1. Introduction
This Privacy Policy ("Policy") sets out how cz888 ("cz888", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to players and visitors who use the cz888 website at cz888.biz and all associated services ("Platform").
When you register an account, make a deposit, play a game, place a bet, contact our support team, or simply browse cz888.biz, certain personal data is generated or provided to us. We take our responsibility to handle that data properly very seriously — not simply because we are required to, but because the trust of our Pakistani player community is something cz888 values and works to maintain through every interaction.
By using cz888, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to close your account and have your data handled according to your preferences.
Scope: This Policy covers all personal data processing activities of cz888 in connection with the Platform — including the Online Casino, Live Casino, Sports Betting, Poker, Baccarat, Esports Betting, Refer a Friend programme, customer support interactions, and any marketing communications sent by cz888.
2. Data Controller
cz888 is the data controller responsible for the personal data collected and processed through cz888.biz. As data controller, cz888 determines the purposes and means of processing your personal data and is accountable for ensuring that it is handled lawfully, fairly, and transparently.
All data protection queries, requests, and complaints should be directed to cz888 using the contact details provided in Section 15 of this Policy. cz888 will respond to all legitimate data-related requests within a reasonable timeframe, typically within 30 days of receipt.
3. Personal Data We Collect
cz888 collects personal data from two main sources: data you provide directly when you interact with the Platform, and data that is automatically generated or collected as you use it.
Data you provide directly:
| Category | Examples | When Collected |
|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number | At registration and during KYC verification |
| Contact Data | Email address, mobile phone number, city/province | At registration and when updating your profile |
| Financial Data | Payment method details (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT account reference, card last 4 digits), transaction amounts, PKR deposit and withdrawal history | When you make a deposit or request a withdrawal |
| KYC Documents | Scanned copies or photographs of CNIC, passport, or other government-issued ID; selfie with ID; proof of address; source of funds documents | When identity verification is triggered |
| Communications Data | Content of support chat transcripts, email correspondence, and complaint submissions | When you contact cz888 support |
Data collected automatically:
| Category | Examples |
|---|
| Technical Data | IP address, browser type and version, device type and operating system, screen resolution, unique device identifier |
| Usage Data | Pages visited, time spent on each page, game sessions started, bets placed, sports markets accessed, feature interactions |
| Gaming Data | Complete bet and game history, session duration, win/loss records, responsible gaming tool usage |
| Cookie and Tracking Data | Session cookies, analytics identifiers, preference cookies — full details in Section 9 |
Data Minimisation: cz888 operates on a data minimisation principle. We only collect personal data that is directly necessary for the purposes described in this Policy. We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming matter where you have explicitly provided it.
4. How We Use Your Personal Data
cz888 uses the personal data we collect for the following purposes:
- Account Management: Creating and maintaining your cz888 account, processing login requests, updating account details, and communicating account-related notifications.
- Identity Verification (KYC): Verifying your identity and age to comply with our legal obligations, confirming that you meet the 18+ eligibility requirement, and preventing underage gambling.
- Payment Processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Matching payment source names to account holder names to prevent fraud.
- Service Delivery: Providing access to casino games, sports betting markets, poker tables, live casino, and all other cz888 Platform features.
- Anti-Money Laundering (AML) and Fraud Prevention: Monitoring transactions and account activity for indicators of money laundering, fraud, collusion, bonus abuse, and other prohibited activity. Reporting to relevant authorities as required by law.
- Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling. Contacting players where cz888 is concerned about a player's welfare. Processing responsible gaming tool requests (deposit limits, self-exclusion).
- Customer Support: Responding to queries, processing complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
- Platform Improvement: Analysing usage data (in aggregate or anonymised form) to understand how players use cz888, identify technical issues, and improve the platform experience.
- Marketing: Sending promotional emails and notifications about bonuses, new games, and offers to players who have opted in — subject to the right to opt out at any time (Section 12).
- Legal Compliance: Meeting all legal and regulatory obligations applicable to cz888's operation, including record-keeping, responding to law enforcement requests, and cooperating with regulatory authorities.
