Privacy Policy
Your Data. Your Rights.
Our Responsibility.

This Privacy Policy is issued by the Operator of the zk688 platform (hereinafter "zk688", "we", "us", or "our"), which operates the online sports betting and casino services accessible at zk688.bio. zk688 is licensed under an internationally recognised gaming regulatory framework and is committed to operating in full compliance with applicable data protection obligations as embedded in that framework.

For the purposes of this Privacy Policy, zk688 acts as the data controller in respect of personal data collected from members, registered users, and visitors to the zk688.bio website. As data controller, zk688 determines the purposes and means by which your personal data is processed.

If you have any questions regarding this Privacy Policy, the data we hold about you, or how to exercise your data rights, please refer to Section 15 of this document for contact details. We are committed to responding to all data-related enquiries in a prompt, clear, and helpful manner — because at zk688, privacy is not a formality. It is a fundamental part of how we operate.

The following table sets out the categories of personal data that zk688 collects from its members and platform visitors, organised by data category and the context in which it is typically collected:

We do not collect special category data (such as racial origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where strictly required by our KYC obligations and our licence framework — in which case we collect only the minimum required and handle such data with heightened security measures.

zk688 collects personal data through the following channels and mechanisms:

• Direct Provision by You: Data you enter during account registration, KYC submission, cashier transactions, support communications, and responsible gaming tool activation;
• Automated Technical Collection: Technical data (IP address, device identifiers, session data) collected automatically when you visit or interact with the zk688.bio website, through server logs and cookies as described in Section 9;
• Payment Service Providers: Transaction confirmation data received from your payment provider (JazzCash, EasyPaisa, HBL, UBL, SadaPay, or cryptocurrency network) upon processing a deposit or withdrawal instruction;
• Identity Verification Partners: zk688 may use third-party KYC verification service providers to assist in validating the authenticity of identity documents submitted during the KYC process. These partners act as data processors under a binding data processing agreement with zk688;
• Fraud Prevention Systems: Data received from fraud detection and anti-money laundering screening systems used by zk688 to meet its regulatory compliance obligations;
• Game Providers: Session and outcome data generated during your use of third-party slot and live casino games provided on the zk688 platform.

zk688 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Performance of a Contract: Processing that is necessary to provide the services set out in our Terms and Conditions — including account creation, bet placement, payment processing, and customer support. Without this processing, we cannot deliver the services;
• Legal Obligation: Processing required to comply with obligations imposed by our gaming licence framework, applicable anti-money laundering regulations, and financial crime prevention law — including KYC verification, transaction monitoring, and suspicious activity reporting;
• Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement through anonymised analytics;
• Consent: Where we send you optional marketing communications about promotions, bonuses, or new features at zk688, we do so only with your explicit opt-in consent. You may withdraw this consent at any time through your account notification settings or by contacting support.

zk688 uses the personal data described in Section 2 for the following specific purposes:

• Account Management: Creating, maintaining, and securing your zk688 account; verifying your identity and eligibility to use the platform; processing login authentication including two-factor authentication;
• Service Provision: Enabling you to place bets on cricket, PSL, boxing, football, and other sports markets; access live casino tables including Teen Patti and baccarat; play slot games; and participate in the VIP loyalty programme;
• Payment Processing: Processing deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20; reconciling account balances; managing cashier operations;
• Identity Verification & KYC: Verifying your identity, age (21+ requirement), and the ownership of your payment methods in compliance with our regulatory obligations;
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, account takeover attempts, money laundering, and misuse of the platform; operating our transaction monitoring and suspicious activity reporting systems;
• Responsible Gaming: Monitoring gaming behaviour for signs of problem gambling; enforcing player-set deposit limits, session limits, cooling-off periods, and self-exclusion decisions; intervening where problem gambling patterns are detected;
• Customer Support: Managing enquiries, complaints, and disputes submitted via live chat or email; maintaining records of communications for quality assurance and dispute resolution;
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how members interact with the platform and to improve features, navigation, game selection, and overall experience;
• Legal & Regulatory Compliance: Meeting our obligations under our gaming licence, anti-money laundering regulations, and any other applicable law or regulatory instruction;
• Marketing Communications (Consent-Based Only): Sending you information about promotions, bonuses, new game releases, PSL season offers, and VIP programme updates — only where you have opted in.

zk688 does not sell your personal data. We share personal data with third parties only in the following controlled circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and cryptocurrency network processors receive transaction-specific financial data required to execute your deposit and withdrawal instructions. These providers are independent controllers of their own platforms and their respective privacy policies apply to data held on their systems;
• KYC & Identity Verification Partners: Licensed identity verification service providers receive identity document data for the purpose of authenticating your CNIC and confirming your age eligibility. All such partners operate under binding data processing agreements with zk688;
• Game Content Providers: Third-party slot studios and live casino operators (such as Pragmatic Play, Evolution Gaming, and comparable providers) receive session-specific data necessary to operate the games you play and to record outcomes. These providers are bound by the data terms within our content licensing agreements;
• Fraud & AML Compliance Systems: Anti-money laundering and fraud detection platform providers receive transaction metadata and account signals for the purpose of screening against global watchlists and detecting suspicious financial patterns. This is a legal obligation under our licence framework;
• Regulatory Authorities: Where legally required, zk688 will disclose member data to regulatory authorities, law enforcement agencies, or gaming regulators in response to valid legal process. We will notify you of such disclosures unless legally prohibited from doing so;
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access member data on a strictly need-to-know basis under binding confidentiality obligations.

