Privacy Policy — z777 Online Gaming Platform

Introduction

1.1  z777 ("we," "us," "our," or "the Platform") operates the online gaming and sports betting platform accessible at z777.my. z777 provides gaming services — including live casino, PSL cricket betting, slots, dice games, and the Go Goal Bingo lobby — to registered players in Pakistan and other permitted jurisdictions, with all transactions conducted in Pakistani Rupees (PKR).

1.2  This Privacy Policy ("Policy") applies to all personal data collected from individuals who register a z777 account, visit the z777 website, use any feature of the z777 platform, interact with z777 customer support, or participate in any z777 promotional activity. This Policy forms part of the z777 Terms & Conditions and should be read in conjunction with those terms.

1.3  By accessing the z777 platform, creating an account, or using any of the services made available by z777, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the z777 platform.

1.4  z777 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. Material updates will be communicated to registered account holders as described in Section 14 of this Policy. The "Last Reviewed" date at the top of this page always indicates when the current version was published.

Data Controller

2.1  For the purposes of this Privacy Policy, the data controller responsible for your personal information is z777, the operator of the online gaming platform located at z777.my. z777 determines the purposes and means of processing personal data collected through the platform and is accountable for ensuring that such processing is conducted in accordance with applicable data protection obligations under our international gaming licence.

2.2  If you have any questions about how z777 processes your personal data, wish to exercise any of your data rights described in Section 10, or need to raise a data protection concern, you may contact our Data Protection function through the support channels set out in Section 15 of this Policy. All data-related enquiries are handled with confidentiality and acknowledged within 5 business days.

Information We Collect

3.1  z777 collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically through your use of the platform (including device and usage data), and from third parties where necessary for payment processing or identity verification. The categories of personal data z777 may collect include:

3.2 Registration & Identity Data

• Full legal name (as it appears on your Pakistani CNIC or other government-issued ID);
• Date of birth (used to verify the 21+ age eligibility requirement);
• Email address (used as your primary account identifier and communication channel);
• Mobile telephone number (used for two-factor authentication and account security alerts);
• CNIC number and a copy of your CNIC (collected as part of KYC identity verification before your first withdrawal);
• Residential address and city of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, or other Pakistani cities).

3.3 Financial & Payment Data

• Payment method details including JazzCash account number, EasyPaisa wallet details, HBL account, UBL account, or Meezan Bank account details — sufficient to process PKR deposits and withdrawals;
• Transaction history: all deposits, withdrawals, bonuses, and wagers conducted through your z777 account;
• Account balance history and withdrawal records;
• Source of funds information where requested as part of enhanced KYC due diligence.

3.4 Technical & Usage Data

• IP address and approximate geolocation data at the time of each login and transaction;
• Device type, operating system, browser type and version, and screen resolution;
• Mobile network operator (Jazz, Zong, Telenor, Ufone, etc.) where identifiable;
• Session duration, pages viewed, features used, and games played within the z777 platform;
• Login timestamps and access logs;
• Clickstream data and navigation patterns within the platform.

3.5 Communications Data

• Records of correspondence with z777 customer support via live chat, email, or other channels;
• Feedback, complaint, and dispute correspondence;
• Responses to surveys or promotional communications where you voluntarily participate;
• Records of responsible gaming tool activations and communications related to account restrictions or self-exclusion.

How We Use Your Personal Data

4.1  z777 processes your personal data only for legitimate, specified purposes that are consistent with the reason the data was originally collected. The primary purposes for which z777 uses your personal data are as follows:

4.2  z777 will not use your personal data for purposes that are incompatible with those stated in this section without providing you with prior notice and, where required, obtaining your separate consent.

Legal Basis for Processing

5.1  z777 processes personal data only where a valid legal basis exists for doing so. The legal bases upon which z777 relies for each category of processing activity are as follows:

• Contractual Necessity: Processing required to perform the contract between z777 and the player (i.e., the Terms & Conditions), including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and licensing conditions, including KYC verification, AML reporting, age verification, and record-keeping obligations.
• Legitimate Interests: Processing carried out for z777's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and anonymised usage analysis.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted before withdrawal.

