zc777 Privacy Policy —
How We Protect Your Data

zc777 is Pakistan's most trusted online casino and sports betting platform, accessible at zc777.lol. For the purposes of this Privacy Policy, zc777 is the data controller in respect of all personal data collected from registered players and users of the platform.

zc777 operates under internationally recognised gaming licensing frameworks and is subject to data protection obligations imposed by those licensing conditions. Our platform serves players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar and all other major cities and towns throughout the country.

References in this policy to "we," "us," and "our" refer to zc777 as the data controller. References to "you," "your," and "player" refer to any individual whose personal data we process, whether as a registered account holder or as a visitor to the zc777 platform.

zc777 collects personal data in several categories depending on your relationship with the platform. The following sets out the categories of personal data we collect and the circumstances in which each category is collected:

2.1 Registration and Identity Data

• Full legal name as it appears on your Pakistani CNIC or valid identity document;
• Date of birth — used for age verification to confirm you are 21 years of age or above;
• Pakistani mobile telephone number (03XX format);
• Email address (where provided at registration);
• Residential address in Pakistan;
• National Identity Card (CNIC) number — collected for KYC verification purposes only;
• A copy of your CNIC, passport or other identity document where requested during verification.

2.2 Financial and Transaction Data

• JazzCash mobile number and anonymised transaction reference numbers;
• EasyPaisa mobile number and anonymised transaction reference numbers;
• Raast ID or 1LINK reference numbers;
• Bank account name and account number for HBL, UBL, Meezan Bank and other supported Pakistani banks — used for withdrawal verification only;
• Transaction history including deposit amounts, withdrawal requests, bonus credits and game activity in PKR;
• Responsible gaming financial limits set by you within your account.

2.3 Account Activity and Technical Data

• Login timestamps, session duration, and device identifiers;
• IP address and approximate geographic location derived from IP;
• Device type, operating system version, and browser type;
• Game play history including games played, bets placed, outcomes, and session data;
• Sports betting history including markets wagered, amounts staked, and outcomes;
• Customer support interaction logs including Live Chat transcripts and email correspondence.

2.4 Responsible Gaming Data

• Self-exclusion status and the date any self-exclusion was applied;
• Deposit limit, loss limit and session time settings as configured by the player;
• Cooling-off period records;
• Any responsible gaming assessments or intervention records maintained by the zc777 support team.

zc777 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you actively provide during account registration, identity verification, deposit and withdrawal requests, customer support interactions, and responsible gaming tool configuration.
• Automated Collection: Technical data collected automatically when you access the zc777 platform, including IP address, device information, session data, and cookies. See Article 6 for full cookie policy details.
• Payment Providers: Transaction confirmation data received from JazzCash, EasyPaisa, Raast, 1LINK and banking partners to verify successful deposits and process withdrawal instructions.
• Identity Verification Services: Where you submit identity documents for KYC verification, zc777 may use third-party identity verification services to authenticate those documents. These services process your data only for the purposes of identity confirmation and are bound by strict data processing agreements.
• Third-Party Game Providers: Aggregated, anonymised game performance and session data may be received from game providers such as Pragmatic Play, NetEnt and others in order to resolve technical queries or disputes. Full personal identity data is not shared in this context.
• Fraud Prevention Systems: Automated systems that analyse account behaviour patterns to detect Prohibited Activities as defined in the zc777 Terms and Conditions may collect and process technical and behavioural data as part of their operation.

zc777 processes personal data only for defined, legitimate purposes. The following table sets out the primary purposes for which we process personal data and the legal basis for each:

zc777 does not process personal data for purposes that are incompatible with the purposes listed above without first obtaining your explicit consent. Where we rely on legitimate interests as a legal basis, those interests have been balanced against your privacy rights and we have determined that our legitimate interests do not override your fundamental right to privacy.

