cz888 Privacy
Policy

This Privacy Policy ("Policy") applies to cz888 ("cz888", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data provided by or collected from users ("you", "Player", "Account Holder") of the cz888 platform accessible at cz888.ws. By registering an account or using the cz888 platform in any capacity, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

cz888 is committed to handling your personal information responsibly, transparently, and in accordance with the data protection obligations applicable under our international gaming operating licence. If you have questions about this Policy, please contact our Data Protection team at [email protected] before using the platform.

1. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, email address, mobile number, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means cz888, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of cz888 under a data processing agreement.
• "KYC Data" means identity and age verification documents submitted by a Player, including CNIC copies and proof of payment method documents.
• "Platform" refers to the cz888 website at cz888.ws and all associated mobile interfaces and sub-domains.
• "Cookies" means small text files placed on your device by the cz888 platform to maintain session information and platform preferences.

2. Data Controller

cz888 is the Data Controller responsible for the Personal Data collected through the cz888 platform. As Data Controller, cz888 determines what data is collected, why it is collected, and how it is used. cz888 operates as a licensed international gaming operator and is subject to data protection obligations under the regulatory framework governing its gaming licence.

For all data protection enquiries, rights requests, or concerns regarding this Privacy Policy, you may contact the cz888 Data Protection team by email at [email protected] or via the 24/7 live chat facility on the cz888 platform. We aim to respond to all formal data protection enquiries within 5 business days.

3. Data We Collect

cz888 collects the following categories of Personal Data in the ordinary course of platform operation:

cz888 does not collect full payment card numbers. Card transactions are processed through PCI-DSS compliant payment gateways that do not transmit full card data to cz888 systems. cz888 also does not collect biometric data beyond optional identity selfie verification during KYC.

4. How We Collect Data

cz888 collects Personal Data through the following means:

• Direct submission — Information you provide when completing the cz888 registration form, submitting KYC documents, making deposits or withdrawals, contacting support, or completing responsible gaming forms.
• Automated technical collection — Technical data (IP address, device identifiers, browser fingerprint, session logs) is automatically collected when you access the cz888 platform, regardless of whether you are logged in.
• Payment providers — When you deposit or withdraw via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, cz888 receives transaction confirmation data from the relevant payment provider to credit or process your account.
• Cookies and tracking technologies — Session cookies, preference cookies, and analytics cookies are placed on your device during platform use. Details are set out in Section 9 (Cookies & Tracking) below.
• Third-party identity verification — Where cz888 uses a third-party identity verification service provider as part of the KYC process, that provider may return a verification result and risk score to cz888 alongside the documents you submitted.

5. Purpose & Legal Basis for Processing

cz888 processes your Personal Data for the following specific purposes, each supported by a clearly identified legal basis:

• Account registration and management — To create, maintain, and administer your cz888 player account. Legal basis: Performance of contract.
• Age and identity verification (KYC) — To comply with our licensing obligation to verify that all players are aged 21 or above and are who they claim to be. Legal basis: Legal obligation / regulatory compliance.
• Payment processing — To process deposits and withdrawals via JazzCash, EasyPaisa, and other supported payment methods. Legal basis: Performance of contract.
• Anti-money laundering (AML) monitoring — To detect, investigate, and report suspicious financial activity as required under our operating licence. Legal basis: Legal obligation.
• Responsible gaming — To monitor betting and gaming patterns for signs of problem gambling and to enforce self-exclusion requests and deposit limits. Legal basis: Legitimate interests / Legal obligation.
• Fraud prevention and platform security — To detect and prevent duplicate accounts, bonus abuse, match manipulation, and other fraudulent activity. Legal basis: Legitimate interests.
• Platform improvement and analytics — To understand aggregate usage patterns and improve the cz888 platform experience for all Pakistani players. Legal basis: Legitimate interests. Data used for this purpose is aggregated and not linked to individual player profiles.
• Marketing communications — To send PSL promotions, welcome bonuses, and platform updates to opted-in players. Legal basis: Consent. You may withdraw consent at any time via Account settings.
• Legal and regulatory compliance — To respond to lawful requests from regulatory authorities, law enforcement, or courts. Legal basis: Legal obligation.

