zh66 Privacy Policy

1.1 This Privacy Policy ("Policy") is issued by zh66 ("zh66", "we", "us", "our") and applies to all personal data collected through the zh66 website at zh66.bet, our mobile-optimised platform, and any related services, tools, or communications we provide to players.

1.2 This Policy explains what personal data we collect about you when you visit our website, register an account, make deposits, play games, contact our support team, or interact with any zh66 service. It also explains why we collect that data, how we use it, and what rights you have in relation to it.

1.3 By registering an account with zh66 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the zh66 platform and may request account closure by contacting our support team.

1.4 This Policy should be read together with zh66's Terms and Conditions, which are available at zh66.bet/terms-conditions, and our Responsible Gaming Policy, available at zh66.bet/responsible-gaming.

2.1 zh66 collects personal data that you provide to us directly, data that is generated automatically when you use our platform, and in limited circumstances, data from third-party sources. The specific categories of personal data we collect are set out below.

2.2 Sensitive Personal Data: zh66 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. Identity verification documents (CNIC, passport) are handled with the highest level of security and used exclusively for the purpose of age and identity verification.

2.3 Data from Third Parties: In certain circumstances, zh66 may receive personal data about you from third parties, including payment processors (for transaction verification), identity verification service providers (for KYC checks), and fraud prevention agencies. We use this data solely for the purposes described in this Policy.

3.1 zh66 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create, maintain, and administer your zh66 account, including processing your registration details and managing your account preferences.
• Identity Verification (KYC): To verify your identity, confirm you are aged 21 or above, and comply with our obligations under applicable Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate transaction records.
• Provision of Gaming Services: To allow you to access and participate in casino games, live dealer games, cricket betting, slots, jackpots, lucky dice, and other entertainment services on the zh66 platform.
• Customer Support: To respond to your enquiries, resolve disputes, provide technical assistance, and maintain records of communications for quality assurance purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the zh66 platform.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling and to apply responsible gaming tools such as deposit limits, session reminders, cool-off periods, and self-exclusion where relevant or requested.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time through your account settings or by contacting support.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse usage patterns, improve site performance, personalise your experience, and develop new features that better serve Pakistani players.

4.1 zh66 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform the contract we have with you as a registered zh66 player — including account management, payment processing, and delivering gaming services.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including AML legislation, KYC obligations, and reporting requirements under our gaming licence.
• Legitimate Interests: Processing that is necessary for zh66's legitimate business interests, such as preventing fraud, improving platform security, and conducting internal analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where zh66 relies on your consent as the legal basis for processing (for example, sending marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.2 Where zh66 processes personal data based on legitimate interests, we conduct a balancing assessment to ensure that our interests do not unduly override your privacy rights. The outcome of such assessments is documented and can be provided upon request.

5.1 zh66 uses cookies and similar tracking technologies on our website and mobile platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and provide a better user experience.

5.2 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the operation of the zh66 platform — including session management, login authentication, and security functions. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and account dashboard layout to personalise your zh66 experience.
• Analytics Cookies: Help us understand how players interact with the platform — which games are most popular, which pages generate the most traffic, and where technical issues may occur. This data is aggregated and anonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your activity on zh66. These are only set where you have consented to marketing communications.

5.3 Cookie Control: You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the zh66 platform. Strictly necessary cookies cannot be disabled as they are required for core platform operation.

6.1 zh66 does not sell, rent, or trade your personal data to any third party. We may share your personal data in the following limited and controlled circumstances:

• Payment Processors: We share necessary financial and identity data with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network operators — solely to process your deposits and withdrawals.
• Identity Verification Providers: We use third-party KYC and identity verification service providers to verify your CNIC, passport, and other identity documents as required by our regulatory obligations.
• Game Studio Providers: For live casino games and certain slot titles, game content is supplied by third-party studio providers. These providers may process limited technical data (such as session identifiers) to deliver game content. They do not receive your full personal profile.
• Fraud Prevention and AML Services: We may share data with fraud prevention and AML compliance agencies to detect and prevent financial crime on the zh66 platform.
• Regulatory and Law Enforcement Authorities: Where required by law, regulation, court order, or at the direction of a competent regulatory or law enforcement authority, zh66 will disclose relevant personal data. We will, where legally permitted, notify you of such a disclosure.
• Professional Advisors: zh66 may share personal data with its legal advisors, auditors, and accountants where necessary for the conduct of legal proceedings, audits, or financial reporting — subject to strict confidentiality obligations.

