z77 Privacy Policy — How We Collect, Use, and Protect Your Data
At z77, protecting the personal data of our Pakistani players is a fundamental obligation — not an afterthought. This Privacy Policy explains precisely what data z77 collects when you use our platform, why we collect it, how it is stored and protected, who it may be shared with, and the rights you hold over your own information at all times.
z77's Core Privacy Commitments
Before you read the full policy, here is a plain-English summary of what z77 commits to on data privacy. The full legal text follows in the sections below.
We Never Sell Your Data
z77 does not sell, rent, or auction your personal data to third-party advertisers, data brokers, or marketing companies under any circumstances. Your information exists on z77 solely to operate your account and comply with our regulatory obligations.
Bank-Grade Encryption
All data transmitted between your device and z77 is encrypted using 256-bit SSL/TLS — the same standard used by major Pakistani banks including HBL and Meezan Bank. Stored data is encrypted at rest using AES-256 encryption across all z77 infrastructure.
You Control Your Data
z77 players have the right to access, correct, export, and request deletion of their personal data at any time. Data rights requests submitted to z77 are acknowledged within 48 hours and fulfilled within 30 days, in line with applicable data protection standards.
Minimal Data Collection
z77 collects only the personal data necessary to operate your account, process transactions, verify your identity, and comply with anti-money laundering and responsible gaming regulations. We do not collect data speculatively or for undisclosed purposes.
Controlled Third-Party Sharing
z77 shares personal data only with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification partners, and regulatory authorities where legally required. All third-party data processors are contractually bound to z77's data protection standards.
Clear Retention Limits
z77 does not retain your personal data indefinitely. Retention periods are defined for each data category based on regulatory requirements and business necessity. Once data is no longer needed and the retention period has passed, it is securely and permanently deleted from z77 systems.
Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Bases
- 7. Data Sharing
- 8. International Transfers
- 9. Data Retention
- 10. Data Security
- 11. Cookies & Tracking
- 12. Your Data Rights
- 13. Minors & Age Policy
- 14. Policy Changes
- 15. Contact Us
Updated: Jan 2026
1. Introduction
This Privacy Policy ("Policy") describes how z77 ("z77", "We", "Us", "Our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "You") who access or use the z77 online casino and sports betting platform available at z77.cam and through any associated mobile applications or services (collectively, "the Platform").
z77 operates under an international gaming licence and is subject to the data protection requirements imposed by its licensing authority. This Policy reflects those obligations and z77's own commitment to handling personal data with the highest standards of care, transparency, and security.
This Policy should be read alongside the z77 Terms & Conditions, which are available at /terms-conditions. By registering an account on z77 or by continuing to use the Platform after this Policy has been communicated to you, you acknowledge that you have read and understood this Policy.
2. Data Controller
z77 is the data controller in respect of personal data collected through the Platform. As data controller, z77 determines the purposes for which personal data is collected and the manner in which it is processed. z77 is responsible for ensuring that all processing of personal data on the Platform complies with applicable data protection laws and the conditions of its gaming licence.
For all data protection enquiries, requests, and concerns, players may contact z77 at: [email protected]
3. Personal Data We Collect
z77 collects the following categories of personal data from its players. Collection occurs at registration, during account use, and through ongoing interaction with the Platform.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, CNIC number, date of birth, nationality | Account verification, KYC compliance, age verification (21+) |
| Contact Data | Email address, Pakistani mobile number, city | Account communications, support, security alerts |
| Financial Data | JazzCash/EasyPaisa number, bank account details, transaction history | Payment processing, AML compliance, withdrawal verification |
| Technical Data | IP address, device type, browser, operating system, session data | Security, fraud prevention, platform optimisation |
| Usage Data | Games played, bets placed, session duration, betting patterns | Responsible gaming monitoring, personalisation, analytics |
| Communication Data | Live chat transcripts, email correspondence, support tickets | Quality assurance, dispute resolution, training |
| Marketing Preferences | Opt-in/opt-out status, preferred contact channels | Promotional communications (with consent only) |
4. How We Collect Your Data
z77 collects personal data through the following means:
4.1 Direct Collection
Data you provide directly to z77, including information entered during registration, identity verification documents uploaded to complete KYC requirements, payment details provided for deposits and withdrawals, communications submitted to z77 via live chat, email, or support forms, and voluntary information provided in connection with responsible gaming tools.
4.2 Automated Collection
z77 automatically collects certain technical and usage data when you access or use the Platform. This includes IP address and geolocation data, device identifiers, browser type and version, pages visited and time spent on the Platform, games opened and played, bet amounts and outcomes, and error and crash logs. This data is collected through server logs, cookies, and similar tracking technologies described further in Section 11.
4.3 Third-Party Sources
z77 may receive personal data about you from identity verification service providers used to complete CNIC-based age and identity checks, payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to confirm payment transactions, and fraud detection and AML screening services used to protect the integrity of the Platform.
5. How We Use Your Personal Data
z77 uses the personal data it collects for the following specific purposes:
- Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling access to all z77 Platform features.
- Age verification: Confirming that you meet the minimum age requirement of 21 years before allowing access to any gambling services on z77.
- Payment processing: Facilitating deposits to and withdrawals from your z77 wallet using your registered payment methods in Pakistani Rupees.
- Regulatory compliance: Fulfilling z77's obligations under its international gaming licence, including KYC checks, AML monitoring, and transaction reporting to competent authorities where legally required.
- Responsible gaming: Monitoring usage patterns to identify potential problem gambling behaviour and, where identified, reaching out to affected players with information about z77's self-exclusion, deposit limit, and cooling-off tools.
- Customer support: Responding to enquiries, resolving complaints, and managing disputes relating to your z77 account or any game or transaction on the Platform.
