zs77 Privacy Policy — How We Collect, Use, and Protect Your Personal Information

zs77 ("we", "us", "our", "the Platform") is the data controller responsible for personal data collected through the website accessible at zs77.bid and all associated services, features, and functionalities. As data controller, zs77 determines the purposes and means of processing personal data submitted by Players ("you", "your") in connection with your use of the Platform.

This Privacy Policy applies to all personal data collected through the zs77 Platform, including data submitted during account registration, during KYC verification, during payment transactions, and during your interaction with Platform features including games, the cashier, customer support, and promotions.

zs77 collects personal data across several categories depending on your interaction with the Platform. The following table summarises the categories and specific data points collected:

zs77 collects personal data through the following channels and mechanisms:

• Direct collection: Data you voluntarily provide during registration (name, mobile number, date of birth), during KYC submission (CNIC upload, payment method verification), and during customer support interactions;
• Automated technical collection: Technical and usage data collected automatically when you access or use the Platform, including through browser cookies, server log files, and session tracking technology;
• Payment processor data: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing systems when you initiate deposits or withdrawals;
• Third-party KYC providers: Identity verification results and risk scores from contracted KYC and fraud prevention service providers who process your identity documents on our behalf;
• Responsible gaming systems: Data generated by your use of responsible gaming tools, including limit activations, self-exclusion requests, and system-generated flags from our responsible gaming monitoring systems.

zs77 processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

1. Contractual necessity: Processing required to perform the contract between you and zs77 — i.e., to operate your account, process transactions, verify identity, and provide the gaming services you have requested;
2. Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, responsible gaming regulations, fraud prevention mandates, and data retention requirements under applicable law;
3. Legitimate interests: Processing for purposes that are in the legitimate interests of zs77 and do not unduly override your fundamental privacy rights — including fraud detection, platform security, service improvement, and responsible gaming risk monitoring;
4. Consent: Processing for purposes where you have given explicit, freely given, and informed consent — specifically for non-essential cookies and for receiving promotional communications from zs77. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zs77 uses the personal data it collects for the following specific, documented purposes:

5.1 Account and Service Operation

Your identity and contact data are used to create and maintain your zs77 account, authenticate your login sessions, and deliver the gaming and betting services you access through the Platform. Your Pakistani mobile number is used for account OTP authentication via JazzCash and EasyPaisa where you have enabled this feature.

5.2 Payment Processing

Your financial data is used exclusively to process your deposits and withdrawals in PKR through your chosen payment method. zs77 does not store full payment credentials on its own servers — payment data is transmitted directly to the respective payment processor (JazzCash, EasyPaisa, HBL, UBL, SadaPay) via encrypted channels.

5.3 Identity Verification (KYC)

Your identity documents (CNIC, passport) and payment method ownership evidence are used to comply with our KYC obligations, verify that you are who you say you are, and ensure that withdrawals are paid to the verified account owner.

5.4 Fraud Prevention and Security

Technical data (IP address, device fingerprint, login patterns) and usage data are analysed by our fraud prevention systems to detect unusual account activity, multi-accounting, bonus abuse, payment fraud, and other prohibited conduct as defined in our Terms and Conditions.

5.5 Customer Support

Communications data (support chat logs, email records) are retained to resolve your queries accurately, maintain a consistent support history, and improve the quality of our support team's responses over time.

5.6 Responsible Gaming Monitoring

Usage data and responsible gaming tool activations are used to monitor for signs of problematic gambling behaviour and to enable zs77 to intervene proactively where our responsible gaming systems identify a Player who may be at risk. This processing is carried out in the legitimate interests of Player welfare.

5.7 Platform Improvement

Anonymised and aggregated usage data is used to improve Platform performance, optimise the mobile experience for Pakistani network conditions, inform game and feature addition decisions, and improve the overall user experience at zs77.

5.8 Marketing Communications (Consent-Based)

Where you have explicitly opted in to receive promotional communications, zs77 may use your contact data to send you information about bonuses, promotions, new games, and events relevant to your account. You may opt out of marketing communications at any time by contacting support or updating your notification preferences within your account settings.

zs77 may share your personal data with the following categories of third parties:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing partners — for the sole purpose of processing your financial transactions on the Platform;
• KYC and identity verification providers: Third-party identity verification and document authentication services contracted to assist zs77 in meeting its Know Your Customer obligations;
• Fraud prevention and security services: Contracted fraud detection and cybersecurity service providers who process technical data on our behalf to protect the Platform and its players from fraudulent activity;
• Game software providers: Where required by game providers to facilitate live dealer game sessions, limited session-level data (session ID, bet amounts) may be shared with the provider's gaming systems — no personally identifiable information is shared beyond what is strictly necessary;
• Regulatory and law enforcement authorities: Where zs77 is subject to a valid legal obligation to disclose personal data to a competent authority, regulatory body, or law enforcement agency. zs77 will notify you of such disclosure where legally permitted to do so;
• Professional advisors: Legal, accounting, and compliance advisors who are bound by professional confidentiality obligations.

