zr777 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by zr777 ("we", "us", "our") in connection with the operation of the zr777 online casino and sports betting platform accessible at zr777.pro (the "Platform").

zr777 is committed to protecting the privacy and personal data of every registered player. This Policy explains in plain, straightforward terms what information we collect, why we collect it, how it is used, and what choices you have. It should be read alongside our Terms & Conditions.

By registering an account on zr777, accessing the Platform, or otherwise using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request account closure.

2 Data Controller

For the purposes of data protection law, zr777 acts as the data controller in respect of personal data collected through the Platform. As data controller, zr777 determines the purposes for which and the manner in which personal data is processed.

Where zr777 engages third-party service providers — such as payment processors, fraud detection agencies, or identity verification providers — those parties act as data processors under contractual obligations that restrict their use of your data to the specific purpose for which it was shared.

All data rights requests, privacy complaints, and enquiries regarding this Policy should be directed to our support team using the contact details provided in Section 15 of this document.

3 Data We Collect

zr777 collects personal data from you in the following categories, depending on how you interact with the Platform:

Registration & Account Data:

• Full legal name, date of birth, and gender
• Email address and mobile phone number
• Residential address (city, province, country)
• Username and account password (stored in hashed form — never in plaintext)
• Preferred language and currency settings

Identity Verification (KYC) Data:

• Government-issued photo identification (CNIC, passport, or driving licence)
• Proof of address documentation
• Selfie or liveness verification image (where required)
• Source of funds documentation (for high-value transactions)

Financial & Transaction Data:

• Deposit and withdrawal history, amounts, and timestamps
• Payment method identifiers (e.g., JazzCash account reference, EasyPaisa number, HBL account last four digits) — full account numbers are never stored by zr777
• Bonus and promotional credit history
• Pending withdrawal status and processing records

Gaming & Betting Activity Data:

• Bet history, game session logs, and wagering records
• Cricket, PSL, and sportsbook bet selections and outcomes
• Slot, live casino, and fishing game activity logs
• Responsible gaming tool usage (deposit limits, self-exclusion periods)

Technical & Device Data:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps, login history, and platform navigation data
• Cookie and local storage identifiers (see Section 9)

Communications Data:

• Live chat transcripts and support ticket content
• Email correspondence with the zr777 support team
• Feedback, survey responses, and voluntary information you share with us

4 How We Use Your Data

Personal data collected by zr777 is used for the following purposes:

zr777 does not use automated decision-making processes that produce legal or similarly significant effects on players, except where required to comply with anti-money laundering or fraud prevention obligations imposed by our licensing authority.

5 Legal Basis for Processing

zr777 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and zr777, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML regulations, responsible gaming obligations, and regulatory reporting requirements imposed under zr777's gaming licence.
• Legitimate interests: Processing for fraud detection, platform security, abuse prevention, and service improvement where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear and specific consent. You may withdraw this consent at any time through your account settings or by contacting support.

6 Data Sharing & Disclosure

zr777 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank payment gateway operators — solely for the purpose of processing transactions. These providers are bound by their own data protection obligations and are prohibited from using your data for any other purpose.
• Identity Verification Providers: KYC documents and registration data may be shared with licensed identity verification services to complete age and identity checks as required by our licensing authority.
• Fraud Prevention Agencies: Technical data, device data, and financial data may be shared with fraud detection and anti-money laundering service providers to protect the integrity of the platform and comply with applicable regulations.
• Regulatory Authorities: zr777 may be required to disclose player data to competent regulatory, licensing, or law enforcement authorities upon receipt of a lawful request. We will notify affected players where legally permitted to do so.
• Group Companies: Data may be shared within the zr777 corporate group for internal administrative purposes, subject to the same data protection standards described in this Policy.
• Professional Advisors: Legal, accounting, or auditing firms engaged by zr777 may have access to personal data on a need-to-know basis, subject to strict confidentiality obligations.

