21+ ONLY. zh666 is an online gaming platform strictly for adults aged 21 and above. Please play responsibly.
At zh666, the privacy and security of every Pakistani player's personal data is a fundamental obligation — not an afterthought. This Privacy Policy explains in plain, clear English exactly what personal information zh666 collects from you, why we collect it, how we use it, who we share it with, and what rights you have over your own data as a registered zh666 account holder.
These commitments are a high-level summary only. Pakistani players are encouraged to read the full Privacy Policy below for complete detail on how zh666 handles personal information.
All personal data transmitted between your device and zh666's servers — including your CNIC details, mobile number, and payment information — is protected by 256-bit AES SSL encryption. This is the same standard used by HBL, UBL, and Meezan Bank for their own online banking platforms in Pakistan.
zh666 does not sell, rent, or commercially trade your personal information to any third party under any circumstances. Your name, mobile number, CNIC details, and transaction history are used exclusively to operate your zh666 account and to comply with our international gaming licence obligations — nothing else.
zh666 follows a strict data minimisation principle. We collect only the personal information that is genuinely necessary to register your account, verify your identity under our KYC obligations, process your deposits and withdrawals in PKR, and deliver our gaming services to you as a Pakistani player.
zh666 does not retain your personal data indefinitely. Account data is retained for the duration of your active zh666 account plus a defined post-closure period required by our licence obligations for audit and AML compliance purposes. Transaction records are retained for the minimum period required by applicable financial regulations, after which they are securely deleted.
zh666 respects your rights over your own personal data. Pakistani players may request access to the personal information zh666 holds about them, request corrections to inaccurate data, request deletion of data where permitted by law, and object to specific types of data processing — all by contacting zh666 support at [email protected].
zh666's data collection and processing activities are governed by the requirements of its international gaming licence, which imposes binding data protection standards. All KYC data, player fund records, and betting history logs are processed in compliance with the data governance framework required by our licensing authority — protecting Pakistani players' data through enforceable regulatory obligations.
1.1 zh666 ("we", "us", "our", or "the Platform") is the operator of the online casino and sports betting platform accessible at zh666.net. zh666 is the data controller responsible for the personal information collected from Pakistani players and website visitors through the Platform.
1.2 As data controller, zh666 determines the purposes for which personal data is collected and the means by which it is processed. zh666 is accountable for ensuring that personal data is handled in compliance with the data protection obligations imposed by its international gaming licence and applicable data protection principles.
1.3 For all data protection enquiries, requests, and complaints, Pakistani players may contact the zh666 Data Protection team at: [email protected]. Please include "Privacy" or "Data Request" in your email subject line to ensure prompt routing to the appropriate team.
Scope of this Policy: This Privacy Policy applies to all personal data collected by zh666 through the zh666.net website, all zh666 gaming and betting services, customer support communications, KYC verification processes, and promotional communications sent to registered zh666 account holders. It applies to all Pakistani players and website visitors regardless of location.
2.1 zh666 collects the following categories of personal data from Pakistani players and website visitors. The specific data collected in each category depends on the nature of your interaction with the Platform:
| Data Type | Details | When Collected |
|---|---|---|
| Mobile Number | Pakistani mobile number used as primary account identifier on zh666 | Account registration |
| Full Name | Full legal name as it appears on CNIC | KYC verification |
| Date of Birth | Used to verify minimum age requirement of 21+ for zh666 account eligibility | KYC verification |
| CNIC Number & Images | Front and back images of Pakistani Computerised National Identity Card | KYC verification |
| Residential Address | Address as per CNIC or self-declared during account setup | KYC / Enhanced due diligence |
3.1 Directly from You. The majority of personal data that zh666 holds about Pakistani players is provided directly by those players during account registration, the KYC identity verification process, deposit and withdrawal transactions, customer support communications, and voluntary completion of player surveys or promotional competitions.
3.2 Automatically During Platform Use. When you access and use zh666 — including when you browse the casino lobby, play games, place sports bets, or login to your account — zh666 automatically collects certain technical data including your IP address, device information, session timestamps, and gameplay logs. This collection is enabled by cookies, session tokens, and server log systems described in Section 7 of this Policy.
3.3 From Third-Party Payment Processors. When you make a deposit or withdrawal on zh666 via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 channels, the relevant payment processor provides zh666 with transaction confirmation data — including transaction reference numbers and payment method identifiers — necessary to credit or debit your zh666 account balance accurately.
3.4 From KYC Verification Partners. zh666 may use third-party identity verification service providers to assist with the processing and authentication of CNIC images and other KYC documentation. These partners process data strictly under zh666's instruction and are bound by confidentiality and data security obligations.
