zh889 Privacy Policy
for Pakistan Players

1. Who We Are

zh889 is an online gaming and entertainment platform operating at zh889.win, offering Slots, Live Casino, Bingo, and related services to players in Pakistan and other supported regions. When this policy refers to "zh889", "we", "us", or "our", it means the platform operator responsible for managing your account and processing your personal data.

For the purposes of this Privacy Policy, zh889 acts as the data controller — meaning we decide how and why your personal data is processed. We are responsible for keeping that data safe and using it only for the purposes described here.

If you are a player based in Pakistan accessing zh889 through zh889.win, this policy applies in full to your account and all related transactions in PKR.

2. Data We Collect

When you register, use, or interact with zh889, we collect different categories of personal data depending on the activity. Here is a breakdown of what we collect and why:

We collect only what is necessary for the purposes described in this policy. We do not collect sensitive categories of data such as racial or ethnic origin, health information, or political views.

3. How We Collect Your Data

zh889 collects your data through several channels, all of which are under our control or involve trusted third-party processors:

• Direct input: Information you provide when registering an account, completing KYC, depositing via JazzCash or Easypaisa, or contacting support.
• Automated collection: Technical data such as your IP address, device information, and session data is collected automatically when you visit zh889.win or use the mobile app.
• Payment processors: When you make a deposit or withdrawal in PKR, our payment gateway partners transmit transaction confirmation data to us. We receive confirmation and reference numbers — not your full account credentials.
• KYC providers: Where identity verification is handled through a third-party service, that provider shares verification results with us. Your documents are processed under their own security standards.
• Cookies and local storage: The platform uses cookies and browser storage to maintain your session, remember preferences, and improve performance. See Section 7 for full details.

4. Why We Use Your Data

zh889 uses your personal data for specific, legitimate purposes. We do not process your data in ways that are incompatible with the reason it was originally collected. The main purposes are:

• Creating and managing your player account, including login authentication and account settings.
• Processing deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer, cards, and other supported mobile wallets.
• Completing identity verification (KYC) as required before your first withdrawal or when triggered by account activity thresholds.
• Detecting and preventing fraud, money laundering, multi-accounting, and other prohibited conduct described in our Terms and Conditions.
• Providing customer support — when you contact us via live chat or email, we use your account data and communication history to assist you effectively.
• Sending account-related communications such as deposit confirmations, withdrawal updates, security alerts, and password reset requests.
• Sending promotional communications about bonuses and offers — only if you have opted in to receive them. You can opt out at any time through account settings.
• Improving platform performance, resolving technical issues, and analysing usage patterns to enhance the gaming experience across Slots, Live Casino, and Bingo.
• Complying with legal and regulatory obligations that apply to the platform's operation.

5. Sharing Your Data

zh889 does not sell your personal data. We share it only in the following limited circumstances, and only with parties who are bound by appropriate data protection obligations:

• Payment processors: JazzCash, Easypaisa, Raast, and bank partners receive the minimum data necessary to process your PKR transactions — typically your account reference and the transaction amount.
• KYC and identity verification providers: Your identity documents and verification data are shared with our KYC provider to complete the verification process. These providers operate under strict data processing agreements.
• Game providers: Third-party game studios powering our Slots, Live Casino, and Bingo titles may receive a session token and anonymised player identifier. They do not receive your name, phone number, or payment details.
• IT infrastructure and hosting providers: Our platform infrastructure partners process data on our behalf under binding agreements and are required to maintain appropriate security standards.
• Legal and regulatory authorities: Where required by applicable law or a valid legal request, zh889 may disclose data to relevant authorities. We will notify you where permitted by law.

6. Payment Data & PKR Transactions

All financial transactions on zh889 are denominated in Pakistani Rupees (PKR). We take additional care with payment-related data given its sensitivity.

