zm777 Privacy Policy

This Privacy Policy applies to all personal data collected by or on behalf of zm777 in connection with the operation of the zm777 online casino and sports betting platform at zm777.biz, including its mobile-optimised interface, customer support channels, and promotional communications. This Policy applies to all zm777 Members, registered account applicants, visitors to zm777.biz, and any other individuals whose personal data is processed by zm777.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, CNIC number, mobile number, email address, IP address, financial transaction data, and gameplay records.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means zm777, the entity that determines the purposes and means of processing personal data collected via the zm777 platform.
• "Third Party" means any person, organisation, or legal entity other than the Member and zm777, including zm777's payment processors, game providers, technology suppliers, and regulatory authorities.
• "KYC Data" means identity verification documentation including CNIC images, name, date of birth, address, and any additional documents requested under zm777's Know Your Customer programme.

This Policy should be read alongside zm777's Terms and Conditions, which are available at /terms-conditions, and zm777's Responsible Gaming Policy at /responsible-gaming. In the event of any inconsistency between this Policy and the Terms and Conditions on a privacy matter, this Policy prevails.

zm777 collects personal data through several channels: directly from you during account registration, KYC verification, and platform use; automatically through technical systems when you access the zm777 website; and occasionally from third parties such as payment processors where permitted. The following table summarises the categories of personal data zm777 collects and the primary source of each.

zm777 processes personal data only where there is a valid legal basis for doing so. The legal bases zm777 relies upon are as follows:

• Contractual Necessity: Processing your registration data, financial data, and gaming records is necessary for zm777 to perform its contract with you — namely, the provision of online gaming and sports betting services under the zm777 Terms and Conditions.
• Legal Obligation: Processing your KYC data, transaction records, and responsible gaming data is required for zm777 to comply with its international gaming licence obligations, anti-money laundering requirements, and age verification duties.
• Legitimate Interests: Processing technical and device data for fraud prevention, security monitoring, and platform performance optimisation is based on zm777's legitimate interests in operating a secure and fair gaming environment for all Members.
• Consent: Processing your data for direct marketing communications (promotional emails, SMS notifications about zm777 bonuses and PSL betting offers) is based on your freely given, specific, and informed consent, which you may withdraw at any time.

zm777 uses the personal data it collects for the following purposes. Where zm777 uses your data for a purpose not listed here, it will notify you and obtain consent where required before doing so.

zm777 uses your registration data to create and maintain your zm777 account, authenticate your zm777 login sessions, process your PKR deposits and withdrawals via EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank, display your account balance and transaction history, and communicate with you regarding your account status. This processing is necessary for zm777 to fulfil its contractual obligations to you.

zm777 uses your KYC data — primarily your CNIC information — to verify that you are a real person, that you meet the 21+ age requirement, that your identity matches your payment method details, and that you are not on any sanctioned persons list. This processing is mandatory under zm777's international gaming licence and cannot be declined by Members who wish to make withdrawals.

zm777 uses technical data, financial data, and gaming records to detect and prevent fraudulent activity including the operation of multiple accounts, use of stolen payment method credentials, bonus abuse, collusion between players, and money laundering. zm777 may share relevant data with its payment processors and regulatory authorities in the context of fraud investigations.

zm777 analyses gaming behaviour data — including session length, deposit frequency, loss patterns, and changes in betting volume — to identify Members who may be displaying signs of problem gambling. Where such patterns are identified, zm777 may proactively reach out to offer responsible gaming tools or information. This processing is carried out under zm777's licensing obligations and its genuine commitment to Member welfare.

zm777 uses communications data to respond to Member enquiries, resolve disputes, investigate complaints, and improve the quality of its support service. Support interactions are logged and retained for quality assurance and regulatory compliance purposes.

zm777 uses aggregated and anonymised data derived from Member usage patterns to analyse and improve the zm777 platform, game selection, and user experience. This includes understanding which cricket betting markets are most popular among Pakistani Members in cities like Karachi, Lahore, and Faisalabad, and which slot games generate the most engagement across different device types.

