zh22 Privacy Policy
Transparent & Accountable

zh22 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every user who registers and plays on zh22.bet. This Privacy Policy sets out in clear, plain-English terms how we collect, use, store, share, and protect your personal information when you access or use any part of the zh22 platform — including the website, mobile application, sportsbook, live casino, and all associated services.

This Privacy Policy applies to all zh22 account holders and visitors, regardless of their location in Pakistan, including players from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and regions across the country. By registering a zh22 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

zh22 collects the following categories of personal data from users of the platform. We only collect information that is necessary for one or more specific, legitimate purposes as described in this Privacy Policy.

• Full name as it appears on your Pakistani CNIC or other government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement for the zh22 platform).
• Pakistani CNIC number, provided during KYC identity verification.
• Username and encrypted password used to access your zh22 account.
• Gender (optional, collected during extended profile setup).

• Pakistani mobile phone number, verified via OTP during registration and used for account security and communications.
• Email address, used for account notifications, security alerts, and promotional communications where consent has been given.
• Residential address in Pakistan, collected during enhanced KYC verification where required.

• PKR deposit and withdrawal amounts, dates, and transaction reference numbers.
• Payment method details — JazzCash mobile number, EasyPaisa account reference, bank account details (HBL, UBL, Meezan Bank), or Visa/Mastercard last four digits and billing name. Full card numbers and CVV codes are never stored by zh22; these are handled directly by our PCI-DSS-compliant payment processors.
• Wagering history, including bet amounts, game types, stakes, and outcomes — collected for account management, responsible gaming monitoring, and regulatory compliance.
• Bonus and promotional credit history linked to your zh22 account.

• IP address and approximate geolocation derived from IP, used for fraud prevention and access restriction purposes.
• Device identifiers (device type, operating system version, browser type and version, screen resolution).
• Session data including login timestamps, session duration, pages visited, and features interacted with.
• Clickstream data and navigation patterns within the zh22 platform.
• Error logs and crash reports from the zh22 mobile application, used to improve platform stability.

• Records of your communications with zh22 customer support, including live chat transcripts and email correspondence.
• Feedback, survey responses, and ratings submitted to zh22.
• Records of any complaints or dispute submissions and their resolutions.

zh22 collects your personal data through the following means:

• Directly from you: When you register a zh22 account, complete identity verification, make deposits or withdrawals, place bets, contact customer support, respond to surveys, or interact with any feature of the platform.
• Automatically: Through cookies, web beacons, pixel tags, and server logs as you navigate the zh22 website or use the mobile application. See Section 7 (Cookies & Tracking) for full details.
• From third-party verification providers: During KYC processes, zh22 may receive identity confirmation data from authorised identity verification service providers who cross-reference your CNIC and personal details against official databases.
• From payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks may share transaction status, reference numbers, and relevant account-level information with zh22 to confirm payment success or failure.
• From fraud prevention services: zh22 may receive risk scores, device fingerprinting data, and flagged account signals from authorised fraud detection partners to help protect the integrity of the platform.

zh22 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

zh22 uses your personal data exclusively for the purposes set out in this Privacy Policy. The primary uses of your data are as follows:

• To create, verify, and manage your zh22 account, including processing your CNIC-based identity verification and maintaining accurate account records.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment networks, and to maintain accurate financial records of all transactions.
• To provide access to and personalise your experience of zh22 gaming products, including cricket betting, PSL markets, live casino, and slot games.
• To detect, investigate, and prevent fraud, money laundering, collusion, multi-accounting, and any other conduct prohibited under the zh22 Terms & Conditions.
• To monitor account activity for responsible gaming purposes and to apply protective interventions where necessary, including deposit limit enforcement and self-exclusion processing.
• To send you service-related communications including security alerts, account notices, deposit confirmations, withdrawal updates, and changes to zh22 policies — these communications are non-optional as they are necessary to operate your account.
• To send you optional marketing communications about zh22 promotions, bonuses, and new features — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time from your zh22 account settings.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from regulatory authorities.
• To improve the zh22 platform through analysis of aggregated, anonymised usage data and performance metrics.

zh22 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

zh22 engages trusted third-party service providers to assist with the operation of the platform. These providers process your data strictly on zh22's instructions and may include:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks) — for transaction processing only.
• KYC and identity verification providers — for CNIC validation and age confirmation.
• Fraud detection and risk management platforms — for account integrity monitoring.
• Licensed casino and game content providers — to deliver game sessions; these providers may receive session tokens and anonymised player identifiers but do not receive your full personal profile.
• Customer support platform providers — for managing live chat and email support interactions.
• Cloud hosting and infrastructure providers — for secure data storage and platform operation.

zh22 may disclose your personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of zh22, its users, or the public.

In the event that zh22 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via account notification or email prior to any such transfer taking effect.

zh22 uses cookies and similar tracking technologies on the zh22 website and mobile application. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised platform experience.

