zh22 Privacy Policy

This Privacy Policy ("Policy") describes how zh22 ("zh22", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you" or "Player") who register for or use the zh22 platform, accessible at zh22.org and any associated mobile applications or sub-domains (collectively, the "Platform").

This Policy is incorporated into and must be read alongside zh22's Terms & Conditions. By registering on zh22 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

This Policy applies to all personal data we process, regardless of whether it is collected online through the Platform, via email or live chat correspondence with our support team, or through third-party payment processors acting on our behalf.

zh22 collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in this Policy.

zh22 does not intentionally collect sensitive special-category data such as health information, racial or ethnic origin, religious beliefs, or biometric data, except where required as part of an identity verification process mandated by our licensing authority.

zh22 collects personal data through the following channels:

• Direct registration: When you create a zh22 account, you provide identity, contact, and payment data directly. All fields marked as mandatory during registration are necessary for zh22 to fulfil its licensing and AML obligations.
• Platform usage: As you use zh22's betting, casino, and gaming services, the Platform automatically records account activity data and technical data as part of normal platform operation.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan, or Raast, the relevant payment provider shares transaction confirmation data with zh22 sufficient to reconcile your account balance.
• KYC verification partners: If zh22 uses a third-party identity verification service to validate your CNIC or passport, that service will share the outcome of the verification (pass/fail and document authenticity status) with zh22.
• Cookies and tracking technologies: zh22 uses cookies and similar technologies on the Platform. Please refer to Section 7 (Cookies & Tracking) for full details.
• Support interactions: When you contact zh22's support team via live chat or email, the content of those communications is recorded and stored as part of your account record.
• Fraud and security tools: zh22 may receive device fingerprint data, geolocation signals, and risk scoring information from third-party security providers as part of fraud detection operations.

zh22 uses your personal data for the following purposes:

• Account management: Creating and maintaining your zh22 account, verifying your identity (21+ age check and KYC), and managing account security including two-factor authentication and trusted device management.
• Platform operation: Processing bets and wagers, crediting winnings, managing bonus wagering requirements, and delivering the cricket betting, live casino, slot, and fishing game services you have signed up for.
• Payment processing: Facilitating PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast) and maintaining accurate transaction records.
• Regulatory compliance: Meeting zh22's anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming monitoring duties, and audit obligations under our international gaming licence.
• Fraud prevention and security: Detecting and preventing account takeover, payment fraud, bonus abuse, multi-accounting, and other prohibited conduct as defined in zh22's Terms & Conditions.
• Responsible gaming: Monitoring account activity patterns to identify indicators of problem gambling behaviour, enforcing player-requested deposit limits, session limits, and self-exclusion periods, and providing responsible gaming notifications.
• Customer support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality assurance and regulatory audit purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve zh22's product features, betting markets, game library, and user experience for Pakistani players.
• Direct communications: Sending account-related transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about zh22 bonuses and PSL or cricket betting offers.

zh22 does not use your personal data for automated decision-making that produces significant legal effects on you, except where such decisions are required as part of our AML or responsible gaming compliance obligations — and in those cases, you have the right to request human review of any automated decision.

zh22 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform zh22's contractual obligations to you under the Terms & Conditions — including operating your account, processing bets, and handling payments.
• Legal obligation: Processing required for zh22 to comply with applicable law and regulatory requirements, including AML legislation, KYC obligations under our gaming licence, and mandatory responsible gaming frameworks.
• Legitimate interests: Processing carried out for zh22's legitimate business interests, including fraud prevention, platform security, product improvement, and marketing to existing players where those interests are not overridden by your privacy rights.
• Consent: Where zh22 relies on your consent as the legal basis for processing — most notably for direct marketing communications — you may withdraw that consent at any time by contacting [email protected] or updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

zh22 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive only the data necessary to process your specific deposit or withdrawal transaction. These providers operate under their own privacy policies and are not authorised to use your data for any purpose other than transaction processing.
• KYC & identity verification providers: Third-party identity verification services receive your CNIC/passport data solely to verify your identity as required by our licensing obligations. zh22 does not retain raw document images beyond the verification period unless mandated by regulation.
• Fraud prevention and security vendors: Specialist security providers may receive technical data (IP addresses, device fingerprints) to perform fraud risk assessments. These vendors operate under strict data processing agreements with zh22.
• Regulatory authorities: zh22 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies in response to a lawful request or as part of our mandatory AML reporting obligations. zh22 will only make such disclosures to the minimum extent required by law.
• Platform technology partners: zh22's game content providers, live dealer studio operators, and sports data feed suppliers may receive anonymised session data necessary to deliver their services. These partners do not receive your identity or financial data.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving zh22, player data may be transferred to the acquiring entity subject to equivalent privacy protections and notification to affected players.

zh22 uses cookies and similar tracking technologies (such as pixel tags and local storage) on the Platform. Cookies are small text files placed on your device when you visit zh22. They serve the following purposes:

• Essential cookies: Required for core Platform functionality — maintaining your login session, remembering your responsible gaming settings, and enabling secure transactions. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings and game interface configurations to personalise your experience on zh22.
• Analytics cookies: Collect anonymised and aggregated data about how players navigate zh22, which pages are most visited, and where errors occur. This information is used internally to improve the Platform. zh22 does not share analytics data with external advertising networks.
• Security cookies: Used by zh22's fraud detection systems to identify and block suspicious login attempts, prevent account takeover, and detect automated bot activity.

