Privacy Policy — zh889
Your Data, Clearly Explained

This Privacy Policy ("Policy") is published by zh889 ("we", "us", "our"), the operator of the online betting and casino information platform available at zh889.cam. It describes the practices we follow when collecting, processing, storing and transferring personal data from users ("you", "your") who access or register an account on the Platform.

zh889 operates this Platform as an English-language gaming information service targeted at Pakistani sports and casino enthusiasts. We are committed to data privacy as a fundamental user right, not a compliance formality. This Policy is written in plain English so that users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan can understand how their data is handled.

By creating an account on zh889 or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, you should not use the Platform.

This Policy was last reviewed and updated on 1 January 2026. The most current version of this Policy is always available at zh889.cam/privacy-policy.

The following terms are used throughout this Policy with the meanings set out below:

zh889 collects personal data across several categories. The data collected varies depending on whether you are a registered user, a visitor or a person who has initiated but not completed registration.

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification purposes).
• Email address and, where provided, mobile phone number.
• Residential address including city (e.g., Karachi, Lahore, Islamabad) and postcode.
• Chosen username and encrypted account password.

• Copy of a valid government-issued photo ID: CNIC, passport or driving licence.
• Proof of residential address: utility bill, bank statement or official correspondence dated within three months.
• Payment method verification documents as required by anti-money-laundering procedures.

• Deposit and withdrawal transaction records including amounts (in PKR), dates, times and payment method type.
• Last four digits of payment instruments used (where applicable).
• Account balance history and bonus credit records.

• Bet placement records, selected markets, odds accepted and settlement outcomes.
• Casino game session data: games played, bet sizes, session duration and results.
• Responsible gambling tool usage: any limits set, self-exclusion requests and tool modification history.

• IP address and approximate geolocation derived from IP.
• Device type, operating system version and browser type.
• Session timestamps, page views and navigation paths within the Platform.
• Cookie identifiers and similar tracking technology data where applicable.

• Content of support communications via email, live chat or any other channel.
• Complaint submissions and dispute correspondence.
• Marketing preference data and opt-in/opt-out records.

Personal data is collected through the following channels:

• Directly from you: At account registration, during KYC submission, through support communications and when you set responsible gambling preferences.
• Automatically: Via cookies, server logs and analytics tools as you navigate the Platform. Technical data such as IP address, browser type and session behaviour are captured automatically.
• From third-party service providers: KYC verification results from our identity-check partners; fraud-screening signals from our risk management systems; payment verification data from payment processing providers.
• From publicly available sources: Where required for fraud prevention or AML compliance, zh889 may cross-reference publicly available information to verify the accuracy of data you have provided.

zh889 does not purchase marketing data lists or obtain personal data from social media platforms without your explicit consent.

The table below sets out the specific purposes for which zh889 processes personal data, along with the primary data categories involved in each processing activity.

For users subject to data protection frameworks that require a stated legal basis for processing (including GDPR-aligned jurisdictions), zh889 relies on the following bases:

• Contract performance: Processing necessary to fulfil the account registration agreement, provide betting services and process financial transactions.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) laws, KYC obligations and any regulatory orders from licensing authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring and internal analytics, provided such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, non-essential cookies and any sensitive data processing not covered by the above bases. Consent may be withdrawn at any time.

Pakistani users should note that Pakistan does not currently have a comprehensive data protection law requiring a formal legal basis for processing. zh889 applies the above framework voluntarily as a best-practice standard.

zh889 does not sell your personal data. We share data with third parties only where required for legitimate operational, legal or regulatory purposes. The following categories of recipients may receive limited personal data:

Third-party companies engaged by zh889 to provide specific services, including KYC verification, payment processing, fraud detection, platform hosting and customer support infrastructure. These providers act as data processors under contractual obligations that prohibit them from using your data for any purpose beyond the specific service they provide.

Where required by law, court order or regulatory direction, zh889 will disclose personal data to competent authorities. This includes disclosures required under AML legislation, licensing conditions or fraud investigations. Such disclosures are made only to the extent strictly necessary.

In the event of a merger, acquisition, restructure or sale of all or part of zh889's business, personal data may be transferred to the successor entity. Users will be notified of any such transfer via the Platform or registered email address.