• Strictly necessary cookies: Essential for core platform functions such as maintaining your login session, processing transactions, and enforcing security controls. These cookies cannot be disabled without disrupting your use of zh22.
• Functional cookies: Remember your platform preferences such as language settings, preferred display options, and last-visited game categories to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate and interact with the zh22 platform, enabling us to identify performance issues and improve the user experience. These are optional and require your consent.
• Security and fraud prevention cookies: Help zh22 identify suspicious access patterns, detect automated bot activity, and protect your account from unauthorised access attempts.

You can manage your cookie preferences — including withdrawing consent for optional analytics cookies — at any time via the cookie settings panel accessible from your zh22 account. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair the functionality of your zh22 account.

zh22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active zh22 account, plus a minimum of five (5) years following account closure, in accordance with applicable AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction, as required by financial regulation.
• Betting and gaming history: Retained for a minimum of five (5) years, for regulatory compliance and dispute resolution purposes.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Marketing consent records: Retained for as long as the relevant consent remains active, plus three (3) years following consent withdrawal, for compliance evidence purposes.
• Technical and log data: Retained for up to twelve (12) months for security and fraud analysis purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

zh22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes, but is not limited to, the following controls:

• AES-256 encryption of personal data stored in zh22 databases and file systems.
• TLS 1.3 encryption of all data transmitted between your device and zh22 servers.
• Multi-factor authentication (MFA) options for zh22 account access, including OTP verification to your registered Pakistani mobile number.
• Role-based access controls limiting internal access to personal data to authorised zh22 personnel on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments of the zh22 platform and infrastructure.
• Intrusion detection systems and continuous security monitoring of zh22 server environments.
• Formal data breach response procedures, including user notification obligations as described in the feature overview above.

While zh22 maintains robust security controls, no online platform can guarantee absolute security. You also play a role in protecting your account — please refer to the Account Security section of the zh22 Terms & Conditions for guidance on safeguarding your login credentials.

As a zh22 user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact zh22 support at [email protected] with the subject line "Privacy Rights Request" and a description of your request. zh22 will respond within 30 days of receiving a valid request.

• Right of access: Request a copy of all personal data zh22 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: Request correction of any inaccurate or incomplete personal data held in your zh22 account profile.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to zh22's legal retention obligations (see Section 8).
• Right to restriction: Request that zh22 restrict processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: Request a machine-readable export of the personal data you have provided to zh22, in a structured, commonly used format.
• Right to withdraw marketing consent: Withdraw consent for promotional communications at any time via your zh22 account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal.
• Right to object: Object to processing of your personal data that is based on zh22's legitimate interests, where you believe your interests override those of zh22.

zh22 will not discriminate against any user for exercising their privacy rights. Exercising a privacy right will not affect your ability to use zh22 services, subject to the minimum data requirements necessary to operate your account lawfully.

zh22 is strictly an adult platform. Access to and use of zh22 is prohibited for any person under the age of 21. zh22 does not knowingly collect personal data from persons under 21 years of age. If zh22 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to zh22 or has accessed the platform, please contact our support team immediately at [email protected] so that we can take prompt action.

zh22 primarily stores and processes personal data on servers located in jurisdictions with established data protection frameworks. In certain operational contexts — for example, when engaging KYC verification providers or game content platforms — your data may be transferred to or processed in countries outside of Pakistan.

Where such international transfers occur, zh22 takes appropriate steps to ensure that your personal data receives an equivalent level of protection in the receiving jurisdiction, including through contractual data processing agreements that incorporate recognised data protection standards. By using zh22, you acknowledge and consent to the international transfer of your personal data in the circumstances described in this section.

The zh22 platform may occasionally reference third-party resources or services (for example, responsible gaming organisations or payment provider information pages). zh22 does not control the privacy practices of third-party websites and is not responsible for their content or data handling practices. This Privacy Policy applies exclusively to the zh22 platform. We encourage you to review the privacy policies of any third-party services you access independently.

zh22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, zh22 will notify you via account notification displayed on login, email to your registered address, or a prominent notice on the zh22 website, prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the zh22 platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you may close your zh22 account and request withdrawal of your verified real-money balance before the changes take effect.

All privacy-related enquiries, data subject access requests, and questions about this Privacy Policy should be directed to the zh22 Data Protection contact using the following details:

• Email: [email protected] — use subject line "Privacy Rights Request" or "Data Protection Enquiry".
• Live Chat: Available 24/7 from within your zh22 account. For data protection matters, request to be connected to the Data Protection team.
• Response time: zh22 will acknowledge privacy requests within two (2) business days and provide a substantive response within thirty (30) calendar days.

This Privacy Policy was last reviewed and updated in January 2026. This version supersedes all prior versions of the zh22 Privacy Policy.