7 Data Retention

zr777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required under anti-money laundering regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with regulatory requirements.
• Financial and transaction records: Retained for a minimum of five (5) years to satisfy financial record-keeping and AML obligations.
• Gaming and betting logs: Retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Communications data: Live chat transcripts and support tickets are retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained for as long as you remain subscribed and for one (1) year following unsubscription, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

8 Data Security

zr777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and zr777 servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Bcrypt password hashing — plaintext passwords are never stored or transmitted
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular third-party penetration testing and security audits of the platform infrastructure
• 24/7 security monitoring with automated anomaly detection and intrusion prevention systems
• Multi-factor authentication requirements for all internal administrative access

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zr777 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Cookies & Tracking Technologies

zr777 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load balancing cookies. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the Platform, helping us identify areas for improvement. These cookies are only set with your consent.
• Performance Cookies: Monitor platform response times, identify technical errors, and support the stability of the gaming environment.

You can manage your cookie preferences at any time through the cookie consent banner displayed on your first visit to the Platform, or through the privacy settings within your account. Please note that disabling non-essential cookies will not affect your ability to use core Platform features.

zr777 does not use third-party advertising cookies or cross-site tracking technologies that profile you for advertising purposes on external platforms.

10 Your Data Rights

As a registered zr777 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or the email address listed in Section 15:

• Right of Access: You may request a copy of the personal data zr777 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal and regulatory retention obligations. Data subject to mandatory retention periods cannot be deleted until those periods expire.
• Right to Restrict Processing: In certain circumstances, you may request that zr777 restrict the processing of your data — for example, while a dispute regarding accuracy is resolved.
• Right to Data Portability: You may request a copy of data you have provided to zr777 in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes, where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11 Minors & Age Policy

The zr777 platform is strictly intended for persons aged 21 years and above. zr777 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

All registrations are subject to mandatory age verification as part of the KYC process. Where zr777 discovers or has reasonable grounds to believe that personal data belonging to an individual under 21 has been collected, the following steps will be taken immediately:

• The account will be suspended pending investigation
• All personal data associated with the account will be reviewed and, where confirmed as belonging to a minor, permanently deleted
• Any deposited funds will be returned to the source payment method after deducting any winnings derived from play during the underage period
• The matter may be reported to relevant authorities where required by law

If you believe that zr777 has inadvertently collected data from a person under 21, please contact our support team immediately using the details in Section 15 so that the matter can be investigated and rectified without delay.

12 International Data Transfers

zr777 is an internationally operated platform and, in the course of providing its Services, your personal data may be transferred to and processed in countries outside of Pakistan. Such transfers may occur when data is processed by our payment processors, identity verification providers, or cloud infrastructure partners.

Where personal data is transferred internationally, zr777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include:

• Standard contractual clauses that legally bind the recipient to process data only in accordance with zr777's instructions and this Policy
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection
• Binding corporate rules within the zr777 group where data is transferred between affiliated entities

By using the zr777 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

13 Third-Party Services & Links

The zr777 Platform integrates with third-party service providers for the delivery of certain features, including game content from licensed software providers, payment gateway interfaces, and identity verification services. Where you interact with these third-party components, your data may be subject to the privacy practices of those third parties in addition to this Policy.

All third-party providers engaged by zr777 are contractually required to process your data only for the specified purpose, maintain adequate security standards, and refrain from using your data for their own commercial interests.

zr777 does not embed third-party social media plugins, advertising trackers, or affiliate tracking pixels that could share your browsing behaviour with external platforms without your explicit knowledge and consent.

14 Changes to This Privacy Policy

zr777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your data or your rights — registered players will be notified via the email address associated with their account prior to the changes taking effect. A notice will also be displayed on the Platform.

Your continued use of the zr777 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may request account closure before the updated Policy takes effect. We recommend reviewing this Policy periodically so you remain informed about how your data is being handled.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or zr777's data handling practices, you may contact us through the following channels:

• Live Chat: Available 24/7 on every page of the zr777 platform. This is the fastest way to reach our team for urgent privacy matters.
• Email (plain text — not a link): [email protected]

When submitting a data rights request or privacy complaint, please include your registered Player ID, the nature of your request or complaint, and any relevant transaction or account references. This will allow our team to locate your records and respond accurately within the applicable timeframe.

zr777 takes all privacy complaints seriously. We will acknowledge receipt of your complaint within two business days and aim to provide a full response within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body specified under our licensing authority's framework.