zf777 Privacy Policy

zf777 is an online gaming platform operated by its licensed parent entity (hereinafter referred to as "zf777", "we", "us", or "our"), serving players across Pakistan through the website zf777.ws. For the purposes of applicable data protection legislation, zf777 is the data controller in respect of any personal data processed in connection with the use of the Platform.

This Privacy Policy applies to all users of the zf777 Platform, including registered account holders, prospective players who have commenced but not completed the registration process, and visitors to the zf777 website who have not registered an account. By accessing or using the zf777 Platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed.

This Privacy Policy should be read in conjunction with zf777's Terms & Conditions, which govern the overall contractual relationship between zf777 and its registered players.

zf777 collects the following categories of personal data in the course of providing its services to Pakistani players:

zf777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than that which may be disclosed voluntarily in the context of responsible gaming), or biometric data. Should any such data be inadvertently disclosed to us, we will not process it except to the extent required by law.

zf777 collects your personal data through the following means:

• Direct Submission: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or use any interactive feature of the Platform, you directly provide us with personal data.
• Automated Technical Collection: When you access the zf777 Platform, our servers automatically log technical information including your IP address, device identifiers, browser type, and session timestamps. This is standard practice for all online services.
• Cookies and Tracking Technologies: zf777 uses first-party cookies and certain analytics technologies to understand how players use the Platform. Full details are set out in Section 9 of this Policy.
• Third-Party Identity Verification Providers: Where required for KYC purposes, zf777 may obtain additional identity verification data from third-party verification services that cross-reference the information you provide against authoritative databases.
• Payment Processors: Our payment partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast — may share transaction confirmation data with zf777 to reconcile deposits and withdrawals.
• Fraud and AML Screening Services: zf777 may receive risk-scoring or flagging information from specialist anti-fraud and anti-money-laundering service providers as part of our regulatory compliance obligations.

zf777 uses the personal data it collects for the following purposes:

• Account Creation and Management: To create, maintain, and administer your zf777 Account, including processing your registration, verifying your identity, and managing your Account settings.
• Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other features of the zf777 Platform.
• Payment Processing: To process deposits received via JazzCash, EasyPaisa, and bank transfers, and to execute withdrawal requests to your registered payment method in PKR.
• KYC and Regulatory Compliance: To meet our obligations under applicable gaming regulations, including player identity verification, age verification, and source of funds checks.
• Anti-Money-Laundering (AML): To monitor transactions for patterns consistent with money laundering or terrorist financing, and to report suspicious activity to the appropriate authorities where legally required.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to administer Responsible Gaming Tools, and to enforce self-exclusion requests in accordance with zf777's responsible gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, account takeovers, bonus abuse, and other prohibited activities on the Platform.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing Communications: Where you have provided your consent, to send you promotional offers, bonus notifications, and news about new games or features available on the zf777 Platform. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage data and improve the functionality, performance, and user experience of the zf777 Platform.

zf777 processes your personal data on the following legal grounds:

• Contractual Necessity: The majority of personal data processing at zf777 is necessary for the performance of the contract between you and zf777 — specifically, the Terms & Conditions you accept upon registration. Without this processing, zf777 cannot provide you with its services.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting — are required by the laws and licensing conditions applicable to zf777. This processing is mandatory and cannot be opted out of.
• Legitimate Interests: zf777 processes certain data under its legitimate interests as a business, including fraud prevention, platform security, and improving the quality of the gaming experience. These legitimate interests are balanced against your rights and freedoms and do not override them.
• Consent: Where zf777 processes your data for optional purposes — such as sending you direct marketing communications — we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without detriment to your Account.

zf777 may share your personal data with the following categories of recipient:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification and KYC Providers: Third-party services used to verify your identity and age in compliance with zf777's licensing obligations. These providers are bound by strict data processing agreements.
• Game Content Providers: Licensed game studios and sports data providers whose products are integrated into the zf777 Platform may receive anonymised or pseudonymised usage data for technical integration purposes only.
• Fraud and AML Screening Services: Specialist providers that assist zf777 in identifying and preventing fraudulent activity and money laundering on the Platform.
• Regulatory and Law Enforcement Authorities: Where required by law or by a valid regulatory instruction, zf777 will disclose personal data to gaming regulators, financial intelligence units, police, or courts.
• Professional Advisors: Legal counsel, auditors, and accountants engaged by zf777, who are bound by confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving zf777, your personal data may be transferred as part of that transaction. You will be notified of any such change in data controller with reasonable advance notice.

zf777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general principle:

• Active Account Data: All personal data associated with your Account will be retained for the full duration of your active Account relationship with zf777, plus a minimum of five (5) years following account closure to meet anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Payment records and transaction histories will be retained for a minimum of seven (7) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documentation: Identity verification documents will be retained for five (5) years from the date of last verification, or longer where required by specific regulatory instruction.
• Marketing Consent Records: Records of consent and opt-out preferences will be retained for three (3) years from the date of the last interaction related to that consent, to enable zf777 to demonstrate compliance.
• Technical and Log Data: Server logs and session data are retained for thirteen (13) months for security analysis and then securely deleted.

