zu777 Privacy Policy
Your Data, Protected

This Privacy Policy ("Policy") governs the collection, processing, storage and disclosure of personal data by zu777 ("zu777", "we", "us", "our") in connection with the operation of the online gaming platform accessible at zu777.bio. zu777 is committed to protecting the privacy and personal data of all registered players and visitors to the zu777 platform, including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi and across Pakistan.

This Policy is written in accordance with applicable international data protection standards and the requirements of zu777's gaming licence. By registering an account on the zu777 platform, depositing funds, or accessing any part of the zu777 gaming lobby, you acknowledge that you have read, understood and accepted the practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with the zu777 Terms and Conditions, which contain additional information about how your account data is managed. In the event of any conflict between this Policy and the Terms and Conditions on a data privacy matter, this Privacy Policy shall take precedence.

zu777 is the data controller responsible for the personal data collected through the zu777 platform. As data controller, zu777 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection law and the requirements of its international gaming licence.

All data protection enquiries, subject access requests and complaints regarding zu777's handling of personal data should be directed to the zu777 Data Protection team at support@zu777.bio, with the subject line "Data Protection Enquiry". zu777 aims to respond to all data protection enquiries within 30 calendar days of receipt.

zu777 collects only the personal data that is necessary and proportionate for the purposes described in this Policy. The categories of personal data we collect are set out in the table below:

zu777 does not collect special categories of sensitive personal data (such as health information, biometric data or political opinions) except where explicitly required by our licensing authority for responsible gaming compliance purposes, and only with your express consent.

zu777 collects personal data through the following channels:

• Direct submission: Data you provide when registering your zu777 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions and surveys.
• Automated collection: Technical data collected automatically when you access the zu777 platform, including IP addresses, device identifiers, browser information and session logs, collected through server logs, cookies and similar tracking technologies.
• Payment processors: Transaction data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Raast when you conduct deposit or withdrawal transactions on the zu777 platform.
• Identity verification providers: Data received from third-party KYC and age verification service providers engaged by zu777 to verify the identity and age of registered players.
• Fraud prevention services: Data received from third-party fraud detection and anti-money laundering screening services used by zu777 to protect the integrity of the platform.
• Gaming software providers: Game session data and technical logs received from the certified game studios and live casino providers whose content is hosted on the zu777 platform.

zu777 uses the personal data it collects for the following specific purposes, each of which is supported by a lawful basis described in Section 6:

• Account management: Creating and maintaining your zu777 player account, processing login authentication, managing your account preferences and communication settings.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with our KYC obligations under our gaming licence.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Raast, maintaining accurate transaction records, and handling payment disputes.
• Regulatory compliance: Fulfilling our obligations under our international gaming licence, including anti-money laundering (AML) screening, suspicious activity reporting, and responding to lawful requests from regulatory authorities.
• Responsible gaming: Monitoring gaming activity to identify patterns consistent with problem gambling, enforcing deposit limits, loss limits and self-exclusion requests, and contacting players where responsible gaming concerns are identified.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, money laundering and other prohibited conduct on the zu777 platform.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design and content of the zu777 platform.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have opted in to receive such communications. You may opt out of marketing communications at any time by contacting support or using the unsubscribe function in any marketing email.

zu777 processes your personal data on the following legal bases, in accordance with applicable data protection law:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted when registering your zu777 account, including account management, payment processing and game provision.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML compliance, age verification, responsible gaming obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out for zu777's legitimate business interests, including fraud prevention, platform security, dispute resolution, and improvement of platform performance, where these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw your consent for any consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.

zu777 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent required for the relevant purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Raast receive transaction data necessary to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services that assist zu777 in confirming player identities and ages as required by our gaming licence.
• AML and fraud screening services: Third-party services that screen transactions and account activity against fraud databases and sanctions lists in compliance with anti-money laundering obligations.
• Game software providers: Certified game studios and live dealer platform providers whose games are hosted on zu777 receive game session data as necessary to operate their software and generate accurate game outcomes.
• IT and infrastructure providers: Cloud hosting, data storage and cybersecurity providers who process data on behalf of zu777 under strict data processing agreements.
• Regulatory and law enforcement authorities: zu777 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction.
• Professional advisers: Legal, accounting and compliance advisers who may have access to personal data in the course of providing professional services to zu777, subject to professional confidentiality obligations.

