This Privacy Policy explains how ZY888 collects, uses, stores and protects personal data provided by users of the Platform. It also sets out the rights available to you as a data subject and the lawful bases upon which we process your information.
These highlights summarise our core privacy commitments. They are provided for quick reference only — the full legal text in each section governs in all cases.
ZY888 collects only the personal data necessary to register your account, process transactions, complete KYC verification and fulfil our legal and compliance obligations. We do not collect data unnecessarily.
All data transmitted between your device and our platform is encrypted using industry-standard TLS/SSL protocols. Stored data is protected through access controls, encryption at rest and regular security reviews.
You have rights to access, correct, delete and restrict processing of your personal data. You can also object to certain processing activities and request data portability where applicable under governing law.
ZY888 does not sell personal data to third parties. Data is shared with processors only to the extent required for service delivery, legal compliance and fraud prevention — and only under binding data-processing agreements.
We use cookies for essential platform operation, analytics and user experience improvements. Cookie preferences can be managed through your browser settings. Non-essential cookies are not set without your consent where required by law.
Promotional emails and notifications are sent only to users who have opted in or where a legitimate interest applies. You may withdraw consent and unsubscribe at any time through your account settings or by contacting support.
ZY888 ("we", "us", "our" or the "Platform") is an English-language online betting and live casino information platform accessible at zy888.cam. We are committed to protecting the privacy and security of the personal data we collect from users ("you", "User", "Data Subject") in connection with your use of the Platform and its associated services.
This Privacy Policy ("Policy") has been prepared to inform you clearly and transparently about:
By creating an account on ZY888, using the Platform's services or continuing to browse the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with our Terms & Conditions.
Note for Pakistani Users: Pakistan's data protection framework continues to develop. ZY888 applies data protection practices consistent with internationally recognised standards and the laws of the operator's license jurisdiction. This Policy does not constitute legal advice regarding Pakistani data protection law. Users are encouraged to seek independent legal advice where required.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, CNIC number, IP address, device identifiers and transaction records. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, retrieval and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, ZY888. |
| "Data Processor" | A third party that processes personal data on behalf of ZY888, subject to our instructions and a binding data-processing agreement. |
| "Data Subject" | The individual whose personal data is being processed — in this context, a registered ZY888 user or Platform visitor. |
| "Consent" | A freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a defined purpose. |
| "KYC" | Know Your Customer — identity, age and address verification processes required for account activation and withdrawal processing. |
| "Cookies" | Small text files stored on your device by the Platform for purposes including session management, analytics and user preference storage. |
ZY888, operating at zy888.cam, acts as the Data Controller in respect of personal data collected through the Platform. ZY888 determines the purposes for which your personal data is collected and the manner in which it is processed.
For all data protection enquiries, requests to exercise your rights or complaints regarding our data handling practices, please contact our designated data protection point of contact:
Data Protection Contact:
Email: [email protected]
Subject Line: "Data Protection Enquiry — [Your Username]"
Response target: within 5 business days for standard enquiries; within 30 days for formal data subject access requests.
ZY888 collects the following categories of personal data from users. In each case, we collect only what is required for the specified purpose:
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number or passport number, nationality | Account registration, age verification, KYC compliance, AML obligations |
| Contact Data | Email address, mobile phone number, residential address (city and province) | Account communication, support, KYC verification, transaction notifications |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e.g. last 4 digits, wallet ID), transaction amounts in PKR | Payment processing, fraud prevention, AML monitoring, bonus management |
| Technical Data | IP address, device type, browser type and version, operating system, session identifiers, login timestamps | Platform security, fraud detection, performance optimisation, regulatory compliance |
| Usage Data | Pages viewed, features accessed, search queries, session duration, betting and wagering activity records | Platform improvement, personalisation, responsible gambling monitoring, analytics |
| KYC Documents | CNIC scan (front and back), passport photo page, proof-of-address documents, selfie or liveness-check images | Mandatory identity and age verification, AML and fraud prevention compliance |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service delivery, dispute resolution, training and quality improvement |
| Marketing Preferences | Opt-in / opt-out status for promotional communications, preferred communication channel | Sending targeted promotional content only to users who have consented to receive it |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes (other than where required for liveness-check KYC) or health data, except where explicitly required by applicable law.
ZY888 collects personal data through the following channels:
We may receive data about you from third-party service providers including payment processors, fraud detection services and identity verification providers. All third-party data processors are subject to binding data-processing agreements.
ZY888 processes personal data only where a recognised lawful basis exists. The following bases apply to our principal processing activities:
ZY888 uses the personal data we collect for the following defined purposes:
ZY888 does not sell, rent or trade your personal data. We disclose personal data to third parties only in the following circumstances:
We share data with trusted third-party service providers who process data on our behalf under binding data-processing agreements. These include:
We may disclose personal data to competent authorities, regulators, law enforcement agencies or courts where required by applicable law, a court order or a lawful regulatory request. We will notify affected users where legally permitted to do so.
In the event of a merger, acquisition, restructuring or sale of ZY888 assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection standards being maintained. You will be notified of any such transfer.