zm777 does not sell, rent, or license your personal data to third parties. zm777 shares personal data only in the following limited circumstances and only to the minimum extent necessary:

• Payment Processors: EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank receive the personal and financial data necessary to process your PKR deposit and withdrawal transactions. These entities are subject to their own data protection obligations and zm777's contractual data processing requirements.
• Game Technology Providers: Providers of zm777 casino games — including live dealer studios and RNG game providers — may receive anonymised session identifiers necessary to authenticate your gaming sessions. These providers do not receive your personal identity information in connection with gameplay data.
• KYC Verification Services: zm777 may use third-party identity verification service providers to assist with CNIC verification and liveness detection as part of its KYC programme. These providers process KYC data solely on zm777's behalf under strict contractual confidentiality obligations.
• Regulatory and Law Enforcement Authorities: zm777 will disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, and courts where required to do so by law, valid legal process, or regulatory direction. zm777 will notify affected Members of such disclosures where legally permitted to do so.
• Fraud Prevention Networks: zm777 may share personal data with industry fraud prevention databases and responsible gaming self-exclusion registries where required by its licensing obligations or where doing so is necessary to protect zm777 Members and the integrity of the platform.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of zm777's business or assets, Member personal data may be transferred to the relevant successor entity, subject to that entity honouring the protections set out in this Policy.

zm777 uses cookies and similar tracking technologies to operate the zm777 platform, remember your session preferences, prevent fraud, and analyse platform usage. A cookie is a small text file stored on your device by your web browser. zm777 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the zm777 platform to function and cannot be disabled. They include session authentication cookies that maintain your zm777 login state, CSRF protection tokens, and security cookies that protect against cross-site request forgery attacks.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display (PKR), and notification settings — to provide a more personalised zm777 experience across sessions.
• Analytics Cookies: zm777 uses first-party analytics cookies to collect anonymised data about how Members navigate and use the zm777 platform. This data helps zm777 understand which features are most valuable and identify areas for improvement.
• Responsible Gaming Cookies: zm777 uses specific cookies to enforce session time limits, reality check schedules, and other responsible gaming controls that you have configured in your account settings.

You may control cookie settings through your browser's settings menu. However, disabling strictly necessary cookies will impair the zm777 platform's functionality and may prevent you from accessing your zm777 account. zm777 does not use third-party advertising or retargeting cookies.

zm777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with zm777's legal and regulatory retention obligations, and to resolve any disputes or enforce zm777's legal rights. The following retention periods apply:

Upon expiry of the applicable retention period, zm777 will securely delete or irreversibly anonymise the personal data. Where a Member requests erasure of their personal data before the end of the applicable retention period, zm777 will assess whether it is legally permitted to comply with the request and will communicate its decision to the Member within 30 days.

zm777 implements a comprehensive set of technical and organisational security measures to protect Member personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zm777 platform, including zm777 login sessions, payment transactions, and support communications.
• AES-256 encryption for all personal data and financial records stored within zm777's databases and cloud storage systems.
• Role-based access controls limiting internal access to Member personal data strictly to zm777 personnel who require it to perform their job functions, with comprehensive audit logging of all data access events.
• Multi-factor authentication requirements for all zm777 internal systems personnel accessing Member data.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Incident response procedures enabling zm777 to detect, contain, and notify affected Members of any personal data breach in accordance with applicable requirements.

zm777's operations, server infrastructure, and certain third-party service providers are located in jurisdictions outside Pakistan. Accordingly, your personal data may be transferred to and processed in countries other than Pakistan. zm777 ensures that any such international transfers are conducted with appropriate safeguards in place, including contractual data transfer agreements with recipient entities that require the application of data protection standards equivalent to those described in this Policy.

In particular, zm777's payment processing infrastructure for EasyPaisa and JazzCash transactions is operated in compliance with the data localisation and security requirements applicable to Pakistani mobile financial service providers. Financial transaction data associated with Pakistani payment methods is processed in accordance with the applicable regulatory framework governing those payment services.

