Privacy Policy — How z777 Handles Your Personal Data

1 Who We Are and What This Policy Covers

This Privacy Policy applies to z777 ("the Platform," "we," "us," "our") and governs all personal data collected from players and visitors who interact with the z777 website and services at z777.wine. z777 is the data controller responsible for deciding how and why your personal information is processed.

This policy covers all personal data you provide when registering an account, making deposits or withdrawals, playing games, contacting customer support, using the VIP Club, or simply browsing z777. It also covers data we collect automatically from your device and usage behaviour while you are on the platform.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register and use your z777 account, you provide us with information that includes:

• Your full legal name
• Date of birth
• Pakistani mobile phone number (used as your primary account identifier)
• Email address (where provided)
• Payment method details — Easypaisa account number, JazzCash mobile number, NayaPay or SadaPay wallet identifier, bank account details for IBFT, or card details for Visa/Mastercard transactions
• Identity verification documents — government-issued CNIC or passport when KYC is required
• Any information you share with our support team through Live Chat or email

2.2 Data We Collect Automatically

When you access z777, our systems automatically record certain technical information about your device and session:

• IP address and approximate geographic location derived from it
• Device type, operating system version and browser type
• Session timestamps — when you log in, how long your session lasts, when you log out
• Pages viewed, games played, bet amounts placed and game results
• Deposit and withdrawal transaction records
• Any bonus or promotional activity associated with your account

2.3 Data from Third Parties

z777 may receive limited data about you from third-party sources in specific circumstances — for example, fraud prevention services may provide risk signals associated with a payment method or device, or payment processors may confirm the status of a transaction. Data received from third parties is used only for the purpose for which it was shared and is handled under the same protections described in this policy.

3 Why We Collect and Use Your Data

Every piece of data z777 collects has a specific purpose. We do not collect data speculatively or "just in case." The primary purposes for which we process your personal information are:

• Account Management: Creating and maintaining your z777 account, verifying your identity, processing logins securely, and ensuring the one-account-per-player rule is maintained across the platform.
• Processing Transactions: Handling deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments in Pakistani Rupees. Every PKR transaction requires sufficient data to route it correctly, verify it belongs to your account, and maintain an accurate ledger.
• Game Delivery: Operating the casino games, live dealer tables, sports betting markets and other z777 services. Your bet history and game activity are recorded to maintain accurate account balances, resolve any disputed game results, and generate your transaction history.
• KYC and Fraud Prevention: Verifying your identity when required, detecting unusual transaction patterns, preventing money laundering and fraud, and complying with anti-financial crime obligations.
• Customer Support: Responding to your queries, investigating complaints, processing responsible gaming requests such as deposit limits or self-exclusion, and maintaining records of support interactions for quality and training purposes.
• Platform Improvement: Analysing aggregate usage patterns to improve game performance, mobile optimisation, payment flow efficiency and overall player experience. This analysis uses anonymised or aggregated data wherever individual-level data is not required.
• Marketing Communications: Sending you information about bonuses, promotions and platform updates where you have opted in to receive such communications. You can opt out at any time — see Section 11.
• Responsible Gaming: Monitoring account activity for signs of problematic gaming behaviour and making responsible gaming tools available and visible to players who may benefit from them.

4 Legal Basis for Processing

z777 processes your personal data on the following legal bases depending on the specific purpose:

• Contract Performance: Most of the data processing described in this policy is necessary to perform the contract between z777 and you as a registered player. Without it, we cannot operate your account, process your transactions or deliver the games you have chosen to play.
• Legal Obligation: Some data processing — particularly KYC identity verification, transaction record keeping and anti-money-laundering checks — is required by applicable legal and regulatory obligations. z777 cannot waive these requirements even if you request it.
• Legitimate Interests: Fraud prevention, platform security, abuse detection and aggregate analytics are processed on the basis of z777's legitimate business interest in maintaining a secure and well-functioning platform. We have assessed that these interests are not overridden by your privacy rights in these specific contexts.
• Consent: Marketing communications are sent only where you have given explicit consent. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5 Payment Data and Pakistani Wallet Security

Because z777 operates exclusively in Pakistani Rupees using local payment methods, the payment data we handle is specific to the Pakistani financial ecosystem. This section explains in more detail how that data is treated.

