cz888 Privacy Policy –
How We Protect & Respect
Your Personal Data

This Privacy Policy (the "Policy") is issued by cz888, the operator of the online gaming platform accessible at cz888.bio and all associated sub-domains, mobile interfaces, and applications (collectively, the "Platform"). The Policy describes how cz888 ("we", "us", "our") collects, processes, stores, discloses, and safeguards the personal data of individuals who access or use the cz888 Platform ("you", "your", "Player", "User").

This Policy forms an integral part of the cz888 Terms & Conditions and should be read in conjunction with that document. By registering a cz888 account, using the Platform, or providing any personal information to cz888, you acknowledge that you have read this Policy in full and consent to the collection and processing of your personal data as described herein.

cz888 processes personal data in accordance with applicable data protection legislation, our international gaming licence obligations, and international best practices. Our Pakistani player base is our priority, and we have written this Policy to be as clear and understandable as possible while meeting our legal obligations. Where technical or legal language is unavoidable, we have explained it in plain terms alongside.

For the purposes of applicable data protection law, the Data Controller responsible for your personal information is cz888, operating the Platform at cz888.bio under an international gaming licence. cz888 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

All data protection enquiries, rights requests, and concerns regarding this Policy should be directed to the cz888 Data Protection contact through the customer support channel. Contact details are provided in Section 16 of this Policy. cz888 commits to acknowledging all formal data protection enquiries within 5 business days and to providing a substantive response within 30 calendar days.

The following table sets out the categories of personal data that cz888 may collect from or about you during the course of your use of the Platform:

cz888 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data (beyond information relevant to responsible gaming obligations), or biometric data for identification purposes, except where expressly required by our licensing authority and with appropriate safeguards in place.

cz888 collects your personal data through the following methods:

• Direct provision by you: Information you submit when creating your cz888 account, completing identity verification, contacting customer support, completing a deposit or withdrawal, or responding to any cz888 promotional communication.
• Automated technical collection: Data collected automatically when you access and use the cz888 Platform, including IP address logging, session data, device fingerprinting, and behavioural analytics through first-party cookies and tracking technologies described in Section 9.
• Payment channel providers: Confirmation data received from JazzCash, EasyPaisa, HBL, and other payment processors confirming the completion, status, or identity of a financial transaction. cz888 receives transaction reference data, not full payment account credentials.
• Identity verification services: Where required for enhanced due diligence, cz888 may use third-party identity verification services to cross-reference information you provide against publicly available or commercially licensed data sources.
• Fraud prevention services: Risk signals and flagging data from fraud detection partners used to identify potentially fraudulent account activity or prohibited betting patterns.

cz888 processes your personal data only where a lawful legal basis for that processing exists. The following table sets out our primary processing purposes and the corresponding legal basis:

• Account creation and management — Necessary for performance of the contract between you and cz888.
• Processing deposits and withdrawals — Necessary for performance of the contract and for compliance with payment processing and anti-money-laundering legal obligations.
• Age and identity verification — Necessary for compliance with cz888's legal obligations under its international gaming licence, including mandatory 21+ age enforcement.
• Responsible gaming monitoring — Necessary for compliance with licence obligations and for the protection of players' vital interests. cz888 has a duty to monitor for signs of problem gambling and act on them.
• Fraud prevention and security — Necessary for the legitimate interests of cz888 and its players in preventing financial crime, account theft, and platform abuse.
• Customer support — Necessary for performance of the contract and for the legitimate interest of providing effective assistance to players.
• Direct marketing communications — Based on your consent, where provided at registration or subsequently. You may withdraw marketing consent at any time through your cz888 account settings or by contacting support.
• Platform analytics and improvement — Based on the legitimate interest of cz888 in improving its products and services for all Pakistani players.

cz888 does not sell your personal data to any third party. We share your data only in the following specific and limited circumstances:

• Payment processing partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, NayaPay, SadaPay, and other payment channel operators receive transaction data necessary to process your deposits and withdrawals. These partners operate under their own regulatory frameworks and privacy obligations.
• Identity verification providers: Where required, third-party identity verification services receive the personal data necessary to authenticate your identity. They are engaged under data processing agreements that restrict them from using your data for any purpose other than the verification service.
• Game software providers: Providers such as Playtech, Evolution, Pragmatic Play, and PG Soft may receive anonymised or pseudonymised game session data for the purpose of game performance monitoring, technical support, and regulatory compliance on their side. No identifiable personal data is shared with game providers beyond what is technically required for game delivery.
• Regulatory authorities: cz888 is obligated under its international gaming licence to share specified data with its licensing authority on request or as part of scheduled reporting. This includes anti-money-laundering reports, suspicious activity reports, and player verification records.
• Law enforcement agencies: cz888 will disclose personal data to law enforcement or government agencies where legally compelled to do so by a valid court order, regulatory directive, or statutory requirement.
• Fraud prevention networks: Anonymised or pseudonymised risk signals may be shared with industry fraud prevention networks to protect the broader gaming ecosystem from cross-platform fraud schemes.

cz888 operates as an internationally licensed platform. As a result, personal data collected from Pakistani players may be processed on servers located outside Pakistan. Where such international transfers occur, cz888 ensures that appropriate safeguards are in place to maintain the same level of data protection as would apply within Pakistan, including contractual data transfer agreements with receiving parties that impose obligations equivalent to those applicable to cz888 itself.