- Security and fraud prevention: Detecting, investigating, and preventing fraudulent, abusive, or illegal activity on z77, including bonus abuse, multi-accounting, and money laundering.
- Platform improvement: Analysing usage data in aggregated or anonymised form to understand how players interact with z77 and to improve the Platform's performance, game library, and user experience.
- Marketing communications: Sending you information about z77 promotions, bonuses, and new games — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting z77 support.
6. Legal Bases for Processing
z77 processes personal data only where a valid legal basis exists. The legal bases z77 relies upon are as follows:
- Contractual necessity: Processing required to perform z77's obligations to you under the z77 Terms & Conditions — including account management, payment processing, and game delivery.
- Legal obligation: Processing required for z77 to comply with applicable laws and the conditions of its gaming licence — including KYC verification, AML reporting, and age verification.
- Legitimate interests: Processing necessary for z77's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — provided such interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications, non-essential cookies, and any other processing activity for which z77 has specifically requested and received your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
8. International Data Transfers
As z77 operates under an international gaming licence, some personal data may be processed by z77 or its service providers outside of Pakistan. Where personal data is transferred internationally, z77 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations equivalent to those applicable under z77's licensing framework.
z77 maintains internal records of all international data transfers and conducts regular reviews to ensure that cross-border data flows remain appropriately protected. If you have questions about specific international transfers, please contact z77 at [email protected].
9. Data Retention
z77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, or reporting requirements. The following general retention principles apply:
- Active account data: Retained for the lifetime of your z77 account plus a minimum of five years following account closure to comply with AML record-keeping requirements.
- Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with AML regulations.
- KYC and identity documents: Retained for the duration of the account relationship plus five years, or longer where required by the applicable regulatory authority.
- Support communications: Retained for two years from the date of the final communication in the relevant support case.
- Marketing preference data: Retained until you withdraw your marketing consent, at which point it is updated to reflect your opt-out status (not deleted, as the record of your opt-out must be maintained).
- Technical and usage data: Retained in identifiable form for up to 12 months, after which it is anonymised or deleted.
Upon expiry of the applicable retention period, z77 securely deletes or anonymises personal data so that it can no longer be associated with any individual player.
10. Data Security
z77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and z77 servers
- AES-256 encryption for personal data stored at rest on z77 infrastructure
- Two-factor authentication (2FA) options for all z77 player accounts
- Role-based access controls limiting z77 employee access to personal data on a need-to-know basis
- Regular third-party penetration testing and security audits of z77 systems
- Automated intrusion detection and real-time security monitoring across all z77 infrastructure
- Formal data breach response procedures with defined notification timelines
In the event of a personal data breach that poses a risk to your rights and freedoms, z77 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach. Serious breaches will be reported to the relevant regulatory authority in accordance with applicable notification obligations.
11. Cookies & Tracking Technologies
z77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit z77. The following types of cookies are used on z77:
11.1 Strictly Necessary Cookies
These cookies are essential for the z77 Platform to function and cannot be disabled. They include session cookies that maintain your login state, security cookies that help protect against cross-site request forgery, and load-balancing cookies that ensure stable Platform performance. No consent is required for strictly necessary cookies.
11.2 Functional Cookies
These cookies remember your preferences on z77, such as language settings, game display preferences, and whether you have acknowledged certain notices. They enhance your experience but are not essential for Platform operation. You may disable functional cookies, though doing so may affect Platform functionality.
11.3 Analytics Cookies
z77 uses analytics tools to understand how players use the Platform in aggregate. Analytics data is used to improve the z77 user experience, optimise game loading performance, and identify technical issues. Where consent is required for analytics cookies, z77 will request this via the cookie consent mechanism presented when you first visit z77.
You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may impair your ability to use some features of the z77 Platform.
12. Your Data Rights
As a z77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact z77 support via live chat or email at [email protected]. z77 will acknowledge your request within 48 hours and respond in full within 30 days.
Right of Access
Request a copy of all personal data z77 holds about you, including the purposes for which it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held on your z77 account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to z77's legal and regulatory retention obligations.
Right to Restriction
Request that z77 restrict processing of your personal data in certain circumstances, such as while a dispute is being resolved.
Right to Portability
Receive a structured, machine-readable copy of the personal data you have provided to z77 for transfer to another service provider.
Right to Object
Object to processing based on z77's legitimate interests, including direct marketing. Objections to marketing will be actioned immediately.
13. Minors & Age Policy
z77 is strictly prohibited from providing gambling services to any person under the age of 21. z77 does not knowingly collect personal data from individuals under 21 years of age. All registrations are subject to mandatory CNIC-based age verification before an account is activated.
If z77 discovers that personal data has been collected from a player who is under 21 years of age, z77 will immediately suspend the account, delete the personal data where permissible under applicable law, and return any real-money balance to the source payment method after deducting any bonus funds claimed.
If you believe that a minor has registered on z77 or that z77 has inadvertently collected data from a minor, please notify z77 immediately at [email protected]. z77 takes such notifications seriously and will investigate and act promptly.
14. Changes to This Privacy Policy
z77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, z77's data processing practices, or the features of the Platform. When material changes are made, z77 will notify registered players by email or via an in-Platform notification at least 14 days before the changes take effect.
The current version of this Privacy Policy, with the effective date, is always available at /privacy-policy. Continued use of z77 following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should close your z77 account prior to the effective date.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way z77 handles your personal data, please contact our data protection team through any of the following channels:
- Live Chat: Available 24/7 inside the z77 member portal — the fastest way to reach us.
- Email: [email protected] — please include "Privacy Request" in your subject line for data rights requests.
z77 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. For complex data rights requests requiring investigation, z77 will keep you informed of progress throughout the review period.