zu777 retains personal data only for as long as is necessary for the purposes for which it was collected, including for the duration of your account and for any legally required retention period thereafter. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for analytical and statistical purposes.

zu777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zu777 platform.
• AES-256 encryption at rest for all stored personal data and financial records held on zu777 servers.
• Multi-factor authentication (MFA) for all administrative access to systems that hold player personal data.
• Role-based access controls ensuring that zu777 staff can only access personal data to the extent required for their specific job function.
• Regular penetration testing and security audits conducted by independent cybersecurity specialists.
• 24/7 security monitoring with automated intrusion detection and incident response procedures.
• Secure data centres with physical access controls, redundant power and cooling systems, and geographically distributed backups.

While zu777 takes all reasonable steps to secure your personal data, no method of electronic transmission or storage is 100% secure. Players are also responsible for keeping their own account credentials secure and should use a strong, unique password for their zu777 account.

The zu777 platform uses cookies and similar tracking technologies to operate effectively, remember your preferences, keep you logged in during your session, and analyse how the platform is used. The cookies used by zu777 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the zu777 platform to function and cannot be disabled. They include session management cookies, security cookies, and cookies required for login authentication. No consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences such as language settings, your preferred game lobby view, and display preferences. Disabling these cookies may affect your experience on the platform.
• Analytics Cookies: These cookies collect anonymised information about how players use the zu777 platform, such as which pages are visited most frequently and how long sessions last. This data helps zu777 improve the platform experience. These cookies require your consent.
• Marketing Cookies: These cookies track your interaction with zu777 promotional content to help us deliver relevant bonus offers and promotions to players who have opted in to marketing communications. These cookies require your consent.

Subject to applicable data protection law and the requirements of zu777's gaming licence, you have the following rights in respect of the personal data that zu777 holds about you. To exercise any of these rights, please contact zu777 at support@zu777.bio with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data that zu777 holds about you and information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You have the right to request that zu777 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The zu777 platform is strictly intended for players who are 21 years of age or older. zu777 does not knowingly collect, process or retain personal data belonging to any individual under the age of 21. Age verification is a mandatory step in the zu777 registration process, and all players are required to submit valid identity documentation confirming they meet the minimum age requirement before any deposit, withdrawal or gameplay activity is permitted.

If zu777 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all funds will be dealt with in accordance with our gaming licence obligations, and the personal data of the underage individual will be securely deleted from our systems as promptly as possible.

As an internationally licensed gaming operator, zu777 may transfer your personal data to third-party service providers and data processors located in jurisdictions outside Pakistan. Such transfers may include transfers to cloud hosting infrastructure, game software providers, KYC verification services, and fraud prevention platforms located in various countries around the world.

Where personal data is transferred internationally, zu777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under this Privacy Policy. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with all international data processors.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection by relevant regulatory bodies.
• Technical security measures including end-to-end encryption for all data transmitted across international networks.

zu777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the features and functionality of the zu777 platform. The version number and effective date at the top of this Policy will be updated whenever a material change is made.

Where any change to this Policy materially affects the way in which zu777 processes your personal data, zu777 will notify registered players by email to the address associated with their account at least 14 days before the change takes effect. Continued use of the zu777 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns or complaints about this Privacy Policy or about the way in which zu777 handles your personal data, please do not hesitate to get in touch with the zu777 Data Protection team. We are committed to resolving all privacy concerns promptly and transparently.

• Email: support@zu777.bio (subject line: "Privacy Policy Enquiry")
• Data Protection Officer: support@zu777.bio (subject line: "Data Protection Officer")
• Response time: zu777 aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Language: All communications may be conducted in English. Pakistani players are welcome to write in English.