Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how zc288, operating through the domain zc288.cam ("Platform", "we", "us", "our"), collects, uses, stores, and protects personal data provided by or relating to users ("you", "your") of our Platform.

zc288 is an online betting and live casino information platform providing educational content about sports betting, live casino games, payment methods, and responsible gambling practices, primarily serving users in Pakistan. We are committed to handling personal data with the highest standards of care, transparency, and security.

This Policy applies to all personal data processed by zc288 in connection with your use of the Platform, including data collected during account registration, KYC verification, support interactions, and general browsing. By using the Platform, you confirm that you have read and understood this Policy.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings stated below:

• "Personal Data" — Any information relating to an identified or identifiable natural person ("data subject"), including name, email address, phone number, CNIC, IP address, and any other data that could directly or indirectly identify an individual.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is zc288.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, under contractual obligations and appropriate safeguards.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookie" — A small text file placed on your device by a website, used to recognise returning visitors, remember preferences, and collect analytical data.
• "KYC" — Know Your Customer — the process of verifying a user's identity through documentation such as a CNIC, passport, or utility bill.

3 Data Controller Identity

The Data Controller for personal data collected through the Platform is:

zc288 is not affiliated with, endorsed by, or connected to the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any Pakistani financial institution. Accordingly, our data processing obligations are governed by the applicable licensing jurisdiction's data protection framework, not the laws of Pakistan specifically — though we respect and endeavour to align with principles of data protection recognised under Pakistani law where applicable.

4 Personal Data We Collect

We collect personal data through a variety of interactions. The categories of data collected and their primary collection contexts are described in the table below:

5 Legal Basis for Processing

zc288 processes personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, KYC verification, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including anti-money laundering (AML) checks, fraud prevention obligations, and record-keeping requirements imposed by our licensing jurisdiction.
• Legitimate Interests: Processing necessary for our legitimate business interests — including Platform security, fraud detection, analytics, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain cookie-based analytics, where you have given freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a data subject or another person — for example, where a user discloses a gambling-related crisis requiring urgent intervention.

6 How We Use Your Personal Data

We use personal data collected through the Platform for the following purposes:

1. Account Management: Creating, maintaining, and managing your user account, including authentication and access control.
2. KYC & Identity Verification: Verifying your identity and eligibility to use the Platform, in compliance with our regulatory obligations and responsible gambling policies.
3. Transaction Processing: Facilitating PKR deposits and withdrawals through referenced payment channels, including bank transfers. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are used contextually; we do not share your data with these providers unless required for a specific verified transaction.
4. Customer Support: Responding to enquiries, complaints, and requests submitted via Live Chat, Help Center, or email — in English or, where available, Urdu.
5. Fraud Prevention & Security: Detecting and preventing fraudulent activity, account abuse, money laundering, and other unlawful conduct.
6. Responsible Gambling: Monitoring usage patterns to identify potential problem gambling indicators and applying appropriate interventions, including self-exclusion, deposit limits, and loss limits.
7. Platform Analytics & Improvement: Analysing aggregated usage data to understand how the Platform is used and to improve its content, features, and performance.
8. Legal Compliance: Meeting record-keeping, reporting, and disclosure obligations imposed by applicable law and licensing regulators.
9. Marketing Communications: Sending promotional updates and platform news, where you have given explicit consent. You may opt out at any time.

7 Data Sharing & Disclosure

zc288 does not sell, rent, or commercially transfer your personal data to any third party. We may share personal data only in the following limited circumstances:

• Service Providers: Trusted third-party processors who assist in delivering Platform services — such as KYC verification services, hosting providers, analytics platforms, and customer support tooling. All processors are bound by contractual data protection obligations.
• Regulatory & Law Enforcement: Where required by applicable law, court order, or a request from a competent authority, we may disclose personal data. We will notify you of any such request unless prohibited by law.
• Anti-Fraud & AML Partners: Fraud prevention and anti-money laundering databases may be consulted during KYC and transaction monitoring processes.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

In all cases, data sharing is limited to the minimum necessary and is subject to contractual safeguards requiring the recipient to protect the data at least to the same standard as this Policy requires.

8 Cookies & Tracking Technologies

zc288 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session states, and gather analytical data about usage patterns. The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the basic operation of the Platform, including session management, security tokens, and authentication. These cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies: Used to understand how users navigate the Platform — including which pages are visited most frequently and where users exit. Data collected is aggregated and anonymised where possible.
• Functionality Cookies: Store your preferences — such as language settings and notification preferences — to personalise your experience on return visits.
• Targeting / Marketing Cookies: Used only where you have given explicit consent to deliver relevant promotional content. You may withdraw this consent at any time via your account settings or by contacting us.

Most browsers allow you to control or block cookies through their settings. Disabling strictly necessary cookies may impair your ability to use certain Platform features. For full details on how to manage cookies, refer to your browser's help documentation.

9 Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with the Platform, plus an additional period as required for legal compliance and dispute resolution.
• KYC & Identity Documents: Retained for a minimum period as mandated by our licensing jurisdiction's AML and KYC regulations — typically five years following account closure or the last transaction date.
• Transaction Records: Retained for at least five years from the date of each transaction, or as required by applicable financial regulations.
• Support Communications: Retained for up to three years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent plus a reasonable period thereafter to demonstrate compliance.
• Technical & Log Data: Typically retained for up to twelve months unless extended retention is required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

10 Security Measures

zc288 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data at rest, including financial information and identity verification documents.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular security assessments and penetration testing to identify and address vulnerabilities.
• Multi-factor authentication (MFA) requirements for administrative access to systems processing personal data.
• Incident response procedures enabling prompt identification, containment, and notification of data breaches where required.

11 International Data Transfers

zc288 operates through infrastructure that may be located outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in a country other than your country of residence. Such countries may have data protection laws that differ from those applicable in Pakistan.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — such as standard contractual clauses, data processing agreements with equivalent protection standards, or transfers to jurisdictions with recognised adequacy decisions — to protect your rights and maintain the level of protection described in this Policy.

By using the Platform, you acknowledge and consent to the potential international transfer of your personal data as described in this section, subject to the safeguards outlined above.

12 Minors & Age Restrictions

The Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from individuals below this age threshold.

If we become aware that personal data has been collected from a minor, we will promptly delete that data and close the associated account. If you believe that a minor has provided personal data to us, please contact us immediately at [email protected].

Age verification is conducted as part of the KYC process. Providing false age information is a breach of our Terms & Conditions and may result in account termination and forfeiture of any associated balances.

13 Exercising Your Data Rights

To exercise any of the data rights described in the "Your Data Rights" section of this page — including access, rectification, erasure, restriction, portability, or objection — please submit a written request to our support team:

Identity verification will be required before any data request is actioned, to protect your data against unauthorised disclosure. We will never charge a fee for exercising your data rights unless your request is manifestly unfounded or excessive.

Where you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority in the relevant jurisdiction.

14 Changes to This Privacy Policy

zc288 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — for example, a new category of data collection, a new sharing arrangement, or a change to the legal basis for processing — we will provide advance notice through a prominent notice on the Platform homepage, or via email to registered users where contact information is available.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of those changes. If you do not agree to the revised Policy, you must discontinue use of the Platform and may request account deletion by contacting us.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us. Our support team handles data-related enquiries in both English and, where available, Urdu.

For terms of use, please read our Terms & Conditions. For responsible gambling resources, visit our Responsible Gambling page.

This Privacy Policy was last reviewed and updated in January 2026. We recommend bookmarking this page and revisiting it periodically to stay informed of any changes.