Privacy Policy — zh444 Platform

This Privacy Policy ("Policy") sets out how zh444 ("zh444", "we", "us", "our") collects, processes, stores and discloses personal data obtained through the operation of the online gaming platform accessible at https://zh444.cam ("Platform"). zh444 is an English-language online gaming information and betting platform designed primarily to serve users in the Pakistani market and internationally.

We recognise that our users entrust us with sensitive personal and financial information — including identity documents required for KYC verification and payment details used for PKR deposits and withdrawals. This Policy is our commitment to explaining clearly how we use that data and what rights you have in respect of it.

By registering an account, accessing the Platform or otherwise interacting with zh444, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should refrain from using the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

zh444 collects Personal Data through several distinct channels. The categories and specific data elements collected are described below:

3.1 Data You Provide Directly

• Registration Data: Full name, email address, date of birth, mobile phone number, residential address and chosen account credentials at the time of account creation.
• KYC Documents: Scanned or photographed copies of a valid Pakistani CNIC (Computerised National Identity Card) or passport, proof of address documents, and selfie/liveness-check images where required.
• Financial Data: Payment method details necessary to facilitate PKR deposits and withdrawals, including mobile wallet identifiers (e.g., Easypaisa or JazzCash account references) or bank account details (e.g., HBL, UBL, Meezan Bank, Bank Alfalah). These references are collected as transaction identifiers only.
• Support Communications: Messages, enquiries and complaint records submitted to our support team via live chat or email.

3.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network provider.
• Usage Data: Pages visited, features used, session duration, clickstream data, game history, wagering activity, and betting market selections.
• Location Data: General geographic location derived from your IP address. zh444 does not collect precise GPS location without explicit permission.
• Cookie Data: Session identifiers, preference settings and analytics data collected via cookies and similar tracking technologies as described in Section 8.

zh444 processes your Personal Data only for specific, disclosed and legitimate purposes. The table below summarises each processing activity and its corresponding purpose:

zh444 processes Personal Data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between zh444 and you — including account creation, KYC, payment processing, wagering and withdrawal services.
• Legitimate Interests: Processing necessary for zh444's legitimate business interests, including fraud prevention, security, Platform improvement and responsible gambling monitoring, where these interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with applicable law, including AML reporting obligations, KYC requirements under the operator's licence jurisdiction, and record-keeping mandates.
• Consent: Processing based on your freely given, specific and informed consent — principally in respect of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zh444 does not sell your Personal Data to third parties. We may share your data only in the following limited circumstances:

• Data Processors: Third-party service providers contracted to process data on zh444's behalf — including payment processing companies, KYC verification technology providers, cloud hosting services, and analytics platforms. All Data Processors are subject to binding contractual obligations that restrict their use of your data to the purposes specified by zh444.
• Regulatory and Law Enforcement Authorities: Where zh444 is required by applicable law, court order, regulatory directive or AML reporting obligation to disclose Personal Data to competent authorities.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of zh444's business, Personal Data may be transferred to the successor entity subject to equivalent privacy protections.
• With Your Consent: Any sharing of your data not described above will only occur with your prior, explicit consent.

zh444 does not share your data with advertisers, data brokers or unaffiliated third-party marketing companies.

Given the financial nature of the zh444 Platform, payment-related and identity-verification data require particular care. The following specific terms apply to these categories of data:

• Payment Method References: zh444 may reference familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — solely as account identifiers to facilitate transaction matching. These references do not indicate a direct integration with, endorsement by, or relationship with these providers. Transaction availability depends on operator agreements and provider rules.
• KYC Document Security: Identity documents submitted for KYC — including CNIC scans, passport copies and selfie images — are transmitted exclusively through encrypted HTTPS channels. They are stored in a secured, access-controlled environment accessible only to authorised KYC personnel and compliance reviewers.
• No Unsecured Transmission: zh444 will never request that you submit identity documents via WhatsApp, Telegram, unencrypted email or any unsecured communication channel. All KYC submissions must be made through the secure upload portal within your verified account.
• Document Integrity: zh444 requires that submitted identity documents are genuine, unaltered and unobscured. Submitting falsified documents is prohibited, constitutes fraud and may be reported to relevant authorities.

