zz77 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") is published by zz77 ("we," "us," "our," or "the Platform") and applies to all personal data collected, processed, and stored in connection with your use of the zz77 website at zz77.today, including all games, sports betting markets, account management features, promotions, and support services made available therein.

This Policy applies to all registered zz77 players, website visitors, and any individual whose personal data is processed by zz77 in connection with the platform — including players based in Pakistan accessing the platform via desktop or mobile browser.

By creating a zz77 account or using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the zz77 Terms and Conditions and should be read alongside them.

zz77 acts as the data controller in respect of all personal data collected through the zz77 platform. As data controller, zz77 is responsible for determining the purposes and means by which your personal data is processed.

zz77 operates under an international gaming licence and is subject to the data protection requirements imposed by its licensing authority. The platform is committed to maintaining the highest standards of data protection applicable to online gaming operators serving Pakistani players.

For all data protection enquiries, requests to exercise your rights, or formal complaints, please contact the zz77 Data Protection team at: [email protected] with the subject line "Data Protection Request."

zz77 collects personal data through your direct interactions with the platform (such as account registration and support contact), automatically through your use of the platform (such as device and session data), and in some cases from third-party sources as described below.

zz77 does not collect special categories of sensitive personal data (such as biometric data, health data, or political opinions) except where strictly required for identity verification purposes under applicable AML and KYC regulatory requirements.

zz77 uses the personal data we collect for the following clearly defined purposes:

• Account Management: To create, maintain, and manage your zz77 player account, process login authentication, and communicate account-related notifications to you.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with anti-money laundering (AML) regulations and responsible gaming obligations imposed by our international gaming licence.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records of all transactions.
• Gaming Operations: To facilitate access to casino games, sports betting markets, live dealer tables, and other platform features; and to calculate and credit winnings accurately.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account sharing, and other prohibited conduct described in our Terms and Conditions.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to operate deposit limit, cooling-off, and self-exclusion tools in your account settings.
• Legal Compliance: To fulfil legal and regulatory obligations imposed by the zz77 gaming licence, including record-keeping requirements, AML reporting, and cooperation with law enforcement authorities where legally required.
• Customer Support: To respond to your enquiries, complaints, and support requests through live chat and email.
• Platform Improvement: To analyse anonymised usage data in aggregate to improve the performance, reliability, and features of the zz77 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications. You may withdraw this consent at any time.

zz77 processes your personal data only where a valid legal basis exists for doing so. The legal bases relied upon by zz77 are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the zz77 Terms and Conditions, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML regulations, KYC obligations, and licence conditions imposed by the zz77 gaming authority.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and certain optional platform features, where you have given explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

zz77 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Your financial data is shared with payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard networks) solely for the purpose of processing your transactions. These providers are contractually bound to handle your data securely and only for payment purposes.
• Identity Verification Providers: During KYC verification, identity documents may be processed by approved third-party verification service providers operating under strict data processing agreements with zz77.
• Game Software Providers: Technical session data required for game delivery may be processed by certified game providers (such as Evolution Gaming, Pragmatic Play, and others). No financial or identity data beyond what is technically required is shared with game providers.
• Regulatory and Law Enforcement Authorities: zz77 will disclose personal data to competent authorities where required to do so by law, court order, regulatory direction, or as part of lawful AML reporting obligations. Where legally permissible, zz77 will notify the affected player of any such disclosure.
• Professional Advisers: Personal data may be disclosed to legal, financial, or compliance advisers acting on behalf of zz77 under strict confidentiality obligations and only to the extent required for their professional engagement.

All third parties with whom zz77 shares personal data are required to maintain adequate data security standards and are prohibited from using your data for any purpose beyond that for which it was disclosed.

zz77 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how the platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against CSRF attacks. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. These improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how players use the platform (pages visited, session duration, game category preferences) to help zz77 improve the platform. This data is aggregated and does not identify individual players.
• Fraud Prevention Cookies: Help detect and prevent fraudulent activity, account sharing, and automated bot traffic on the platform.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the zz77 platform. zz77 does not use third-party advertising or behavioural tracking cookies.

zz77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction:

• All data transmitted between your device and zz77 servers is encrypted using 256-bit SSL/TLS protocols.
• Sensitive stored data, including identity documents and financial information, is encrypted at rest.
• Access to personal data within zz77 systems is restricted to authorised personnel on a strict need-to-know basis.
• Two-factor authentication (2FA) is available and recommended for all player accounts.
• Platform infrastructure is subject to regular penetration testing and security audits by qualified third parties.
• Incident response procedures are in place to detect, contain, and report data security incidents in accordance with applicable regulatory requirements.

zz77 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The general retention periods applied by zz77 are as follows:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with zz77's data disposal procedures.

Subject to applicable law and the limitations described below, you hold the following rights in respect of your personal data held by zz77:

• Right of Access: You may request a copy of the personal data zz77 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by zz77. Basic account details such as email address and phone number can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected and no overriding legal obligation requires its retention. Note that certain data must be retained for AML and regulatory compliance regardless of erasure requests.
• Right to Restrict Processing: You may request that zz77 restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud prevention purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent can be done via the unsubscribe link in any marketing email or by contacting support.

To exercise any of these rights, contact the zz77 Data Protection team at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 5 business days and fulfil it within 30 calendar days, subject to identity verification and applicable legal limitations.

The zz77 platform is strictly intended for adults aged 21 years and over. zz77 does not knowingly collect personal data from individuals under the age of 21. Age verification is applied during account registration and throughout the ongoing account lifecycle.

If zz77 discovers or has reasonable grounds to believe that personal data belonging to an individual under the age of 21 has been collected, the affected account will be immediately suspended, all associated data will be reviewed, deposited funds will be returned to the verified payment source, and the personal data collected will be securely deleted to the extent not required for regulatory reporting.

Parents and guardians who believe their child may have accessed or registered on the zz77 platform should contact the zz77 support team immediately at [email protected].

zz77 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform practices. Material changes to this Policy will be communicated to registered players via email to the address on file, or through a prominent notice on the zz77 platform, at least 14 days before the changes take effect where reasonably practicable.

The "Last Reviewed" date at the top of this Policy reflects the most recent revision date. We encourage players to review this Policy periodically to remain informed about how zz77 protects their personal data. Your continued use of the zz77 platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by zz77, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week, with priority staffing during Pakistan Standard Time (PKT, UTC+5) business hours.

If you are not satisfied with zz77's response to a privacy-related complaint, you may escalate your complaint to the data protection supervisory authority or dispute resolution body designated by the zz77 gaming licence authority. Details of the relevant supervisory authority are available on request from the zz77 support team.