zs588 Privacy Policy
Your Data, Protected

1. Policy Overview

This Privacy Policy ("Policy") describes how zs588 ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal information provided by users ("you", "your") of the zs588 platform available at zs588.app and any associated mobile or web applications.

By registering an account with zs588, making a deposit, or otherwise accessing the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the zs588 platform.

2. Information We Collect

zs588 collects personal information through several channels depending on how you interact with the platform. The categories of data we may collect include:

2.1 Registration Data

When you create a zs588 account, we collect your full name, date of birth, email address, mobile phone number, and residential address. This information is mandatory for account creation and is used to verify your identity, comply with anti-money laundering (AML) requirements, and maintain communication with you about your account.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of your Pakistani CNIC (Computerised National Identity Card) or passport, proof of address (such as a utility bill or bank statement dated within 90 days), and evidence of your registered payment method. KYC documents are stored securely and reviewed only by authorised compliance personnel.

2.3 Financial & Transaction Data

We maintain records of all deposits, withdrawals, bonus claims, bets placed, and game outcomes associated with your zs588 account. Payment method identifiers — such as JazzCash wallet numbers, EasyPaisa account references, and bank account sort code / account number fragments — are stored in tokenised form. We do not store full payment credentials on our servers.

2.4 Usage & Technical Data

When you access the zs588 platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, referring URL, pages visited, session duration, and clickstream data. This information is used for platform security, fraud detection, and performance optimisation — not for individual profiling.

2.5 Communications Data

If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and resolution outcomes. These records are used for quality assurance, dispute resolution, and staff training purposes.

2.6 Voluntary Information

Occasionally you may choose to provide additional information — for example, when completing a responsible gaming self-assessment, participating in a survey, or updating your account preferences. Such information is processed only for the stated purpose at the time of collection.

3. How We Use Your Data

The personal data collected by zs588 is used for the following specific purposes:

Purpose	Data Used	Legal Basis
Account registration and management	Name, email, phone, DOB, address	Contractual necessity
Identity and age verification (KYC)	CNIC / passport, proof of address	Legal obligation
Payment processing and fraud prevention	Transaction data, payment identifiers	Contractual necessity / Legitimate interest
Regulatory compliance and AML monitoring	Transaction history, KYC documents	Legal obligation
Customer support and dispute resolution	Communications data, account history	Contractual necessity
Platform security and fraud detection	IP address, device data, session logs	Legitimate interest
Responsible gaming monitoring	Gameplay data, deposit/withdrawal patterns	Legal obligation / Legitimate interest
Transactional notifications (account activity)	Email address, phone number	Contractual necessity
Promotional communications (with consent)	Email address, preferences	Consent
Platform analytics and improvement	Anonymised usage data	Legitimate interest

zs588 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a new valid legal basis for processing.

4. Legal Basis for Processing

zs588 processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the zs588 Terms and Conditions — such as operating your account, processing deposits, and paying out winnings.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, licensing conditions, and regulatory reporting requirements imposed by our gaming licence authority.
• Legitimate Interest: Processing carried out to pursue the legitimate business interests of zs588, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Information

zs588 shares personal data only in the following limited circumstances and only with parties who are contractually obligated to handle that data securely and in accordance with this Policy:

5.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary transaction data with our payment partners including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers operate under their own privacy frameworks and are subject to Pakistani financial regulation and data protection standards.

5.2 Identity Verification Partners

For KYC purposes, zs588 may use third-party identity verification service providers to validate CNIC data and confirm address information. These providers process data strictly within the scope of identity verification and are bound by strict data processing agreements.

5.3 Game Software Providers

Live dealer and virtual casino games on the zs588 platform are powered by licensed third-party game studios. These providers receive anonymised session identifiers and gameplay data necessary for game operation — they do not receive your name, CNIC, or financial details.

5.4 Regulatory and Law Enforcement Authorities

zs588 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or valid legal process. We will notify affected users of such disclosures where we are legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring involving zs588, user personal data may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer and the applicable privacy arrangements via their registered email address with at least 30 days' notice where practicable.

6. Payment Data & Security

Given the financial nature of the zs588 platform, the security of payment-related data is treated as a top priority. The following measures govern how payment information is handled:

• Payment credentials (JazzCash wallet credentials, EasyPaisa PINs, bank account numbers) are never stored in plaintext on zs588 servers. All payment identifiers are tokenised by the respective payment processor before any data reaches our systems.
• All deposit and withdrawal transactions are logged with encrypted references for audit and dispute resolution purposes. These logs are accessible only to authorised zs588 finance and compliance staff.
• Transaction monitoring systems operate continuously to detect unusual deposit or withdrawal patterns that may indicate fraudulent activity or money laundering. Suspicious activity is escalated to our compliance team in accordance with applicable AML obligations.
• In the event of a suspected payment fraud incident, zs588 reserves the right to temporarily freeze withdrawal functionality on the affected account pending investigation, without prior notice.