Transaction data necessary to process deposits and withdrawals is shared with the relevant payment processing service. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah within the Platform are familiar contextual references for Pakistani users. zh889 does not represent that any of these providers currently process transactions for the Platform or that they endorse gambling services.

zh889 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember preferences and collect anonymised usage analytics. The following cookie categories are used:

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling other cookie types will not affect your core account functionality.

zh889 retains personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a reasonable period thereafter to handle any post-closure disputes or regulatory inquiries.
• KYC documents: Retained for a minimum of five (5) years following account closure, in compliance with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a minimum of three (3) years from the date of the communication.
• Marketing data (where consent-based): Retained until you withdraw consent or for a maximum of two (2) years from the last active engagement, whichever comes first.
• Anonymised analytics data: May be retained indefinitely as it does not constitute personal data following proper anonymisation.

When personal data is no longer required under these retention schedules, it is securely deleted or anonymised so that it can no longer be linked to your identity.

zh889 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL/TLS encryption applied to all data in transit between the user's browser and Platform servers.
• Encrypted storage of sensitive data at rest, including passwords (hashed and salted), KYC documents and financial records.
• Role-based access controls: only personnel with a specific, documented need to access personal data are authorised to do so.
• Regular security audits and penetration testing of Platform infrastructure.
• Secure development practices applied to all Platform code updates and third-party integrations.
• Incident response procedures in place to detect, contain and report data breaches in accordance with applicable notification obligations.

No data transmission over the internet can be guaranteed as completely secure. While zh889 takes all reasonable precautions, we cannot provide an absolute security guarantee. Any personal data you transmit to us is done at your own risk, subject to the protections described above.

Subject to applicable law, you have the following rights in relation to your personal data held by zh889. These rights are available to all users, including those in Pakistan, as part of our voluntary commitment to best-practice data protection standards:

To exercise any of the rights above, submit a written request to [email protected] with the subject line "Data Rights Request". zh889 will acknowledge your request within five (5) business days and aim to respond in full within thirty (30) days. Complex requests may require additional time; you will be notified if this applies.

zh889 is an adults-only platform. Access is strictly prohibited for individuals under the age of 18, or such higher minimum age as required by the operator's licensing jurisdiction or applicable local law — whichever is greater.

zh889 does not knowingly collect personal data from minors. If we become aware that personal data has been collected from an individual under the applicable minimum age, we will immediately close the associated account, delete all personal data collected in connection with that account and forfeit any remaining balance.

Parents or guardians who believe a minor has accessed or registered on zh889 should contact our support team at [email protected] immediately. We take these reports seriously and act on them without delay.

zh889 may transfer personal data to countries outside Pakistan for the purposes of operating the Platform, including storage on servers hosted internationally and use of third-party service providers (including KYC and fraud-prevention providers) located in various jurisdictions.

Where personal data is transferred internationally, zh889 takes reasonable steps to ensure that it remains subject to protections equivalent to those described in this Policy. This may include:

• Contractual obligations requiring recipient entities to maintain data protection standards consistent with this Policy.
• Use of service providers that operate under their own data protection certifications or compliance frameworks.
• Limiting data transferred to the minimum necessary for the specific processing purpose.

As Pakistan does not currently have a comprehensive data protection law governing cross-border transfers, these measures are taken on a voluntary, best-practice basis to protect the interests of Pakistani users.

zh889 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, Platform operations or data processing activities. Where amendments are material, we will notify registered users via account notification or email communication at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. It is your responsibility to review this Policy periodically. Continued use of the Platform following the effective date of an amendment constitutes acceptance of the revised Policy.

If you do not accept a material amendment to this Policy, you may request account closure as described in the Terms & Conditions, available at /terms-conditions.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by zh889, please contact us using the details below:

zh889 aims to resolve all privacy-related complaints promptly and fairly. If your complaint is not resolved to your satisfaction through our internal process, you may escalate the matter to the supervisory authority responsible for data protection in the jurisdiction under which zh889 is licensed.

Pakistani users wishing to raise concerns about data handling practices may also consider seeking independent legal advice regarding their rights under applicable Pakistani law, which is evolving in the area of digital privacy and data protection.