zm777 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by zm777 in connection with the zm777 Platform accessible at zm777.pro, including all associated casino, sports betting, keno, virtual sports, and slot gaming services offered thereunder. It applies to all registered Users and to visitors who interact with the Platform without creating an Account.

zm777 is the data controller in respect of personal data collected through the Platform. As data controller, zm777 determines the purposes and means by which your personal data is processed. Where zm777 engages third-party processors — such as payment providers or identity verification services — it does so under contractual arrangements that bind those processors to handle your data only as directed by zm777.

This Policy should be read alongside the zm777 Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between the Terms & Conditions and this Privacy Policy on a data-related matter, this Privacy Policy shall prevail.

zm777 collects personal data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties such as payment processors and KYC verification partners.

zm777 does not knowingly collect special category data (such as health data, racial or ethnic origin, or political opinions) through the Platform. If you voluntarily disclose such information in a support communication, it will be handled with heightened care and used only to respond to your specific query.

zm777 processes your personal data for the following purposes, each tied to a specific legal basis as described in Section 4:

• Account creation and management: To establish your zm777 Account, maintain your profile, authenticate your login sessions, and manage Account settings including responsible gaming tool configurations.
• Transaction processing: To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment channels; to record and reconcile your Account balance; and to issue winnings.
• Identity verification (KYC): To verify your identity and age (21+), detect duplicate Accounts, and comply with anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations.
• Gaming service delivery: To operate cricket betting markets, casino games, keno draws, virtual sports, and slot games; to calculate and credit winnings; and to resolve bet disputes.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised Account access, collusion, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your queries, complaints, and requests communicated via email or live chat.
• Legal compliance: To meet zm777's obligations under applicable gaming, financial crime prevention, and data protection law; to respond to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve zm777's games, features, and user experience. Individual player profiles are not used for this purpose without appropriate anonymisation.
• Marketing communications: To send you promotional offers, bonus notifications, and zm777 news via email, where you have provided consent or where zm777 has a legitimate interest in contacting existing customers about relevant offers. You may opt out at any time.

zm777 does not use automated decision-making or profiling that produces legal or similarly significant effects on you without appropriate safeguards and, where required, your explicit consent.

zm777 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the zm777 Terms & Conditions contract with you — including Account creation, transaction processing, game delivery, and KYC verification — is carried out on this basis.
• Legal obligation: Processing required to comply with zm777's AML, CTF, gaming licence, and other applicable legal obligations is carried out on this basis. zm777 cannot waive or modify such processing at your request.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and direct marketing to existing customers is carried out on the basis of zm777's legitimate interests, balanced against your rights and interests. You may object to legitimate interest processing at any time.
• Consent: Where zm777 relies on your consent — for example, for certain marketing communications or optional analytical cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect processing carried out on other legal bases.

The zm777 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your login session, and analyse aggregate usage patterns. zm777 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your zm777 Account and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, responsible gaming limit configurations, and display preferences. These are set on the basis of your Account settings and Platform interactions.
• Analytical cookies: Collect anonymised data about how players navigate the zm777 Platform, which games are most popular, and where technical errors occur. This data is used in aggregate only and is not linked to individual player identities without consent.
• Marketing cookies: Used only where you have given consent, to deliver relevant zm777 promotional content. zm777 does not use third-party advertising networks that track you across unrelated websites.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the zm777 Platform. For analytical and marketing cookies, you may also update your preferences through the zm777 Account privacy settings panel.

zm777 does not sell your personal data. zm777 shares your personal data with third parties only in the following circumstances:

• Payment processors: zm777 shares necessary financial data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process PKR deposits and withdrawals. These providers act as independent data controllers in respect of their own processing and are subject to their own privacy policies.
• KYC and identity verification partners: zm777 may share identity documents and personal details with third-party verification services to confirm your identity and age as required under zm777's AML and gaming licence obligations.
• Gaming software and content providers: zm777's casino games, slot titles, virtual sports, and keno products are delivered in part through licensed third-party software providers. These providers may receive anonymised session data necessary to operate and audit game outcomes.
• Fraud prevention services: zm777 may share account and transaction data with specialist fraud prevention services where zm777 has reasonable grounds to suspect fraudulent activity.
• Regulatory and law enforcement authorities: zm777 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law or a valid legal order. zm777 will, where legally permitted, notify you of such a disclosure.
• Professional advisers: zm777 may share data with legal, accounting, or auditing advisers on a strictly confidential basis where required to obtain professional advice or defend legal claims.