At the end of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

zf777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption: All data transmitted between your device and the zf777 Platform is protected by TLS (Transport Layer Security) encryption. Data at rest on our servers is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within zf777's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Payment Tokenisation: zf777 does not store raw payment card details. Card transactions are processed through tokenised payment infrastructure, meaning actual card numbers never reside on the zf777 Platform.
• Penetration Testing: zf777's Platform is subject to periodic security assessments and penetration tests conducted by independent security specialists.
• Incident Response: zf777 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

While zf777 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and should notify zf777 immediately at [email protected] if you suspect any unauthorised access.

The zf777 Platform uses cookies and similar tracking technologies to ensure the site functions correctly, to remember your preferences, and to understand how players interact with the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, security, and the zf777 Login process. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as language settings and Responsible Gaming Tool configurations — so that you do not need to re-enter them on every visit.
• Analytics Cookies: zf777 uses first-party analytics to understand aggregated patterns of Platform usage — for example, which games are most popular or where players encounter technical difficulties. This data is used only to improve the Platform and is not linked to individual identifiable players in its processed form.
• Session Integrity Cookies: These cookies verify that requests made to the Platform originate from your authenticated session and protect against cross-site request forgery (CSRF) attacks.

You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair the functionality of the zf777 Platform and may prevent you from accessing your Account.

As a data subject whose personal data is processed by zf777, you hold the following rights, subject to applicable law and certain limited exceptions:

• Right of Access: You have the right to request a copy of the personal data that zf777 holds about you, along with information about how it is processed. We will respond to such requests within 30 days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may also update certain information directly within your Account settings.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding legal retention obligations, particularly in relation to AML and financial records.
• Right to Restriction: You have the right to request that zf777 restrict its processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of zf777's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". zf777 may need to verify your identity before processing any such request. We will respond within 30 calendar days and will not charge a fee for reasonable requests.

As part of its age verification process, zf777 collects date of birth information at registration and may require documentary evidence of age — such as a CNIC or passport — before permitting a player to deposit or withdraw funds. Players who are found to be under the age of 21 will have their Accounts immediately closed and any deposited funds returned to the original payment source.

If zf777 becomes aware that personal data has been collected from a person under the age of 21 without the knowledge of a parent or guardian, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered a zf777 Account, please contact us immediately at [email protected].

zf777 may send you promotional communications — including bonus offers, game launch announcements, and seasonal promotions — via email or SMS to the contact details registered on your Account, provided you have given your consent to receive such communications.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from zf777.
• Updating your communication preferences in your Account settings under the "Notifications" section.
• Contacting the zf777 support team at [email protected] and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect transactional or service-related communications — for example, Account verification emails, deposit confirmations, withdrawal notifications, and responsible gaming alerts. These communications are sent on the basis of contractual necessity and cannot be opted out of while your Account remains active.

zf777 does not engage in unsolicited bulk marketing ("spam"). All marketing communications sent by zf777 will clearly identify zf777 as the sender and will include a clear and functional opt-out mechanism.

The zf777 Platform integrates with a number of third-party service providers to deliver a complete gaming experience. These include game content studios, live casino stream providers, payment gateways, and identity verification services. Each of these providers operates under its own privacy policy and data processing terms.

Where zf777 engages third-party data processors — meaning providers who process personal data solely on our instructions — we require those processors to be bound by a written Data Processing Agreement that mandates appropriate technical and organisational security measures, restricts the use of data to the agreed purpose, and obliges the processor to assist zf777 in responding to data subject rights requests.

The zf777 Platform may contain links to third-party websites or resources for informational purposes. zf777 has no control over the privacy practices of those external sites and is not responsible for their content or data handling. We encourage you to review the privacy policies of any third-party site you visit.

The zf777 Platform primarily serves players in Pakistan and processes the majority of its data within the jurisdictions covered by its operating licence. However, certain technical infrastructure components — including cloud hosting services and game content delivery networks — may involve the transfer of personal data to servers located in other countries.

Where personal data is transferred outside Pakistan or the jurisdiction of the applicable licence, zf777 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that which would apply within the originating jurisdiction. These safeguards may include:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into agreements with the receiving party.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by the applicable regulatory body.
• Binding corporate rules where transfers occur within a group of companies operating under a shared compliance framework.

You may request further information about the specific safeguards applied to any particular international transfer of your personal data by contacting [email protected] with the subject line "International Transfer Query".

zf777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever a change is made.

Material Changes: Where a change is material — meaning it substantively affects how we collect, use, or share your personal data, or significantly affects your rights — zf777 will notify registered players by email to the address on file at least seven (7) calendar days before the change takes effect. A prominent notice will also be displayed on the Platform during this period.

Non-Material Changes: Minor updates such as typographical corrections, clarifications that do not alter the substance of any provision, or changes required by updated regulatory guidance may be made without individual prior notice and will take effect upon publication.

Your continued use of the zf777 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree to any material change, you should cease using the Platform and may request Account closure in accordance with Section 12 of the zf777 Terms & Conditions.

All previous versions of this Privacy Policy are superseded by the current version bearing the most recent "Last Updated" date. Prior versions are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way zf777 processes your personal data, please contact us using the details below. All data-related requests and formal privacy notices must be submitted in writing to the email address provided.

When submitting a data subject rights request, please use the subject line "Data Subject Request" and include your registered Account username and the specific right you wish to exercise. zf777 may need to verify your identity before processing your request to prevent unauthorised disclosure of personal data.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document.