zh77 Privacy Policy

zh77 ("we", "us", "our") is the data controller responsible for the personal information collected through the zh77 Platform at zh77.pro. zh77 operates under an international gaming license and provides its online gaming services — including cricket betting, live casino games, and slot titles — to eligible players, including Pakistani users who meet the platform's eligibility requirements.

As data controller, zh77 determines the purposes and means by which personal data is processed. All data processing activities described in this Privacy Policy are carried out by zh77 directly or by carefully vetted third-party processors acting under zh77's documented instructions and under contractual data processing agreements consistent with internationally recognised data protection standards.

For any privacy-related query, request, or concern, you may contact zh77's Data Protection team at the support email address provided in the Contact section of this Policy. zh77 commits to acknowledging all data-related requests within five (5) business days of receipt.

zh77 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

Identity Data: Your full legal name as it appears on your CNIC or passport, date of birth, gender, and nationality. This data is collected at registration and during Know Your Customer (KYC) verification processes.

Contact Data: Your email address, Pakistani mobile phone number (e.g., a JazzCash or EasyPaisa registered number), and residential address including city (such as Karachi, Lahore, Islamabad, or Faisalabad) and postal code.

Financial Data: Payment method details including your JazzCash account number, EasyPaisa wallet identifier, HBL or UBL bank account details, Meezan Bank or Allied Bank account references, SadaPay or Raast identifiers, or USDT TRC20 wallet address — depending on which payment method you use. We do not store full bank card numbers or full bank account credentials on our servers; payment processing is handled by certified payment service providers.

Account & Activity Data: Your zh77 username, account registration date, login history, IP addresses, session durations, game participation records, betting history, deposit and withdrawal records, bonus usage, and responsible gaming tool settings.

Technical Data: Device type, operating system, browser type and version, screen resolution, time zone, and other technical identifiers collected automatically when you access the zh77 Platform.

Communications Data: Records of your interactions with zh77 customer support via live chat, including the content of support conversations and the timestamps of those interactions.

Verification Documents: Copies of government-issued identity documents (e.g., CNIC, passport) and proof of payment method ownership submitted during KYC verification. These documents are stored in encrypted form and accessed only by authorised compliance personnel.

zh77 collects personal data through the following mechanisms:

• Direct Submission: Information you provide directly when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion or survey.
• Automated Technical Collection: Data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you browse or use the zh77 Platform. This includes IP addresses, session data, and behavioural analytics used to optimise game performance and detect fraudulent activity.
• Payment Processors: Confirmation data and transaction references received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, and USDT payment infrastructure providers when you make deposits or receive withdrawals.
• Identity Verification Providers: Results of document authenticity checks and identity verification outcomes from third-party KYC service providers operating under zh77's instruction.
• Anti-Fraud & AML Systems: Risk signals and transaction pattern data generated by zh77's internal and third-party anti-money laundering and fraud detection systems.

zh77 processes personal data for the following purposes, each of which is tied to a documented legal basis described in Section 5:

• Account Registration & Management: To create, maintain, and administer your zh77 account, verify your identity and age, and provide you with access to the Platform's gaming products.
• Transaction Processing: To process deposits and withdrawals via your chosen Pakistani payment method (JazzCash, EasyPaisa, HBL, Meezan Bank, etc.), maintain accurate financial records, and resolve payment disputes.
• Legal & Regulatory Compliance: To fulfil zh77's obligations under its international gaming license, including KYC, AML, and responsible gaming requirements. zh77 is obligated to verify the identity and age of all players and to maintain records of gaming activity for regulatory audit purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account, payment, or game-related issues through zh77's 24/7 live chat support.
• Responsible Gaming: To monitor your gaming behaviour and apply responsible gaming measures including deposit limits, loss limits, cooling-off periods, and self-exclusion in accordance with your instructions and zh77's duty of care obligations.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve zh77's Platform, game offering, user interface, and overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and zh77 news via email or SMS — but only where you have given explicit consent to receive such communications. You may withdraw this consent at any time.

zh77 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil zh77's contractual obligations to you as a registered player — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and zh77.
• Legal Obligation: Processing required to comply with zh77's legal and regulatory obligations under its international gaming license, including KYC identity verification, AML transaction monitoring, age verification, and mandatory responsible gaming measures.
• Legitimate Interests: Processing carried out to pursue zh77's legitimate business interests, including fraud prevention, platform security, multi-account detection, and aggregated analytics for service improvement — provided that such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and the use of non-essential cookies is carried out only where you have given freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zh77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with your chosen payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, or USDT infrastructure providers) to the extent necessary to process your deposit or withdrawal. These providers are bound by their own privacy and security obligations.
• KYC & Identity Verification Providers: Identity document data and verification results are shared with zh77's certified KYC service providers solely for the purpose of verifying your identity and age in accordance with zh77's licensing obligations.
• Anti-Fraud & AML Technology Partners: Transaction pattern data and risk signals may be shared with zh77's fraud detection and anti-money laundering technology partners to enable real-time risk assessment.
• Game Technology Providers: Where zh77 integrates third-party game studios' titles into its Platform (e.g., live casino or slot providers), limited technical session data may be shared with those providers to enable game functionality. No personally identifiable information beyond a pseudonymous player identifier is shared with game providers.
• Regulatory & Law Enforcement Authorities: zh77 will disclose personal data to licensing regulators, financial intelligence authorities, or law enforcement agencies where required to do so by law, court order, or in connection with an investigation into financial crime or regulatory breach.
• Professional Advisors: Legal, audit, and compliance advisors engaged by zh77 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