Important: ZY888 will never ask you to provide sensitive financial credentials (full bank account numbers, full card numbers, online banking passwords) through live chat, email or any channel other than the secure operator cashier or KYC portal. Report any such requests to [email protected] immediately.
ZY888 operates internationally and your personal data may be transferred to, and processed in, countries outside your country of residence — including countries that may not provide the same level of data protection as Pakistan or the operator's primary jurisdiction.
Where personal data is transferred internationally, we implement appropriate safeguards including:
By using ZY888, you acknowledge that your data may be processed in jurisdictions outside Pakistan and consent to such transfers where required.
ZY888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Indicative Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of active account + 5 years post-closure | AML compliance and regulatory retention requirements |
| KYC Documents | 5 years post-account closure or last transaction | AML, financial crime prevention and regulatory audit obligations |
| Transaction Records | 5–7 years from transaction date | Financial record-keeping, tax and regulatory compliance |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical and Usage Data | Up to 24 months | Security monitoring, fraud detection and analytics |
| Marketing Preference Records | Until consent is withdrawn + 3 years | Evidence of consent for regulatory purposes |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
ZY888 uses cookies and similar tracking technologies to operate the Platform effectively, analyse usage patterns and enhance the user experience. A cookie is a small text file placed on your device when you access the Platform. Cookies do not contain executable code and cannot access other files on your device.
| Cookie Type | Purpose | Category |
|---|---|---|
| Session Cookies | Maintain your login state, basket and preferences during a single browsing session. Deleted when you close your browser. | |
| Authentication Cookies | Remember your login across sessions where "Remember Me" is enabled. Carry session tokens to verify your identity. | |
| Security Cookies | Support fraud detection, CSRF protection and account security monitoring functions. | |
| Analytics Cookies | Collect anonymised data about how users navigate the Platform — pages visited, session duration, entry and exit points — to improve content and performance. | |
| Preference Cookies | Store user preferences such as language setting, odds format and notification choices. | |
| Marketing Cookies | Used to track referral sources and, where consent has been given, to deliver targeted promotional content. |
You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Disabling necessary cookies may affect Platform functionality — for example, you may be unable to maintain a logged-in session. Instructions for managing cookies in common browsers are available through the respective browser's help documentation. Marketing and analytics cookies may be declined without affecting core Platform access.
As a Data Subject, you have the following rights in relation to your personal data held by ZY888. These rights are subject to applicable legal limitations and may be qualified in specific circumstances.
You have the right to request a copy of the personal data ZY888 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR). We will respond within 30 days of receiving a valid request.
You have the right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your account dashboard. For corrections to KYC documents or identity records, contact [email protected].
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to our retention obligations under AML and financial regulations, which may require us to retain certain data for defined periods.
You may request that we restrict processing of your data in certain circumstances — for example, where you contest the accuracy of your data or object to processing based on legitimate interests, pending verification.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, commonly-used, machine-readable format for transfer to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately. Where you object to other legitimate-interest processing, we will balance your rights against our interests and communicate the outcome.
Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting [email protected]. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
To exercise any of the rights listed above, contact ZY888 at [email protected] with the subject line "Data Subject Rights Request — [Your Username]". We will verify your identity before processing any request. Standard requests will be addressed within 30 days. Complex or high-volume requests may require up to 90 days, in which case we will notify you within the initial 30-day period.
ZY888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18 years, or under the higher minimum age required by the operator's license jurisdiction. Age verification is a mandatory step in our KYC process.
If you are a parent or guardian and believe that a minor has registered on ZY888 or submitted personal data to the Platform without authorisation, please contact us immediately at [email protected]. Upon confirmation, we will take immediate action to suspend the account, delete the minor's personal data and, where appropriate, refer the matter to relevant authorities.
Parents and guardians are advised to use parental-control and content-filtering software to restrict access to gambling-related platforms on shared or family devices.
ZY888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:
Despite our security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should contact us immediately if you suspect unauthorised access to your account.
ZY888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform features. The "Last Reviewed" date at the top of this Policy will be updated accordingly whenever a change is made.
Where amendments are material — for example, changes to the categories of data we collect, new third-party sharing arrangements or significant changes to user rights — we will notify registered users by email or through a prominent Platform notification prior to the changes taking effect.
Continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.
For any questions, concerns or requests related to this Privacy Policy, the handling of your personal data, or the exercise of your data subject rights, please contact us through the following channels:
Privacy & Data Protection Enquiries:
Email: [email protected]
Subject Line: "Privacy Enquiry" or "Data Subject Rights Request"
General Support:
Live Chat: Available 24 hours a day, 7 days a week through the Platform interface.
Email Response Target: Within 5 business days for privacy enquiries; within 30 days for formal data subject access requests.
Languages: English and Urdu.
Please do not include full CNIC numbers, passport numbers, passwords or full payment card details in unencrypted email correspondence. ZY888 support staff will never request your full password.
Our support team is available 24/7 to assist with data enquiries, account matters and responsible gambling tools. You can also explore our FAQ for quick answers or our Terms & Conditions for the full platform agreement.
18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling. Please play responsibly.