zf777 Privacy Policy

This Privacy Policy describes how zf777 ("we," "us," "the Platform," or "zf777") collects, uses, stores, discloses, and protects personal information relating to individuals ("you," "the Player," or "the User") who access or use the zf777 platform at zf777.bio.

This Policy applies to all personal data processed in connection with your use of the zf777 platform, including data collected during account registration, the KYC identity verification process, financial transactions in PKR, participation in games and sports betting, interactions with customer support, and browsing of the zf777 website.

zf777 is committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection standards. We recognise that Pakistani players entrust us with sensitive personal and financial information — and we take that responsibility seriously across all operations, from our payment integrations with JazzCash and EasyPaisa to our live support team operating in Pakistan Standard Time.

For the purposes of this Privacy Policy, zf777 acts as the data controller in respect of personal data collected through the zf777 platform. As data controller, zf777 determines the purposes for which and the means by which personal data is processed.

Where zf777 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or game software suppliers), those third parties act as data processors under instructions from zf777. zf777 remains responsible for ensuring that such processors provide sufficient guarantees of data protection compliance.

zf777 collects personal data through a number of channels. The categories of personal data we may process are as follows:

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth (to verify the 21+ age requirement);
• Pakistani mobile number (03xx format);
• Email address;
• Username and encrypted password hash;
• Residential city or province within Pakistan (e.g., Karachi, Lahore, Islamabad, Faisalabad).

• Scanned or photographed copy of your CNIC (front and back);
• Passport or other government-issued photo identification where requested;
• Proof of address documentation where required for high-value account verification;
• Source of funds documentation where requested under AML obligations.

• PKR deposit amounts, timestamps, and payment method details (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or cryptocurrency wallet references);
• PKR withdrawal requests, amounts, and destination account details;
• Transaction reference numbers and processing status records;
• Bonus credits received and wagering activity records.

• Sports betting history, including markets selected, stakes, and outcomes;
• Casino game session history, including game names, bet sizes, and results;
• Session durations, login timestamps, and platform navigation patterns;
• Responsible gaming tool usage (deposit limits applied, self-exclusion requests, cooling-off periods).

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens;
• Referring URL and on-site navigation data.

• Records of live chat conversations with zf777 customer support;
• Email correspondence sent to or from zf777 support channels;
• Feedback, complaints, or dispute submissions made by you to zf777.

zf777 uses the personal data described in Section 3 for the following purposes:

zf777 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the zf777 Terms & Conditions — including account management, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable KYC, AML, and licensing obligations;
• Legitimate Interests: Processing necessary to protect the security and integrity of the platform, prevent fraud, improve service quality, and maintain responsible gaming standards — where such interests are not overridden by your data protection rights; and
• Consent: Processing carried out on the basis of your explicit consent, primarily in respect of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

As a licensed online gaming operator, zf777 is required under applicable international standards to verify the identity of all Players prior to processing withdrawal requests, and to conduct ongoing due diligence to detect and prevent money laundering and financial crime.

KYC data — including CNIC scans, passport copies, and supporting documentation — is processed for the purposes of:

• Verifying that you are aged 21 or over as required by our responsible gaming obligations;
• Confirming your identity to prevent impersonation and account fraud;
• Meeting our obligations under applicable anti-money laundering (AML) standards; and
• Complying with the requirements of the international gaming license under which zf777 operates.

KYC documents are stored in encrypted form and accessed only by authorised compliance staff on a strict need-to-know basis. Documents are not used for any purpose other than identity verification and regulatory compliance.

All financial transactions on the zf777 platform are denominated in Pakistani Rupees (PKR). When you make a deposit or withdrawal through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or cryptocurrency, the following data handling practices apply:

• Your payment method details are transmitted directly to the relevant payment processor using 256-bit SSL encryption. zf777 does not store complete JazzCash or EasyPaisa account credentials on our servers;
• Transaction reference numbers, amounts, timestamps, and processing status are retained in our secure transaction ledger for regulatory, accounting, and dispute resolution purposes;
• Payment processors (including JazzCash and EasyPaisa) operate under their own privacy policies and terms of service. zf777 is not responsible for data processing activities carried out by payment processors independent of zf777's instructions; and
• Bank transfer details (IBAN, account numbers) are retained only for the period necessary to process withdrawal requests and complete any associated compliance checks.

zf777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and cryptocurrency payment gateways — for the purpose of processing your PKR transactions;
• KYC Verification Providers: Accredited third-party identity verification services contracted by zf777 to verify CNIC and other identity documents;
• Game Software Providers: Where your gameplay data must be transmitted to game providers to deliver live dealer or RNG game outcomes — limited to session-level data required for game functionality;
• Fraud Prevention & Security Services: Third-party fraud detection and IP security services used to protect the platform and all Players from financial crime and abuse;
• Regulatory & Licensing Authorities: Where disclosure is required by law, court order, or as required by the terms of zf777's international gaming license; and
• Professional Advisers: Legal, accounting, or audit professionals engaged by zf777, where disclosure is necessary and subject to professional confidentiality obligations.

