ZT77 Privacy Policy — How We Protect Your Data in Pakistan

1. Introduction

This Privacy Policy describes how ZT77 ("we", "us", "the Platform", "zt77.biz") collects, processes, stores and protects the personal information of individuals ("you", "the Player", "the User") who visit zt77.biz or use any service, game, feature or promotion offered by ZT77.

ZT77 is built specifically for Pakistani players and all of our data practices are designed with the Pakistani context in mind — the payment methods our players use, the devices they access the platform from, and the regulatory and legal environment that applies to our operations. This policy reflects that context honestly.

This Privacy Policy should be read alongside ZT77's Terms and Conditions, which govern the broader relationship between you and the platform. Both documents together constitute the complete framework governing your use of ZT77.

2. Who We Are

ZT77 is an online gaming and sports betting platform operating at zt77.biz, designed and built for players in Pakistan. The platform offers cricket betting, live dealer casino games, card games including poker and Andar Bahar, crash games, fishing games, roulette and associated features. All transactions are denominated in Pakistani Rupees (PKR).

ZT77 is the data controller responsible for personal information collected through the platform. If you have any questions about how ZT77 handles your personal data, the contact details for our Privacy team are set out in Section 12 of this policy.

As the data controller, ZT77 determines the purposes for which personal data is collected and the means by which it is processed. We are responsible for ensuring that all processing of personal data on the ZT77 platform complies with this policy and applicable data protection principles.

3. Data We Collect

ZT77 collects personal information that falls into the following categories:

Identity and Contact Information

• Full name as it appears on official identification
• Date of birth (for age verification purposes)
• Pakistani mobile phone number
• Email address
• Residential address (for KYC verification)
• CNIC number and copies of identity documents where verification is required

Financial Information

• Easypaisa, JazzCash, NayaPay or SadaPay account details associated with deposits and withdrawals
• Bank account numbers and IBAN for IBFT transactions
• Visa/Mastercard numbers (stored in tokenised form — ZT77 does not store full card numbers)
• Transaction history including all deposits, withdrawals, bets placed and winnings received

Technical and Usage Data

• IP address and geolocation data (country and region level)
• Device type, operating system and browser version
• Session timestamps, login frequency and duration
• Game history, bet types, stake amounts and outcomes across all ZT77 game categories
• Pages visited, features used and navigation patterns on zt77.biz

Communications Data

• Records of all communications with ZT77 support via live chat or email, including the content of those conversations
• Marketing communication preferences and opt-in/opt-out status

4. How We Collect Your Data

ZT77 collects personal data through the following channels and mechanisms:

• Account registration: Information you provide when creating your ZT77 account, including name, date of birth, contact details and payment method details.
• Identity verification: Documents and information submitted when completing Know Your Customer (KYC) verification, including CNIC copies and selfies.
• Deposits and withdrawals: Payment information provided when you deposit funds or request a withdrawal from your ZT77 balance.
• Platform usage: Technical data collected automatically as you use zt77.biz — including device data, IP addresses, session logs and game activity — through server logs and analytics tools.
• Cookies and tracking: Data collected through cookies and similar tracking technologies as described in Section 8 of this policy.
• Support interactions: Information shared during live chat or email conversations with ZT77 support staff.
• Third-party services: In some cases, ZT77 may receive data about you from payment processors or identity verification partners in the course of processing a transaction or completing a verification check.

5. Why We Use Your Data

ZT77 uses the personal data it collects for the following specific purposes:

ZT77 does not use your data for automated decision-making that produces legal or similarly significant effects on you, except in the case of automated fraud detection systems that may place a temporary hold on an account pending human review. Any such automated action can be challenged by contacting ZT77 support.

6. Legal Basis for Processing

ZT77 processes your personal data on the following legal grounds depending on the purpose of the processing:

• Contractual necessity: Processing required to deliver the services you have signed up for — account management, payment processing, game settlement, customer support.
• Legal obligation: Processing required to comply with applicable legal requirements — identity verification (KYC/AML), financial record-keeping, and disclosure to regulatory or law enforcement authorities when legally required.
• Legitimate interests: Processing carried out for purposes that are in ZT77's legitimate operational interests and do not override your rights — fraud prevention, platform security, anonymised analytics, and responsible gaming monitoring.
• Consent: Processing that depends on your explicit, freely given agreement — marketing communications. You may withdraw this consent at any time by updating your preferences in your account settings or by contacting ZT77 support.

