zc288 Privacy
Policy

Welcome to zc288 ("the Platform", "we", "us", "our"). This Privacy Policy describes how zc288 collects, processes, stores, and protects the personal information of users ("you", "your") who access or register on our website at zc288.org.

Privacy is not an afterthought at zc288 — it is a foundational principle of how we operate. Whether you are placing a bet on the PSL from Karachi, spinning the reels from Lahore, or simply browsing our cricket odds from Islamabad, this policy applies equally to you and governs every interaction your data has with our systems.

This policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and zc288.

zc288 collects personal information in several different ways depending on how you interact with the platform. Below is a clear breakdown of the categories of data we may hold about you.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where it is strictly required to operate responsible gaming tools (for example, self-exclusion processing).

zc288 uses the personal information we collect for specific, clearly defined purposes. We do not use your data for any purpose that would be incompatible with the reason it was originally collected.

• Account Management: Creating, verifying, and maintaining your zc288 account, including processing login sessions and account preference settings.
• Identity Verification (KYC): Meeting our regulatory obligations by confirming your age (21+), identity, and residential status before processing deposits or withdrawals.
• Payment Processing: Facilitating secure deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported PKR payment channels.
• Platform Delivery: Providing you with access to cricket betting markets, PSL odds, casino games, slot titles, and all other zc288 products and features.
• Fraud Prevention & AML: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators and reaching out proactively when our systems flag concerning activity on your account.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of support interactions.
• Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings.
• Legal Compliance: Fulfilling obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required audit records.

zc288 processes your personal data only where we have a valid legal basis for doing so. Our processing activities fall under the following lawful grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account creation, bet settlement, payment processing, and delivering the services you have requested.
• Legal Obligation: Processing necessary to comply with applicable regulatory requirements, including anti-money laundering (AML) laws, Know Your Customer (KYC) obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in zc288's legitimate business interests, such as fraud detection, platform security, service improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent to process data — such as for optional marketing communications — you retain the right to withdraw that consent at any time by updating your account communication preferences or contacting our support team.

zc288 operates as a responsible custodian of your personal data. We do not share your information with external parties except in the clearly defined circumstances set out below.

• Payment Processors: Your financial details are shared with our approved payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) solely for the purpose of processing your transactions. All payment partners are contractually bound to maintain the confidentiality of your data.
• Identity Verification Services: We use accredited third-party KYC providers to verify your identity and age as part of our regulatory obligations. These providers process only the data necessary for verification purposes.
• Game Software Providers: Casino game providers receive anonymised session data to facilitate game delivery and resolve technical disputes. No identifiable personal data is shared with game studios beyond what is technically required.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities where required by law, where disclosure is necessary to prevent fraud or criminal activity, or in response to a valid court order or regulatory instruction.
• IT & Hosting Service Providers: Our platform infrastructure partners have access to technical data in the course of maintaining and operating our systems. All such providers are bound by strict data processing agreements.

zc288 uses cookies and similar tracking technologies to operate, maintain, and improve the platform. A cookie is a small text file that is placed on your device when you visit our website. The cookies we use fall into the following categories:

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect the functionality of the zc288 platform. We do not use advertising or cross-site tracking cookies.

zc288 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are as follows:

• Account Data: Retained for the lifetime of your active account and for a minimum of five (5) years following account closure, in compliance with AML and KYC record-keeping obligations.
• Transactional & Betting Records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial and gaming regulations.
• Support Communication Records: Retained for three (3) years from the date of the interaction, unless they relate to an ongoing dispute or regulatory matter.
• Technical & Log Data: Typically retained for twelve (12) months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following any withdrawal of consent as evidence of compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

The security of your personal data is a technical and organisational priority at zc288. We have implemented a comprehensive set of safeguards designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols. This applies to account login, payment processing, and all API communications.
• Data Encryption at Rest: Sensitive personal data stored within our systems — including identity documents and financial details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within zc288 is strictly limited to employees and contractors who require it to perform their job functions. All staff undergo regular data protection training.
• Two-Factor Authentication: We encourage all users to enable 2FA on their zc288 accounts. Internal staff accounts with access to user data are required to use 2FA without exception.
• Penetration Testing: Our platform undergoes regular security assessments and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities proactively.
• Incident Response: zc288 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law.

As a user of the zc288 platform, you have a number of rights in relation to the personal data we hold about you. zc288 is committed to honouring these rights promptly and without unnecessary friction.

• Right of Access: You may request a copy of all personal data zc288 holds about you at any time. We will provide this information within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records for regulatory compliance.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you dispute the accuracy of your data or where you have objected to processing.
• Right to Data Portability: Where technically feasible and legally required, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will honour such requests unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team via live chat or at the email address listed in Section 13. We will acknowledge your request within 48 hours and aim to respond fully within 30 days.

The zc288 platform is strictly intended for use by persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

Parents and guardians of minor children are strongly encouraged to make use of available parental control software to prevent underage access to gambling websites. You are responsible for ensuring that no minor in your household can access your zc288 account or use your registered payment methods to fund gambling activity.

zc288 operates under an international gaming licence and our platform infrastructure may involve the processing of your personal data in jurisdictions outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

These safeguards may include contractual clauses binding our service providers to specific data protection standards, or reliance on the established data protection frameworks of the relevant jurisdiction. All third-party processors operating outside Pakistan are vetted for compliance with applicable data protection standards before any data transfer is permitted.

By using the zc288 platform, you acknowledge and agree that your personal data may be transferred to and processed in countries outside Pakistan in the manner described above.

zc288 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or the services we offer. The "Last updated" date at the top of this document will always reflect when the most recent revision was made.

Where changes are material — meaning they significantly affect how we use your data or your rights in relation to that data — we will notify registered users via the email address associated with their account, or via a prominent notice on the platform, at least seven (7) days before the changes take effect.

Your continued use of the zc288 platform following the publication of any revised Privacy Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to stay informed about how zc288 is protecting your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data zc288 holds about you, please do not hesitate to contact our team. We are available around the clock, every day of the year.

• Live Chat: Available directly within the zc288 platform — the fastest route to our support team for urgent privacy concerns.
• Email: support at zc288.org — for formal data subject requests, please include "Privacy Request" in your subject line.
• Response Time: Data subject requests are acknowledged within 48 hours and responded to in full within 30 days of receipt.

For formal data protection correspondence, please mark your communication clearly as "Data Protection Notice" to ensure it reaches the appropriate team without delay.