zh444 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience and understand how Users engage with our content. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for basic Platform functions including login session management, security token handling and account state persistence. These cookies cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how Users navigate the Platform — pages visited, features used, session duration — to help zh444 identify usability improvements. zh444 does not use analytics data to personally identify users.
• Functionality Cookies: Remember your preferences — such as language selection, display settings and responsible gambling limits displayed in your dashboard — to provide a personalised experience.
• Security Cookies: Support fraud detection and account security functions, including identifying suspicious login patterns and flagging unusual account activity.

You may adjust your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies may prevent core Platform features from functioning correctly. zh444 does not use third-party advertising cookies or cross-site tracking cookies.

zh444 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Retention periods may be extended where data is required in connection with an ongoing legal dispute, regulatory investigation or AML review.

zh444 implements technical and organisational security measures appropriate to the risk associated with processing your Personal Data. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the zh444 Platform is encrypted using industry-standard SSL/TLS protocols. Ensure the padlock icon appears in your browser address bar when using the Platform.
• Access Controls: Personal Data is accessible only to authorised zh444 personnel and contracted Data Processors on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication: Account security is reinforced by two-factor authentication (2FA) options available to all registered Users. We strongly recommend enabling 2FA on your account.
• Security Monitoring: zh444 employs continuous security monitoring to detect anomalous access attempts, unusual transaction patterns and potential data breaches in real time.
• Breach Notification: In the event of a data breach likely to affect your rights or interests, zh444 will notify affected Users and relevant authorities in accordance with applicable obligations, without undue delay.

Subject to applicable law and certain exceptions, you have the following rights in respect of your Personal Data held by zh444. To exercise any of these rights, contact us at [email protected] with your account details and the specific right you wish to invoke.

The zh444 Platform is strictly an adults-only service. Access is restricted to users aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction — whichever is greater.

zh444 does not knowingly collect or process Personal Data from individuals under the applicable minimum age. Age is verified as part of the KYC process through government-issued identity documents. Where we become aware, or have reasonable grounds to suspect, that an underage user has registered an account:

• The account will be immediately suspended pending investigation.
• All associated Personal Data will be reviewed and, where confirmed as belonging to a minor, deleted in accordance with applicable data protection requirements.
• Any deposits made from such an account will be returned in full, subject to AML review, and no wagers placed will be honoured.

If you believe that a minor may have registered on zh444, please notify us immediately at [email protected].

zh444 operates as an international platform. Your Personal Data may be processed by zh444's infrastructure or contracted Data Processors in jurisdictions outside Pakistan. Where such transfers occur, zh444 takes appropriate measures to ensure that your data receives an adequate level of protection, including:

• Binding contractual clauses with Data Processors that impose equivalent data protection obligations.
• Restricting transfers to jurisdictions that maintain adequate data protection frameworks under internationally recognised standards.
• Applying technical security measures — including encryption — to data in transit and at rest, regardless of the jurisdiction in which it is processed.

zh444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, Platform functionality or regulatory guidance. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy.
• Where practicable, notify registered Users of material changes via their account email address or an in-platform banner notification.

Continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically. The current version is always accessible at https://zh444.cam/privacy-policy.

If you have questions, concerns or requests relating to this Privacy Policy or to zh444's handling of your Personal Data, please contact us using the details below. We aim to respond to all privacy-related enquiries within 30 days.

• Email: [email protected] — Please include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24/7 via the in-platform live chat widget. English-language support provided at all times; Urdu-language assistance available on request.

When submitting a data rights request, please provide your registered account username and a brief description of the request to help us process it accurately and efficiently. We will verify your identity before acting on access, rectification or erasure requests.