6. Data Retention

cz888 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory or legal obligations. The following general retention periods apply:

• Account and identity data — Retained for the duration of your active account plus a minimum of 5 years following account closure, as required under standard anti-money laundering record-keeping obligations.
• KYC documents (CNIC, selfie, proof of payment) — Retained for a minimum of 5 years from the date of submission. After this period, documents are securely deleted unless an ongoing legal or regulatory obligation requires extended retention.
• Financial transaction records — Retained for a minimum of 5 years from the date of each transaction in accordance with AML record-keeping requirements.
• Betting and game history — Retained for 2 years from the date of each bet or game session, after which records are anonymised for aggregate analytics purposes.
• Support and communication records — Retained for 2 years from the date of each support interaction. Complaint records are retained for 5 years.
• Marketing preference data — Retained until you withdraw consent to marketing communications, or until your account is closed, whichever is sooner.
• Technical / log data — Retained for 12 months from collection date. Aggregate analytics derived from log data may be retained indefinitely in anonymised form.

When retention periods expire, Personal Data is securely deleted or permanently anonymised using industry-standard data destruction procedures. cz888 conducts periodic data audits to ensure compliance with these retention schedules.

7. Data Sharing

cz888 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share Personal Data only in the following specific and limited circumstances:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions. These providers are subject to their own data protection obligations and PCI-DSS compliance requirements.
• Identity verification providers — Where a third-party KYC verification service is used, your CNIC data and selfie image are shared with that provider solely for the purpose of identity verification. The provider is bound by a data processing agreement with cz888 and may not use your data for any other purpose.
• Gaming software providers — Certain live casino games and slot products on the cz888 platform are supplied by licensed third-party gaming studios. Your player session identifier and bet data may be shared with the relevant studio to facilitate gameplay. No additional personal data is shared beyond what is required for game operation.
• Regulatory authorities — cz888 may disclose Personal Data to our licensing regulatory authority, financial intelligence units, or other government bodies as required under our operating licence or applicable law. Such disclosures are made only when legally compelled and are limited to the data specifically requested.
• Professional advisors — Legal counsel, auditors, and compliance consultants may access Personal Data as necessary in the course of providing services to cz888. All such advisors are bound by professional confidentiality obligations.
• Business transfers — In the event of a merger, acquisition, or sale of all or substantially all of cz888's assets, Personal Data held by cz888 may be transferred to the acquiring entity. Players will be notified of any such transfer via email and/or an on-platform notice prior to it taking effect.

8. International Data Transfers

As an international online gaming platform, cz888 may process or store Personal Data on servers located outside Pakistan. Where data is transferred internationally, cz888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards employed for international data transfers include: contractual data processing agreements incorporating standard data protection clauses with all data processors; technical security controls (encryption at rest and in transit) applied to all cross-border data flows; and access control restrictions limiting international data access to verified and authorised personnel only.

If you require specific information about the international transfer safeguards applicable to your Personal Data, please contact the cz888 Data Protection team at [email protected].

9. Cookies & Tracking Technologies

cz888 uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly necessary cookies — Required for core platform functionality, including session authentication, login state maintenance, and fraud prevention. These cookies cannot be disabled without disrupting your ability to use the platform.
• Preference cookies — Remember your platform settings, including language preferences, notification preferences, and display settings. These cookies persist across sessions until cleared.
• Analytics cookies — Used to collect aggregate information about how players navigate and use the cz888 platform. Analytics data is used solely to improve the platform and is not linked to individual player profiles. cz888 uses privacy-focused, first-party analytics only.
• Security cookies — Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies are essential for platform integrity.

cz888 does not use third-party advertising cookies, behavioural profiling cookies, cross-site tracking pixels, or social media tracking widgets. You can manage cookie settings through your browser preferences. Disabling strictly necessary cookies may prevent you from accessing certain platform features, including your Account.

10. Marketing Communications

cz888 sends marketing communications — including PSL promotional offers, bonus announcements, platform updates, and cricket betting features — only to players who have explicitly opted in to receive such communications during registration or via Account settings. Marketing messages are sent by email and/or SMS to the contact details registered on your cz888 Account.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in the Account settings section of the cz888 platform, or by clicking the unsubscribe link included in any marketing email. Withdrawal of marketing consent does not affect your ability to use the cz888 platform, and you will continue to receive essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preference setting.

cz888 does not share your contact details with third-party advertisers for external marketing purposes. All cz888 marketing communications originate directly from cz888 and relate exclusively to products and promotions available on the cz888 platform.

