zm77 Privacy Policy

This Privacy Policy applies to all users of the zm77 platform, accessible at zm77.org, including players based in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. By registering an account with zm77 or continuing to use the zm77 platform, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Privacy Policy.

zm77 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. We collect only the personal data that is necessary to provide our services, verify player identities, process payments in Pakistani Rupees, and comply with our obligations under international gaming and anti-money laundering frameworks.

If you have any questions about this Privacy Policy or how zm77 handles your personal data, you may contact our Data Support team at [email protected]. Our team operates 24/7 and is available in both English and Urdu.

zm77 collects personal data that falls into several distinct categories. The following table provides a clear breakdown of the categories of data zm77 may collect, along with examples of the specific data points within each category.

zm77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification purposes.

zm77 collects personal data through the following channels:

• Direct Registration: When you create a zm77 account, you provide Identity Data and Contact Data directly through the registration form.
• KYC Verification: When zm77 requests identity verification, you upload copies of your CNIC, passport, or other government-issued documents directly to the zm77 secure verification portal.
• Payment Transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, Financial Data is generated and recorded automatically.
• Platform Usage: Gaming & Betting Data and Technical Data are collected automatically as you interact with the zm77 website, sportsbook, and casino products.
• Customer Support Interactions: When you contact zm77 support via chat or email, Communications Data is created and stored to maintain a record of your query and its resolution.
• Cookies and Tracking Technologies: zm77 uses cookies and similar technologies to collect Technical Data about your device and browsing behaviour on the zm77 platform. See Section 9 for full details.

zm77 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your zm77 account, maintain your player profile, and provide you with access to the zm77 sportsbook, casino, and slot products.
• Identity and Age Verification: To verify that you are at least 21 years of age and that your identity matches the details provided during registration, in accordance with zm77's KYC obligations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions on your zm77 account.
• Fraud Prevention and Anti-Money Laundering: To detect, investigate, and prevent fraud, bonus abuse, money laundering, and other financial crimes on the zm77 platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your support queries, complaints, and account-related requests efficiently and accurately.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and game content of the zm77 platform.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including responding to lawful requests from relevant authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and zm77 news — but only where you have given explicit consent to receive such communications. You may opt out at any time.

zm77 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to provide you with the zm77 service under the Terms and Conditions you agreed to at registration — for example, processing deposits, managing your account, and settling bets.
• Legal Obligation: Processing that zm77 is required to carry out under applicable law — for example, identity verification under anti-money laundering regulations, and retaining financial transaction records for the required statutory period.
• Legitimate Interests: Processing carried out to pursue zm77's legitimate business interests, provided those interests are not overridden by your privacy rights — for example, fraud prevention, platform security monitoring, and internal analytics.
• Consent: Processing that relies on your freely given, specific, and informed consent — for example, sending you marketing communications about zm77 bonuses and promotions. You may withdraw consent at any time by contacting support at [email protected] or updating your communication preferences in your account settings.

zm77 does not sell, rent, or trade your personal data to third parties for their own independent purposes. zm77 may share your personal data with third parties only in the following limited circumstances:

• Payment Service Providers: zm77 shares necessary Financial Data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your PKR deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable financial data protection obligations.
• Identity Verification Partners: zm77 may use third-party KYC and age verification services to validate the identity documents you submit. These partners are contractually obligated to handle your Verification Data with strict confidentiality.
• Game Software Providers: Third-party casino game developers whose games are hosted on the zm77 platform may receive anonymised session data necessary to operate their games. No personally identifiable data is shared with game providers beyond what is technically required.
• Legal and Regulatory Authorities: zm77 will disclose personal data to law enforcement agencies, regulators, or courts when required to do so by a valid legal order, warrant, or statutory obligation. zm77 will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention Networks: zm77 may share data with industry-standard fraud prevention networks and databases to identify and block fraudulent actors. This is carried out under zm77's legitimate interest in protecting the platform and its players.
• Corporate Transactions: In the event of a merger, acquisition, or sale of zm77's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. zm77 will notify affected users prior to any such transfer taking effect.

zm77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations.

