Privacy Policy

1.1 For the purposes of this Privacy Policy, the data controller is zk777, operating the online gaming platform accessible at zk777.bio. References to "zk777", "we", "us", or "our" in this policy refer to the zk777 platform operator, its parent entity, affiliates, and licensed subsidiaries.

1.2 zk777 operates as an internationally licensed online gaming and sports betting platform. Our data processing activities are governed by our international gaming license conditions, which include mandatory data protection obligations as a condition of licensure.

1.3 Questions, requests, or concerns relating to the processing of your personal data by zk777 may be directed to our dedicated privacy contact at [email protected] with the subject line "Privacy Request — [Your Account ID]".

2.1 zk777 collects the following categories of personal data from players and platform users:

2.2 zk777 does not intentionally collect special category data (as defined under international data protection frameworks) unless specifically required to fulfil a regulatory obligation, such as processing information related to problem gambling identification under our responsible gaming obligations.

3.1 zk777 collects personal data through the following means:

• Direct provision by you — when you complete account registration, submit KYC documentation, make a deposit or withdrawal request, use live chat or email support, or participate in any promotional activity on the zk777 platform;
• Automated collection — through cookies, session tokens, server logs, and similar tracking technologies when you access and interact with the zk777 platform through your mobile browser or desktop browser;
• Third-party payment providers — identity and transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay in the course of processing your deposits and withdrawals;
• KYC verification services — confirmation data received from identity verification services used to authenticate CNIC submissions and other KYC documents;
• Regulatory and compliance sources — information received from law enforcement, regulatory authorities, or fraud prevention services where zk777 is legally obligated to cooperate with an inquiry.

4.1 zk777 processes personal data for the following specific purposes:

• To create, administer, and maintain your zk777 account and to verify your identity in fulfilment of our KYC obligations;
• To process and record all deposits, withdrawals, game bets, and other financial transactions on the platform in PKR;
• To fulfil our anti-money laundering (AML) compliance obligations, including transaction monitoring and source-of-funds verification where required;
• To enforce our 21+ age restriction policy and to prevent access by underage individuals;
• To provide customer support, respond to queries, and resolve account-related disputes;
• To operate responsible gaming tools including deposit limit management, self-exclusion enforcement, and account restriction controls;
• To personalise your zk777 platform experience and to present relevant game recommendations and promotional offers where you have consented to receive them;
• To detect and prevent fraud, bonus abuse, multi-accounting, and other forms of prohibited conduct as defined in the zk777 Terms and Conditions;
• To analyse platform performance, game popularity, and user behaviour patterns for product improvement purposes;
• To comply with our international gaming license conditions and with applicable laws and regulatory requirements.

5.1 zk777 processes personal data under the following legal bases:

6.1 zk777 may share your personal data with the following categories of third parties under the circumstances described:

• Payment Service Providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay receive the minimum data necessary to process your deposit or withdrawal transactions, including your account identifier, transaction amount, and relevant payment method details;
• Identity Verification Services — third-party KYC verification providers receive your identity documents for the purpose of verifying your CNIC and confirming your age and identity in accordance with our regulatory obligations;
• Game Software Providers — game providers whose titles are integrated into the zk777 platform receive game session data necessary for the operation of their games, including player identifiers and bet history relevant to their respective game systems;
• Fraud Prevention & Security Services — anti-fraud and security service providers may receive technical data including IP addresses and device fingerprints for the purpose of identifying suspicious activity and protecting the integrity of the zk777 platform;
• Regulatory and Law Enforcement Authorities — where zk777 is legally compelled to disclose information to a regulatory body, law enforcement agency, or court of competent jurisdiction, we will comply with such requirements and will notify you where we are legally permitted to do so;
• Corporate Transactions — in the event of a merger, acquisition, asset sale, or restructuring involving the zk777 platform, player data may be transferred to a successor entity under appropriate data protection agreements and with notification to players before any transfer takes effect.

6.2 All third parties with whom zk777 shares personal data are required to maintain appropriate technical and organisational security measures and to use the shared data only for the specified purpose. zk777 does not authorise any third party to process player data for their own independent marketing or commercial purposes.

7.1 As an internationally operated platform, zk777 may transfer personal data to servers or processing facilities located outside of Pakistan. Such transfers may include data sent to: our hosting infrastructure providers; international payment processing networks; game software providers operating from various international jurisdictions; and our KYC and fraud prevention service providers.

7.2 Where personal data is transferred outside of Pakistan, zk777 takes appropriate steps to ensure that such transfers are subject to adequate protections, including contractual data protection obligations, encryption of data in transit, and compliance with the data protection requirements of our international gaming license.

7.3 By using the zk777 platform and providing your personal data, you acknowledge and consent to these international transfers subject to the safeguards described in this section.