All data processing arrangements with third-party service providers located outside Pakistan are governed by contractual clauses that prohibit those providers from processing your data for any purpose other than the specific service they are providing to cz888, from retaining your data beyond the period necessary for that service, and from sharing your data with any further parties without cz888's express written authorisation.

cz888 retains your personal data for the minimum period necessary for the stated processing purpose, subject to any longer retention periods required by our licensing authority or applicable law. The following retention periods apply as a general framework:

• Account and identity data: Retained for the duration of the active account relationship plus a minimum of 5 years following account closure, as required by anti-money-laundering regulations applicable under our gaming licence.
• Transaction and financial records: Retained for a minimum of 7 years following the date of each transaction, in accordance with standard financial record-keeping requirements under our licensing framework.
• Game and betting history: Retained for a minimum of 5 years. This data is used for dispute resolution, responsible gaming analysis, and regulatory reporting.
• Customer support communications: Retained for 3 years following the closure of each support interaction, to enable reference in the event of escalated disputes.
• Self-exclusion records: Retained indefinitely following the setting of a self-exclusion, to prevent circumvention through re-registration. This retention is a licence obligation and a player protection measure.
• Technical and behavioural logs: Retained for 12 months from collection for security and fraud prevention purposes, then aggregated and anonymised for analytical use.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with any identifiable individual.

The cz888 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files stored on your device by your browser when you visit cz888.bio. The following categories of cookies are used on the cz888 Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and cookies that remember your language preference. These cannot be disabled without preventing core Platform functionality from working.
• Functional Cookies: Cookies that remember your preferences and settings — such as whether you have enabled "Remember Me" on the cz888 login page — to provide a more personalised experience on subsequent visits.
• Analytics Cookies: First-party analytics cookies that collect anonymised data about how the Platform is used — which pages are visited most, where users spend time, and which games are most accessed — to help cz888 improve the Platform for all Pakistani players.
• Security Cookies: Cookies used for fraud detection and account security purposes, including device fingerprinting to identify login attempts from unrecognised devices.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the cz888 Platform normally, including the ability to log in and access your account.

cz888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption covering all data in transit between your device and cz888 servers
• One-way cryptographic hashing of account passwords (cz888 staff cannot retrieve your password in plain text under any circumstances)
• Role-based access controls ensuring that cz888 staff can only access player data where it is necessary for their specific job function
• Two-factor authentication option for all player accounts
• Real-time intrusion detection and prevention systems monitoring the cz888 Platform infrastructure
• Regular independent security penetration testing by qualified third-party security professionals
• Encrypted data storage for all sensitive personal data at rest
• Strict vendor security assessment process before engaging any third-party data processor
• Staff data protection training and internal privacy policies governing employee data handling

No system is completely impervious to attack, and cz888 does not warrant that its security measures are infallible. In the event of a breach that affects your personal data, cz888 will notify you within 72 hours as described in our breach notification commitment.

As a cz888 Platform user, you hold the following rights in relation to your personal data. These rights are not absolute in all circumstances — some are subject to legal exceptions, particularly where cz888 has overriding obligations under its gaming licence or applicable law — but cz888 will exercise them to the fullest extent that the law permits:

To exercise any of the above rights, contact cz888 support with the subject line "Data Rights Request" and specify which right you wish to exercise and what data it relates to. cz888 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

cz888's responsible gaming obligations under our international gaming licence require us to monitor player behaviour for indicators of problem gambling. This necessarily involves processing your personal data, including your betting patterns, deposit frequency, session lengths, and responses to in-Platform prompts, for the purpose of identifying and responding to such indicators.

The legal basis for this processing is our legal obligation under our gaming licence, combined with the vital interests of players in being protected from gambling harm. cz888 treats responsible gaming data with heightened sensitivity and imposes strict internal access controls — only designated player protection team members have access to responsible gaming monitoring data, and it is never used for marketing or commercial profiling purposes.

The cz888 Platform does not contain links to external third-party websites for commercial or affiliate purposes. All navigation within the cz888 Platform remains within our own controlled domain and sub-domains. Accordingly, concerns about third-party website privacy practices are not applicable to the cz888 Platform in the way they might be on a content-heavy website with extensive outbound linking.

Where third-party game software is embedded within the cz888 Platform — such as live casino streams from providers like Playtech or Evolution — the technical delivery of that software involves a connection between your device and the game provider's streaming infrastructure. cz888 has reviewed the data practices of all embedded game providers and requires contractual confirmation that they do not collect or process independently identifiable player data beyond what is required for game delivery.

The cz888 Platform is strictly restricted to individuals aged 21 years and above. cz888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected personal data from a person under 21, we will immediately close the associated account, forfeit any balance in accordance with our Terms & Conditions, delete the personal data collected, and if appropriate, report the matter to the relevant authority.

cz888 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our regulatory framework, our business practices, or the range of data we process. The effective date of the current version is stated in the hero section at the top of this page and in the table of contents sidebar.

Where changes are material — meaning they meaningfully affect how we process your personal data or what rights you hold — cz888 will notify registered account holders via the mobile number or email address on file, or via a prominent notice on the Platform, no less than 14 days before the revised Policy comes into effect. Non-material corrections, such as formatting, grammar, or clarifications that do not change the substance of our processing practices, may be made without advance notice.

Continued use of the cz888 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree to the revised Policy, you should contact cz888 support to discuss your options, including voluntary account closure, before the effective date.

For all questions, concerns, or requests relating to this Privacy Policy or to your personal data held by cz888, please contact our support team and mark your inquiry as a "Privacy / Data Protection Enquiry" so it is directed to the appropriate team.

cz888 customer support is available 24 hours a day, 7 days a week. You can contact us via live chat from your cz888 account dashboard at any time. Our support email address is shown in the footer of this page and throughout the Platform.