• zh889 does not store your full JazzCash wallet number, Easypaisa account number, bank account number, or full card number on its servers after a transaction is completed.
• Transactions are processed through certified payment gateways. The gateway handles the actual transfer of funds; zh889 receives only a confirmation reference and the transaction amount.
• Transaction history — amounts deposited and withdrawn in PKR, dates, and payment method type — is stored in your account for record-keeping and is accessible to you in your account dashboard.
• In line with anti-money laundering obligations, large transactions or unusual patterns may trigger a request for source-of-funds documentation. This is a standard compliance requirement, not an indication of wrongdoing.
• All payment pages and API connections between zh889 and payment processors are protected by HTTPS and tokenisation where supported by the provider.

7. Cookies & Tracking Technologies

zh889 uses cookies and similar technologies to operate the platform, maintain your session, and improve your experience. Here is what we use and why:

• Essential cookies: Required for the platform to function. These keep you logged in, remember your language preference, and maintain your game session. These cannot be disabled without affecting platform functionality.
• Performance cookies: Used to understand how players navigate the platform — which pages are visited most, where errors occur, and how long sessions last. This data is aggregated and anonymised.
• Security cookies: Help detect fraudulent login attempts, bot activity, and other security threats by tracking session behaviour patterns.
• Preference cookies: Remember settings you have chosen, such as game display preferences or notification settings.

zh889 does not use third-party advertising cookies or share cookie data with ad networks. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to log in or play games.

8. Data Retention

zh889 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable legal and compliance obligations.

• Active account data: Retained for the full duration your account is open and for a period after closure as required by anti-money laundering and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years after account closure in line with standard AML compliance requirements.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years for financial compliance purposes.
• Support communications: Retained for up to two years after the last interaction to allow for dispute resolution and quality review.
• Technical and log data: IP addresses and session logs are typically retained for 12 months for security and fraud prevention purposes.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to your identity.

9. Data Security

zh889 implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted between your device and zh889's servers is encrypted using HTTPS/TLS.
• Account passwords are stored using industry-standard hashing algorithms. zh889 staff cannot view your password in plain text.
• Access to player data within zh889's systems is restricted on a need-to-know basis. Staff handling player data are subject to confidentiality obligations.
• Security monitoring is in place to detect unusual login patterns, brute-force attempts, and suspicious account activity.
• Regular internal reviews of data handling practices are conducted to identify and address potential vulnerabilities.

10. Your Rights Over Your Data

As a player using zh889, you have the following rights regarding your personal data. To exercise any of these rights, contact us at the details in Section 13. We will respond within 30 days.

• Access: Request a copy of the personal data we hold about you in a readable format.
• Correction: Ask us to update or correct inaccurate or incomplete information in your account.
• Deletion: Request that your personal data be deleted when you close your account. Some data may be retained for legal compliance as described in Section 8.
• Restriction: Ask us to limit processing of your data while a complaint is under review.
• Portability: Receive your account data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests, including opting out of promotional communications.
• Withdraw consent: Where processing is based on your consent (e.g. marketing emails), you can withdraw that consent at any time through account settings or by contacting support.

Exercising these rights will not affect your ability to continue using zh889, unless the request requires account closure.

11. Children's Privacy

zh889 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that the player is 18 or older, and KYC verification is used to confirm this.

If zh889 becomes aware that a player under 18 has registered or accessed the platform, the account will be closed immediately and any deposits returned to the originating payment method after verification. If you believe a minor has accessed zh889 using your device or payment method, please contact support immediately.

Parents and guardians are encouraged to use device-level parental controls to prevent underage access to online gaming platforms. More information is available on our Responsible Gaming page.

12. Changes to This Privacy Policy

zh889 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or legal requirements. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that affect how your data is used, zh889 will notify registered players via email or an in-platform notification. Continued use of the platform after such notification constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to the zh889 support team through the following channels:

• Email: [email protected] (responses within 24 business hours)
• Live Chat: available in your account dashboard when logged in
• FAQ: common privacy and account questions at /faq

For requests related to data access, correction, or deletion, please include your registered email address and a brief description of your request. We may need to verify your identity before processing data-related requests.

For responsible gaming concerns or account restrictions, visit Responsible Gaming.