ZK777 Privacy Policy — Your Data, Handled with Care

1. Introduction

This Privacy Policy explains how ZK777 Limited ("ZK777", "we", "us", "our") collects, uses, stores and protects the personal information of players and visitors who use the ZK777 platform available at zk777.io.

We understand that privacy is important to you. When you share your personal information with us to create an account, make a deposit or claim a bonus, you are trusting us to handle that information responsibly. This policy is our commitment to that trust — written to be readable, not deliberately complicated.

By registering an account on ZK777 or using any part of our platform, you confirm that you have read and understood this Privacy Policy. If there is any part of it you are not comfortable with, please contact us at support@zk777.io before proceeding — we are happy to answer questions.

2. Who We Are — Data Controller

ZK777 Limited is the data controller responsible for the personal information you provide when using ZK777.io. As data controller, ZK777 determines how and why your personal data is processed. Our contact details for all privacy-related enquiries are:

• Email: support@zk777.io (for privacy matters, please mark your subject line "Privacy Request")
• Platform: zk777.io — available 24/7, with live chat support in both Urdu and English

If you wish to exercise any of your data rights, raise a privacy concern or request information about how your data is being processed, contacting us directly via the above channels is the fastest route to a resolution. ZK777 takes all privacy enquiries seriously and we respond to every request personally.

3. What Data We Collect

ZK777 collects personal data through several channels: directly from you when you register, deposit or contact support; automatically when you use our platform; and in limited cases from third-party verification services. Here is a clear breakdown:

Information You Provide Directly

Information Collected Automatically

• Device and technical data — your device type, operating system, browser type and version, screen resolution and installed plugins
• Usage data — pages visited on ZK777, games played, time spent on each session, betting history and transaction logs
• Network data — IP address, approximate geographic location derived from IP, network provider
• Cookie and tracking data — session cookies, preference cookies and analytics identifiers (see Section 9 for full details)

4. How We Use Your Data

ZK777 uses your personal data only for the purposes described below. We do not use it for any other purpose without first informing you and, where required, obtaining your consent.

• Account management — creating, maintaining and securing your ZK777 account; authenticating your identity when you log in
• Payment processing — processing deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments
• Identity verification (KYC) — verifying your identity in compliance with our anti-money laundering obligations before processing withdrawals
• Game provision — providing access to games, recording game history for dispute resolution and audit purposes
• Fraud and abuse prevention — detecting, investigating and preventing fraudulent activity, bonus abuse, multiple accounts and money laundering
• Customer support — responding to your enquiries, resolving disputes and improving our support quality
• Legal compliance — meeting our obligations under applicable laws and regulatory requirements
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling and offering appropriate tools and support
• Platform improvement — analysing aggregated usage data to improve the ZK777 platform and user experience
• Marketing communications — sending you promotional emails and SMS about ZK777 offers and events, only where you have given explicit consent

5. Legal Basis for Processing

ZK777 processes your personal data on the following legal bases:

• Contract performance — processing necessary to deliver the services you signed up for, including account management, payments and game access
• Legal obligation — processing required to comply with KYC, anti-money laundering, responsible gaming and other regulatory requirements
• Legitimate interests — fraud prevention, security monitoring and platform improvement, where these interests do not override your privacy rights
• Consent — marketing communications and non-essential cookies, where we have obtained your explicit agreement and which you may withdraw at any time

6. Data Sharing and Third Parties

ZK777 does not sell, rent or share your personal data with third parties for their own marketing or commercial purposes. We share your data only in the following limited and necessary circumstances:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processors receive the payment details required to process your transactions. These providers operate under strict data handling agreements with ZK777.
• Identity verification services — third-party KYC providers who assist us in verifying CNIC documents as required by our compliance obligations. They process your identity data solely for verification and do not retain it beyond the verification process.
• Game providers — providers such as Evolution Gaming and Pragmatic Play receive your player identifier (not your full personal details) to operate their game software and record round results.
• IT infrastructure providers — cloud hosting and content delivery partners who store and transmit platform data on our behalf, all operating under confidentiality agreements and restricted access controls.
• Fraud and security services — specialised providers who assist ZK777 in detecting fraudulent transactions, bonus abuse and account takeover attempts.
• Legal and regulatory authorities — where required by law, court order or legitimate regulatory demand, ZK777 may share data with Pakistani authorities or our international licensing jurisdiction's regulatory bodies.

