Privacy Policy – How ZS Games Protects Your Personal Data

ZS Games operates the online gaming and sports betting platform available at zsgames.app. When this Privacy Policy refers to "ZS Games," "we," "us," or "our," it means the company operating this platform and all services accessible through it.

ZS Games is the data controller for all personal information collected through the platform. This means we determine why and how your personal data is processed. If you have questions about how your information is handled, the contact details at the end of this document are the right place to start.

This Privacy Policy applies to all registered ZS Games account holders and to anyone who visits or uses the zsgames.app website, regardless of whether they have completed registration. By using the platform, you acknowledge that you have read this policy and understand how your personal data is handled.

ZS Games collects only the personal data that is genuinely necessary to operate your account, process your transactions, and comply with our legal obligations. Here is a clear breakdown of what we collect and when:

We do not collect your CNIC number unless it is required as part of a formal identity verification request — typically triggered when your cumulative withdrawal amount exceeds a regulatory threshold. If KYC documents are requested and not provided within the timeframe specified, access to withdrawal may be temporarily suspended.

ZS Games collects personal data for specific, legitimate reasons — not speculatively or in bulk. Here is the honest explanation of why each category is needed:

• Identity and contact data is required to create and manage your account, verify you are who you say you are, and send you information about your account — including payment confirmations, security alerts, and support responses.
• Financial data is required to process deposits and withdrawals in PKR, apply bonus credits correctly, and produce the transaction records that both you and ZS Games need for account management and dispute resolution.
• Gaming activity data is required to operate your account accurately, detect patterns consistent with responsible gaming concerns, identify fraudulent behaviour, and comply with our anti-money-laundering obligations.
• Technical data is collected automatically to protect account security (detecting unusual login locations or devices), to maintain platform performance, and to diagnose technical issues.
• Communications data is retained so that ZS Games support staff have context when you contact us and so that disputes can be reviewed accurately against a complete record of previous interactions.

ZS Games processes personal data only where there is a legitimate legal basis to do so. The legal bases we rely on are:

• Contract performance: Processing your identity, contact, financial, and gaming activity data is necessary to deliver the services you signed up for. Without this processing, we cannot operate your account.
• Legal obligation: We are required to collect and retain certain data — including identity verification documents and transaction records — to comply with anti-money-laundering regulations and other applicable legal requirements.
• Legitimate interests: We process technical data and gaming activity data to detect and prevent fraud, protect platform security, and operate our responsible gaming programme. These are legitimate interests that do not override your rights.
• Consent: Where we send you marketing communications (promotional offers, new game announcements), we do so only where you have actively opted in. You can withdraw this consent at any time by contacting support@zsgames.app or updating your account preferences.

Your personal data is used by ZS Games in the following specific ways. We do not use it for anything outside of this list without first updating this policy and, where required, seeking your consent:

• Creating, verifying, and maintaining your ZS Games account.
• Processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard.
• Calculating and applying bonus credits, free spins, and promotional rewards to your account.
• Monitoring gaming activity for responsible gaming purposes — identifying patterns that may suggest a player needs intervention, and administering deposit limits, cooling-off periods, and self-exclusion where requested.
• Detecting and investigating suspected fraud, money laundering, match-fixing, and other prohibited conduct.
• Sending transactional communications: deposit confirmations, withdrawal notifications, security alerts, and responses to your support requests.
• Sending marketing communications (only where you have opted in) about promotions, new games, and ZS Games offers.
• Analysing aggregate, anonymised platform usage data to improve game selection, interface design, and overall player experience.

ZS Games does not sell your personal data to any third party. We share data only with the specific categories of recipients described below, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the minimum data required to process your transaction. These providers handle data under their own regulated privacy frameworks.
• Game software providers: The third-party game studios whose titles appear on ZS Games receive anonymised player session data (not your name or contact details) for RTP monitoring and technical support purposes.
• Identity verification services: Where KYC verification is required, your identity documents may be processed by a regulated identity verification partner. This processing is done under contractual obligations to handle data securely and only for verification purposes.
• Legal and regulatory authorities: ZS Games will disclose your personal data to law enforcement, regulators, or courts where required to do so by law or as part of an investigation into suspected criminal activity.
• Professional advisers: Lawyers, auditors, and accountants engaged by ZS Games may access account data as part of their professional duties, under strict confidentiality obligations.

All third parties that handle personal data on behalf of ZS Games are required to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared. We do not permit our service providers to use your data for their own marketing or unrelated purposes.