5.1 Easypaisa and JazzCash

When you deposit or withdraw via Easypaisa or JazzCash, z777 records your registered mobile number associated with that wallet and the transaction reference number generated by the payment processor. z777 does not store your Easypaisa or JazzCash PIN or full account credentials — the authorisation step happens entirely within your mobile app and the confirmation is relayed to z777 by Telenor/Jazz's payment gateway via an encrypted API.

5.2 IBFT Bank Transfers

For bank transfers, z777 records your account's IBAN, the transaction reference from your bank, the sending bank name and the amount and timestamp of the transfer. This information is required to match incoming payments to the correct z777 account and to process outgoing withdrawals to your registered bank account.

5.3 Visa and Mastercard

Card payments at z777 are processed through a PCI-DSS compliant payment gateway. z777 does not store your full card number, CVV or card expiry date on its own servers. The payment gateway tokenises card details and z777 retains only a masked card reference (e.g. the last four digits and card type) sufficient to identify which card is associated with your account for withdrawal matching purposes.

6 Who We Share Your Data With

z777 does not sell your personal data. We share your data only with the following categories of third parties and only to the extent necessary for the stated purpose:

All third parties with whom z777 shares data are required to handle that data only for the purpose specified, maintain appropriate security standards, and not re-share it further without z777's authorisation. z777 does not share player data with advertisers or data brokers under any circumstances.

7 Cookies and Tracking Technologies

z777 uses cookies and similar tracking technologies to operate and improve the platform. Here is what is in use and why:

7.1 Essential Cookies

These cookies are required for the platform to function. They maintain your login session so you do not get logged out between pages, remember your preferred language and currency display settings, and protect the platform against certain types of automated attacks. Essential cookies cannot be disabled without preventing you from using z777.

7.2 Analytics Cookies

z777 uses analytics tools to understand how players use the platform — which pages are visited most, where players exit a registration flow, which games are opened but not started. This data is used to improve the platform and is processed in aggregate without identifying individual players. You can opt out of analytics tracking by declining cookies when prompted or by adjusting your browser settings.

7.3 Session Continuity Cookies

These cookies remember which game table you were at, your in-game settings, and whether you had an unfinished deposit flow in progress. They are active for the duration of your session and expire when you close your browser.

Your browser's settings allow you to view, delete and block cookies. Note that blocking all cookies will prevent you from logging into z777 since essential session cookies are necessary for authentication to work.

8 How We Protect Your Data

z777 implements the following technical and organisational security measures to protect your personal data:

• Encryption in Transit: All data exchanged between your device and z777 is transmitted over HTTPS with TLS 1.2 or higher encryption. Your login credentials, payment details and personal information are never transmitted in plain text.
• Encryption at Rest: Personal data and payment records stored in z777's databases are encrypted at rest using industry-standard algorithms. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within z777's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary to perform their specific role. Access is logged and reviewed regularly.
• Payment Security: Card payments are processed through PCI-DSS compliant systems. z777 does not store full card details, CVV codes or payment PINs on its own infrastructure.
• Incident Response: z777 maintains a security incident response procedure. In the event of a data breach that is likely to result in risk to your rights, z777 will notify affected players via their registered mobile number or email within 72 hours of becoming aware of the breach.

9 How Long We Keep Your Data

z777 retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable legal or regulatory obligations. The main retention periods are as follows:

• Active Account Data: Retained for the full duration of your z777 account being open and active. This includes your profile information, transaction history, game play records and support interaction history.
• Closed Account Data: Following account closure, z777 retains your personal data and transaction records for a minimum of 5 years. This retention is required to comply with anti-money laundering regulations and to allow resolution of any dispute that may arise after account closure.
• KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of 5 years following account closure.
• Payment Transaction Records: Detailed records of all PKR transactions — deposits, withdrawals, bonuses — are retained for 5 years minimum from the date of each transaction.
• Support Interaction Records: Live Chat transcripts and email correspondence with z777 support are retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as you remain a registered z777 player, and for 1 year following account closure.