All third parties with whom zf777 shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the purposes specified by zf777.

As an international online gaming platform serving Pakistani players, zf777 may transfer your personal data to service providers and infrastructure located outside Pakistan. Such transfers may include data stored on servers in countries other than your country of residence.

Where personal data is transferred internationally, zf777 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in agreements with data processors that impose data protection obligations equivalent to applicable international standards;
• Transfers only to jurisdictions with adequate data protection frameworks or to processors that have implemented binding corporate rules; and
• Encryption of data in transit using 256-bit SSL/TLS protocols for all international data transmissions.

The zf777 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device by your browser when you visit the platform.

You may manage your cookie preferences through your browser settings. Note that disabling essential or security cookies will impair the functionality of the zf777 platform and may prevent you from logging in or placing transactions. For instructions on managing cookies in popular mobile browsers used by Pakistani players (Chrome for Android, Safari for iOS), please refer to your browser's built-in help documentation.

zf777 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the lifetime of your active account, plus a period of five (5) years following account closure — in compliance with AML record-keeping requirements;
• KYC Documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later;
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, in compliance with applicable financial record-keeping standards;
• Gaming Activity Logs: Retained for two (2) years from the date of activity, or longer where required for ongoing dispute resolution; and
• Customer Communications: Retained for two (2) years from the date of the last communication, or longer where the communication is relevant to an active complaint or legal matter.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where anonymisation rather than deletion is applied, the resulting anonymised data no longer constitutes personal data and may be retained indefinitely for statistical analysis.

As a data subject, you hold the following rights in relation to your personal data held by zf777. These rights are subject to applicable legal limitations and cannot always be exercised in circumstances where they conflict with zf777's legal obligations (for example, AML record-keeping requirements).

zf777 implements a multi-layered technical and organisational security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the zf777 platform is encrypted using industry-standard 256-bit SSL/TLS encryption;
• AES-256 Data Encryption at Rest: Personal data and KYC documents stored on zf777 servers are encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorised zf777 personnel on a strict need-to-know basis. All staff with data access undergo background screening and regular data protection training;
• Two-Factor Authentication: Optional 2FA via SMS OTP is available to all Players to protect account access, and is mandatory for administrative staff accessing back-end data systems;
• Regular Security Audits: zf777 conducts periodic third-party penetration testing and security audits of its platform infrastructure; and
• Incident Response: zf777 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, we will notify affected Players without undue delay in accordance with applicable standards.

If you are a parent or guardian and believe that a person under 21 has registered an account or provided personal data to zf777, please contact our customer support team immediately via live chat or email. We will investigate and take prompt action to protect the minor in question.

zf777 employs a mandatory KYC age verification process to identify and remove under-age accounts. Our responsible gaming team also monitors account behaviour for indicators of under-age gaming as an additional protective measure.

With your consent, zf777 may send you promotional communications including welcome bonuses, reload offers, Eid special promotions, PSL tournament events, and new game announcements via email or SMS to your registered Pakistani mobile number.

You may withdraw your marketing consent at any time by:

• Clicking the "unsubscribe" link in any marketing email received from zf777;
• Updating your communication preferences in your account settings; or
• Contacting our customer support team via live chat to request removal from all marketing lists.

Withdrawal of marketing consent does not affect your ability to use the zf777 platform or receive essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are sent on the basis of contractual necessity rather than consent.

zf777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our platform's functionality. When material changes are made, we will notify registered Players via email to their registered address or through a prominent notice on the zf777 platform prior to the change taking effect.

The effective date at the top of this Policy reflects the date on which the current version became operative. We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Your continued use of the zf777 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For all privacy-related enquiries, data rights requests, or complaints regarding zf777's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 on the zf777 platform — fastest response method for urgent privacy concerns.
• Email: [email protected] (displayed as plain text — not a clickable link). Please mark privacy-related emails with the subject line "Privacy Request."
• Response Time: We aim to acknowledge all privacy requests within 48 hours and provide a substantive response within 30 calendar days.
• Support Language: English. Our team serves players across Pakistan from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities.
• Support Hours: 24 hours a day, 7 days a week, operating in Pakistan Standard Time (PKT UTC+5).

If you believe that zf777 has not handled your personal data in accordance with this Privacy Policy or applicable data protection standards, you have the right to raise a complaint with the relevant data protection supervisory authority or the dispute resolution body associated with zf777's international gaming license. Our support team can provide further details of the applicable body upon request.