zk688 takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures appropriate to the nature and sensitivity of the data we hold. These measures include:

• Encryption in Transit: All data transmitted between your device and the zk688 platform is protected by 256-bit SSL/TLS encryption, preventing interception by third parties;
• Encryption at Rest: Identity documents, financial data, and other sensitive personal data stored in zk688 databases are encrypted at rest using AES-256 or equivalent standards;
• Access Controls: Access to personal data is restricted to authorised personnel who require it for their specific operational role. Role-based access controls and multi-factor authentication are enforced for all internal systems containing member data;
• Intrusion Detection & Monitoring: zk688's infrastructure is protected by real-time intrusion detection systems, 24/7 monitoring, and automated alerting for any anomalous access patterns;
• Penetration Testing: The zk688 platform undergoes periodic penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited;
• Staff Training: All zk688 personnel who handle member data receive data protection and information security training as part of their onboarding and through regular refresher programmes.

Despite these measures, no system is completely immune from security risk. In the event of a data breach that is likely to result in significant risk to affected members, zk688 will notify affected individuals and relevant regulatory authorities in accordance with our notification obligations under the applicable regulatory framework, without undue delay.

zk688 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to defend against potential legal claims. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data will be securely and permanently deleted or, where deletion is not technically feasible, rendered irreversibly anonymised such that it can no longer be associated with any identified or identifiable individual.

The zk688 platform uses cookies and similar tracking technologies (local storage, session tokens) to enable the proper functioning of the website and to improve your experience. We do not use third-party advertising or behavioural profiling cookies. Our cookie usage falls into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication tokens, login state persistence (where "Remember this device" is selected), CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality;
• Functional Cookies: Store your preferences such as preferred language, odds display format, and last-visited game category. These improve your experience but are not essential;
• Analytical Cookies (First-Party Only): Collect anonymised or pseudonymised data about how visitors navigate and use the zk688 platform — including pages visited, features used, and session duration. This data is used only in aggregate and cannot be used to identify you individually. We do not use Google Analytics or other third-party analytics platforms that share data with external entities;
• Security Cookies: Used by our fraud detection and account security systems to identify unusual login patterns, detect automated access, and prevent account compromise.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your zk688 account. Disabling functional cookies will result in the loss of stored preferences, and disabling analytical cookies will not affect your access to any platform feature.

As a data subject, you have the following rights in respect of your personal data held by zk688. We are committed to honouring these rights in a timely and straightforward manner. To exercise any of these rights, please contact us as described in Section 15.

The zk688 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification using a valid CNIC is a mandatory component of the zk688 KYC process, and no account can complete the withdrawal verification process without demonstrating age eligibility.

If zk688 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete all such data, close the associated account, and refund any deposits at our discretion in accordance with our Terms and Conditions.

If you believe that an individual under 21 years of age may have registered on the zk688 platform, or may be using the platform — whether at your household or otherwise — please contact the zk688 support team immediately. We take the protection of underage individuals with the utmost seriousness and will investigate and act on any credible report.

The zk688 platform is operated under an international gaming licence framework, which means that some personal data may be processed on servers or by processors located outside of Pakistan. This could include data processed by KYC verification partners, game content providers, or infrastructure providers whose systems are located in different jurisdictions.

Where personal data is transferred outside Pakistan to a jurisdiction that may not have equivalent data protection laws, zk688 ensures that appropriate safeguards are in place. These safeguards include:

• Binding contractual data processing agreements with all international data processors that incorporate equivalent data protection obligations;
• Transfer only to processors that are certified under equivalent international data protection standards;
• Minimisation of data transferred internationally — only data strictly necessary for the specific processing purpose is transferred.

By registering an account and using the zk688 platform, you acknowledge that your data may be processed internationally as described above and consent to such processing for the purposes outlined in this Policy.

The zk688 platform may contain integrations with third-party services — primarily game studio content embedded within the platform. These third-party game environments operate within the zk688 interface but are controlled by the respective studio providers and may independently collect technical session data for the purposes of game operation and fairness verification.

zk688 is not responsible for the privacy practices of third-party game providers in respect of data they independently collect through their game engines. We recommend reviewing the privacy documentation of individual game providers where you have specific concerns about game-session data — this information is typically available on the relevant studio provider's own website.

Beyond game studio integrations, the zk688.bio website does not contain links to external third-party websites. We do not embed external social media widgets, third-party advertising networks, or any other external service that would collect your data without your knowledge through the zk688 platform interface.

zk688 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. The "Effective Date" displayed at the top of this page indicates the version currently in force.

Where a change to this Privacy Policy is material — meaning it may significantly affect the way we process your personal data or alter your data rights — we will notify you via the email address registered to your zk688 account at least 14 days before the change takes effect. For minor or clarificatory changes, we may simply update the Policy without individual notification.

Your continued use of the zk688 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. We encourage all members to review this Privacy Policy periodically so that you remain informed about how your data is being handled.

All enquiries relating to this Privacy Policy, requests to exercise your data rights, concerns about how your personal data is being handled, or reports of suspected data breaches should be directed to the zk688 data team through the following channels. All contact details are provided as plain text only — no clickable links or protocols are used.

When submitting a data rights request, please include your zk688 account username and a clear description of the right you wish to exercise. For access and portability requests, we will require identity verification before releasing any personal data — this is to protect you from unauthorised third-party data requests.

This Privacy Policy was last reviewed and updated on 1 January 2026. zk688 — zk688.bio — All rights reserved.