All third-party processors engaged by zm777 are contractually required to implement appropriate technical and organisational security measures and to process zm777 player data only for the purposes zm777 specifies.

zm777 retains your personal data for as long as your Account remains active and for such further period as is required to fulfil the purposes described in this Policy or to comply with legal obligations. The following general retention periods apply:

• Active Account data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in line with standard AML record-keeping obligations.
• KYC and identity verification records: Retained for a minimum of five (5) years following the completion of verification or Account closure, whichever is later, as required by applicable financial crime prevention law.
• Transaction and betting records: Retained for a minimum of five (5) years following each transaction date, as required for financial audit and regulatory compliance purposes.
• Customer support communications: Retained for a period of three (3) years following the resolution of each support interaction, to enable zm777 to respond to follow-up queries and defend potential claims.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence compliance.
• Technical and analytical data: Retained in anonymised or aggregated form for up to two (2) years for Platform improvement purposes.

Upon expiry of the applicable retention period, zm777 will securely delete or irreversibly anonymise your personal data. zm777 does not retain data beyond the period necessary for the stated purpose and any applicable legal requirement.

zm777 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and zm777's servers.
• Encryption of sensitive data fields — including passwords, payment identifiers, and identity document references — at rest using industry-standard algorithms.
• Role-based access controls ensuring that zm777 staff can access personal data only to the extent required to perform their specific function.
• Regular security audits, vulnerability assessments, and penetration testing of the zm777 Platform and supporting infrastructure.
• Incident response procedures to detect, contain, and notify affected parties in the event of a personal data breach in accordance with applicable legal timelines.
• Secure, access-controlled data storage facilities with physical and logical security controls appropriate to the sensitivity of the data held.

While zm777 takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is entirely immune to risk. You are responsible for maintaining the security of your zm777 Account credentials and should contact support immediately if you suspect unauthorised access to your Account.

Subject to applicable law, you hold the following rights in respect of your personal data held by zm777. To exercise any of these rights, contact zm777 support using the details in Section 13:

• Right of access: You may request a copy of the personal data zm777 holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Where possible, corrections to basic Account data (such as contact details) can be made directly through your zm777 Account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where zm777 has processed it unlawfully. This right is subject to zm777's legal obligations to retain certain records.
• Right to restrict processing: You may request that zm777 suspends processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request that zm777 provides your personal data in a structured, commonly used, machine-readable format where the processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on zm777's legitimate interests (including direct marketing) at any time. zm777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where zm777 relies on consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

zm777 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, zm777 may extend this period by a further 60 days, in which case you will be notified of the extension and the reason for it.

zm777 employs age verification controls at the point of registration and may require submission of identity documents confirming date of birth at any stage of the Account lifecycle. If zm777 discovers that an Account has been created by or on behalf of a person under the age of 21, the Account will be immediately closed, all data associated with the underage use will be deleted (except to the extent zm777 is legally required to retain it), and any funds held will be handled in accordance with zm777's underage gaming procedures.

If you are a parent or guardian and you believe that a minor under your care has accessed the zm777 Platform or created an Account, please contact zm777 support immediately using the details in Section 13. zm777 will investigate and take appropriate action as a priority.

zm777's primary data processing operations are conducted within zm777's licensed operating jurisdiction. Certain third-party service providers engaged by zm777 — including gaming software providers and specialist security services — may process data in jurisdictions outside Pakistan.

Where zm777 transfers personal data internationally, it takes steps to ensure that the transfer is subject to appropriate safeguards, which may include contractual clauses that impose data protection obligations on the recipient equivalent to those zm777 applies domestically, or transfers to jurisdictions recognised as providing adequate protection for personal data.

zm777 does not transfer personal data internationally for the purpose of circumventing the protections described in this Privacy Policy. Any international transfer is conducted solely to enable the delivery of zm777 services and in accordance with applicable legal requirements.

zm777 reviews this Privacy Policy at least annually and may update it to reflect changes in zm777's data practices, new Platform features, or changes in applicable law. When material changes are made, zm777 will notify registered Users by email to the address on file and will publish the updated Policy on the Platform with a revised effective date prominently displayed at the top of the page.

Non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of zm777's data practices — may be made without individual notification, though the most current version of this Policy is always available at zm777.pro/privacy-policy.

Your continued use of the zm777 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should cease use of the Platform and contact zm777 support to close your Account and exercise any applicable data rights.

For all privacy-related queries, data rights requests, or concerns about zm777's handling of your personal data, please contact the zm777 support team. zm777 customer support is available 24 hours a day, 7 days a week, with peak staffing during Pakistan Standard Time business hours.

Email: [email protected]

When submitting a data rights request, please include your registered zm777 Account username, the specific right you wish to exercise, and sufficient information to allow zm777 to verify your identity and locate the relevant data records. zm777 aims to acknowledge all privacy requests within 5 business days and to provide a full substantive response within 30 calendar days.

If you are dissatisfied with zm777's response to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction governing zm777's licence.