8.1 zk777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or licensing requirements. Our data retention periods are determined by the following principles:

• Active account data — retained for the full duration of your account's existence on the zk777 platform, plus any post-closure retention period required for regulatory compliance;
• KYC and identity verification data — retained for a minimum of five years following account closure, in accordance with standard AML compliance requirements under international gaming licensing frameworks;
• Financial transaction records — retained for a minimum of five years following the date of the transaction, for tax, AML, and regulatory reporting purposes;
• Gaming activity logs — retained for a minimum of two years following account closure, for dispute resolution and regulatory inspection purposes;
• Support communications — retained for a minimum of two years following the date of the communication;
• Marketing consent records — retained for the duration of your account and for a reasonable period following any withdrawal of consent, to maintain a record of the consent history.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.

9.1 The security measures implemented by zk777 include:

• 256-bit SSL / TLS encryption on all data transmissions between your browser and zk777 servers — including login credentials, personal data, and financial transactions;
• Encrypted storage of sensitive personal data and payment information at rest on zk777's server infrastructure;
• Access controls restricting access to personal data to authorised zk777 personnel on a need-to-know basis, with role-based access management;
• Two-factor authentication (2FA) available to all zk777 players to add an additional credential layer to their account login;
• Automatic session expiry for inactive login sessions to prevent unauthorised access to unattended devices;
• Real-time fraud monitoring systems that detect and flag suspicious account activity patterns for security review;
• Segregated player funds held in accounts separate from zk777's operational finances, ensuring your PKR balance is protected even in the event of zk777 operational difficulties.

9.2 In the event of a personal data breach that poses a material risk to affected players, zk777 will take immediate remediation steps and will notify affected players through their registered contact details without undue delay.

10.1 zk777 uses cookies and similar tracking technologies on the platform to enable core functionality, maintain session security, analyse usage patterns, and personalise the player experience. The following types of cookies are used by zk777:

10.2 You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies will affect your ability to access and use core zk777 platform features, including account login and payment processing.

11.1 As a zk777 player, you have the following rights in relation to your personal data:

11.2 To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account ID]". zk777 will acknowledge your request within five business days and respond substantively within thirty calendar days. Identity verification may be required before any data access or deletion request is fulfilled.

11.3 Certain rights are subject to limitations where overriding legal obligations apply — particularly the AML and KYC retention requirements described in Section 8, which cannot be waived at a player's request.

12.1 With your consent, zk777 may contact you at your registered mobile number or email address with promotional communications including bonus offers, PSL betting promotions, new game announcements, cashback offers, and other platform news relevant to Pakistani players.

12.2 You may withdraw your consent to marketing communications at any time by: updating your communication preferences in your zk777 account settings; replying to any promotional SMS with "STOP"; or contacting zk777 support directly with a request to be removed from marketing lists.

12.3 Withdrawal of marketing consent will not affect the continued processing of your personal data for account administration, financial transaction processing, KYC compliance, and other purposes for which consent is not the applicable legal basis.

12.4 zk777 does not share your contact data with third-party marketers for their own promotional campaigns. Any promotional communication you receive purportedly from zk777 that you did not subscribe to should be reported to [email protected] immediately as it may indicate a phishing attempt not associated with the zk777 platform.

13.1 zk777 enforces its 21+ age policy through mandatory CNIC-based identity verification during the KYC process. Submission of false or altered CNIC documentation to circumvent this age restriction constitutes fraud and will be reported to appropriate authorities.

14.1 The zk777 platform may from time to time display content or references to third-party services — including game providers and payment processors — whose own privacy policies apply to their respective data processing activities. zk777 is not responsible for the privacy practices of third-party services, and this Privacy Policy applies exclusively to data processing carried out by or on behalf of zk777 in the operation of the zk777 platform.

14.2 Game software providers integrated into the zk777 platform operate their game engines independently and may process certain game session data in accordance with their own data processing agreements with zk777. All such agreements require third-party game providers to meet minimum data security standards and to restrict their use of player data to the provision of the relevant game service.

15.1 zk777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulatory requirements, or the scope of platform services we offer to Pakistani players.

15.2 Where a proposed update constitutes a material change to the way in which zk777 processes your personal data — including changes to data sharing arrangements, retention periods, or the legal basis for any processing — zk777 will notify registered players through their registered email address at least fourteen days before the change takes effect.

15.3 For non-material changes — such as clarifications, grammar corrections, or administrative updates that do not affect the substance of any data processing activity — the updated effective date at the top of this document will serve as the only notification. Continued use of the zk777 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

16.1 All privacy-related queries, data rights requests, consent withdrawals, and breach notifications should be directed to:

16.2 For requests requiring identity verification — including data access, rectification, or erasure requests — please include in your communication your registered account ID and the mobile number or email address associated with your zk777 account. zk777 may request additional verification before fulfilling any request that could affect the security of your account or the data of other individuals.

16.3 zk777 is committed to resolving all privacy concerns raised by Pakistani players fairly and promptly. Where a concern cannot be resolved through direct contact with zk777 support, you may have the right to escalate the matter to the relevant regulatory authority under the applicable data protection framework.