zc77 Privacy Policy

Welcome to the zc77 Privacy Policy. zc77 is Pakistan's trusted online casino and sports betting platform, serving players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across the country. We understand that when you share your personal information with us, you are placing a significant degree of trust in zc77, and we take that responsibility very seriously.

This Privacy Policy sets out, in clear and straightforward terms, how zc77 collects, uses, stores, protects, and — where applicable — shares the personal data of players and visitors who interact with the zc77 platform at zc77.vu. It also explains the rights available to you in relation to your personal data and how you can exercise those rights.

This policy applies to all personal data processing activities conducted by zc77, including data collected through account registration, identity verification (KYC), deposits and withdrawals, gameplay, customer support interactions, and general site browsing. It applies regardless of whether you access zc77 through a desktop browser, a mobile browser, or any other supported device.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the zc77 Platform as a whole.

For the purposes of applicable data protection legislation, zc77 is the data controller in respect of personal data collected from players and visitors through the zc77 Platform.

As the data controller, zc77 determines the purposes for which your personal data is processed and the means by which that processing is carried out. zc77 is responsible for ensuring that all personal data is handled in compliance with our obligations under applicable data protection and privacy laws, as well as the requirements of the international gaming authority under whose framework we are licensed.

If you have any questions about how zc77 processes your personal data, or if you wish to exercise any of your data rights, you can reach our dedicated Privacy team through the contact channels set out in Section 13 of this policy.

zc77 collects personal data from you in several ways and across several stages of your relationship with our Platform. The categories of personal data we collect are described below.

zc77 does not collect or process any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a photograph or likeness is strictly required for the purposes of age and identity verification as part of our KYC process, and only with your explicit consent.

zc77 uses the personal data we collect strictly for the purposes described below. We do not process your data in any manner that is incompatible with these purposes without first obtaining your consent or establishing a separate legal basis for doing so.

• Account Management: To create, maintain, and administer your zc77 player account, including verifying your identity and age (21+), processing your login credentials, and enabling access to all Platform features.
• Transaction Processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method in a timely manner.
• KYC & Compliance: To fulfil our legal and regulatory obligations in respect of know-your-customer (KYC) verification, anti-money laundering (AML) screening, fraud prevention, and responsible gambling checks.
• Game Delivery & Personalisation: To deliver casino games, sports betting markets (including PSL cricket and international fixtures), live dealer games via EVO Live, and to personalise your Platform experience based on your usage preferences.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email, and to maintain records of prior communications for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor your gameplay patterns for indicators of problem gambling, to administer self-imposed limits, cooling-off periods, and self-exclusion requests, and to contact you where we have concern about your gambling behaviour.
• Marketing & Promotions: To send you information about zc77 bonuses, promotions, and new product features — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time through your account settings.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multiple account abuse, bonus abuse, and any other activity that may violate our Terms & Conditions or applicable law.
• Legal Compliance & Reporting: To comply with applicable law, respond to lawful requests from regulatory or government authorities, and enforce our legal rights where necessary.

zc77 processes your personal data only where a lawful basis for doing so exists. The legal bases upon which we rely are as follows:

• Performance of a Contract: Processing your identity data, financial data, and usage data is necessary for us to fulfil our contractual obligations to you as a registered zc77 player — including providing access to games, processing transactions, and administering your account.
• Legal Obligation: We are required by applicable law and our gaming licence conditions to conduct KYC and AML checks, retain certain transaction records, report suspicious activity, and verify that all players meet the minimum age requirement of 21 years.
• Legitimate Interests: We process technical data and usage data on the basis of our legitimate interests in operating a secure, fraud-free gaming platform, improving our products and services, and ensuring the safety and integrity of our games. We have balanced these interests against your rights and are satisfied that they do not override your fundamental privacy interests.
• Consent: Where we send you marketing communications or process non-essential cookies and tracking technologies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

zc77 does not sell your personal data to any third party. We share your data only in the following limited circumstances and only to the extent strictly necessary for the purpose in question:

• Payment Processors: We share relevant financial data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your deposits and withdrawals. Each payment provider operates under their own privacy policy and data protection obligations.
• Game Suppliers & Technology Partners: Game content — including slots, live dealer tables, and EVO Live — is supplied by third-party game providers who may process limited technical and gameplay data to deliver and certify their games. These providers are contractually bound to process data only as instructed by zc77.
• KYC & Identity Verification Providers: We engage specialist KYC service providers to assist with CNIC verification and liveness checks. These providers process your identity data exclusively for verification purposes and are prohibited from using it for any other purpose.
• Fraud Prevention & AML Screening: We may share data with fraud detection and anti-money laundering screening services where we have reasonable grounds to suspect fraudulent activity or a legal obligation to conduct enhanced due diligence.
• Regulatory & Legal Authorities: We may disclose your personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure unless prohibited from doing so by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of zc77's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