When the applicable retention period expires, data is securely deleted or anonymised so it can no longer be linked to you as an individual.

10 Your Privacy Rights

As a z777 player, you have the following rights over your personal data. These rights can be exercised at any time by contacting us at support@z777.wine with the subject line "Privacy Rights Request":

• Right of Access: You can request a copy of all personal data z777 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to Correction: If any personal data z777 holds about you is inaccurate or outdated, you can request that it be corrected. Most profile fields can be updated directly within your z777 account settings.
• Right to Deletion: You can request that z777 delete your personal data. Note that where a legal retention obligation applies — such as the 5-year post-closure requirement — z777 is not able to delete data earlier than the legally required minimum, but we will delete everything not covered by a specific obligation.
• Right to Restrict Processing: In certain circumstances, you can ask z777 to pause processing your data while a dispute about its accuracy or use is resolved.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format (such as a CSV file) so it can be transferred to another service you choose.
• Right to Object: You can object to the processing of your data where z777 is relying on legitimate interests as the legal basis. This is particularly relevant to analytics and fraud monitoring. We will assess your objection and stop processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Marketing Consent: Where you previously consented to receive marketing communications from z777, you can withdraw that consent at any time. Withdrawal takes effect immediately and does not affect the lawfulness of any marketing sent prior to withdrawal.

11 Marketing Communications

z777 sends promotional communications — including bonus offers, seasonal promotions and platform news — to players who have opted in to receive them. Communication channels used by z777 for marketing include SMS to your registered Pakistani mobile number and email (where provided).

z777 will never send marketing communications to any account that is under a self-exclusion agreement. If you receive a marketing message while under self-exclusion, please report it to support immediately so we can investigate and prevent recurrence.

To stop receiving marketing communications from z777 at any time, you can:

• Reply STOP to any SMS message received from z777
• Click the unsubscribe link in any z777 email
• Contact Live Chat or email support@z777.wine and request removal from all marketing lists
• Adjust your notification preferences within your z777 account settings

Opting out of marketing has no effect on your account functionality, game access, bonus eligibility or VIP tier status. Transactional messages — such as deposit confirmations, withdrawal notifications and support responses — will continue to be sent as they are necessary for account operation and are not marketing communications.

12 Children and Minors

z777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires date of birth confirmation, and KYC verification checks are in place to identify and prevent underage account creation.

If z777 discovers that a registered account belongs to a person under 18, the account will be immediately closed, all balances will be returned to the payment source used for deposits, and any personal data collected will be deleted as promptly as legally permissible.

If you believe a minor has created an account on z777, please contact us immediately at support@z777.wine so we can investigate and take action.

13 Changes to This Privacy Policy

z777 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that affect how your personal data is used or what rights you have — we will notify you via SMS to your registered Pakistani mobile number at least 7 days before the change takes effect.

The date shown at the top of this document reflects the date of the most recent update. The current version is always available at z777.wine/privacy-policy. Continuing to use z777 after a notified change takes effect constitutes your acceptance of the updated policy.

If you disagree with a change to this Privacy Policy, you can close your account before the new version takes effect and request deletion of your data subject to applicable retention obligations.

14 Contact and Privacy Queries

For any question, request or complaint related to this Privacy Policy or the handling of your personal data by z777, please contact us through the following channels:

• Live Chat: Available 24/7 on z777 — the fastest route for urgent privacy concerns
• Email: support@z777.wine — use subject line "Privacy Rights Request" for formal data rights requests

z777 will acknowledge privacy rights requests within 24 hours and respond substantively within 30 days. If your request is particularly complex, we will notify you within the first 30 days if an extension of up to a further 60 days is necessary and explain why.