ZS Games uses cookies and similar technologies on zsgames.app. A cookie is a small file placed on your device by your browser when you visit a website. Here is how ZS Games uses them:

ZS Games does not use third-party advertising cookies or allow advertising networks to place tracking technologies on our platform. You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the ZS Games platform, but may affect some functional preferences being remembered between sessions.

All personal data collected by ZS Games is stored on secure servers with access controls that limit who can view or process it to authorised personnel only. The technical and organisational measures we have in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ZS Games platform.
• Encryption at rest for all stored personal and financial data.
• Payment tokenisation: Raw payment credentials (such as mobile wallet PINs or card numbers) are never stored on ZS Games servers. Transactions are processed through the payment provider's secure infrastructure, and only a token reference is retained by ZS Games.
• Role-based access controls: Only staff members whose role requires access to specific categories of personal data can view those records. Access is logged and audited.
• Regular security assessments: The ZS Games platform is subject to periodic security reviews to identify and address vulnerabilities.
• Incident response procedure: In the event of a data breach that poses a risk to your rights or freedoms, ZS Games will notify affected users as quickly as practically possible.

ZS Games retains personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The general retention periods are:

• Account data: Retained for the lifetime of your active account, plus 5 years after account closure to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for 7 years from the date of the transaction in accordance with financial record-keeping obligations.
• KYC and identity documents: Retained for 5 years from the date of the last transaction on the account, or longer if required by a regulatory authority.
• Gaming activity logs: Retained for 5 years from the date of each session to support responsible gaming monitoring and dispute resolution.
• Support communications: Retained for 3 years from the date of the last communication in the thread.
• Technical and device data: Retained for 12 months from collection, or longer where it forms part of a fraud or security investigation.

When the relevant retention period expires, personal data is securely deleted or anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for aggregate statistical purposes.

As a ZS Games player, you have specific rights over your personal data. These rights apply regardless of when you registered or how long you have been a member:

To exercise any of these rights, contact us at support@zsgames.app with the subject line "Data Rights Request." We will verify your identity before processing the request and respond within 30 days. There is no charge for standard data rights requests.

ZS Games processes all financial transactions in Pakistani rupees through regulated Pakistani payment providers. When you make a deposit or request a withdrawal, your payment information is handled as follows:

Easypaisa and JazzCash transactions: Your mobile wallet number is shared with the respective provider to initiate or receive a transfer. ZS Games retains a transaction reference and confirmation only — not your wallet PIN or full account credentials.

Bank IBFT transfers: Your bank account number and IBAN are used solely to process the specific transfer requested. This information is retained as part of your transaction record for the period required by financial record-keeping obligations.

Visa/Mastercard: Card details are processed entirely within PCI-DSS compliant payment infrastructure. ZS Games receives only a tokenised card reference. Full card numbers are never stored on ZS Games systems.

ZS Games operates a return-to-source withdrawal policy. Withdrawals can only be sent back to the same payment method used for the original deposit. This is a fraud prevention measure and applies to all accounts regardless of balance.

ZS Games is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe that a minor has registered on the ZS Games platform, please contact us immediately at support@zsgames.app. We will investigate, close the account, and securely delete all associated personal data as quickly as possible.

Our registration process includes an age declaration and ZS Games conducts age verification as part of the KYC process. Accounts found to belong to users under 18 are permanently closed and all funds are returned to the payment source used for deposit, with any winnings voided as void from the outset.

ZS Games may update this Privacy Policy from time to time. When we make material changes — changes that affect your rights or how your data is used — we will notify you by email at the address registered on your account at least 7 days before the changes take effect. Minor updates, such as corrections to wording or formatting, will be made without prior notice but will be reflected in the "Last updated" date at the top of this page.

We recommend reviewing this page periodically. Continued use of the ZS Games platform after an update takes effect constitutes your acknowledgement of the revised policy. Previous versions of this policy are available on request by contacting support@zsgames.app.

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how ZS Games has handled your personal information, please get in touch through any of the following channels:

• Email: support@zsgames.app — available 24/7, average response under 3 hours
• Subject line for data requests: "Data Rights Request" or "Privacy Concern"
• Live Chat: Available within the ZS Games platform for logged-in members

We aim to resolve all privacy-related queries within 30 days. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. ZS Games will cooperate fully with any such investigation.

For questions about our Terms and Conditions or Responsible Gaming Policy, separate pages for each are available on the ZS Games website.