Your Privacy at
zk77 play — Handled with Care

This Privacy Policy ("Policy") describes how zk77 play ("zk77 play", "we", "us", "our") collects, uses, stores, protects, and shares personal information about users ("you", "your") of the zk77 play platform, accessible at zk77play.com and all associated mobile-optimised interfaces (collectively, the "Platform").

zk77 play is committed to protecting the privacy and personal data of all users, in particular the large and growing community of players in Pakistan who trust us with their information. This Policy is designed to be clear, honest, and written in plain English — not buried in legal jargon.

By registering for a zk77 play account or using the Platform in any way, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy must be read alongside our Terms & Conditions. In the event of any conflict, the Terms & Conditions shall prevail for matters of contract; this Policy shall govern matters of data handling.

For the purposes of this Policy, the data controller responsible for your personal data is zk77 play, operating the Platform at zk77play.com.

If you have any questions about how your personal data is handled, or wish to exercise any of the rights described in Section 12 of this Policy, you may contact the zk77 play data team at the email address listed in Section 16. All data-related enquiries are handled in English and responded to within a reasonable timeframe.

zk77 play collects several categories of personal data depending on how you interact with the Platform. The table below summarises the main categories, the specific data points within each, and the primary purpose for collection:

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) beyond what is strictly necessary for identity verification purposes mandated by applicable law.

zk77 play collects personal data through the following methods:

• Direct collection — information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection — technical and usage data collected automatically when you use the Platform, including via cookies, server logs, and mobile analytics tools. See Section 9 for details on cookies.
• Third-party payment processors — transaction confirmation data shared by Easypaisa, JazzCash, SadaPay, Raast, and banking partners when you initiate a deposit or withdrawal. This is limited to transaction reference data and does not include your full payment credentials.
• Identity verification providers — where KYC verification is required, we may use accredited third-party identity verification services. Data shared with these providers is limited to what is necessary for the verification task.
• Fraud prevention systems — device fingerprint data and behavioural signals collected via industry-standard fraud detection systems to protect the integrity of the Platform and all users.

zk77 play uses the personal data it collects for the following purposes:

• To create and manage your zk77 play account, including authenticating your identity at login.
• To process PKR deposits and withdrawals through your chosen payment method (Easypaisa, JazzCash, bank transfer, etc.).
• To verify your age and identity as required by our responsible gaming and anti-money laundering obligations.
• To deliver the games, betting markets, and live casino services available on the Platform.
• To monitor account activity for signs of problem gambling and apply responsible gaming tools where appropriate or requested.
• To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other unlawful activity.
• To respond to your support enquiries and resolve any complaints or disputes.
• To send you service-related communications, including transaction confirmations, security alerts, and policy updates.
• To send you promotional and marketing communications, where you have opted in to receive them.
• To analyse usage patterns and improve the Platform's performance, design, and game offering.
• To comply with applicable legal, regulatory, and reporting obligations.

zk77 play does not use your personal data to make purely automated decisions that produce significant legal effects about you, without appropriate human review where required.

zk77 play processes your personal data on the following legal bases:

• Contractual necessity — processing your data is necessary to perform the contract we have with you as a registered user (account management, payment processing, game delivery).
• Legal obligation — processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations and age verification requirements.
• Legitimate interests — zk77 play has a legitimate interest in fraud prevention, Platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent — where processing is based on your consent (for example, marketing communications or optional data collection), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zk77 play does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors — Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and other payment partners receive the minimum data required to process your deposit or withdrawal transaction in PKR.
• Game providers — third-party game studios and live dealer platform providers receive a pseudonymous session identifier to deliver their games within the zk77 play Platform. They do not receive your full identity or financial data.
• Identity verification services — accredited KYC providers receive document and identity data solely for the purpose of completing your identity verification check.
• Fraud detection and security providers — technical and behavioural data is shared with industry-standard fraud prevention systems to protect users and the Platform.
• Legal and regulatory authorities — zk77 play will disclose personal data to law enforcement, regulatory bodies, or courts where legally required to do so, or where we have a good-faith belief that disclosure is necessary to protect the rights or safety of users or the public.
• Professional advisers — lawyers, auditors, and other professional advisers where disclosure is necessary in the context of a specific matter, subject to confidentiality obligations.

All third parties with whom zk77 play shares personal data are required to handle that data securely and in accordance with applicable data protection standards. They are prohibited from using your data for their own marketing or commercial purposes.