zh77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with zh77, plus a minimum of five (5) years following account closure, in accordance with zh77's gaming license obligations and AML record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, consistent with standard financial record-keeping requirements applicable to internationally licensed gaming operators.
• KYC Verification Documents: Retained for the duration of your account plus five (5) years following account closure. Copies of identity documents are stored in encrypted, access-controlled storage and are destroyed securely upon expiry of the retention period.
• Customer Support Records: Live chat transcripts and support correspondence are retained for three (3) years from the date of the interaction, to enable dispute resolution and quality assurance reviews.
• Marketing Consent Records: Records of your consent to receive marketing communications (including withdrawal of consent) are retained for the duration of your account plus three (3) years, to demonstrate compliance in the event of a regulatory query.

Upon expiry of the applicable retention period, zh77 will securely delete or anonymise your personal data in accordance with its data destruction policy. Anonymised, aggregated data (from which no individual player can be identified) may be retained indefinitely for statistical and analytics purposes.

zh77 implements a layered, defence-in-depth approach to protecting the personal data of Pakistani players. The security measures in place include:

• TLS Encryption in Transit: All data transmitted between your device and zh77's servers is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• AES-256 Encryption at Rest: Sensitive data — including identity documents, payment method details, and account credentials — is stored using AES-256 encryption on zh77's secure, access-controlled server infrastructure.
• Two-Factor Authentication (2FA): zh77 offers SMS OTP-based 2FA to all registered players and strongly encourages its use. 2FA significantly reduces the risk of unauthorised account access.
• Access Controls: Access to personal data within zh77's organisation is strictly limited to personnel whose roles require it. All internal access is logged, monitored, and subject to regular review.
• Penetration Testing & Security Audits: zh77's Platform infrastructure undergoes regular security testing by independent cybersecurity specialists to identify and remediate vulnerabilities proactively.
• Incident Response: zh77 maintains a documented data breach response procedure. In the event of a security incident involving your personal data, zh77 will notify affected players and relevant regulatory authorities in accordance with applicable notification obligations.

zh77 uses cookies and similar tracking technologies on the zh77 Platform to provide core functionality, improve user experience, and support security operations. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to log in to your account, maintain your session, and use core features such as the game lobby and account dashboard. These cookies cannot be disabled without breaking the Platform's functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the zh77 Platform — including which pages are visited most frequently, session durations, and error events — to help zh77 improve Platform performance and user experience. This data is processed in aggregate and is not used to identify individual players.
• Functional Cookies: These cookies remember your preferences, such as your selected language, preferred game category, and responsible gaming limit settings, so that you do not need to reconfigure them on each visit.
• Security Cookies: Used to detect fraudulent activity, multi-account behaviour, and bot traffic. These cookies are part of zh77's fraud prevention infrastructure and operate continuously for platform security purposes.

You may manage non-essential cookie preferences through your browser settings. Disabling certain categories of cookies may affect your experience of the zh77 Platform. zh77 does not use third-party advertising cookies or retargeting pixels on its Platform.

As a zh77 player, you hold the following rights in respect of your personal data, which you may exercise at any time by contacting zh77's Data Protection team via the support email address below:

• Right of Access: You have the right to request a copy of the personal data zh77 holds about you, together with information about how it is processed. zh77 will respond to verified access requests within thirty (30) days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by zh77. For account-level data such as your name or contact details, you may update this directly from your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that this right is subject to zh77's legal obligations to retain data for regulatory compliance and AML record-keeping purposes, which take precedence during applicable retention periods.
• Right to Restrict Processing: You have the right to request that zh77 temporarily restrict processing of your personal data while a rectification or objection request is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to zh77 in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of zh77's legitimate interests. zh77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To opt out of marketing emails or SMS, use the unsubscribe link in any marketing communication or contact zh77 support.

To exercise any of the above rights, please contact zh77 Data Protection via support email: [email protected]. Please note this is a plain text address — not a clickable link. Include your registered username and a description of your request. zh77 may require identity verification before processing certain requests.

zh77 operates a strict 21+ age policy. The zh77 Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in zh77's account registration process and is reinforced through KYC document checks on all accounts prior to the processing of any withdrawal.

If zh77 discovers that it has inadvertently collected personal data from an individual who is under the age of 21, the following steps will be taken immediately:

• The account will be suspended and access to the Platform revoked.
• All personal data associated with the underage account will be securely deleted, except where retention is required by law (e.g., for AML reporting obligations).
• Any deposits made to the account will be returned to the originating payment method, net of any applicable regulatory deductions.
• The case will be reviewed by zh77's compliance team and, where legally required, reported to relevant authorities.

zh77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, zh77's data processing practices, or the services offered on the Platform. When material changes are made, zh77 will notify registered players via the email address associated with their account and will post an updated version of the Policy on this page with a revised effective date.

Your continued use of the zh77 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated Policy, you should cease using the Platform and contact zh77 support to request account closure.

For any privacy-related question, concern, or request not addressed by this Policy, please contact zh77 Data Protection at: [email protected] — plain text only, not a clickable link. Our Data Protection team will respond within five (5) business days.