Sharing Your Personal Data

6.1  z777 does not sell your personal data to third parties. z777 does not share your personal data with advertisers or data brokers for commercial marketing purposes. Your data is shared with third parties only in the limited circumstances described below:

6.2 Payment Processors

z777 shares financial data with payment service providers — including the operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — strictly to the extent necessary to process your PKR deposits and withdrawals. These processors are contractually bound to handle your data securely and only for the stated payment processing purpose.

6.3 Identity Verification & KYC Partners

z777 may share identity data (including CNIC copies) with accredited identity verification service providers for the purpose of completing KYC and age verification checks as required by our licensing obligations. All such providers are subject to binding data processing agreements with z777.

6.4 Game and Technology Providers

z777 integrates games and live casino content from third-party providers. These providers may receive limited technical data (such as player session identifiers) necessary to deliver game content and resolve technical issues. They do not receive your full personal profile.

6.5 Regulatory Authorities and Law Enforcement

z777 will disclose personal data to competent regulatory authorities, licensing bodies, courts, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. z777 may also proactively share data where it has reasonable grounds to suspect money laundering, terrorist financing, or other serious criminal activity involving a z777 account.

6.6 Professional Advisers

z777 may share personal data with legal advisers, auditors, and compliance consultants on a strictly confidential and need-to-know basis in connection with the management of z777's regulatory, legal, and financial obligations.

Cookies & Tracking Technologies

7.1  The z777 platform uses cookies and similar tracking technologies to deliver and improve our services, maintain session continuity, detect fraud, and understand how players use the platform. A "cookie" is a small text file placed on your device by the z777 website when you visit or log in. Cookies allow z777 to recognise your device on subsequent visits and maintain your session while you are logged in.

7.2  The types of cookies used by z777 include:

7.3  You can manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your z777 account or using real-money gaming features. Most modern browsers allow you to view, delete, and block cookies through the browser's privacy or settings menu.

Data Retention

8.1  z777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licensing obligations. The retention periods applicable to different categories of data are as follows:

• Account data and identity verification records: Retained for a minimum of 5 years from the date of account closure, in accordance with anti-money laundering (AML) record-keeping requirements applicable to licensed gaming operators.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations under z777's international gaming licence.
• Customer support communications: Retained for a minimum of 3 years from the date of the communication, to support dispute resolution, regulatory enquiries, and quality assurance.
• Technical and usage data (identified): Retained for a maximum of 24 months from collection, after which it is anonymised or deleted.
• Marketing consent records: Retained from the date consent is given until consent is withdrawn, plus a reasonable period thereafter for record-keeping purposes.
• Self-exclusion records: Retained indefinitely to prevent a self-excluded player from creating a new z777 account in breach of their self-exclusion request, in accordance with responsible gaming best practices.

8.2  Upon expiry of the applicable retention period, z777 will securely delete or irreversibly anonymise personal data. Where technical constraints prevent immediate deletion, data will be logically isolated from active systems and scheduled for deletion at the earliest practicable opportunity.

Data Security

9.1  z777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the z777 platform — including login credentials, account data, and payment information — is encrypted using industry-standard 256-bit SSL/TLS protocols, the same standard used by major Pakistani banks and financial institutions.
• Bcrypt Password Hashing: z777 never stores plaintext passwords. All account passwords are stored using strong adaptive cryptographic hashing algorithms. Your actual password cannot be recovered even by z777 staff.
• Two-Factor Authentication (2FA): z777 offers optional 2FA for all registered account holders, providing an additional layer of security by requiring a one-time verification code delivered to your registered mobile number whenever you log in from an unrecognised device.
• Access Controls: Internal access to personal data is strictly limited to z777 staff and contractors who require access to perform their specific job function. All data access is logged and subject to regular audit.
• Intrusion Detection and Monitoring: z777's systems are subject to continuous security monitoring to detect and respond to suspicious activity, attempted breaches, and anomalous access patterns.
• Penetration Testing: z777 conducts regular third-party security assessments and penetration testing to identify and remediate vulnerabilities in the platform's security architecture.

