Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how zn777 ("Platform", "we", "us", "our"), the operator of the website at https://zn777.cam and any associated applications (collectively, the "Service"), collects, processes, stores, shares and protects personal data relating to users of the Service ("User", "you", "your").

We are committed to handling your personal data responsibly, lawfully and transparently. This Policy is written in plain English to ensure that you fully understand how your information is used — not to obscure our practices behind dense legal language.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By using the Service or creating an Account, you acknowledge that you have read and understood this Policy.

02 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, including name, email address, government identity number, financial details and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. zn777 is the Data Controller in respect of data collected through the Service.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under binding instructions.
• "KYC Data" — identity and address verification documents submitted as part of the Know Your Customer process, including copies of CNIC, passport or utility bills.
• "Transaction Data" — records of deposits, withdrawals, wagers and account balance movements associated with a User Account.
• "Cookie" — a small text file placed on your device by our Platform to support session management, analytics and personalisation functions.

03 Data Controller

zn777 is the Data Controller for all Personal Data collected through the Service. As Data Controller, we determine why and how your Personal Data is processed and are responsible for ensuring that such processing is carried out lawfully and transparently.

Where we engage third-party service providers to process Personal Data on our behalf (for example, payment processors, identity verification providers and analytics platforms), those parties act as Data Processors under contractual obligations that require them to process your data only as instructed by us and to maintain appropriate security standards.

For all data-related enquiries, requests and complaints, please contact us using the details provided in Section 15 of this Policy.

04 Data We Collect

We collect Personal Data in the following categories, depending on how you interact with the Service:

We do not knowingly collect sensitive categories of Personal Data (such as racial or ethnic origin, political opinions, health data or biometric identifiers) unless strictly required for compliance with regulatory obligations, in which case you will be informed separately.

05 Legal Basis for Processing

Each processing activity we carry out is grounded in a recognised legal basis. The primary legal bases we rely on are:

• Contractual necessity — processing required to perform our contractual obligations to you under the Terms & Conditions, including account management, payment processing and providing the gaming service.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements and reporting duties.
• Legitimate interests — processing carried out for purposes that are reasonably necessary for our business operations and do not override your fundamental rights, including fraud prevention, security monitoring, Platform analytics and service improvement.
• Consent — where we send you direct marketing communications or deploy non-essential cookies, we will request your explicit consent beforehand. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Purposes of Processing

Your Personal Data is processed for the following specific purposes:

1. Account creation and management — to register your Account, authenticate your identity on login and maintain your account records.
2. Identity verification (KYC) — to comply with legal obligations requiring us to verify the identity of players before processing withdrawals and to prevent underage gambling.
3. Payment processing — to facilitate deposits and withdrawals through the payment channels available in the cashier, including digital wallet references familiar to Pakistani users (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah). Reference to these providers does not imply they endorse or support gambling services.
4. Fraud prevention and security — to detect, investigate and prevent fraudulent transactions, duplicate accounts, money laundering and other prohibited activity.
5. Responsible gambling — to monitor account activity for indicators of problem gambling behaviour and to enforce deposit limits, loss limits and self-exclusion periods you have set.
6. Customer support — to respond to your queries, complaints and requests through live chat, email and the Help Center.
7. Platform improvement — to analyse usage patterns, diagnose technical issues and improve the user experience for players across Pakistan, including in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
8. Marketing communications — to send you information about promotions and offers where you have consented to receive such communications. You may opt out at any time.
9. Legal compliance and reporting — to comply with court orders, regulatory requests and anti-money laundering reporting obligations.

07 Data Sharing & Disclosure

We do not sell your Personal Data to any third party. We may share your data with the following categories of recipients only where necessary and proportionate:

• Identity verification providers — third-party KYC service providers who verify identity documents (such as CNIC or passport) as part of our anti-fraud and compliance obligations. These providers process data under binding data processing agreements.
• Payment processors — entities that facilitate deposit and withdrawal transactions. Payment data is shared only to the extent required to process the specific transaction.
• Analytics and technology providers — service providers who assist with Platform performance monitoring, fraud detection and technical infrastructure. Access is limited to what is strictly necessary.
• Regulatory and law enforcement authorities — where we are legally required to disclose Personal Data to regulators, courts, law enforcement agencies or anti-money laundering authorities under applicable law. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers — lawyers, auditors and other professional advisers who require access to data in the course of providing services to zn777, bound by confidentiality obligations.