Most web browsers allow you to control cookie settings through your browser preferences. Please note that disabling essential cookies may prevent certain zh22 features from functioning correctly. zh22 does not use third-party advertising or behavioural tracking cookies.

zh22 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods imposed by our licensing and legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with zh22.
• Closed account data: Following account closure, zh22 retains identity, financial, and transaction records for a minimum period required by our gaming licence and applicable AML regulations — typically five (5) years from the date of account closure. This is a mandatory regulatory requirement, not a discretionary policy.
• Support communications: Support interaction records are retained for a period of three (3) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or regulatory matter.
• Technical and security logs: Security and server access logs are retained for a period of twelve (12) months, after which they are anonymised or deleted, unless required for an ongoing security investigation.
• Marketing data: If you have consented to receiving promotional communications and subsequently withdraw that consent, your marketing preferences data will be updated immediately and you will be removed from active marketing lists within 5 business days.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with zh22's data destruction procedures.

zh22 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and zh22's servers is encrypted using 256-bit SSL/TLS encryption. This applies to account login, payment processing, and all API communications.
• Encryption at rest: Sensitive personal data stored on zh22's servers, including financial data and identity documents, is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to player personal data within zh22's organisation is restricted on a strict need-to-know basis. Staff members with access to player data undergo background screening and regular data security training.
• Two-factor authentication: zh22 offers and encourages two-factor authentication (2FA) for all player accounts. Players are advised to enable 2FA to protect their accounts from unauthorised access.
• Penetration testing and security audits: zh22's Platform and infrastructure undergo periodic independent security assessments as part of our licensing obligations.
• Data breach response: zh22 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, zh22 will notify affected players and relevant regulatory authorities in accordance with applicable obligations.

No digital transmission or storage system can be guaranteed to be 100% secure. While zh22 takes every reasonable precaution, you are also responsible for maintaining the security of your own account credentials. Never share your zh22 password with anyone.

Subject to applicable law and zh22's regulatory obligations, you have the following rights in respect of the personal data zh22 holds about you. To exercise any of these rights, contact zh22 at [email protected]. zh22 will acknowledge your request within 48 hours and respond within 30 calendar days.

zh22 is strictly an adult platform. Access to zh22 is prohibited for anyone under the age of 21. zh22 does not knowingly collect personal data from individuals under 21 years of age.

If you are a parent or guardian and believe that a minor has registered on zh22 or has provided personal data to zh22 without your knowledge, please contact zh22 immediately at [email protected]. Upon confirmation, zh22 will immediately suspend and close the minor's account and delete all associated personal data, subject to any mandatory regulatory retention requirements.

zh22 enforces age verification at the point of registration and may conduct additional document-based age verification checks at any point during a player's account lifetime, including before processing withdrawal requests.

zh22 operates under an international gaming licence, and some of the third-party service providers and technology partners that zh22 works with may be located outside Pakistan. Where personal data is transferred to a third country, zh22 ensures that appropriate safeguards are in place, which may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to the protections described in this Policy.
• Transfer to organisations that operate in jurisdictions with adequacy determinations recognised under applicable international data protection frameworks.
• Other lawful transfer mechanisms as available under applicable data protection law.

zh22 does not transfer your data to any recipient that has not agreed in writing to handle it in a manner consistent with the protections described in this Policy. For information about specific international transfer arrangements, contact zh22 at [email protected].

zh22 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, regulatory requirements, or applicable law. When material changes are made, zh22 will:

• Update the "Last Revised" date at the top of this Policy.
• Display a prominent notice on the Platform upon your next login, drawing your attention to the changes.
• Where required by our licensing obligations or the significance of the change, notify you directly via the email address registered to your account.

Your continued use of the Platform after the revised Policy is published constitutes your acceptance of the updated terms. If you do not agree with any material change, you should stop using the Platform and may close your account by contacting zh22 support.

zh22 will not apply material changes to this Policy retroactively in a manner that would reduce the protections previously provided to data collected before the change.

For any questions, concerns, or requests relating to this Privacy Policy or zh22's data practices, please contact our team:

• Email: [email protected]
• Subject line for data requests: "Privacy Request — [Your Account Username]"
• Response time: zh22 acknowledges all privacy-related correspondence within 48 hours and will provide a substantive response within 30 calendar days of receiving a complete request.
• Support hours: 24/7, Pakistan Standard Time (UTC+5)
• Serving: Players across Pakistan — Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and beyond.

If you are not satisfied with zh22's response to a privacy complaint, you may escalate the matter to zh22's compliance team. Further escalation to zh22's licensing authority as an independent oversight body is also available — full details are provided in zh22's complaint response correspondence.