Privacy Policy — zh87

This Privacy Policy ("Policy") describes how zh87 ("we", "us", "our") collects, uses, stores, shares and protects personal information belonging to users ("you", "your") of the zh87 platform, website and all associated services (collectively, the "Platform").

zh87 operates as an English-language online betting and casino information platform with a primary audience of users in Pakistan and other jurisdictions where access is not restricted. We are committed to handling personal data responsibly, transparently and in accordance with the data protection obligations applicable under our operating licence jurisdiction.

By registering an account, accessing the Platform or otherwise engaging with our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

For the purposes of this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial information and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" — zh87, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of zh87 under a contractual arrangement.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity and address verification process required by applicable regulatory obligations.
• "Cookie" — a small text file placed on your device by a website to store session and preference information.
• "Platform" — the zh87 website, mobile interface and all associated applications and services.

zh87 collects Personal Data through several channels. The categories of data collected depend on how you interact with the Platform and what services you use.

3.1 Registration Data

When you create an account, we collect:

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification purposes);
• Residential address — including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Email address and mobile phone number;
• Username and encrypted password hash.

3.2 Identity Verification (KYC) Data

To comply with regulatory requirements and prevent underage gambling, fraud and money laundering, we collect:

• Copy of government-issued photo identification (e.g., CNIC — Computerised National Identity Card — or passport);
• Proof of residential address (e.g., recent utility bill or bank statement);
• Where applicable, documentation relating to the source of funds.

3.3 Financial Data

When you make deposits or withdrawals, we collect transaction records including payment method type, transaction amounts in PKR (Pakistani Rupee) or other applicable currency, transaction timestamps and reference numbers. Full payment instrument numbers (card numbers, wallet credentials) are handled by our payment processing partners and are not stored by zh87 on our own servers.

3.4 Usage Data

We automatically collect technical and behavioural data when you use the Platform, including:

• IP address and approximate geolocation (country/city level);
• Device type, operating system and browser version;
• Pages visited, time spent, betting markets viewed and games accessed;
• Session duration, login timestamps and error logs.

3.5 Communications Data

If you contact our support team via Live Chat, Help Center or email, we retain records of those communications for service improvement, compliance and dispute resolution purposes. These records are stored securely and are not accessible to unauthorised parties.

zh87 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining and securing your user account, including authentication and password recovery;
• Service Delivery: Processing bets, casino game sessions, deposits and withdrawal requests in accordance with your instructions;
• Identity & Age Verification: Verifying that you meet the minimum age requirement (18+ or higher as required) and that your identity is consistent across account data and KYC documents;
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent transactions, multi-accounting, money laundering and other prohibited activities;
• Regulatory Compliance: Meeting anti-money-laundering (AML), counter-terrorism financing (CTF) and other obligations applicable under our operating licence jurisdiction;
• Responsible Gambling: Monitoring account activity to identify potential indicators of problem gambling and applying self-imposed limits or restrictions where requested;
• Customer Support: Responding to queries, processing complaints and resolving disputes;
• Platform Improvement: Analysing aggregated usage data to improve the functionality, performance and content of the Platform;
• Marketing Communications: Sending promotional content, bonus notifications and event updates where you have provided explicit consent. You may withdraw this consent at any time.

zh87 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between zh87 and the user — including operating your account, processing wagers and handling payments;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements and responsible gambling regulations under our licence jurisdiction;
• Legitimate Interests: Processing for fraud prevention, platform security, internal analytics and service improvement, where those interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have freely given explicit consent. Consent may be withdrawn at any time without affecting the legality of prior processing.

zh87 does not sell, rent or trade your Personal Data. We may share Personal Data with third parties only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who act as Data Processors on our behalf. These include payment processing partners, identity verification providers, cloud hosting providers, customer support platform vendors and analytics services. All such providers are contractually bound to process data only as directed by zh87 and to maintain appropriate security standards.

Payment provider names referenced elsewhere on this platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used for educational context only. Their inclusion does not indicate that these providers have endorsed zh87 or that they process gambling transactions on our behalf. Users must verify cashier options directly.

