing obligations.

While zh889 employs robust security measures, no digital system is entirely immune to risk. Players are encouraged to use strong, unique passwords for their zh889 account and to enable 2FA as an additional layer of personal account protection.

10 Your Rights

As a registered zh889 player, you hold the following data subject rights in relation to your personal data. zh889 will respond to all valid rights requests within 30 calendar days of receipt:

• Right of Access: You have the right to request a copy of all personal data that zh889 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that zh889 corrects any inaccurate or incomplete personal data it holds about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and consent is the sole legal basis), or where processing is unlawful. This right is subject to zh889's legal and regulatory retention obligations — we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You have the right to request that zh889 restricts its processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a machine-readable copy of personal data you have provided to zh889, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, where your individual circumstances warrant it. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where zh889 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact zh889's support team via live chat from your account dashboard or by emailing [email protected]. Please provide sufficient information for zh889 to identify your account and understand your request. zh889 may need to verify your identity before actioning a rights request.

11 Children's Privacy

If zh889 discovers, at any stage of the account lifecycle, that a registered player is under the age of 21, the account will be immediately and permanently closed, all funds will be returned to the originating payment method, and all associated personal data will be deleted in accordance with applicable law. Any winnings generated by an underage player will be forfeited and will not be returned.

zh889 encourages parents and guardians to monitor the online activity of minors in their care and to make use of internet filtering and parental control tools to prevent minors from accessing gambling platforms. If you believe a minor has accessed zh889 without authorisation, please contact zh889 support immediately via live chat or at [email protected].

12 International Data Transfers

zh889 operates under an international gaming licence and may store and process personal data on servers located outside Pakistan. Where personal data is transferred to countries that may have different data protection standards than those applicable in Pakistan, zh889 ensures that appropriate safeguards are in place to protect your data throughout the transfer and in the destination jurisdiction.

Appropriate safeguards used by zh889 for international transfers include contractual clauses that bind recipient entities to data protection standards equivalent to those applied by zh889 itself, and where applicable, transfer only to jurisdictions that maintain recognised adequate standards of data protection. Third-party service providers involved in cross-border data processing are required by contract to maintain data security and confidentiality standards consistent with those described in this policy.

13 Amendments to This Policy

zh889 reserves the right to update, revise, or replace this Privacy Policy at any time. All amendments will be published on this page with an updated effective date displayed at the top of the document. Where amendments are material — meaning they meaningfully change how zh889 processes your personal data, what rights you hold, or with whom your data is shared — zh889 will provide reasonable advance notice to registered players via their registered email address or via a prominent in-platform notification before the changes take effect.

If you do not agree to any amended Privacy Policy, you should cease using zh889 and close your account before the effective date of the amendment by contacting zh889 support. Continued use of zh889 following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Archived versions of previous Privacy Policy iterations are available on request from zh889 support.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to zh889's handling of your personal data, please contact zh889 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from your account dashboard. Average response time under 3 minutes.
• Email: [email protected] (plain text — not a clickable link). Responses within 24 hours for standard queries; within 72 hours for formal data rights requests.

If you are not satisfied with zh889's response to your privacy complaint, you may have the right to escalate the matter to the data protection authority or regulatory body in your jurisdiction. In Pakistan, data protection oversight is an evolving regulatory area; zh889 encourages players with unresolved concerns to seek independent legal advice regarding the appropriate escalation route available to them.

zh889 is committed to resolving all privacy complaints fairly, transparently, and promptly. We view every privacy concern raised by a player as an opportunity to strengthen our data protection practices.