This Privacy Policy explains exactly how zh8 collects, processes, stores, and protects your personal data when you use the zh8 platform at zh8.lat. zh8 is committed to keeping Pakistani players' data safe, never selling personal information to third parties, and giving you full transparency and control over how your information is used. Please read this document carefully before creating or using your zh8 Account.
zh8 is the operator of the online gaming platform accessible at zh8.lat and all associated sub-domains, mobile applications, and digital services (collectively, the "zh8 Platform"). zh8 operates as an online gaming business offering sports betting, live casino games, slot games, and instant games to players in Pakistan and other eligible jurisdictions, subject to applicable licensing requirements.
For the purposes of data protection law, zh8 is the data controller of the personal information you provide when registering for or using the zh8 Platform. This means zh8 determines the purpose and means by which your personal data is processed. zh8 takes this responsibility seriously and is committed to handling your data with integrity, transparency, and in compliance with applicable international data protection standards.
zh8 collects personal data that is necessary to provide gaming services, comply with legal obligations, and deliver a high-quality experience to Pakistani players. The categories of personal data zh8 collects are as follows:
zh8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health information, except where a Player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such data is processed strictly for player welfare purposes.
zh8 collects personal data through the following channels and mechanisms:
zh8 processes your personal data for the following clearly defined purposes. zh8 does not use personal data for any purpose that is incompatible with those listed below:
zh8 processes personal data on one or more of the following legal bases, depending on the specific processing activity:
zh8 does not sell your personal data to any third party, under any circumstances. Data sharing is limited strictly to what is necessary for zh8 to operate its Platform, comply with legal obligations, and protect its players. zh8 may share your personal data with the following categories of recipient:
zh8 operates as an internationally regulated gaming platform. As a result, some personal data processing may involve transfer to, or storage in, systems located outside Pakistan. Such transfers occur only where:
Where data is transferred internationally, zh8 takes all reasonable steps to ensure that the receiving party processes your data with equivalent security and privacy protections to those applied by zh8 itself. If you would like more information about the specific safeguards in place for international transfers, please contact zh8 support.
zh8 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, zh8 will securely delete or anonymise your personal data such that it can no longer be associated with your identity. Anonymised data may be retained indefinitely for statistical and analytical purposes.
zh8 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and maintain security. The categories of cookies used on zh8 are as follows:
zh8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While zh8 takes all reasonable steps to protect your data, no online system is completely immune to security risk. zh8 recommends that all Pakistani players protect their own Accounts by using a strong, unique password and enabling two-factor authentication where available. In the event of a confirmed data breach that is likely to result in risk to players, zh8 will notify affected players and relevant authorities as required under applicable law.
As a zh8 player, you have the following rights with respect to your personal data. These rights may be subject to certain limitations under applicable law, particularly where zh8 has overriding legal obligations (such as AML record-keeping requirements) that prevent full compliance with a request.
Right of Access
Request a copy of all personal data zh8 holds about you, including the purposes for which it is processed and the categories of recipients it has been shared with.
Right to Rectification
Request correction of any inaccurate personal data zh8 holds about you. You can update most Account information directly via your zh8 Account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to zh8's legal retention obligations (e.g., AML record-keeping).
Right to Restriction
Request that zh8 restricts processing of your data in certain circumstances, such as while a correction request is being assessed or a deletion objection is pending.
Right to Portability
Request your data in a structured, machine-readable format where technically feasible, for data provided by you and processed on the basis of contract or consent.
Right to Object
Object to processing based on zh8's legitimate interests, including profiling for platform improvement. You may also object to direct marketing at any time with immediate effect.
The zh8 Platform is strictly for adults aged 21 and above. zh8 does not knowingly collect personal data from any person under the age of 21. If zh8 becomes aware that an Account has been registered by a person under 21, the Account will be immediately suspended, all balances will be held pending investigation, and the minor's personal data will be deleted from zh8 systems as soon as legally permissible, subject to any mandatory reporting obligations.
zh8 implements age verification as a mandatory step in the Account registration process and during KYC review. If you are a parent or guardian and believe your child has accessed or registered on the zh8 Platform, please contact zh8 support immediately at [email protected]. zh8 will investigate and take appropriate action promptly.
zh8 will only send you promotional communications — including bonus offers, tournament notifications, and platform updates — if you have explicitly opted in to receive them during registration or at a later point through your zh8 Account settings. zh8 uses the following channels for marketing communications where consent has been granted:
zh8 does not share your contact details with any third-party advertisers or marketing agencies. All promotional communications originate directly from zh8 and relate exclusively to zh8 products and services.
The zh8 Platform may, on occasion, reference or display information relating to third-party payment providers such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in the context of deposit and withdrawal instructions. These references do not constitute endorsement of those parties' privacy practices, and zh8 is not responsible for the data handling practices of any third-party service.
When you interact with a third-party payment provider to fund or receive funds from your zh8 Account, you are subject to that provider's own terms and privacy policy. zh8 recommends that you review the privacy policies of any payment provider you use in connection with your zh8 Account.
zh8 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, zh8 will notify registered players by posting a prominent notice on the zh8 Platform and, where appropriate, by sending a notification to your registered mobile number or email address. The updated Policy will state the new effective date at the top of the document.
Your continued use of the zh8 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to this Policy, you may request Account closure and data deletion by contacting zh8 support before the revised Policy takes effect.
For any questions, concerns, or formal requests relating to this Privacy Policy or zh8's data processing practices, please contact zh8 through the following channels:
Our privacy practices are built around six core commitments — here is what they mean for you in plain language.
Zero Data Sales
zh8 has never sold, rented, or traded player data to any third party and never will. Your CNIC details, mobile number, and transaction history exist solely to operate your zh8 Account — full stop. No data brokers, no advertising networks, no commercial data sharing.
AES-256 Encryption
All data stored on zh8 servers is encrypted at rest using AES-256, the same encryption standard used by international banks. All data transmitted between your device and zh8 is protected by TLS 1.3. Your information is never stored in plain text anywhere in the zh8 infrastructure.
CNIC — Handled Carefully
Your CNIC is one of the most sensitive documents a Pakistani player provides. zh8 processes CNIC data exclusively through accredited KYC partners under strict data processing agreements. Once verified, your CNIC data is stored encrypted and access is restricted to compliance staff only, on a need-to-know basis.
You Control Marketing
zh8 only contacts you with promotional offers if you have explicitly opted in. You can update your marketing preferences from your zh8 Account dashboard at any time — no bureaucracy, no waiting. Opting out takes effect immediately and does not impact your Account or any active bonuses.
Clear Retention Periods
zh8 does not hold your data indefinitely. Each data category has a defined retention period — for example, support communications are deleted after 3 years and technical logs after 12 months. Once the retention window closes, data is securely deleted or anonymised, not archived indefinitely on forgotten servers.
Real Rights, Real Access
Your data rights at zh8 are not just words on a policy page. Email [email protected] with "Data Rights Request" and zh8 will respond within 30 days with your full data export, correction confirmation, or deletion record — whichever you requested.
Join hundreds of thousands of Pakistani players who trust zh8 with their data and their PKR. Secure, transparent, and built for Pakistan — from Karachi to Islamabad.