7. Who We Share Your Data With

ZT77 does not sell, rent or trade your personal information to any third party for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, partner banks and card networks receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC/AML service providers who assist in verifying the identity and age of ZT77 players. These providers are contractually bound to use your data solely for verification purposes.
• Technology and hosting providers: Infrastructure and cloud service providers who host ZT77's systems. All such providers operate under data processing agreements that restrict their use of your data to the delivery of technical services.
• Fraud prevention services: Specialist fraud detection partners who help ZT77 identify and prevent financial fraud and account abuse. Data shared is limited to technical identifiers and transaction patterns.
• Law enforcement and regulators: Where ZT77 is legally required to disclose information to a government authority, regulatory body or law enforcement agency. ZT77 will comply with lawful disclosure requests and is not generally able to notify you when such a disclosure is made.

All third-party processors who receive personal data from ZT77 are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific service they provide to ZT77.

8. Cookies and Tracking Technologies

ZT77 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit zt77.biz. They help us maintain your session, remember your preferences and understand how the platform is used.

You can manage cookie preferences through your browser settings. Blocking all cookies will prevent you from logging in to ZT77 and using core platform features. We recommend accepting at least essential and security cookies for a functional experience.

9. Data Security

ZT77 takes the security of your personal data seriously and maintains a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction:

• SSL/TLS encryption: All data transmitted between your device and zt77.biz is encrypted in transit using TLS 1.2 or higher.
• Encrypted storage: Personal data and financial information is encrypted at rest in ZT77's data storage systems using AES-256 or equivalent standards.
• Card tokenisation: ZT77 does not store full payment card numbers. Card data is replaced with encrypted tokens handled by certified payment processors.
• Access controls: Access to personal data within ZT77 is restricted on a need-to-know basis. Staff who do not require access to personal data in their role do not have it.
• Security monitoring: ZT77 operates continuous monitoring of its systems to detect unusual access patterns, intrusion attempts and data anomalies.
• Two-factor authentication: Available for all ZT77 player accounts. We strongly recommend enabling 2FA to add an additional layer of protection beyond your password.

While ZT77 implements robust security measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, ZT77 will notify affected players and relevant authorities as required.

10. Data Retention Periods

ZT77 retains personal data for as long as is necessary for the purpose for which it was collected, and in accordance with applicable legal requirements. The following retention periods apply:

• Account data (active accounts): Retained for the lifetime of your ZT77 account and for a period of five years following account closure, to comply with financial and anti-money laundering record-keeping requirements.
• Transaction and gaming records: Retained for seven years following the transaction date, in line with standard financial record-keeping obligations applicable to Pakistani businesses.
• Identity verification documents: Retained for five years following account closure or the date of the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the conversation, to support dispute resolution and account history continuity.
• Marketing preferences: Retained until you withdraw consent or close your account, at which point marketing data is deleted within 30 days.
• Technical and analytics data: Anonymised aggregated analytics data may be retained indefinitely as it does not identify individual players.

When personal data is no longer required for its original purpose and no legal retention obligation applies, ZT77 will delete or securely anonymise it in a way that makes it impossible to re-identify individual players.

11. Your Data Rights

As a ZT77 player, you have specific rights over your personal data. ZT77 respects these rights and will respond to all valid requests within a reasonable timeframe, typically within 30 days.

To exercise any of these rights, contact ZT77 at support@zt77.biz with the subject line "Data Rights Request" and a description of what you are requesting. We may ask you to verify your identity before processing the request. We will not charge a fee for reasonable requests.

12. Contact and Complaints

If you have any questions, concerns or requests relating to this Privacy Policy or ZT77's handling of your personal data, please contact our Privacy team through the following channels:

• Email: support@zt77.biz (subject: "Privacy Policy Query" or "Data Rights Request")
• Live Chat: Available 24/7 through the ZT77 platform at zt77.biz

ZT77 will acknowledge privacy-related queries within 72 hours and provide a full response within 30 days. Complex requests — such as data subject access requests that require compiling large amounts of information — may take up to an additional 30 days in exceptional circumstances, and you will be informed of any extension.

If you are not satisfied with ZT77's response to a privacy complaint, you have the right to escalate the matter through appropriate channels available in your jurisdiction. ZT77 takes all privacy complaints seriously and will cooperate fully with any relevant oversight process.

This Privacy Policy was last reviewed and updated on 1 June 2025. It supersedes all previous versions of ZT77's privacy documentation. Where ZT77 makes material changes to this policy in the future, registered players will be notified before the changes take effect.