The zm777 platform is strictly intended for individuals aged 21 years and above. zm777 does not knowingly collect personal data from any person under the age of 21. The zm777 registration process includes an age declaration, and CNIC-based age verification is mandatory before withdrawal privileges are activated for any account.

If zm777 becomes aware that personal data has been collected from a person under the age of 21, it will immediately suspend the relevant account, delete the collected personal data to the extent not required for regulatory purposes, and take appropriate follow-up action in accordance with zm777's responsible gaming policies and licensing obligations.

If you are aware of or suspect that a person under the age of 21 has registered or is using a zm777 account, please report this immediately to zm777 via email at [email protected]. zm777 takes all such reports seriously and will investigate promptly.

zm777 recognises the following rights of Members over their personal data and will facilitate the exercise of these rights within 30 calendar days of receiving a valid request. zm777 may extend this period by up to 30 further days where the complexity or volume of requests justifies this, in which case zm777 will notify you of the extension within the initial 30-day period.

• Access: You may request a copy of all personal data zm777 holds about you. zm777 will provide this data in a clear, structured format via your registered email address.
• Rectification: You may request correction of inaccurate personal data. Some corrections — such as changes to your registered name — require supporting documentation consistent with your CNIC.
• Erasure: You may request deletion of your personal data. zm777 will comply where no overriding legal or regulatory retention obligation applies. zm777 will inform you of any portions of your data that it is legally required to retain after an erasure request.
• Restriction: You may request that zm777 restrict processing of your personal data while a complaint or dispute is being investigated.
• Portability: You may request a machine-readable copy of the personal data you have provided to zm777 where technically feasible.
• Objection to Marketing: You may withdraw consent for marketing communications at any time via your account notification settings or by emailing zm777 support. Marketing opt-out takes effect immediately.

To exercise any of the above rights, please contact zm777 via email at [email protected] with the subject line "Data Rights Request". zm777 will verify your identity before processing any data rights request to ensure that requests are fulfilled only for the genuine account holder.

With your consent, zm777 may send you marketing communications about zm777 promotions, bonuses, PSL cricket betting offers, new game launches, and other zm777 services. zm777 uses the following channels for marketing communications:

• Email communications to your registered email address
• SMS notifications to your registered Pakistani mobile number
• In-platform notifications displayed within your zm777 account
• Push notifications where permitted by your device settings

You may opt in or out of each marketing channel independently via your zm777 account notification settings. Opting out of marketing communications does not affect your receipt of service-related communications (such as transaction confirmations, KYC status updates, and security alerts), which are sent regardless of your marketing preferences as they are necessary for the zm777 service.

zm777 does not conduct email marketing using purchased lists or third-party data. All zm777 marketing communications are sent only to Members who have explicitly opted in to receive them via the zm777 registration process or account settings. zm777 marketing emails comply with anti-spam standards and include a clearly visible unsubscribe mechanism in every communication.

zm777 reserves the right to modify this Privacy Policy at any time. Material changes to this Policy will be communicated to all registered zm777 Members via their registered email address at least 14 days before the changes take effect, except where immediate modification is required by law or regulatory direction. Non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of the Policy — may be made without prior notice.

The current version of this Policy is always available at zm777.biz/privacy-policy. The "Effective Date" at the top of this Policy reflects the date on which the current version came into force. Continued use of the zm777 platform after notification of changes constitutes acceptance of the revised Policy.

If you have any questions, concerns, or complaints about how zm777 handles your personal data, or if you wish to exercise any of your data rights, please contact zm777's privacy team using the following details:

zm777 takes privacy concerns seriously. All privacy complaints will be investigated and responded to by a qualified member of the zm777 compliance team. Where zm777 is unable to resolve a privacy concern to your satisfaction, you may have the right to raise the matter with the relevant supervisory authority under zm777's licensing jurisdiction.