3.5 From Fraud Detection Systems. zh666 uses automated fraud detection and anti-money laundering screening systems that may cross-reference player data against sanctions lists and fraud risk databases as required by zh666's international gaming licence obligations.
4.1 zh666 processes personal data only where a lawful basis for that processing exists. The applicable legal bases for zh666's data processing activities are as follows:
5.1 zh666 uses the personal data it holds about Pakistani players for the following specific purposes:
✅ We Do Not Use Your Data For: Selling your personal information to third parties; profiling you for non-gaming commercial purposes; sharing your CNIC or identity documents with any party not required for KYC compliance; or processing your data in ways incompatible with the purposes listed above without your explicit prior consent.
6.1 zh666 does not sell your personal data to any third party. zh666 shares personal data only where necessary for legitimate operational purposes, legal compliance, or at your explicit direction. The categories of third parties with whom zh666 may share personal data are as follows:
zh666 shares the minimum necessary transaction data with its payment processing partners — including JazzCash, EasyPaisa, and Pakistani banking institutions — to execute deposit and withdrawal transactions on your zh666 account. Payment processors receive only the transaction data required to complete the relevant payment and are not provided with your gaming history or CNIC details.
zh666 may share CNIC images and identity verification data with third-party KYC processing services engaged to assist with the verification of Pakistani player identities. These providers act as data processors operating under zh666's strict instructions and are contractually bound to process identity data solely for KYC verification purposes.
zh666 may be required by its international gaming licensing authority, or by applicable law, to disclose specific player account data — including KYC records, transaction logs, and gaming history — to regulators conducting audits or investigations. Such disclosures are made strictly as required by law and cannot be refused by zh666.
zh666 uses automated screening services to check player details against international sanctions lists, politically exposed persons (PEP) databases, and fraud risk registries as required by AML compliance obligations under zh666's gaming licence. These services receive limited data (name, date of birth, and country) and do not receive gaming activity or financial transaction detail.
zh666's casino game library includes titles supplied by third-party software providers — including but not limited to Pragmatic Play, NetEnt, and Play'n GO. These providers may receive anonymised session data (game identifier, stake amount, and outcome) for the purpose of game performance auditing. They do not receive your name, CNIC, or payment details.
⚠️ International Data Transfers: Some of zh666's service providers and game suppliers are located outside Pakistan. Where personal data is transferred internationally, zh666 ensures appropriate safeguards are in place — including contractual data processing agreements and security standards consistent with our licensing obligations — to protect your data to the same standard as within Pakistan.
7.1 zh666 uses cookies and similar technical tracking technologies on the zh666.net website and platform to deliver a functional, secure, and personalised gaming experience to Pakistani players. The categories of cookies zh666 uses are as follows:
7.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the zh666 login process and gaming functionality. Disabling analytics or functional cookies will not prevent you from using zh666 but may reduce the personalisation of your experience.
8.1 zh666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by zh666's international gaming licence and applicable financial regulations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data (name, mobile number) | Duration of active account + 5 years post-closure | Gaming licence obligation |
| KYC documents (CNIC images, identity verification records) | Duration of active account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records (deposits, withdrawals) | 5 years from date of transaction | AML / financial records obligation |
| Gaming & betting activity logs | Duration of active account + 3 years post-closure | Gaming licence & dispute resolution |
| Customer support communications | 3 years from date of communication | Legitimate interest (dispute record) |
| Marketing consent records | Duration of consent + 2 years | Legal compliance |
| Technical / session logs | 90 days from session date | Security & fraud detection |
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. zh666 does not retain personal data beyond these periods for commercial purposes.
9.1 zh666 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
9.2 Notwithstanding zh666's security measures, no system connected to the internet can guarantee absolute security. Pakistani players are encouraged to protect their own zh666 account security by using a strong, unique password, keeping their SMS OTP codes confidential, and reporting any suspected unauthorised account access to [email protected] immediately.
10.1 zh666 is an international gaming platform that uses infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which zh666 holds its international gaming licence.
10.2 Where personal data is transferred internationally — for example, to a game software provider auditing RNG performance, or to a KYC verification service — zh666 ensures that appropriate safeguards are in place, including:
10.3 Pakistani players who wish to obtain more information about the international data transfer safeguards applicable to their personal data may contact zh666 at [email protected] with a specific request, and the zh666 data protection team will respond within 30 days.