zc77 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business need. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the lifetime of your account and for a minimum period of five years following account closure, as required by our gaming licence conditions and applicable AML legislation.
• Financial Transaction Records: Retained for a minimum of five years following the date of each transaction, in compliance with financial record-keeping requirements applicable to licensed gaming operators.
• KYC Documentation: Retained for a minimum of five years following account closure or the completion of the last transaction to which the documentation relates, whichever is later.
• Customer Support Communications: Retained for three years following the resolution of the relevant support interaction, to allow for post-resolution follow-up and dispute reference.
• Technical & Usage Data: Retained for up to 24 months from the date of collection for the purposes of security monitoring, fraud prevention, and Platform performance analysis.
• Marketing Preferences: Retained for the lifetime of your account. Where you withdraw marketing consent, your opt-out status is retained indefinitely to ensure we do not inadvertently re-contact you.

On expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that renders individual identification impossible. Where data cannot be immediately deleted due to technical constraints (for example, backup systems), it will be isolated from active processing until deletion is completed.

zc77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and zc77's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar as confirmation of an encrypted connection.
• Encryption at Rest: Sensitive personal data stored on zc77's servers — including CNIC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption or an equivalent standard.
• Access Controls: Access to personal data is restricted to authorised zc77 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Multi-Factor Authentication: zc77's internal systems require multi-factor authentication (MFA) for all staff access to production environments containing personal data.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for anomalous activity using automated intrusion detection systems. Security events are reviewed by our technical team on a 24/7 basis.
• Regular Security Audits: zc77 commissions regular independent security audits and penetration testing of our Platform and supporting infrastructure to identify and remediate vulnerabilities before they can be exploited.

zc77 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session continuity, analyse usage patterns, and support security monitoring. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language and currency preferences, and enable core security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: These cookies collect anonymised data about how you interact with the Platform — which pages you visit, how long you spend on each section, and any errors you encounter. This information helps us improve Platform performance and user experience. These cookies are set only with your consent.
• Functional Cookies: These cookies remember your preferences and personalisation settings — such as your preferred game lobby view and notification settings — so you do not have to re-configure them on each visit. These cookies are set only with your consent.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, including bot traffic, multiple account creation, and session hijacking attempts. They form part of our broader fraud detection infrastructure.

You can manage your cookie preferences through the cookie settings panel accessible from the footer of any page on the Platform. Please note that disabling certain categories of cookies may affect the functionality of some Platform features.

zc77 respects your rights in relation to your personal data. The following rights are available to you as a zc77 player, subject to applicable legal exceptions and limitations:

• Right of Access: You have the right to request a copy of the personal data zc77 holds about you. We will respond to access requests within 30 days and provide the information in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For straightforward changes such as updating your mobile number or email address, you may be able to do this directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that erasure requests may be subject to our legal and regulatory retention obligations, which may require us to retain certain data for a minimum period regardless of your request.
• Right to Restrict Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example whilst you contest the accuracy of the data or the lawfulness of our processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact our Privacy team via live chat or at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all data rights requests within 30 days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you accordingly.

The zc77 Platform is strictly intended for adults aged 21 years and over. zc77 does not knowingly collect personal data from individuals under the age of 21 and does not permit persons under this age to register or use the Platform in any capacity.

As part of our registration and KYC process, zc77 takes active steps to verify the age of all players. These steps include CNIC verification (which confirms date of birth) and, where required, additional documentary evidence of age. Accounts where age verification cannot be completed, or where we have reasonable grounds to suspect the account holder is under 21, will be suspended immediately pending further investigation.

zc77 strongly encourages parents and guardians in Pakistan to make use of parental control software to prevent minors from accessing online gambling platforms. Information on available tools is included on our Responsible Gaming page.

zc77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. The effective date displayed at the top of this policy indicates when the current version came into force.

Where changes to this Privacy Policy are material — meaning they significantly affect the way we process your personal data or the rights available to you — we will notify you in advance via the email address registered to your zc77 account, and/or via a prominent notice on the Platform, before the changes take effect.

For non-material changes (such as minor clarifications or corrections of typographical errors), we may update the policy without prior notice beyond updating the effective date. We encourage you to review this Privacy Policy periodically to remain informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zc77 handles your personal data, please do not hesitate to get in touch with our Privacy team through any of the following channels:

• Live Chat: Available 24/7 directly from your zc77 account dashboard. Average response time under 5 minutes. Our team can assist in both Urdu and English.
• Email: [email protected] — for formal data rights requests, privacy complaints, or detailed enquiries. We aim to respond within 3–5 business hours.

zc77 is committed to resolving all privacy-related enquiries promptly, transparently, and in full. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority or the dispute resolution body specified by our licensing authority.

We serve players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Peshawar, and all of Pakistan — and every one of those players deserves to know their data is in safe hands.