Privacy Policy — How zu777 Handles Your Personal Data

zu777 ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all users of https://zu777.cam (the "Platform"). This Privacy Policy ("Policy") sets out in clear terms the categories of personal data we collect, the purposes for which we process it, the legal bases for that processing, and the rights available to you in respect of your data.

This Policy is incorporated into and forms part of the zu777 Terms & Conditions. By creating an Account, accessing the Platform or otherwise providing personal data to us, you confirm that you have read and understood this Policy and that you consent to the processing described herein where consent is the applicable legal basis.

We process personal data in accordance with the data protection principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability. We do not sell your personal data to third parties for their own marketing purposes.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person (a "data subject"), including name, email address, IP address, device identifiers, payment information and behavioural data.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction.
• "Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, zu777 is the Data Controller.
• "Processor" — A third party that processes personal data on behalf of the Controller, under contractual instruction.
• "KYC" — Know Your Customer — the identity and document verification process conducted before withdrawals or full Account features are activated.
• "AML" — Anti-Money Laundering — regulatory obligations that require the Operator to monitor transactions and verify the source of funds in certain circumstances.
• "Cookie" — A small text file placed on your device by a website to store information about your browsing session or preferences.

We collect personal data through a variety of means, including Account registration, identity verification, gameplay activity, payment processing and customer support interactions. The categories of data we may collect include:

3.1 — Identity Data

Full legal name, date of birth, nationality, government-issued identification numbers (e.g., CNIC number or passport number for Pakistani users), and facial image data where document verification requires it.

3.2 — Contact Data

Email address, mobile telephone number, residential address, city and country of residence. Pakistani users may provide addresses in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere — this information is stored solely for account and compliance purposes.

3.3 — Financial Data

Deposit amounts, withdrawal amounts, payment method reference information (e.g., masked bank account details or wallet reference numbers), transaction history and currency type (including PKR where applicable). Full payment card numbers are not stored by the Operator; card processing is handled by PCI-DSS-compliant third-party payment processors.

3.4 — Technical & Usage Data

IP address, browser type and version, device type, operating system, session duration, pages visited, features used, bet history, game play history, login timestamps and geolocation data (at city or country level only, where permitted).

3.5 — Communications Data

Records of correspondence with our support team, including live chat transcripts, email exchanges and support ticket content, where you contact us for assistance.

We process your personal data only where we have a valid legal basis to do so. The applicable legal bases are:

zu777 processes your personal data for the following purposes:

• Account creation and management: Registering your Account, verifying your identity and maintaining the ongoing operation of your Account.
• Payment processing: Facilitating deposits and withdrawals, preventing payment fraud and complying with financial crime regulations.
• KYC and AML compliance: Verifying that you meet eligibility requirements, confirming your identity using official documentation and monitoring transactions for suspicious activity as required by applicable law.
• Responsible gambling: Monitoring play patterns to identify potential signs of problem gambling and applying account restrictions where requested or required.
• Customer support: Responding to enquiries, resolving disputes and providing account assistance.
• Platform improvement: Analysing usage data in aggregate to improve the Platform's features, performance and user experience.
• Security: Detecting and preventing fraud, abuse of the Platform's bonus systems, multi-accounting and other prohibited conduct.
• Marketing (with consent): Sending promotional offers, bonus notifications and Platform updates where you have opted in to receive such communications. You may opt out at any time.

We do not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Identity verification providers: Third-party KYC service providers who verify identity documents and screen against sanctions and PEP databases.
• Payment processors: PCI-DSS-compliant payment service providers that handle deposit and withdrawal transactions. Familiar Pakistani payment rails such as Easypaisa, JazzCash, Raast and bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah) may be referenced as user-familiar local payment methods — but the Operator does not share unnecessary personal data with these providers beyond what is required for transaction processing, and none of these providers endorse gambling.
• Technology and platform providers: Software and infrastructure providers (e.g., game content studios, sports data providers) who may access technical data in the course of providing contracted services to us.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order or regulatory instruction, we will share data as legally required.
• Fraud and AML monitoring services: Specialist third-party services used to detect financial crime and abuse of the Platform.

All third-party processors are engaged under contractual data processing agreements that require them to process personal data only on our instruction and to apply appropriate security standards.

We retain personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with standard AML and financial record-keeping requirements.
• KYC documentation: Retained for the duration of the account relationship and for five (5) years thereafter, or as required by applicable licensing conditions.
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant query or dispute.
• Marketing data: Retained until you withdraw consent or opt out, after which it will be deleted or anonymised within thirty (30) days.
• Technical and log data: Typically retained for up to twelve (12) months unless required for longer for security or legal purposes.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

zu777 implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Role-based access controls ensuring that only authorised personnel can access personal data in the performance of their duties;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Two-factor authentication (2FA) available to all Account holders for additional login security.

The zu777 Platform uses cookies and similar tracking technologies to operate core Platform functions, analyse usage patterns and — where you have consented — deliver personalised content. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

We do not use third-party advertising cookies or cross-site tracking cookies to build profiles of your browsing behaviour for third-party advertisers.

As an international platform, zu777 may transfer personal data to countries outside of your country of residence, including to the jurisdiction in which the Operator is incorporated or licensed. Where data is transferred outside a jurisdiction that requires specific transfer safeguards, we ensure that appropriate protections are in place, such as standard contractual clauses, data processing agreements or equivalent measures.

Pakistani users should be aware that their personal data will be processed in the Operator's operating jurisdiction and may be processed by third-party service providers located in various countries. Such processing is conducted in accordance with this Policy and applicable data protection standards.

Depending on applicable law in your jurisdiction, you may hold one or more of the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

We will respond to verified data rights requests within thirty (30) days. Where requests are complex or numerous, this period may be extended by a further two (2) months with notification. Identity verification may be required before we can action a request.

The zu777 Platform is strictly for adults aged 18 and above — or the higher minimum required by the operator's licensing jurisdiction. We do not knowingly collect or process personal data relating to minors. Where we have reason to believe that a user is under the applicable minimum age, we will suspend the Account pending age verification and, if confirmed, will permanently close the Account and return any deposited real-money balance.

If you believe a minor is using or has accessed the Platform, please contact us immediately at [email protected] so that we can take appropriate action.

The zu777 Platform may reference or interface with third-party services, including payment providers, game content studios and data partners. This Privacy Policy applies only to data processed by or on behalf of zu777. We are not responsible for the privacy practices of third-party services or external websites. Where third-party payment processing interfaces are accessed in connection with deposits or withdrawals, users are subject to the relevant third party's own privacy terms in addition to this Policy.

Payment provider names — Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced as familiar Pakistani payment rails for contextual purposes only. Their inclusion in this Policy does not imply any endorsement of gambling, data sharing arrangement or commercial relationship beyond standard payment processing where applicable.

zu777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform features. Material changes will be communicated to registered Account holders via email notification or a prominent in-platform notice at least fourteen (14) days before the changes take effect, where practicable.

The current version of this Policy is always available at https://zu777.cam/privacy-policy. The "Last reviewed" date at the top of this page indicates when the Policy was most recently updated. Continued use of the Platform following a Policy update constitutes acceptance of the revised terms.

For any questions, concerns or requests related to this Privacy Policy or to your personal data, please contact our support team. All privacy-related correspondence should include "Privacy Policy Query" or "Data Rights Request" in the subject line.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Pakistani users may consider seeking independent legal advice regarding data protection rights under applicable Pakistani law.