zc777 does not sell, rent, or transfer personal data to third parties for their own commercial or marketing purposes. Personal data is shared with third parties only in the following strictly defined circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the minimum personal and financial data necessary to process your deposit and withdrawal instructions. These providers are bound by their own regulatory requirements under Pakistan's financial services framework.
• Identity Verification Services: Third-party KYC verification providers receive the identity documents you submit for verification purposes only. These providers operate under data processing agreements that prohibit any secondary use of the data.
• Game Content Providers: Providers such as Pragmatic Play, NetEnt, Play'n GO and others receive pseudonymised session identifiers — not full personal data — in connection with the delivery of their games on the zc777 platform.
• Fraud Prevention and Anti-Money Laundering: Where required by our licensing obligations or by applicable law, zc777 may share account and transaction data with financial intelligence authorities, fraud prevention networks, and anti-money laundering bodies.
• Regulatory Authorities: zc777 will disclose personal data to its licensing authority, and to other competent regulatory, financial, or law enforcement authorities upon lawful request and to the extent required by our licensing obligations or applicable law.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by zc777 may access personal data on a need-to-know basis in connection with the provision of professional services, subject to professional confidentiality obligations.

zc777 uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, remember your preferences, prevent fraud, and improve the overall quality of your gaming experience. The following categories of cookies are used on the zc777 platform:

• Strictly Necessary Cookies: These cookies are essential for the zc777 platform to function and cannot be disabled. They maintain your login session, enforce responsible gaming limits you have set, and protect the security of your account. These cookies do not track activity for marketing purposes.
• Functional Cookies: These cookies remember your language preference, game settings, and other personalisation choices to improve your experience across sessions. Disabling functional cookies may affect the quality of your zc777 experience.
• Analytics Cookies: zc777 uses aggregated, anonymised analytics data to understand how players interact with the platform, which game categories are most popular, and where technical issues occur. This data is used solely to improve the platform and does not identify individual players.
• Fraud Prevention Cookies: Technical cookies that assist our fraud detection systems in identifying suspicious login patterns, multi-accounting attempts, and other Prohibited Activities as defined in the zc777 Terms and Conditions.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the zc777 platform. For Pakistani users on mobile devices (Jazz 4G, Zong, Telenor, Ufone networks), cookies operate identically on mobile browsers as on desktop.

zc777 does not use third-party advertising cookies or behavioural tracking cookies that monitor your activity across other websites and platforms beyond the zc777 domain.

zc777 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by our licensing obligations and applicable legal requirements. The following retention periods apply:

• Active Account Data: Personal data associated with an active zc777 account is retained for the duration of the account's existence. This includes identity data, transaction history, account activity, and responsible gaming records.
• Post-Closure Retention: Following account closure — whether voluntary or otherwise — zc777 is required by its licensing obligations to retain certain account and transaction records for a minimum period of five (5) years. This is to satisfy anti-money laundering, KYC and gaming audit requirements imposed by our licensing authority.
• Identity Documents: Copies of identity documents submitted for KYC verification are retained for the duration of the account and for five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• Customer Support Records: Support interaction logs, including Live Chat transcripts and email correspondence, are retained for three (3) years from the date of the interaction to allow for effective dispute resolution.
• Marketing Consent Records: Records of marketing opt-in consent are retained for the duration of consent and for three (3) years following withdrawal of consent, to demonstrate regulatory compliance.
• Self-Exclusion Records: Records of voluntary self-exclusion are retained permanently to prevent excluded players from re-registering with zc777.

Data that is no longer required for any applicable purpose is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised or aggregated data that cannot be used to identify individual players may be retained indefinitely for statistical and analytical purposes.

zc777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and the zc777 platform is encrypted using TLS 1.3 with 256-bit SSL certificates — the same encryption standard applied by Pakistan's major financial institutions.
• Encryption at Rest: Personal data and financial records stored on zc777 servers are encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
• Access Controls: Access to personal data within zc777 systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control policies, and all access is logged for audit purposes.
• Penetration Testing: The zc777 platform undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Multi-Factor Authentication: Internal systems used by zc777 staff to access player data require multi-factor authentication. Players are also strongly encouraged to enable two-factor authentication on their own zc777 accounts.
• Breach Response: zc777 maintains a documented data breach response procedure. In the event of a breach affecting personal data, affected players will be notified within 72 hours of zc777 becoming aware of the breach, in accordance with internationally recognised notification standards.