7. KYC and Identity Verification

Before processing your first withdrawal, ZK777 is required to verify your identity. This is a standard requirement across legitimate online gaming platforms globally and exists to protect players, prevent financial crime and ensure that minors cannot access gambling services.

The KYC process at ZK777 requires:

• A clear photograph or scanned copy of your CNIC (Computerised National Identity Card) — both front and back
• Confirmation that the name on your CNIC matches the name registered on your ZK777 account
• In some cases, a photograph of you holding your CNIC (liveness verification) to confirm the document belongs to you

Your CNIC data is stored in an encrypted format with access strictly limited to compliance personnel. It is never shared with any third party except the identity verification service that processes it on our behalf. Once verified, your account is permanently marked as verified and you will not be asked to resubmit documents unless there is a specific compliance reason to do so.

8. Payment Data and Financial Information

ZK777 handles payment data with the highest level of care. The following specific practices apply to financial information:

• Easypaisa and JazzCash — your mobile wallet number is stored in encrypted form and used only for processing your specific deposits and withdrawals. It is shared with the payment processor solely for transaction execution.
• Bank account details — IBFT recipient details are stored encrypted and used only to credit your nominated account. ZK777 does not initiate unsolicited payments to any stored bank account.
• Card payments — ZK777 does not store full card numbers. Card payments are tokenised at the point of entry by our PCI-DSS compliant payment gateway, which means the actual card number never passes through or is stored on ZK777's own servers.

All financial transactions on ZK777 are logged for fraud prevention, dispute resolution and regulatory compliance purposes. These logs are retained for the period required by our compliance obligations (see Section 10 for retention periods) and accessed only by authorised personnel.

9. Cookies and Tracking Technologies

ZK777 uses cookies and similar tracking technologies to provide a functional, personalised and secure platform experience. Here is what each type of cookie does:

Types of Cookies Used at ZK777

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will prevent you from using the ZK777 platform as intended. Disabling analytics or personalisation cookies will not affect your ability to play or make transactions.

10. Data Retention

ZK777 retains personal data for only as long as it is necessary for the stated purpose or required by applicable regulations. The following general retention periods apply:

• Account data — retained for the duration of your account plus 5 years after account closure, in line with standard financial record-keeping requirements
• Transaction records — all deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction
• KYC and identity documents — retained for 5 years after the verification date or account closure, whichever is later
• Game history and betting logs — retained for 3 years, accessible to you on request via our support team
• Support communications — chat transcripts and email correspondence retained for 2 years after the conversation ends
• Marketing consent records — retained for the duration of your consent plus 1 year following withdrawal of consent

Following the expiry of the relevant retention period, personal data is permanently deleted or anonymised so that it cannot be linked back to you. You may also request earlier deletion of certain categories of data — see Section 12 for your data rights.

11. Data Security

Protecting the personal data you entrust to ZK777 is one of our core technical priorities. We apply the following security measures across our platform and data infrastructure:

• Encryption in transit — all data transmitted between your device and ZK777 servers is encrypted using 256-bit TLS/SSL. This means any data intercepted in transit cannot be read without the encryption key.
• Encryption at rest — sensitive stored data, including CNIC copies, payment details and account credentials, is encrypted at the database level using AES-256 encryption.
• Role-based access controls — ZK777 staff can only access the minimum data required for their specific role. Access to sensitive player data requires multi-level authorisation and all access is logged.
• Two-factor authentication — internal administrative systems at ZK777 require two-factor authentication for all staff access. We also offer 2FA to players on their accounts.
• Regular security testing — ZK777's infrastructure undergoes penetration testing and vulnerability assessments by independent security specialists on a regular basis.
• Incident response plan — in the event of a confirmed data breach, ZK777 will notify affected players and relevant authorities within the timeframes required by applicable regulations.

12. Your Data Rights

As a ZK777 player, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@zk777.io with the subject line "Data Rights Request".