6.2 All third parties with whom zh66 shares personal data are required to handle that data in accordance with applicable data protection standards and are permitted to use it only for the specific purpose for which it was shared.

7.1 As an internationally licensed gaming platform, zh66 operates infrastructure and engages service providers that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

7.2 Where such transfers occur, zh66 takes appropriate measures to ensure that your personal data receives an adequate level of protection in the destination country. These measures may include:

• Entering into data transfer agreements that incorporate recognised standard contractual clauses;
• Transferring data only to jurisdictions that maintain adequate data protection standards recognised under applicable frameworks;
• Implementing technical and organisational safeguards equivalent to those applied within zh66's own infrastructure.

7.3 By using the zh66 platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described in this clause. If you would like further information about the specific safeguards applied to any such transfer, please contact our support team.

8.1 zh66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, and contractual obligations.

8.2 The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to comply with AML and KYC record-keeping obligations.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Communications Data: Support correspondence and live chat transcripts are retained for up to three (3) years to assist with dispute resolution and quality assurance.
• Technical and Usage Data: Anonymised analytics data may be retained indefinitely for platform improvement purposes. Non-anonymised technical logs are typically retained for up to twelve (12) months.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for the duration of your account and for a reasonable period thereafter to demonstrate compliance.

8.3 Where personal data is no longer required, zh66 will securely delete or anonymise it in accordance with its data disposal procedures. If you request deletion of your personal data prior to the expiry of an applicable retention period, zh66 will restrict processing of that data to the minimum extent required to fulfil its legal obligations.

9.1 zh66 respects your rights in relation to your personal data. Subject to applicable legal limitations, you have the following rights:

9.2 To exercise any of the above rights, please contact the zh66 support team via live chat or email at [email protected]. zh66 will respond to all rights requests within a reasonable timeframe and in any event within 30 days of receipt, subject to identity verification.

9.3 zh66 will not charge a fee for handling rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case zh66 may charge a reasonable administrative fee or decline to act on the request.

10.1 The zh66 platform is strictly an adult-only service. Access is restricted to individuals who are 21 years of age or older. zh66 does not knowingly collect, store, or process personal data relating to persons under the age of 21.

10.2 During registration, all users are required to confirm that they are aged 21 or above. zh66 applies identity verification checks to confirm this. Where zh66 has reason to believe that an account is held by a person under the age of 21, that account will be immediately suspended and any balance will be returned via the original deposit method following investigation.

10.3 If you are a parent or guardian and believe that your child has registered an account or provided personal data to zh66, please contact our support team at [email protected] immediately. zh66 will promptly investigate and take appropriate action, including deletion of any data collected from a minor.

11.1 zh66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the zh66 platform is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Access Controls: Access to personal data within zh66 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): zh66 offers 2FA for player accounts and applies 2FA to all internal staff access to systems that hold personal data.
• Regular Security Audits: zh66 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our platform infrastructure.
• Incident Response Plan: zh66 maintains a documented data breach response plan to ensure rapid, coordinated action in the event of a security incident.

11.2 While zh66 takes all reasonable and practicable steps to protect your personal data, no online platform can guarantee absolute security. You also have an important role to play — keeping your account credentials confidential, enabling 2FA, and notifying zh66 immediately if you suspect any unauthorised access to your account.

12.1 The zh66 platform may contain references to third-party services, such as payment processors or game content providers. Where you interact with these third-party services, their own privacy policies and data practices will apply. zh66 is not responsible for the privacy practices of any third party.

12.2 zh66 recommends that you review the privacy policy of any third-party service before providing your personal data to that service. If you have any concerns about how a third-party provider processes your data in connection with zh66 services, please contact our support team.

13.1 zh66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. The date of the most recent revision is displayed at the top of this document.

13.2 Where changes to this Policy are material — meaning they significantly affect your privacy rights or how we process your personal data — zh66 will notify registered players by email or through an on-platform notification at least 7 days before the revised Policy takes effect.

13.3 Your continued use of the zh66 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you may request account closure by contacting our support team.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to zh66's handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available on the zh66 platform 24 hours a day, 7 days a week, including all public holidays. Average response time under 3 minutes.
• Email: [email protected] — responses within 2 to 4 hours during normal operations.

14.2 When submitting a privacy-related request, please include your registered account username and a clear description of your request or concern so that our team can assist you efficiently.

14.3 If you are not satisfied with zh66's response to a privacy concern or complaint, you have the right to escalate the matter through the dispute resolution process set out in zh66's Terms and Conditions, or to raise the matter with the relevant data protection or regulatory authority in the jurisdiction applicable to your complaint.