As a data subject whose personal information is processed by zc777, you hold the following rights in relation to your personal data. These rights are subject to applicable legal limitations and to our licensing obligations, which may in certain circumstances require us to retain data regardless of a deletion or restriction request:

To exercise any of the above rights, please contact the zc777 privacy team via Live Chat or at [email protected] with "Data Rights Request" in your subject line. We may need to verify your identity before processing any data rights request to protect against unauthorised access to another player's data.

Please note that certain data rights are subject to limitations where retention is required for anti-money laundering compliance, responsible gaming record-keeping, or licensing obligations. Where we are unable to fulfil a deletion request in its entirety for these reasons, we will inform you of the specific legal basis for retention.

The zc777 platform is strictly intended for adults aged 21 years and above. zc777 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of the zc777 registration process, and all account holders are required to confirm that they meet this age requirement.

In the event that zc777 discovers or is notified that personal data belonging to a person under 21 has been collected — whether as a result of the individual misrepresenting their age at registration or for any other reason — we will immediately take the following steps:

• Suspend the relevant account pending investigation;
• Delete or anonymise all personal data associated with the account where legally permissible;
• Permanently close the account;
• Handle any balance in the account in accordance with our licensing obligations and applicable law.

In certain circumstances, personal data collected by zc777 may be transferred to, processed by, or stored on systems located outside of Pakistan. Such transfers may occur in connection with the use of third-party game providers, payment processors, identity verification services, cloud infrastructure providers, or communications platforms that maintain servers in other jurisdictions.

Where personal data is transferred outside of Pakistan, zc777 ensures that appropriate safeguards are in place to protect your data. These safeguards include:

• Data Processing Agreements: All third parties that receive personal data from zc777 in connection with an international transfer are required to enter into data processing agreements that impose obligations equivalent to those set out in this Privacy Policy;
• Adequacy Assessments: Where personal data is transferred to jurisdictions without adequate data protection frameworks, zc777 conducts a transfer impact assessment and implements supplementary measures to ensure equivalent protection;
• Contractual Clauses: Where required, zc777 uses standard contractual clauses or equivalent contractual mechanisms to govern international data transfers to third-party processors.

By registering a zc777 account and accepting this Privacy Policy, you acknowledge that your personal data may be transferred, processed and stored in countries outside Pakistan as described in this Article, subject to the safeguards described above.

zc777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes to our data processing practices, or changes to the services and products offered on the platform. All amendments to this Privacy Policy will be communicated to registered players in the following manner:

• Material Changes: Where an amendment materially affects the way in which zc777 processes your personal data or the rights available to you under this policy, we will notify you via the email address or mobile number registered to your zc777 account no fewer than fourteen (14) days before the amendment takes effect.
• Non-Material Changes: Corrections of typographical errors, updates to contact information, and clarifications that do not substantively alter the policy's meaning may be made without advance individual notice, though the updated policy will always be available at the zc777 privacy policy page with a revised effective date.

Continued use of the zc777 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and request account closure before the amendment's effective date.

The current version of this Privacy Policy is always accessible at zc777.lol/privacy-policy. The effective date at the top of this page will be updated to reflect the date of the most recent version.

zc777 is committed to handling all privacy queries and complaints promptly, fairly, and in accordance with this policy and our licensing obligations. If you have any question, concern or complaint regarding the processing of your personal data by zc777, please use one of the following contact channels:

• Live Chat: Available 24/7 on the zc777 platform in both English and Urdu. The quickest route to a response for most privacy queries.
• Email: [email protected] — Please include "Privacy Policy" or "Data Rights Request" in the subject line. We respond to all privacy email enquiries within two (2) business days during Pakistan Standard Time (PST) operating hours.

When submitting a privacy complaint or data rights request, please provide:

• Your full registered name and Pakistani mobile number or email address;
• Your zc777 account username where applicable;
• A clear description of your query, concern or the right you wish to exercise;
• Any supporting information that will help us address your request accurately.

zc777 will acknowledge all privacy complaints within 48 hours and will aim to provide a substantive response within thirty (30) days. Where additional time is required to investigate a complex complaint, we will notify you of the expected resolution timeline.