5. Lawful Basis for Processing
cz888 processes your personal data under one or more of the following lawful bases depending on the specific processing activity:
- Contractual Necessity: Processing that is necessary to perform the contract between you and cz888 — including account creation, payment processing, and service delivery. Without this processing, we cannot provide the Platform to you.
- Legal Obligation: Processing required to comply with applicable legal requirements — primarily KYC/AML obligations, age verification, regulatory reporting, and responding to law enforcement requests.
- Legitimate Interests: Processing carried out for cz888's legitimate business interests where those interests do not override your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement through anonymised analytics.
- Consent: Processing based on your explicit consent — primarily marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Data Sharing
cz888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Full stop. However, in the course of operating the Platform, certain personal data is shared with the following categories of third parties:
- Payment Service Providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard processing networks receive the minimum data required to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
- Identity Verification (KYC) Providers: Certified third-party KYC and AML compliance providers who process your identity documents and perform checks against sanctions lists and PEP databases. These providers are contractually bound to handle your data securely and use it only for the verification purpose.
- Game Studio Providers: Where cz888 hosts games developed by third-party studios (e.g., for slot games or live casino tables), limited session and game data may be shared with those studios for the purpose of delivering the game. These providers cannot use the data for any other purpose.
- Customer Support Technology Providers: The software platforms used to deliver live chat and email support may process support interaction data. These providers are contractually restricted to using the data only to deliver the support service.
- Analytics Providers: Anonymised and/or aggregated usage data may be processed by analytics tools to help cz888 understand platform performance. No personally identifiable information is transmitted to analytics providers.
- Law Enforcement and Regulatory Authorities: cz888 will disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where legally required to do so or where cz888 believes disclosure is necessary to protect the safety of players or the integrity of the Platform.
All third-party service providers who receive personal data from cz888 are required to process it only for the specific purpose for which it was shared and to maintain appropriate technical and organisational security measures.
7. Data Retention
cz888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Legal and regulatory compliance, AML record-keeping |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory requirements and anti-fraud obligations |
| Financial Transaction Records | Duration of account + 7 years post-closure | Financial record-keeping and AML compliance |
| Gaming History | Duration of account + 5 years post-closure | Dispute resolution, responsible gaming monitoring |
| Support Interaction Records | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Demonstrating lawful basis for marketing |
| Technical and Usage Data (logs) | 12 months | Security monitoring and fraud detection |
| Cookie Data | As specified per cookie type (Section 9) | Platform functionality and analytics |
When personal data is no longer required, cz888 takes reasonable steps to ensure it is securely deleted or irreversibly anonymised. Anonymised data from which no individual can reasonably be re-identified may be retained indefinitely for aggregate statistical and platform improvement purposes.
8. Data Security
Protecting the personal data of cz888 players is a core operational priority. cz888 has implemented the following technical and organisational security measures:
- Encryption in Transit: All data transmitted between your device and cz888.biz is encrypted using 256-bit SSL/TLS encryption. Look for the padlock in your browser address bar — it confirms your connection is secure at all times.
- Encryption at Rest: Sensitive personal data including identity documents and financial records are encrypted in storage using AES-256 encryption. Even in the event of an unauthorised access to our storage infrastructure, your data would be unreadable without the encryption keys.
- Access Controls: Access to personal data within cz888's systems is restricted on a strict need-to-know basis. Staff who do not require access to personal data to perform their role cannot access it. All internal access is logged and monitored.
- Two-Factor Authentication: cz888 offers optional 2FA for player accounts to provide an additional layer of login security beyond password protection.
- Regular Security Audits: cz888 conducts regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities in the Platform.
- Incident Response: cz888 maintains a documented data breach response plan. In the event of a security incident that results in a high-risk breach of personal data, affected players will be notified without undue delay.
No internet transmission is 100% secure. While cz888 takes every reasonable measure to protect your data, you also have a role to play — use a strong, unique password for your cz888 account, enable 2FA if available, and never share your login credentials with anyone.
9. Cookies and Tracking Technologies
cz888.biz uses cookies and similar tracking technologies to make the Platform work properly, to remember your preferences, and to understand how players use the site so we can keep improving it.