All PKR financial transactions on zk77 play are processed through certified payment channels. zk77 play does not store full payment instrument credentials on its own servers. When you deposit via Easypaisa, JazzCash, or a bank transfer, the payment is processed by the respective payment provider's own secure infrastructure. zk77 play receives only a transaction reference and status confirmation.

Transaction records are maintained for the period required by applicable financial regulations and anti-money laundering obligations. These records may include deposit amounts (in PKR), withdrawal amounts, payment method types, transaction timestamps, and transaction reference numbers.

In the event you initiate a dispute or chargeback with your payment provider, zk77 play may use transaction records to contest the dispute, consistent with our Terms & Conditions.

zk77 play uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics data. The types of cookies used include:

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your zk77 play account. These cannot be disabled without preventing the Platform from working correctly.
• Functional cookies — remember your preferences (such as language settings and responsible gaming limit configurations) so you do not need to re-enter them on each visit.
• Analytics cookies — collect anonymised data about how users navigate the Platform (pages visited, features used, session duration). This data helps us improve the zk77 play user experience.
• Security cookies — help detect and prevent fraudulent activity, including bot detection and session integrity verification.

Most modern browsers and mobile devices allow you to manage your cookie preferences through their settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform features including account login. For mobile users — who represent over 90% of the zk77 play player base — cookie settings are typically managed through your mobile browser's privacy settings.

zk77 play retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by law. The following general retention principles apply:

• Account data — retained for the duration of your active account relationship with zk77 play, plus a defined period after account closure to allow for dispute resolution and legal compliance.
• Financial transaction records — retained for the minimum period required by applicable financial regulations, which is typically a period of years following the transaction date.
• KYC and identity documents — retained for the period required by anti-money laundering regulations, which may extend beyond the account closure date.
• Support and communications data — retained for a reasonable period to allow for complaint resolution and service improvement.
• Marketing data — retained until you withdraw consent or opt out of marketing communications, after which your contact details are removed from active marketing lists (though a suppression record may be kept to honour your opt-out preference).
• Technical and usage logs — retained for a shorter period, typically used for security monitoring and performance optimisation.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

zk77 play implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the zk77 play Platform.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Access controls that restrict internal access to personal data to authorised personnel with a documented business need.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Multi-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Fraud detection systems that monitor for unusual account activity and flag suspicious transactions in real time.

While zk77 play takes these measures seriously, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You also play an important role in protecting your data by keeping your login credentials confidential and using a strong, unique password for your zk77 play account.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zk77 play will notify affected users as promptly as practicable and take immediate steps to contain and remediate the breach.

As a user of zk77 play, you have the following rights with respect to your personal data:

• Right of access — you may request a copy of the personal data zk77 play holds about you at any time.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to erasure — in certain circumstances, you may request that zk77 play delete your personal data. Note that this right may be limited by legal retention obligations, particularly for financial and identity records.
• Right to restriction of processing — you may request that zk77 play restrict the use of your personal data in defined circumstances (for example, while a correction request is being assessed).
• Right to data portability — where processing is based on consent or contract, you may request that certain data be provided to you in a structured, machine-readable format.
• Right to object — you have the right to object to processing of your personal data where it is based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact the zk77 play support team using the contact details in Section 16. We will respond within a reasonable timeframe. We may need to verify your identity before processing certain requests to protect against unauthorised access.

The zk77 play Platform is strictly for users aged 18 and over. zk77 play does not knowingly collect personal data from persons under the age of 18. If you are under 18, you must not use the Platform or provide any personal data to zk77 play.

If zk77 play becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted promptly and the associated account will be closed. If you believe a minor has registered a zk77 play account, please contact our support team immediately so we can take appropriate action.

zk77 play may send you promotional communications about new games, bonus offers, and other Platform features — but only where you have provided explicit consent to receive such communications during registration or via your account settings.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in your zk77 play account settings dashboard.
• Contacting the zk77 play support team and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect essential service communications, such as transaction confirmations, security alerts, and policy update notices, which will continue to be sent as they are necessary for the operation of your account.

zk77 play may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where a material change is made, zk77 play will notify you — typically by displaying a prominent notice on the Platform when you next log in, or by sending a notification to your registered email address or mobile number.

The effective date at the top of this Policy indicates when it was last reviewed. The current version of this Privacy Policy is always available at zk77play.com/privacy-policy. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should close your account before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or how zk77 play handles your personal data, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 through the zk77 play Platform
• Response Language: English
• Response Time: We aim to respond to all privacy-related enquiries within a reasonable timeframe

For data access requests, correction requests, or deletion requests, please include your registered account details and a description of your request so we can process it efficiently. We may need to verify your identity before actioning your request.