6.2 Legal & Regulatory Disclosure

zh87 may disclose Personal Data to competent authorities, courts, regulators or law enforcement agencies where required by law, court order or regulatory direction. In cases involving suspected fraud, money laundering or match-fixing, we may be legally obligated to report relevant information without prior notice to the user.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, Personal Data held by zh87 may be transferred to a successor entity as part of that transaction. Users will be notified of any such transfer and the privacy terms applicable to their data under the new entity.

zh87 may transfer Personal Data to countries outside the user's country of residence, including to the jurisdiction in which we are licensed and to countries where our service providers maintain infrastructure. Where such transfers occur, zh87 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a standard of data protection consistent with our licence jurisdiction obligations.

Users in Pakistan should note that Pakistan does not have a comprehensive data protection law equivalent to the EU GDPR, though the Personal Data Protection Bill has been under consideration. zh87 applies its standard data protection commitments to all users regardless of jurisdiction.

zh87 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, to maintain your account, and to comply with our legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a minimum period thereafter as required by our licence jurisdiction for audit and compliance purposes;
• KYC and Transaction Records: Retained for the period stipulated by applicable AML/CTF regulations, typically five years from the end of the business relationship;
• Support Communications: Retained for a reasonable period (typically two to three years) to support dispute resolution and service improvement;
• Marketing Consent Records: Retained for as long as the consent is active and for a reasonable period thereafter as evidence of the consent.

Where data is no longer required, zh87 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

zh87 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for session management, security and core platform functionality. These cannot be disabled without impairing basic Platform operation;
• Functional Cookies: Remember your preferences (such as language settings and responsible gambling limit configurations) to improve your experience;
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us improve content and performance. No personally identifiable information is attached to analytics data;
• Security Cookies: Used to detect and prevent fraudulent sessions, brute-force login attempts and other security threats.

zh87 does not deploy behavioural advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the Platform.

Depending on your jurisdiction and the legal basis for processing, you may hold some or all of the following rights with respect to your Personal Data:

To exercise any of the above rights, please contact the zh87 Data Privacy team via the support channels described in Section 15. We will respond to verified requests within a reasonable timeframe and without charge under ordinary circumstances. We may need to verify your identity before processing a data rights request.

zh87 implements technical and organisational security measures appropriate to the risk level of the data processed. These include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive Personal Data including KYC documents and financial records;
• Role-based access controls ensuring that staff access Personal Data only to the extent required for their specific function;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures designed to detect, contain and notify users of data breaches within applicable regulatory timeframes.

Notwithstanding these measures, no Internet-based system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own login credentials. zh87 will never request your password via email, chat or telephone. If you suspect that your account has been compromised, contact support immediately and change your password.

The zh87 Platform is strictly for adults aged 18 years or above — or the higher minimum required by the applicable operator or licence jurisdiction. We do not knowingly collect Personal Data from minors.

Age verification is conducted during the registration and KYC process. Where zh87 discovers or reasonably suspects that a user is below the minimum age, the Account will be immediately suspended, all Personal Data associated with the Account will be processed in accordance with our data retention obligations, and any funds deposited will be dealt with in accordance with our Terms and applicable regulations.

The zh87 Platform does not contain external links to third-party websites as a matter of policy. However, where payment processing and identity verification services redirect users to third-party interfaces as part of a transaction flow, those third-party services operate under their own privacy policies. zh87 is not responsible for the privacy practices of third-party services accessed in connection with Platform transactions. Users are encouraged to review the privacy terms of any third-party service they interact with.

zh87 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the Platform or by email to the address associated with their account. The date of the most recent review is displayed at the top of this Policy.

Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept any amendment, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.

For questions about this Privacy Policy, to exercise your data rights, or to report a data protection concern, please contact the zh87 Data Privacy team through the following channels:

• Live Chat: Available within the Platform during operating hours for immediate assistance;
• Help Center: Self-service data request forms and guidance are accessible from your account dashboard;
• Email: [email protected] — please include "Privacy Request" in the subject line (displayed as plain text only — not a clickable link).

We aim to acknowledge all data privacy requests within five business days and to provide a substantive response within 30 days. Complex requests involving large volumes of data or requiring legal review may take longer; we will notify you if this is the case.