The following types of cookies are used on cz888.biz:
| Cookie Type | Purpose | Duration | Can You Decline? |
|---|
| Essential |
Keeps you logged in during a session, maintains your session state across pages, enables core platform functionality including game loading and payment processing |
Session / up to 30 days for "Remember Me" |
No — these are required for the Platform to function |
| Functional |
Remembers your language preference, display settings, and responsible gaming tool configurations between sessions |
Up to 12 months |
Yes — though declining may reduce functionality |
| Analytics |
Collects anonymised data about which pages are visited, how long players spend on each section, and which features are used — to help cz888 understand and improve the Platform |
Up to 24 months |
Yes — opt out via cookie preferences |
| Marketing |
Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. Only active for players who have consented to marketing communications |
Up to 30 days |
Yes — opt out via cookie preferences or marketing settings in your account |
You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, though blocking essential cookies will prevent certain parts of cz888.biz from working correctly. For detailed instructions on managing cookies in your specific browser, refer to the browser's help documentation.
10. Your Rights Over Your Personal Data
As a cz888 player, you have a number of rights in relation to your personal data. These rights are described below. To exercise any of them, please contact cz888 using the details in Section 15. We will respond within 30 days of receiving a valid request.
Right of Access
Request a copy of all personal data that cz888 holds about you (a Subject Access Request). We will provide this within 30 days.
Right to Rectification
Request correction of any personal data that is inaccurate or incomplete. Update basic profile details directly in your account settings.
Right to Erasure
Request deletion of your personal data in certain circumstances. Note that legal and regulatory retention obligations may prevent full deletion of some records.
Right to Restrict Processing
Request that cz888 limits its use of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Data Portability
Where processing is based on consent or contract and carried out automatically, request a machine-readable export of your data.
Right to Object
Object to processing based on legitimate interests. If your objection is upheld, cz888 will cease the relevant processing unless we have compelling legitimate grounds to continue.
Identity Verification Required: For the protection of every cz888 player, we will verify your identity before processing any personal data rights request. This is to prevent unauthorised access to another player's data. You will need to provide the same contact details registered on your account to confirm your identity.
11. Minors
cz888 is strictly prohibited for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If cz888 becomes aware that personal data from a minor has been collected, it will be deleted immediately and any associated account will be permanently closed.
If you are a parent or guardian and believe that a minor has registered an account with cz888 or otherwise provided personal data to us, please contact us immediately at support@cz888.biz with full details. We will investigate and take appropriate action without delay.
12. Marketing Communications
cz888 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, tournaments, and other offers — but only if you have actively opted in to receive marketing communications. We will not send you unsolicited marketing.
You can opt out of marketing communications at any time:
- Via the unsubscribe link at the bottom of any marketing email from cz888
- By updating your communication preferences in your cz888 account settings
- By contacting support@cz888.biz and requesting removal from marketing lists
Opting out of marketing will not affect essential account-related communications such as transaction confirmations, security alerts, KYC requests, or responsible gaming notices — these are sent regardless of marketing preference because they relate to your account's operation and safety.
Please allow up to 48 hours for opt-out requests to be processed across all communication channels. cz888 does not share your contact data with third parties for the purposes of their own marketing.
13. International Data Transfers
As an online platform operating in the digital environment, cz888 works with service providers whose servers and infrastructure may be located in different countries. Where your personal data is transferred outside Pakistan to a third country, cz888 takes steps to ensure that equivalent data protection standards apply.
Specifically, cz888 requires all third-party service providers who receive or process personal data from Pakistani cz888 players to contractually commit to data protection standards that are consistent with the principles set out in this Policy. These commitments are enforced through data processing agreements that are reviewed as part of cz888's vendor management process.
cz888 does not transfer your personal data to any jurisdiction specifically for the purpose of circumventing data protection obligations applicable under the laws of Pakistan or the jurisdiction in which cz888 is licensed to operate.
14. Changes to This Privacy Policy
cz888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the Platform itself. When material changes are made, we will notify registered players via the email address on their account and/or through an in-platform notification before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. cz888 recommends that players review this page periodically to stay informed about how their data is being handled. Your continued use of cz888 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.
If you disagree with any changes made to this Policy, you may close your account and request deletion of your data by contacting cz888 support. Legal and regulatory retention obligations may require certain records to be retained despite an account closure request.
