zs777 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by zs777 ("zs777", "we", "us", "our") and applies to all personal data collected, used, stored, and processed by zs777 in connection with the operation of the zs777 online casino and sports betting platform, accessible at zs777.today ("the Platform"), and all associated services, communications, and promotional activities.

zs777 acts as the data controller in respect of the personal data of all registered players and visitors to the Platform. As data controller, zs777 determines the purposes for which and the means by which personal data is processed. Where zs777 engages third-party service providers to process data on its behalf, those providers act as data processors subject to contractual obligations consistent with this Policy.

This Policy should be read alongside zs777's Terms and Conditions (available at /terms-conditions) and Responsible Gaming Policy (available at /responsible-gaming), both of which supplement this document.

zs777 collects personal data through several mechanisms: directly from you when you register, verify your identity, make deposits or withdrawals, or contact support; automatically through the operation of the Platform; and, in limited circumstances, from third-party verification and payment service providers. The categories of personal data collected are as follows:

zs777 does not collect special category personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where explicitly required for the purposes of age verification or identity fraud prevention, and only where you have provided such data voluntarily in the course of KYC verification.

zs777 uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create and administer your zs777 account, authenticate your identity at login, and maintain accurate account records including your PKR balance, gaming history, and active bonus status.
• Identity Verification (KYC): To verify your identity and age (confirming you are 21 or older) in compliance with anti-money laundering (AML) obligations and responsible gaming requirements. KYC verification is a prerequisite for processing withdrawal requests.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Cryptocurrency, and to process withdrawal requests to your nominated payment method. Financial data is processed in strict accordance with applicable financial services security standards.
• Platform Operation: To operate the casino and sportsbook, deliver game results, record bet outcomes, calculate winnings, and apply bonus credits and wagering requirements correctly.
• Legal and Regulatory Compliance: To fulfil obligations under applicable AML, counter-terrorism financing, and responsible gaming legislation, including mandatory reporting requirements where applicable.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities. Technical data including IP addresses and device identifiers is used for this purpose.
• Customer Support: To respond to your enquiries, resolve account issues, investigate complaints, and provide assistance with KYC, payments, and responsible gaming tools.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. You may withdraw this consent at any time through your account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game curation, and the overall user experience for Pakistani players.

zs777 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and zs777 — including account management, payment processing, game operation, and KYC verification — is carried out on the basis of contractual necessity. Without this processing, zs777 cannot provide the Platform services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations — including AML reporting, age verification, and record-keeping mandated by financial services legislation — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and the detection of prohibited activities is carried out on the basis of zs777's legitimate interests in operating a secure, fair, and compliant gaming platform, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit consent. You may withdraw consent for marketing communications at any time without affecting your use of the Platform.

zs777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. zs777 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Cryptocurrency processing partners receive financial data strictly necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Identity Verification Services: Third-party KYC and identity verification providers receive the identity documents and data you submit during the verification process, for the purpose of authenticating your identity and age.
• Game Software Providers: Providers of the casino games available on the Platform may receive anonymised game session data necessary to operate, audit, and maintain the integrity of their games.
• Regulatory and Law Enforcement Authorities: zs777 will disclose personal data to competent regulatory authorities or law enforcement agencies where required to do so by applicable law, regulation, court order, or legal process.
• Fraud Prevention Bodies: zs777 may share data with fraud prevention organisations and shared industry databases for the purpose of detecting and preventing financial crime, in accordance with applicable legal frameworks.

The zs777 platform uses cookies and similar tracking technologies to operate certain essential platform functions, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:

You may configure your browser to block or delete cookies; however, please note that disabling essential cookies will impair or prevent your ability to use the Platform. zs777 does not use cookies to build advertising profiles that are sold to or shared with third-party advertisers.

zs777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required or permitted by applicable law. The following retention principles apply:

• Active Account Data: Personal data associated with an active zs777 account is retained for the duration of the account's existence and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Records of deposits, withdrawals, and associated financial data are retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable financial services legislation.
• KYC and Identity Documents: Identity verification documents are retained for the period required by applicable AML and KYC regulations, typically a minimum of five (5) years following account closure.
• Gaming Activity Logs: Bet records, game history, and session logs are retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes.
• Support Communications: Customer support correspondence is retained for two (2) years following the closure of the relevant support ticket, unless the communication forms part of a formal complaint or legal proceeding, in which case it is retained for the duration of those proceedings plus the applicable limitation period.
• Marketing Preferences: Consent and preference records for marketing communications are retained until you withdraw consent, plus the period necessary to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

zs777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the zs777 Platform;
• Encryption of sensitive data fields — including passwords and payment identifiers — at rest using industry-standard cryptographic algorithms;
• Two-factor authentication (2FA) available to all players as an additional account security layer;
• Access controls that restrict internal access to personal data on a need-to-know basis, with all internal access logged and audited;
• Regular security vulnerability assessments and penetration testing of the Platform infrastructure;
• Incident response procedures to contain, investigate, and remediate any data security incidents in a timely manner;
• Contractual security obligations imposed on all third-party data processors, requiring them to implement equivalent security standards.

As a zs777 player, you hold the following rights in respect of your personal data. zs777 is committed to facilitating the exercise of these rights in a timely and straightforward manner:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request", including your account username and a clear description of the right you wish to exercise. zs777 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days, or within any shorter timeframe required by applicable law.

Please note that certain rights — particularly the right to erasure — may be limited where retention of your data is required by applicable legal obligations, such as AML record-keeping requirements. Where this is the case, zs777 will explain the applicable limitation in our response to your request.

The zs777 platform is strictly intended for adults aged 21 years and above. zs777 does not knowingly collect personal data from individuals under the age of 21 and takes active steps — including mandatory age verification as part of the KYC process — to prevent underage individuals from accessing or using the Platform.

If zs777 becomes aware that personal data has been submitted by an individual who is under the age of 21, we will immediately close the relevant account, delete all associated personal data, and void any transactions made through that account. Deposits made by underage individuals are not eligible for return where age misrepresentation has been confirmed.

As zs777 operates as an internationally facing platform with technical infrastructure that may be hosted across multiple jurisdictions, it is possible that personal data collected from Pakistani players may be transferred to and processed in countries outside Pakistan. Where such transfers occur, zs777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Such safeguards include the use of contractual clauses requiring recipient parties to apply equivalent data protection standards, and the selection of service providers that operate in jurisdictions with recognised data protection frameworks. zs777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing additional contractual or technical safeguards.

zs777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The date of the most recent revision is always displayed at the top of this document.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — zs777 will notify you via the email address registered to your account and/or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to remain informed of how your personal data is being handled. If you have any concerns about changes to this Policy, please contact our support team before the effective date of the changes.

For all privacy-related enquiries, data subject rights requests, or concerns about how your personal data is being handled by zs777, please contact us through the following channels:

• Email: [email protected] — For all privacy rights requests, please use the subject line "Privacy Rights Request" and include your account username. Written enquiries are responded to within 24 hours for general matters and within 30 days for formal privacy rights requests.
• Live Chat: The zs777 support team is available via live chat 24 hours a day, 7 days a week. Live chat agents can assist with general privacy questions and escalate formal requests to the appropriate team.

zs777 will always respond to privacy enquiries promptly, respectfully, and in plain English. Pakistani players from Karachi, Lahore, Islamabad, Faisalabad, Multan, and across the country can expect the same standard of response regardless of their location or the nature of their enquiry.