11. Your Data Rights

As a cz888 player, you are entitled to exercise the following rights in respect of your Personal Data:

• Right of Access — You may request a copy of all Personal Data that cz888 holds about you. cz888 will provide this in a structured, readable format within 30 days of a valid request.
• Right to Rectification — You may request correction of any inaccurate or incomplete Personal Data held in your cz888 Account. Minor corrections (name spelling, contact details) can be made directly via Account settings. Document-based corrections require support contact.
• Right to Erasure — You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where processing was unlawful. Note that cz888 is legally required to retain certain data (identity, transaction records) for regulatory compliance periods as set out in Section 6, and erasure requests cannot override these obligations.
• Right to Restrict Processing — You may request that cz888 restricts processing of your data in certain circumstances, such as where you contest the accuracy of data held or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability — You may request your Personal Data in a commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object — You may object to processing based on legitimate interests grounds, including profiling for responsible gaming monitoring and aggregate analytics. cz888 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the cz888 Data Protection team at [email protected] with your registered email address and a description of your request. cz888 will respond within 30 days and may request identity verification before processing data access or deletion requests.

12. Children & Minors

The cz888 platform is strictly restricted to individuals aged 21 years and above. cz888 does not knowingly collect Personal Data from any person under the age of 21. The registration process includes a mandatory age declaration, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If cz888 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be suspended immediately, all associated funds will be returned to the depositing payment method after investigation, and all Personal Data collected from the minor will be deleted without undue delay.

If you believe a minor has registered or is attempting to register on the cz888 platform, please report this immediately to [email protected]. cz888 takes underage gambling prevention extremely seriously and will investigate all such reports as a priority matter.

13. Security Measures

cz888 employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all platform pages, API endpoints, and payment flows.
• Encrypted data storage — Personal Data and KYC documents are encrypted at rest using AES-256 encryption on isolated, access-controlled database servers.
• Role-based access control (RBAC) — Internal access to player Personal Data is restricted to authorised personnel whose job function requires it, and all access is logged and audited.
• Password hashing — Player account passwords are stored using industry-standard cryptographic hashing (bcrypt) and are not accessible in plain text by any cz888 employee.
• Two-factor authentication (2FA) — Available to all players as an optional but strongly recommended additional layer of account security.
• Regular penetration testing — cz888 commissions periodic third-party security audits and penetration tests to identify and remediate vulnerabilities.
• DDoS protection and firewall systems — Network-level protections are in place to prevent and mitigate denial-of-service attacks and unauthorised network access.

While cz888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for reporting any suspected security incidents to cz888 support immediately.

14. Data Breaches

In the event that cz888 becomes aware of a personal data breach that poses a risk to the rights and freedoms of affected players, cz888 will take immediate containment and remediation action. Affected players will be notified without undue delay by email to their registered cz888 email address, and the notification will include a description of the nature of the breach, the categories and approximate number of players affected, the likely consequences of the breach, and the measures taken or proposed to address it.

cz888 maintains a documented incident response procedure for data breach scenarios, including escalation to the relevant regulatory authority where required under our operating licence obligations. All data breach incidents are formally investigated and documented in an internal breach register.

Players who suspect that their cz888 account may have been involved in a data security incident — including unauthorised account access or suspicious transactions — should contact [email protected] or use the 24/7 live chat immediately.

15. Policy Updates

cz888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, regulatory requirements, or applicable law. When material changes are made to this Policy, cz888 will notify registered players by email to their registered address and/or by an on-platform notification at least 14 days before the revised Policy takes effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the cz888 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and contact support to initiate account closure.

Previous versions of this Privacy Policy are retained in our records and are available on request by contacting [email protected].

16. Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by cz888, please contact our Data Protection team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the cz888 platform
• Website: cz888.ws

cz888 aims to respond to all privacy-related enquiries within 5 business days. Formal data rights requests will be acknowledged within 3 business days and fully processed within 30 calendar days of receipt of a valid, verified request.