Privacy Policy – zc77

1. Introduction and Scope

This Privacy Policy ("Policy") describes the practices of zc77 ("zc77", "we", "us", "our") with respect to the collection, processing, storage, and disclosure of personal data obtained from users ("Player", "User", "you") of the zc77 online casino and sports betting platform available at zc77.asia ("Platform").

This Policy applies to all personal data processed through your use of the Platform, including registration, account management, deposit and withdrawal transactions, gameplay, customer support interactions, and any correspondence with zc77. By registering an account on zc77, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

zc77 acts as the data controller for personal data collected through the Platform. All queries, requests, or complaints relating to the processing of personal data should be directed to the zc77 Data Protection team via the live chat support facility available 24/7 on the Platform, or by email at [email protected] (displayed as plain text — not a clickable link).

3. Personal Data We Collect

zc77 collects the following categories of personal data:

1. Identity Data: Full legal name, date of birth, nationality, and copies of identity verification documents (CNIC, passport, or driving licence) where KYC verification is required.
2. Contact Data: Pakistani mobile number (primary identifier), email address (where provided), and residential address.
3. Financial Data: Payment method details including JazzCash account number, Easypaisa account number, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other registered banks), and transaction history including deposits, withdrawals, and balances in PKR.
4. Technical Data: IP address, device type, browser type and version, operating system, session timestamps, login history, and cookie identifiers.
5. Usage Data: Game history, betting history, page views, navigation paths within the Platform, and feature interactions.
6. Communications Data: Records of customer support interactions, live chat transcripts, and any correspondence initiated by you.
7. Responsible Gaming Data: Deposit limits, session time settings, self-exclusion status, and any responsible gaming requests you have made.

4. How We Collect Personal Data

zc77 collects personal data through the following channels:

1. Direct provision: Information you provide during account registration, KYC verification, cashier transactions, responsible gaming requests, and customer support interactions.
2. Automated collection: Technical data collected automatically when you access the Platform, including through cookies, session tracking, and server logs.
3. Third-party providers: Data received from payment processors (JazzCash, Easypaisa, banking partners) in connection with deposit and withdrawal processing, and from identity verification service providers during KYC procedures.

5. Purposes and Legal Basis for Processing

zc77 processes your personal data for the following purposes and on the following legal bases:

1. Account administration and contract performance: Registration, login authentication, balance management, deposit and withdrawal processing, and customer support — necessary for the performance of the contract between you and zc77.
2. Identity verification and KYC compliance: Verification of age (18+), identity, and payment method ownership — necessary for compliance with anti-money-laundering (AML) and know-your-customer (KYC) regulatory obligations.
3. Fraud prevention and platform security: Detection and prevention of fraud, money laundering, bonus abuse, and prohibited activities — necessary for compliance with legal obligations and for the legitimate interests of zc77 and its players.
4. Responsible gaming compliance: Processing of deposit limits, self-exclusion requests, and session time controls — necessary for compliance with responsible gaming obligations and for the protection of players' interests.
5. Platform improvement and analytics: Analysis of usage data to improve the Platform's functionality and user experience — based on legitimate interests, with appropriate safeguards.
6. Legal compliance and regulatory reporting: Retention and disclosure of data as required by applicable law, court orders, or regulatory authority requests.

6. Cookies and Tracking Technologies

zc77 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used include:

1. Essential cookies: Required for the Platform to function correctly, including session management, login persistence, and security features. These cannot be disabled without affecting core functionality.
2. Analytics cookies: Used to understand how players navigate the Platform, which pages are most visited, and where technical issues arise. Data collected is aggregated and does not identify individual players.
3. Preference cookies: Store your account preferences such as language and display settings to personalise your experience.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of your zc77 account and the Platform.

7. Disclosure of Personal Data

zc77 does not sell, rent, or trade your personal data to third parties. Personal data may be disclosed to the following categories of recipients only where necessary and subject to appropriate data protection safeguards:

1. Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners, for the purpose of processing deposits and withdrawals in PKR.
2. Game providers: Certified third-party game studios (including but not limited to PG Soft, JILI, Pragmatic Play, Evolution Gaming) receive the minimum data required to authenticate your gameplay session (typically a non-identifiable session token).
3. Identity verification providers: KYC and AML compliance service providers engaged to verify identity documents and screen against sanctions and watchlists.
4. Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory obligation, zc77 may be required to disclose personal data to competent authorities.
5. Successor entities: In the event of a merger, acquisition, or sale of business assets, personal data held by zc77 may be transferred to the acquiring entity, subject to equivalent data protection standards.

8. Data Retention

zc77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

1. Account and transaction records are retained for a minimum of five (5) years following account closure, as required by AML regulations applicable to the gaming industry.
2. KYC documentation is retained for the duration of the account relationship and for five (5) years thereafter.
3. Responsible gaming records, including self-exclusion requests, are retained for the duration of the exclusion period and for five (5) years following its expiry.
4. Technical and usage data logs are retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

9. Data Security

zc77 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Security measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and penetration testing, and multi-factor authentication for administrative Platform access. While zc77 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your zc77 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by zc77:

1. Right of access: You may request a copy of the personal data zc77 holds about you.
2. Right of rectification: You may request correction of inaccurate or incomplete personal data.
3. Right of erasure: You may request deletion of your personal data, subject to zc77's legal obligations to retain certain data (such as AML records).
4. Right to restriction: You may request that zc77 restrict processing of your personal data in certain circumstances.
5. Right to data portability: Where processing is based on consent or contract performance, you may request a machine-readable copy of your personal data.
6. Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact zc77 Customer Support via live chat on the Platform or by email at [email protected]. zc77 will respond to verified requests within 30 days.

11. Children's Privacy

The zc77 Platform is strictly restricted to individuals aged 18 years and above. zc77 does not knowingly collect personal data from persons under 18. If zc77 becomes aware that personal data has been collected from a minor, it will immediately close the associated account and delete all related data. If you believe a minor has registered on the Platform, please contact zc77 Customer Support immediately.

12. International Data Transfers

Your personal data may be processed in countries outside Pakistan, including in the jurisdiction where zc77 is incorporated and licensed. Where data is transferred internationally, zc77 ensures that appropriate safeguards are in place — including contractual data protection clauses with third-party processors — to provide a level of protection equivalent to the standards described in this Policy. By using the Platform, you consent to such international transfers subject to these safeguards.

13. Changes to This Policy

zc77 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. The current version of this Policy is always available at zc77.asia/privacy-policy with the effective date indicated at the top. Where material changes are made, zc77 will notify active players via on-platform notification or email where practicable. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

14. Contact and Complaints

For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data by zc77, please contact our Data Protection team via the 24/7 live chat facility on the Platform, or by email at [email protected]. If you are unsatisfied with our response, you have the right to escalate your complaint to the competent data protection authority or regulatory body in the relevant jurisdiction.