9.2  Notwithstanding these measures, no online system can guarantee absolute security. In the event of a data security incident that poses a risk to your rights and freedoms, z777 will notify affected players and the relevant regulatory authority as required by applicable law and our licensing obligations.

9.3  You play an important role in keeping your z777 account secure. You should choose a strong, unique password for your z777 account, never share your login credentials with any third party, and contact z777 support immediately if you suspect that your account has been accessed without your authorisation.

Your Data Protection Rights

10.1  As a registered z777 player and data subject, you have a number of rights in relation to the personal data z777 holds about you. z777 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include the following:

10.2  To exercise any of the rights set out above, please contact z777 through the channels described in Section 15. z777 will not charge a fee for processing reasonable data rights requests and will respond within 30 days. In complex cases, z777 may request that you provide proof of identity before actioning your request, to ensure your data is not disclosed to an unauthorised party.

Children's Privacy — Strictly 21+

11.1  z777 employs age verification checks at account registration and mandatory KYC verification (including CNIC submission) at the point of first withdrawal to enforce the 21+ age restriction. If z777 becomes aware that personal data has been collected from a person under 21 without verified parental consent (which z777 does not seek, as the platform is categorically not intended for minors), z777 will take immediate steps to delete that data and close the associated account.

11.2  If you are a parent or guardian and believe that your child has registered a z777 account, please contact z777 support immediately using the details in Section 15. z777 will investigate promptly and take all necessary action to close the account and delete associated personal data.

Third-Party Services & Links

12.1  The z777 platform may reference or link to third-party services in the context of payment methods (JazzCash, EasyPaisa, etc.) or game content providers. This Privacy Policy applies only to data collected directly by z777 through the z777 platform. z777 is not responsible for the privacy practices, data handling, or content of any third-party service, and this Policy does not extend to data collected by those third parties through their own platforms or interfaces.

12.2  When you make a payment via JazzCash, EasyPaisa, or any other payment provider, that payment provider may collect and process your data according to its own privacy policy. z777 recommends that you review the privacy policies of payment providers you use in connection with your z777 account.

12.3  z777 has no control over the content or practices of third-party game providers operating within the z777 platform under licensing arrangements. Game providers receive only the minimum technical data necessary to deliver game content and maintain session continuity, as described in Section 6.4.

International Data Transfers

13.1  As an internationally licensed gaming platform, z777 may transfer your personal data to servers, processors, or partner organisations located in jurisdictions outside of Pakistan. Such transfers may occur for purposes including cloud hosting, KYC processing, game platform integration, and customer support infrastructure.

13.2  Where personal data is transferred outside of Pakistan, z777 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that which applies within z777's principal operating jurisdiction. These safeguards may include contractual data transfer agreements, standard data protection clauses incorporated into supplier contracts, or transfers to jurisdictions that have been assessed as providing adequate data protection standards.

13.3  z777 maintains an up-to-date register of international data transfers and the safeguards applicable to each. Details of specific international transfer arrangements are available to players on request through the support channels listed in Section 15.

Amendments to This Privacy Policy

14.1  z777 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services available on the z777 platform. The "Last Reviewed" date displayed at the top of this Policy will always reflect when the current version was published.

14.2  Where z777 makes material changes to this Privacy Policy — including changes that affect the purposes for which your data is processed, the categories of third parties with whom it is shared, or your data rights — z777 will notify registered account holders by email to the address on file, or through a prominent notice within the z777 platform, not fewer than 7 days before the updated Policy takes effect.

14.3  Your continued use of the z777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree to the updated Policy, you must discontinue use of the platform and may request account closure in accordance with Section 4.6 of the z777 Terms & Conditions.

Contact Us — Data & Privacy Enquiries

15.1  For any questions, concerns, or requests relating to this Privacy Policy or the personal data z777 holds about you — including data rights requests, complaints, or consent withdrawal — please contact the z777 team through the following channels:

15.2  z777 takes all privacy enquiries seriously. Where a data rights request involves verification of your identity before data is disclosed or actioned, z777 will request the minimum information necessary to confirm you are the authorised account holder. z777 will not charge a fee for genuine data rights requests submitted in good faith.