7. Cookies & Tracking Technologies

zs588 uses cookies and similar technologies (including local storage and session storage) to operate the platform effectively. The following categories of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session authentication, security tokens, login state management	No — required for the platform to function
Functional	Language preferences, game lobby layout settings, responsible gaming reminder timers	Yes — via browser settings
Analytics	Anonymised traffic and performance data to improve platform speed and usability	Yes — via cookie consent settings
Fraud Prevention	Device fingerprinting to detect multi-accounting, bonus abuse, and unauthorised access	No — required for platform security

You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the zs588 platform, particularly session-related features. zs588 does not use behavioural advertising cookies or share cookie data with advertising networks.

8. Data Retention

zs588 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and KYC records: Retained for a minimum of five years from the date of account closure, in accordance with anti-money laundering legislation applicable to licensed gaming operators.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, for regulatory audit and dispute resolution purposes.
• Customer support communications: Retained for three years from the date of the final interaction, unless the communication forms part of an ongoing dispute or regulatory investigation.
• Technical and usage logs: Retained for 12 months in identifiable form and thereafter in anonymised aggregate form indefinitely for performance analysis.
• Marketing consent records: Retained for the duration of consent and for three years thereafter as evidence of valid consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Your Privacy Rights

As a zs588 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of all personal data held about you by zs588, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data held by zs588 is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account settings page.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data must be retained to comply with legal obligations and cannot be erased on request.
• Right to Restriction of Processing: You may request that zs588 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is contested or while an objection is under consideration.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to zs588, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on legitimate interest grounds, including direct marketing. Objections to direct marketing will always be honoured immediately; objections to other legitimate interest processing will be evaluated against the specific circumstances.
• Right to Withdraw Consent: Where processing is based on your consent (primarily for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Unsubscribe links are included in all marketing emails.

10. Minors & Age Policy

zs588 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires date-of-birth declaration and is backed by mandatory KYC document verification that confirms age before withdrawal functionality is unlocked.

If zs588 becomes aware — through internal review, third-party reporting, or parent/guardian notification — that personal data has been collected from a minor, we will immediately suspend the relevant account, initiate an investigation, delete or anonymise the personal data of the minor, return any deposits made, and report the incident to our licensing authority as required.

11. International Data Transfers

zs588 operates servers in multiple jurisdictions for reliability and performance purposes. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, zs588 ensures that appropriate safeguards are in place, including:

• Transfer only to countries deemed to provide an adequate level of data protection.
• Use of standard contractual clauses or equivalent data transfer mechanisms with all international data processors.
• Contractual obligations on all third-party processors to implement technical and organisational security measures equivalent to those applied by zs588.

For queries about the specific countries to which your data may be transferred, please contact our Data Protection team at [email protected].

12. Data Security Measures

zs588 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and our servers.
• Access Controls: Role-based access control (RBAC) ensures that personal data is accessible only to staff members who require it for their specific job function. All access is logged and audited.
• Two-Factor Authentication: Staff access to systems containing personal data requires multi-factor authentication. Players are strongly encouraged to enable 2FA on their zs588 accounts via the security settings panel.
• Penetration Testing: The zs588 platform undergoes regular penetration testing and vulnerability assessments by independent security specialists.
• Incident Response: zs588 maintains a documented data breach incident response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and within the timeframe required by applicable law.
• Staff Training: All zs588 staff who handle personal data receive mandatory data protection and privacy training upon joining and annually thereafter.

While zs588 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your zs588 account credentials and for notifying us immediately if you suspect unauthorised access to your account.

13. Third-Party Services & Links

The zs588 platform may reference or integrate third-party services including game software studios, live streaming providers for sports data, and payment gateways. These third parties have their own privacy policies and data practices, which are independent of this Policy.

zs588 carries out due diligence on all third-party service providers before integration and requires all data processors to sign data processing agreements that mandate compliance with applicable data protection standards. However, zs588 cannot be held responsible for the privacy practices of independent third parties whose services are accessed directly by users outside the zs588 platform environment.

14. Changes to This Privacy Policy

zs588 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or how your data is processed — will be communicated to you via your registered email address at least 14 days before the changes take effect.

Non-material amendments (such as clarifications, corrections, or formatting updates) may be applied immediately and will be reflected in the "Effective Date" shown at the top of this page. Continued use of the zs588 platform after any changes take effect constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how your data is being protected.

15. Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way zs588 handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and resolve them within 30 calendar days.
• Support Hours: Our team is available daily from 9 AM to 2 AM PKT. For urgent account security matters, use the 24/7 live chat inside your zs588 account dashboard.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in the jurisdiction applicable to your situation.