Privacy Policy — How ZP777 Protects Your Data in Pakistan

This Privacy Policy is published by ZP777 ("ZP777", "we", "us", "our") and applies to all personal information collected through the ZP777 website at zp777.ws, our mobile platform, customer support channels, promotional activities and any other service we provide to players in Pakistan.

ZP777 is the data controller for all personal information collected through our platform. This means we are responsible for deciding how and why your personal data is processed and for ensuring it is handled in accordance with applicable data protection obligations and our commitments to you as a player.

By creating a ZP777 account, depositing funds or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything in this document, please contact us at support@zp777.ws — we will respond clearly and without unnecessary delay.

ZP777 collects personal information in several ways — some you provide directly when registering or contacting us, some is generated automatically by your use of the platform, and some comes from third-party services we use to operate ZP777 safely and effectively.

• Registration data — full name, date of birth, Pakistani mobile number and any other details entered when creating your ZP777 account.
• Identity verification documents — CNIC number, copies of CNIC or passport submitted during verification checks.
• Payment information — Easypaisa or JazzCash account details, bank account information or card details used to deposit or withdraw funds. Full payment credentials are handled by our payment processors and are not stored on ZP777 servers.
• Support correspondence — messages, emails, chat transcripts and any information you share when contacting ZP777 customer support.
• Responsible gaming data — limits, self-exclusion preferences and any information you provide when using ZP777's responsible gaming tools.

• Device and technical data — IP address, device type, operating system version, browser type, screen resolution and mobile network operator.
• Usage data — pages visited, games played, bets placed, session duration, login timestamps and navigation patterns within ZP777.
• Location data — general location derived from IP address. ZP777 does not collect precise GPS location.
• Cookies and similar technologies — see Section 7 for full details on our cookie usage.

• Identity and age verification data returned by KYC (Know Your Customer) verification service providers.
• Fraud screening information from anti-fraud and payment risk services.
• Marketing attribution data from analytics partners (anonymous or pseudonymous only).

Every piece of data ZP777 holds is used for a specific, documented purpose. We do not use your data in ways you would not reasonably expect and we do not allow it to be used for purposes unrelated to running the ZP777 platform and serving you as a player.

ZP777 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity — processing required to provide the ZP777 service you have signed up for, including account management, game access, and payment processing.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responses to lawful requests from Pakistani authorities.
• Legitimate interests — processing for fraud prevention, platform security, analytics and improving ZP777's services, where those interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, non-essential cookies and certain personalisation features, where you have given clear and informed consent. You may withdraw consent at any time.

ZP777 does not sell your personal data. We share it only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

To process deposits and withdrawals, ZP777 shares necessary transaction data with licensed payment processors operating in Pakistan — including Easypaisa, JazzCash, NayaPay, SadaPay and bank transfer providers. These processors are contractually bound to handle your data securely and use it only for the payment transaction.

For KYC compliance, ZP777 works with regulated identity verification providers. When you submit a CNIC or other identity document for verification, that document is shared with the verification service to confirm your identity and age. Verification providers are prohibited from using your data for any other purpose.

ZP777's game library is powered by third-party providers including Pragmatic Play, PG Soft, Evolution Gaming, Spribe and others. When you play a game, the game provider's system receives a player ID and session token. This is a pseudonymous identifier — game providers do not receive your full name, CNIC or payment details.

ZP777 will share personal data with Pakistani law enforcement, regulatory authorities or courts when legally required to do so. We will notify you of such disclosures where we are legally permitted to do so.

ZP777 takes particular care with financial data. When you make a deposit or request a withdrawal, your payment details are handled as follows:

• Easypaisa and JazzCash transactions are processed directly through the respective payment platform's secure API. ZP777 receives confirmation of the transaction and the sending account identifier but does not store your full wallet PIN or password.
• Card transactions (Visa/Mastercard) are processed through PCI-DSS compliant payment gateways. ZP777 does not store full card numbers on our servers.
• Bank transfer (IBFT) details are used to process the specific transaction and are retained in transaction records as required by financial compliance obligations.

ZP777 maintains transaction records — including deposit amounts, withdrawal amounts, dates and payment method identifiers — for the duration required by applicable Pakistani financial regulations. These records are used to investigate disputes, comply with AML requirements and support responsible gaming monitoring.

ZP777 uses cookies and similar tracking technologies on our website and mobile platform. A cookie is a small text file placed on your device that helps us recognise you, remember your preferences and understand how you use ZP777.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent ZP777 from functioning correctly. ZP777 does not use cookies to track your activity on other websites.

ZP777 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration or disclosure. Our security measures include:

• TLS 1.3 encryption for all data transmitted between your device and ZP777's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details.
• Multi-factor authentication (MFA) available for all ZP777 player accounts — we strongly recommend enabling this in your account settings.
• Regular penetration testing and vulnerability scanning of ZP777's infrastructure by independent security specialists.
• Strict access controls ensuring that ZP777 staff can only access personal data relevant to their specific role.
• 24/7 security monitoring for suspicious access patterns or anomalous activity.

Despite these measures, no internet-based service can guarantee absolute security. Players should take their own precautions — using a strong, unique password for their ZP777 account, enabling MFA, and avoiding accessing ZP777 from shared or public devices.

ZP777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. Specific retention periods include:

• Active account data — retained for the full duration of your account relationship with ZP777.
• Transaction records — financial transaction data is retained for the minimum period required by Pakistani AML and financial regulations (typically five years from the date of the transaction).
• Identity verification documents — retained for the duration required by KYC regulations applicable to ZP777's operations.
• Support correspondence — retained for up to two years from the date of the last interaction, to allow us to refer to previous communications when resolving issues.
• Analytics data — aggregated and anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.
• Closed or self-excluded accounts — personal data associated with closed accounts is retained for the legally required period, after which it is securely deleted or fully anonymised.

As a ZP777 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@zp777.ws or via live chat. We will respond within 30 days.

ZP777's services are strictly for adults aged 18 and above. ZP777 does not knowingly collect or process personal data from individuals under the age of 18. If we become aware that an account has been registered by or on behalf of an underage person, that account will be immediately suspended, all activity voided, and any funds returned to the originating payment method.

If you believe a person under 18 has registered on ZP777, please contact us immediately at support@zp777.ws. We take underage gambling extremely seriously and act on all reports without delay.

With your consent, ZP777 may send you marketing communications about our latest promotions, bonuses, new game releases and platform updates via SMS to your registered Pakistani mobile number.

You can opt out of marketing communications at any time by:

• Contacting ZP777 support and requesting removal from marketing lists.
• Adjusting your notification preferences in your ZP777 account settings.

Please note that opting out of marketing communications does not affect transactional messages — ZP777 will continue to send you important account, security and payment notifications regardless of your marketing preference, as these are necessary for the operation of your account.

ZP777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform features. When we make material changes, we will notify players via in-platform notification or SMS to their registered mobile number.

The date at the top of this document ("Last updated") indicates when the current version was published. We encourage you to review this Policy periodically. Continued use of ZP777 after a Privacy Policy update constitutes acceptance of the revised Policy.

Previous versions of ZP777's Privacy Policy are available on request by contacting support@zp777.ws.

For any privacy-related question, request or complaint, please contact ZP777 through either of the following channels:

• Email: support@zp777.ws — include "Privacy Request" in the subject line for faster routing to our data team.
• Live Chat: Available 24/7 on the ZP777 website and mobile platform. Ask to speak with the privacy team.

ZP777 aims to acknowledge all privacy requests within 24 hours and resolve them fully within 30 calendar days. For complex requests — such as full data subject access requests — we will keep you informed of progress throughout.