All third-party service providers who process personal data on behalf of zs77 are required to process that data only in accordance with our documented instructions and in a manner consistent with this Privacy Policy.

The zs77 Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, ensure Platform security, and collect aggregated analytics data. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function — including session authentication cookies that keep you logged in to your zs77 account. These cannot be disabled without rendering the Platform non-functional;
• Functional cookies: Remember your language preference, Platform display settings, and responsible gaming tool configurations across sessions;
• Analytics cookies: Collect aggregated, anonymised data on how Players navigate and use the Platform, used to improve Platform performance and the user experience. This data does not identify you personally;
• Security cookies: Used by fraud prevention systems to detect suspicious login behaviour, bot activity, and other security threats to your account.

zs77 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings — please note that disabling essential cookies will prevent you from logging in to your zs77 account.

zs77 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and zs77 servers is encrypted in transit using the latest TLS protocol;
• AES-256 encryption at rest: Personal and financial data stored in zs77 databases is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data within zs77's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review;
• Two-factor authentication: All internal systems containing personal data require two-factor authentication for staff access;
• Regular security audits: The zs77 Platform undergoes regular independent security penetration testing and vulnerability assessments;
• Incident response: zs77 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to Player rights, affected Players will be notified without undue delay in accordance with applicable notification requirements.

zs77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal minimum retention requirements:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering regulatory retention requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations;
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure (whichever is later);
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, to ensure continuity of support and to handle any subsequent complaint or dispute;
• Self-exclusion records: Retained indefinitely to prevent a self-excluded Player from circumventing their exclusion through re-registration. This retention is in the Player's own interest;
• Analytics and usage data: Anonymised and aggregated upon analysis; no individually identifiable usage records are retained for more than eighteen (18) months.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to an identified individual.

Subject to applicable law and certain conditions and limitations, you have the following rights in respect of your personal data held by zs77:

To exercise any of the above rights, please submit a written request to zs77 via email at [email protected] (plain text — not a clickable link), including your registered mobile number or email address and a description of the right you wish to exercise. zs77 will respond within 30 calendar days of receiving a complete request. We may need to verify your identity before fulfilling your request.

Please note that certain rights are subject to limitations where the data is required for legal compliance, fraud prevention, or the establishment, exercise, or defence of legal claims.

The zs77 Platform is strictly intended for adults who are 21 years of age or older. zs77 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is prohibited, and any account found to be held by a person under 21 will be immediately closed.

zs77 employs age verification measures at registration and during KYC processes specifically to prevent underage access. If zs77 becomes aware that personal data has been collected from a person under the age of 21, all data associated with that account will be permanently deleted and the account closed, with any deposited funds refunded to the payment source.

If you believe a minor may have accessed or registered on the zs77 Platform, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

The zs77 Platform operates under international online gaming infrastructure. As a result, your personal data may be processed by servers and service providers located outside of Pakistan — for example, where KYC verification providers or game software vendors operate from other jurisdictions.

Where such international transfers occur, zs77 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy. These safeguards may include contractual data processing agreements, standard contractual clauses, or equivalent mechanisms that require the recipient to process your data in compliance with applicable privacy standards.

By using the zs77 Platform, you acknowledge and consent to the transfer of your personal data to and from Pakistan as described in this Policy, subject always to the safeguards described above.

zs77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform operations. Material changes to this Policy will be communicated to registered Players via a notice on the Platform and/or via direct notification to your registered mobile number or email address at least seven (7) days prior to the effective date of the change.

The version of the Privacy Policy displayed at zs77.bid/privacy-policy is always the current version. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of a change constitutes your acceptance of the updated Privacy Policy. If you do not agree to any update, you may close your account and request deletion of your data by contacting our support team.

This Privacy Policy was last reviewed and updated on 1 January 2026.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zs77, please contact our support team through the following channels:

If you believe that zs77 has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a complaint. We ask that you first contact us directly so that we have the opportunity to address your concern. zs77 aims to acknowledge all privacy complaints within 5 business days and to provide a full response within 30 calendar days.

If you remain dissatisfied after raising a complaint with zs77 directly, you may escalate your complaint to the appropriate data protection supervisory authority or independent dispute resolution body relevant to your jurisdiction.