Privacy Policy
Privacy Policy – ZH88
Effective Date: 2025
This Privacy Policy explains what information ZH88 collects from users, how it is used, who it may be shared with, and what rights users have over their own data.
1. Information We Collect
At Registration
Mobile phone number — used as the permanent account identifier
Username
Password — stored using one-way encryption, never readable by any staff member
Date of birth
At Identity Verification
CNIC number, passport number, or equivalent government ID
Document image submitted through the secure upload channel
Full legal name as shown on the submitted document
During Account Funding and Reward Transfers
JazzCash or EasyPaisa wallet number, or bank account details
Transaction amounts, dates, and reference numbers
Payment confirmation data from the payment provider
During Platform Use
Formats accessed, session durations, and activity records
Promotional credit events and reward tier point accumulation
Event participation and leaderboard activity
Automatically From the App and Website
Device model and Android version
App version in use at time of activity
IP address at login
Connection type and mobile carrier
Crash logs and error reports from technical issues
From Support Interactions
Content of conversations through WhatsApp, in-app chat, or email
Documents or screenshots shared with the support team
2. Why We Collect This Data
Registration data creates and identifies the user account
Verification data confirms identity and age as required by our user protection standards
Payment data processes account top-ups and reward transfers and maintains financial records
Activity data runs the reward tier system, calculates promotional credit eligibility, and supports responsible use monitoring
Device data identifies unusual access patterns and supports technical diagnosis
Support records maintain a service history for accurate follow-up
Contact details send promotional messages only where the user has not opted out — opt-out is available at any time
4. Data Retention
Active account and activity data is held for the lifetime of the account
Financial transaction records are kept for a minimum of five years
Support conversation logs are retained for three years
Non-financial personal data is deleted within 90 days of account closure, subject to any legal hold
5. Data Security
All data between the user’s device and ZH88 servers travels under SSL/TLS encryption
Passwords are hashed using one-way cryptography — no staff member can read or recover them
Internal data access is restricted to personnel with a verified operational need
Security practices are reviewed regularly
6. User Rights
Access: Request a summary of the personal data ZH88 holds on your account
Correction: Request that inaccurate data be updated
Deletion: Request erasure of data not subject to a legal retention requirement
Portability: Request data in a readable, transferable format
Opt-out: Stop promotional communications at any time through app settings or support
Requests are submitted through the Contact Us page and responded to within 14 days.
7. Cookies
Session cookies maintain login state and display preferences during each visit
Analytics cookies collect anonymized navigation data to support site improvements
No third-party advertising trackers or retargeting cookies are used
Cookie preferences are adjustable in browser settings — disabling essential cookies affects basic site functionality
8. Users Under 18
ZH88 does not knowingly collect or hold data from users under 18. Accounts identified as belonging to minors are closed immediately under the Age Verification policy.
9. Policy Updates
Updates are posted on this page with a revised effective date. Significant changes are communicated through in-app notification or registered contact details.