08 International Data Transfers

The Service is operated from infrastructure that may be located outside of Pakistan. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, including contractual protections with Data Processors and, where applicable, reliance on adequacy frameworks recognised by applicable data protection law.

By using the Service, you acknowledge that your Personal Data may be transferred internationally as described in this Policy. If you have concerns about international data transfers, please contact us using the details in Section 15.

09 Data Retention

We retain your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Account and registration data — retained for the duration of your active Account and for a minimum of five (5) years following account closure, to comply with anti-money laundering and regulatory record-keeping obligations.
• KYC / identity verification documents — retained for the period required by applicable AML law from the date of the last transaction, typically a minimum of five (5) years.
• Transaction data — retained for a minimum of five (5) years following the date of each transaction.
• Support communications — retained for a minimum of three (3) years for quality assurance and dispute resolution purposes.
• Marketing consent records — retained for the period during which you have an active Account and for three (3) years following withdrawal of consent or account closure.

Where data is no longer required for any legitimate purpose and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be associated with you.

10 Data Security

zn777 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Hashed storage of account passwords — we do not store your password in readable form.
• Strict access controls ensuring that only authorised personnel can access Personal Data, limited to what is necessary for their specific role.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Two-factor authentication options available on user accounts to reduce the risk of unauthorised access.

You are also responsible for maintaining the security of your Account. Do not share your login credentials with any other person. zn777 will never ask for your password via email, live chat or any other communication channel.

11 Cookies & Tracking Technologies

The zn777 Platform uses cookies and similar tracking technologies to support the operation, performance and analytics of the Service. The categories of cookies we use include:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without disabling core Platform functionality.
• Performance and analytics cookies — used to collect aggregated, anonymised data about how users interact with the Platform, including pages visited, session duration and error rates. This data is used to improve the Service.
• Functional cookies — used to remember your preferences and settings, such as language preferences and display options, to personalise your experience.
• Marketing cookies — used only where you have given explicit consent, to enable relevant promotional information to be presented to you. You may withdraw consent at any time via the cookie preference tool.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookie may affect the functionality of some features on the Platform.

12 Your Rights

Subject to applicable data protection law and any overriding legal obligations (such as mandatory AML record-keeping requirements), you have the following rights in respect of your Personal Data:

• Right of access — you may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to rectification — you may request correction of inaccurate or incomplete Personal Data. You can update basic account information directly in your Account settings.
• Right to erasure ("right to be forgotten") — you may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing — you may request that we limit the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending outcome.
• Right to data portability — where processing is based on your consent or a contract and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact us using the details in Section 15. We will respond to all valid requests within a reasonable timeframe — typically within 30 days, though complex requests may require longer and we will notify you accordingly.

13 Minors

The Service is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

Where we discover that an Account has been registered by or on behalf of a minor, we will immediately suspend the Account, withhold any associated balance pending investigation, and delete the minor's Personal Data to the extent permitted by applicable law. Any winnings generated prior to age verification are subject to forfeiture.

If you believe that a minor has registered on the Platform using false information, please contact us immediately via the details in Section 15 so that we can investigate and take appropriate action.

14 Policy Amendments

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and functionality of the Service. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, provide notice to registered users via their registered email address or via a prominent notice on the Platform.

Your continued use of the Service following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We recommend that you review this Policy periodically. The most current version is always available at https://zn777.cam/privacy-policy.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the zn777 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the support widget on the Platform. Indicate that your query relates to personal data or privacy.
• Help Center: Access self-service guidance on data rights requests via your Account panel.
• Email: [email protected] — please use the subject line "Privacy / Data Request" to ensure your message is directed to the appropriate team member.

Formal data rights requests (access, erasure, portability, etc.) submitted by email are acknowledged within 48 hours and responded to within 30 days, or sooner where required by applicable law. Where a request is complex or voluminous, we may extend this period and will notify you accordingly with reasons.

For broader questions about our terms of service, please review our Terms & Conditions. For questions about responsible gambling tools and self-exclusion, please visit our Responsible Gambling page.