• Active Accounts: Personal data associated with an active zm77 account is retained for the duration of the account's existence and for a minimum period of five years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• KYC and Verification Documents: Identity verification documents, including CNIC and passport copies, are retained for the period required under zm77's licensing obligations — typically five years from the date of submission or from the date of account closure, whichever is later.
• Financial Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction for audit and compliance purposes.
• Support Communications: Customer support correspondence is retained for three years from the date of the last interaction, to allow zm77 to maintain accurate records for dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as necessary to demonstrate compliance with your stated preferences.

Upon expiry of the applicable retention period, zm77 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

zm77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the zm77 platform is encrypted using industry-standard TLS protocols. You can verify this by checking for the padlock symbol in your browser's address bar when visiting zm77.org.
• Password Hashing: zm77 account passwords are never stored in plain text. They are processed using a strong cryptographic hashing algorithm with salting to protect your credentials even in the event of a data breach.
• Access Controls: Access to zm77 systems and databases containing personal data is restricted to authorised zm77 personnel on a strict need-to-know basis. All staff with access to personal data undergo security training.
• Two-Factor Authentication: zm77 supports two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA from their account security settings for an additional layer of protection.
• Regular Security Audits: zm77's platform and infrastructure are subject to regular security reviews and penetration testing to identify and remediate vulnerabilities proactively.
• Data Breach Response: In the event of a data breach that is likely to result in a risk to your rights, zm77 will notify affected players without undue delay and take immediate remedial action.

zm77 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, analyse platform performance, and — where you have provided consent — deliver relevant promotional content.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling Strictly Necessary cookies will prevent the zm77 platform from functioning correctly and you will not be able to log in to your zm77 account. Disabling optional cookies will not affect your ability to use the zm77 platform, but may result in a less personalised experience.

zm77 respects your rights over your own personal data. Subject to applicable law and zm77's legal obligations, you hold the following rights in relation to personal data that zm77 holds about you:

• Right of Access: You may request a copy of the personal data zm77 holds about you at any time. zm77 will provide this within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any personal data zm77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly from your zm77 account settings.
• Right to Erasure: In certain circumstances, you may request that zm77 delete your personal data. This right is subject to zm77's legal obligations to retain data for compliance purposes — zm77 cannot erase data that it is legally required to retain.
• Right to Restrict Processing: You may request that zm77 restrict the processing of your personal data in circumstances where you contest its accuracy or object to its use.
• Right to Data Portability: Where zm77 processes your personal data on the basis of your consent or for the performance of a contract, you may request that zm77 provide your data in a structured, machine-readable format.
• Right to Object: You may object to zm77 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. zm77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where zm77 relies on your consent to process your personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

zm77 implements robust age verification measures at the point of registration and may request documentary proof of age at any point during a player's relationship with zm77. If zm77 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, zm77 will:

• Immediately suspend the relevant account pending investigation.
• Delete any personal data collected from the underage individual as soon as it is safe and legally permissible to do so.
• Return any net deposits made to the payment method used, after deducting any withdrawal amounts already processed, where this is practically possible.
• Retain a record of the incident for compliance and audit purposes, as required under zm77's licensing obligations.

Parents and guardians in Pakistan who are concerned that a minor may have registered with zm77 are urged to contact our support team immediately at [email protected]. zm77 takes all such reports seriously and will investigate and act without delay.

As an internationally operated online gaming platform, zm77 may transfer your personal data to, and process it in, countries outside Pakistan. This may include transfers to countries where zm77's hosting infrastructure, payment processing partners, or KYC verification providers are located.

Where such international transfers occur, zm77 takes reasonable steps to ensure that your personal data receives a level of protection equivalent to the standards described in this Privacy Policy, including through contractual arrangements with receiving parties that require them to implement appropriate data protection measures.

zm77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, zm77 will notify registered players by email and will display a prominent notice on the zm77 platform for a reasonable period.

The most current version of this Privacy Policy will always be available at zm77.org/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the zm77 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Privacy Policy, you must cease using the zm77 platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zm77 processes your personal data, please contact the zm77 Data Support team using the details below. Our team is available around the clock in English and Urdu to assist all players across Pakistan.

When contacting zm77 regarding a privacy matter, please include your zm77 registered username, a clear description of your query or request, and any relevant reference numbers. This will allow our team to locate your account and respond as efficiently as possible. zm77 will acknowledge all privacy-related contacts within 48 hours and aim to provide a substantive response within 30 days.