Privacy Policy — zm777

This Privacy Policy ("Policy") is issued by zm777 ("zm777", "we", "us", "our") and applies to all personal data processed in connection with your use of the zm777 Platform, accessible at https://zm777.cam ("Platform"). This Policy forms part of our overall Terms and Conditions and should be read in conjunction with them.

zm777 is an online casino and sports betting entertainment platform designed for English-speaking players, with a primary focus on users in Pakistan. We understand that Pakistani players value privacy, security and clarity — and we have written this Policy to reflect those priorities in straightforward English rather than impenetrable legal text where possible.

By registering an Account or using the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform.

In this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes information such as your name, email address, IP address, device identifiers and financial transaction data where it can be used to identify you.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, adaptation, combination, restriction, erasure or destruction.
• "Data Controller" means zm777, which determines the purposes and means of Processing your Personal Data on the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of zm777 under contractual instruction, such as payment processors, identity verification providers and cloud hosting services.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the Processing of your Personal Data for a stated purpose.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Platform for functional, analytical or preference purposes, as described in Section 10 of this Policy.

zm777 collects only the data necessary to operate your account, verify your identity, process transactions and comply with applicable legal obligations. The following table summarises the categories of Personal Data we may collect:

zm777 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in promotions or update your account settings.
• Automatically through the Platform — when you browse or use the Platform, we collect technical and behavioural data through log files, cookies and similar technologies. This includes your IP address, session activity and device information.
• From third-party service providers — identity verification providers, fraud detection services and payment processors may supply zm777 with data related to identity confirmation, payment authentication and risk assessment. These providers operate under separate privacy policies and data processing agreements.
• From publicly available sources — zm777 may supplement account information with publicly available data for anti-money-laundering and compliance screening purposes, in accordance with applicable regulatory obligations.

zm777 processes your Personal Data for the following primary purposes:

• Account Operation: To create, maintain and administer your zm777 Account, including balance management, transaction recording and account security.
• Identity and Age Verification: To confirm that you meet the minimum age requirement (18 years, or the higher minimum required by the operator's licence jurisdiction) and to verify your identity as required by KYC obligations.
• Payment Processing: To facilitate deposits and withdrawals through available payment methods, to detect and prevent fraudulent transactions, and to maintain accurate financial records.
• Responsible Gambling: To monitor account activity for indicators of problem gambling, to administer deposit limits, loss limits, session controls and self-exclusion settings, and to provide appropriate interventions where warranted.
• Legal and Regulatory Compliance: To comply with applicable anti-money-laundering (AML), counter-terrorism-financing (CTF) and sanctions-screening obligations, and to respond to legitimate requests from regulatory or law enforcement authorities.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, account takeover attempts, bonus abuse and other conduct that may harm the Platform or other players.
• Platform Improvement: To analyse aggregate usage patterns, measure feature performance and improve the overall user experience — using anonymised or pseudonymised data where possible.
• Communication: To send you account-related notifications, security alerts, support responses and, where you have opted in, promotional communications. You may opt out of marketing communications at any time through your account preferences.

zm777 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to provide the services you have requested — including account registration, transaction processing and KYC verification — is carried out on the basis that it is necessary to perform our contract with you.
• Legal Obligation: Processing required to comply with applicable AML, CTF, sanctions, age-verification and tax-reporting obligations is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gambling monitoring and internal analytics is carried out on the basis of zm777's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and certain cookie-based tracking is carried out only where you have provided explicit, informed consent. You may withdraw consent at any time through your account settings or by contacting support.

zm777 may share your Personal Data with third parties only in the circumstances described below. All third-party recipients are subject to appropriate contractual data protection obligations.

• Identity Verification Providers: Third-party KYC and age-verification providers receive identity documentation to confirm your identity and age as required for platform compliance.
• Payment Processors: Payment service providers receive the minimum financial data necessary to process deposit and withdrawal requests. Payment provider names listed on the Platform — including contextual references to Pakistani payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — do not imply data-sharing partnerships or endorsements; they are contextual references only.
• Fraud and Risk Management Services: Specialised fraud detection and risk-scoring providers may receive technical and behavioural data to identify and prevent fraudulent or abusive account activity.
• Cloud and Hosting Infrastructure: zm777 uses third-party cloud hosting and infrastructure services. These providers process data only under instruction from zm777 and are bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: zm777 will disclose Personal Data to competent regulatory or law enforcement authorities where required to do so by applicable law, court order or regulatory direction, or where such disclosure is necessary to protect the safety of users or the public.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the zm777 business, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to appropriate confidentiality undertakings.

zm777 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations and to resolve any disputes or enforce our agreements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure to satisfy AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in accordance with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years to comply with applicable record-keeping obligations.
• Support and Communication Records: Retained for a minimum of two (2) years from the date of the last interaction, or longer where relevant to an active dispute or investigation.
• Marketing Preference Data: Retained until you withdraw consent for marketing communications, at which point your preference is updated immediately and historical marketing data may be anonymised.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

zm777 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls ensuring that zm777 personnel can only access Personal Data to the extent required for their specific operational responsibilities.
• Two-factor authentication options available to all Account holders to protect against unauthorised account access.
• Regular security reviews of Platform systems and third-party integrations.
• Incident response procedures designed to detect, contain and report data security incidents in a timely manner.

zm777 uses cookies and similar tracking technologies to operate essential platform functions, analyse usage patterns and maintain session security. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing identifiers. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations, so that they persist across sessions.
• Analytical Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform. This data is used to improve Platform performance and user experience. Analytical cookies are only set where you have provided consent.
• Session Security Cookies: Used to detect and prevent fraudulent session activity, including concurrent login detection and IP-change alerts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain Platform features. zm777 does not use third-party advertising or tracking cookies to serve behavioural advertising.

Subject to applicable law and zm777's legitimate interests and legal obligations, you may have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected]:

zm777 is strictly an adults-only Platform. Access is limited to persons aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction. zm777 does not knowingly collect Personal Data from persons under the age of 18. Age verification is a mandatory step in the KYC process and zm777 reserves the right to close any Account where a minor is found to have registered, with all funds forfeited in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor under your care has created an Account or submitted Personal Data to zm777, please contact us immediately at [email protected]. We will take prompt action to close the Account and securely delete the associated data.

We recommend that parents and guardians using shared devices in Karachi, Lahore, Islamabad, Faisalabad, Multan, Peshawar or anywhere else in Pakistan install parental control software and maintain supervised access to internet-connected devices.

zm777 operates an online Platform and uses technology infrastructure and service providers that may be located in jurisdictions outside Pakistan. As a result, your Personal Data may be transferred to, stored in and processed in countries other than the country in which you are located. Where such transfers occur, zm777 takes steps to ensure that appropriate safeguards are in place to protect the transferred data in a manner consistent with this Policy and applicable data protection standards.

Safeguards for international data transfers may include: contractual clauses that impose equivalent data protection obligations on recipients; use of third-party processors that have certified compliance with recognised data protection frameworks; and technical security measures that apply regardless of the geographic location of data storage.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.

zm777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, Platform functionality or data processing practices. Where material changes are made, zm777 will provide reasonable advance notice to active Account holders through in-platform notification, email communication or prominent display on the Platform.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should close your Account and cease using the Platform.

We encourage you to review this Policy periodically, particularly if you regularly use the Platform from Pakistan, to stay informed about how your data is being used and protected.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the zm777 Data Support team through the following channels:

For related legal documentation, please also review our Terms & Conditions and our Responsible Gambling page.