11.1 Pakistani players who hold or have held a zh666 account have the following rights in relation to the personal data that zh666 processes about them:
Request a copy of all personal data zh666 holds about your account, including identity, transaction, and gaming records.
Request correction of any inaccurate or incomplete personal data zh666 holds about you — for example, an incorrect address or misspelled name.
Request deletion of your personal data where it is no longer necessary, subject to zh666's legal retention obligations under its gaming licence.
Object to specific types of processing — particularly processing based on zh666's legitimate interests, such as marketing communications and analytics.
Request your personal data in a machine-readable format for transfer to another data controller where technically feasible and legally applicable.
Request that zh666 restricts processing of your data — for example, while a data accuracy dispute is being resolved — without deleting it entirely.
11.2 To exercise any of the above rights, Pakistani players should submit a written request to [email protected] identifying the right they wish to exercise and the specific data or processing activity to which their request relates. zh666 will respond to all valid data rights requests within 30 calendar days. zh666 may request proof of identity before actioning a data rights request to prevent unauthorised access to another player's data.
11.3 Where zh666 is unable to fulfil a data rights request — for example, because fulfilling the request would conflict with zh666's legal retention obligations under its gaming licence — zh666 will explain the reason in its response and identify any alternative remedies available to the requesting player.
⚠️ 21+ Only — Strict Age Enforcement. zh666 does not knowingly collect personal data from, or provide Services to, any person under the age of 21. The minimum age for a zh666 account and all real-money gaming activity on the Platform is strictly twenty-one (21) years. Age is verified via CNIC submission during the KYC process for all accounts processing withdrawals on zh666.
12.1 If zh666 discovers that it has inadvertently collected personal data from an individual who is under 21 years of age — whether through a false registration, a misrepresented date of birth, or any other means — zh666 will immediately close the associated account, void all balances, and delete all collected personal data to the extent permitted by its AML and regulatory retention obligations.
12.2 Parents and guardians are strongly encouraged to use appropriate parental control software to restrict access to online gaming websites, including zh666, by individuals under the age of 21. If you have reason to believe that a person under 21 has registered or is using a zh666 account, please notify zh666 immediately at [email protected].
13.1 The zh666 Platform may contain references to third-party services — including payment method providers, game software studios, and responsible gaming support organisations. Where zh666 references third-party services in its platform content, zh666 is not responsible for the privacy practices or data handling of those third parties.
13.2 Pakistani players who interact with third-party services referenced on or from zh666 — including JazzCash, EasyPaisa, or HBL Online Banking portals accessed for the purpose of making a deposit — should review the applicable third-party privacy policy to understand how their data is handled outside the zh666 Platform.
13.3 zh666 does not share referral tracking data with third-party affiliate partners in a form that identifies individual Pakistani players. Aggregate traffic data — such as the number of new registrations attributable to a specific referral channel — may be shared with zh666's marketing partners in anonymised form only.
14.1 zh666 may update this Privacy Policy from time to time to reflect changes in its data processing activities, changes in applicable data protection law, or updates to zh666's international gaming licence requirements. The current operative version of the Privacy Policy is always the version published at zh666.net/privacy-policy.
14.2 Where zh666 makes material changes to this Privacy Policy — for example, introducing a new category of data collection, a new sharing arrangement with a third party, or a change to data retention periods — zh666 will notify all registered Pakistani players via the email address or mobile number on their zh666 account at least fourteen (14) calendar days before the updated Policy takes effect.
14.3 Your continued use of zh666 after the effective date of any Privacy Policy update constitutes your acknowledgement that you have been notified of the change and that you have had the opportunity to review the updated Policy. If you do not agree with a material change to this Policy, you may close your zh666 account and request deletion of your data by contacting [email protected] before the effective date of the change.
The date at the top of this page reflects the most recent update to zh666's Privacy Policy. We encourage all Pakistani players to review this Policy periodically, particularly before making a deposit or submitting KYC documents to your zh666 account.
15.1 For all Privacy Policy related enquiries — including data rights requests, questions about how zh666 handles your personal data, reports of suspected data breaches, and complaints about zh666's data processing practices — please contact the zh666 Data Protection team using the details below:
15.2 If you are unsatisfied with zh666's response to a data rights request or privacy complaint, you may escalate the matter to the data protection supervisory authority in the jurisdiction in which zh666 holds its international gaming licence. Contact details for the applicable supervisory authority are available on request from the zh666 Data Protection team.
This Privacy Policy was last updated on 01 January 2026. It supersedes all previous versions of zh666's Privacy Policy. The operative Privacy Policy applicable to your zh666 account is always the current version published at zh666.net/privacy-policy.