zu777 Privacy Policy

1. Introduction

zu777 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every individual who uses the zu777 website, mobile application, and associated services available at zu777.vip. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data belonging to registered Players and site visitors, including users located in Pakistan and other jurisdictions where zu777 operates.

Pakistan's digital landscape is evolving rapidly, and Karachi, Lahore, Islamabad, and Faisalabad are home to millions of online users who deserve to know exactly how their information is handled. zu777 takes that responsibility seriously. We align our data practices with internationally recognised privacy standards and operate with transparency at every stage of the data lifecycle.

This Policy applies to all personal data processed by zu777 regardless of the medium through which it was collected — whether via our website, mobile application, email correspondence, live chat, or any other communication channel. It applies to prospective users who browse our site, registered Players with active accounts, and former Players whose accounts have been closed.

2. Data Controller

For the purposes of this Privacy Policy, zu777 acts as the data controller in respect of personal data collected directly from users through the Platform. As data controller, zu777 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection principles.

Where zu777 engages third-party service providers to process personal data on its behalf — for example, payment processors such as JazzCash and EasyPaisa, or identity verification partners — those providers act as data processors under written agreements that obligate them to process data only on zu777's documented instructions and to maintain appropriate security standards.

3. Data We Collect

zu777 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the main data types collected, the source of collection, and the primary reason for collection.

Category	Examples	Source	Purpose
Identity Data	Full name, date of birth, CNIC number, nationality	Provided by you at registration or KYC	Account creation, age verification, KYC compliance
Contact Data	Email address, mobile number, city of residence (e.g. Lahore, Karachi)	Provided by you at registration	Account communications, support, security alerts
Financial Data	JazzCash/EasyPaisa account reference, bank account holder name, transaction amounts in PKR	Payment processors; provided by you during deposits/withdrawals	Transaction processing, fraud prevention, AML compliance
Identity Documents	CNIC scan, passport copy, proof of address	Uploaded by you during KYC verification	Regulatory KYC compliance, withdrawal approval
Technical Data	IP address, device type, browser version, operating system, session timestamps	Automatically collected via Platform logs	Security monitoring, fraud detection, service optimisation
Usage Data	Games played, bet amounts, session duration, bonus redemptions	Automatically collected via Platform activity logs	Responsible gaming monitoring, personalisation, dispute resolution
Communication Data	Live chat transcripts, email correspondence, support tickets	Generated during your interactions with support	Quality assurance, dispute resolution, regulatory compliance
Marketing Preferences	Email/SMS opt-in status, preferred bonus types	Provided by you via account settings or registration	Sending promotional communications where consent is given

zu777 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued CNIC is submitted for identity verification purposes, in which case only the information necessary for KYC is extracted and retained.

4. How We Use Your Data

zu777 uses the personal data it collects only for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason for which it was collected without first obtaining your explicit consent or establishing an appropriate alternative legal basis.

• Account Management: To create, maintain, verify, and administer your zu777 player account, including processing login credentials and account preference settings.
• Transaction Processing: To receive and process PKR deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, and to fulfil withdrawal requests to your verified payment method.
• Identity & Age Verification: To verify that you are at least 21 years of age and to conduct KYC checks required under applicable regulatory obligations before activating withdrawal functionality.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, multi-accounting, and other forms of abuse that could harm Players or the integrity of the Platform.
• Responsible Gaming: To monitor gaming patterns, identify indicators of problem gambling behaviour, and proactively contact Players where protective intervention may be warranted, in accordance with our responsible gaming commitments.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through live chat and email channels.
• Legal & Regulatory Compliance: To comply with applicable laws, licensing conditions, anti-money laundering (AML) obligations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: To send promotional emails, SMS notifications, and platform alerts about bonuses and offers — but only where you have provided explicit opt-in consent. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game selection, platform performance, and the overall user experience for Pakistani players.

5. Legal Basis for Processing

Every data processing activity carried out by zu777 rests on one or more of the following recognised legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Player Account Agreement — including account creation, transaction processing, and KYC verification — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legal Obligation: Where processing is required to comply with applicable law, regulatory requirements, AML obligations, or court orders, we process data on the basis of legal obligation.
• Legitimate Interests: zu777 may process certain data — including technical and usage data — on the basis of legitimate interests, provided those interests are not overridden by your fundamental rights. Fraud prevention and platform security fall within this category.
• Consent: Where processing is based on your consent — such as marketing communications or the use of non-essential cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

zu777 does not sell your personal data to third parties. We may share your data only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with approved payment service providers — including JazzCash, EasyPaisa, Raast, and partnered banks — solely to process your deposit and withdrawal transactions in PKR. These providers are bound by their own regulatory obligations and data protection requirements.
• Identity Verification Partners: KYC documentation may be shared with regulated third-party identity verification service providers engaged by zu777 for the purpose of verifying your identity and age. These providers process data exclusively on zu777's instructions.
• Game Content Providers: Certain technical identifiers — such as anonymised player session tokens — may be shared with licensed game providers (including providers of Fortune Tiger, Fortune Mouse, and other games) for the purpose of delivering game content and resolving technical disputes. No identifiable personal data is shared beyond what is strictly necessary.
• Legal & Regulatory Authorities: zu777 may disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law or a valid legal order. zu777 will take reasonable steps to notify affected Players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of zu777, your personal data may be transferred to the acquiring entity as part of that transaction, subject to continued application of this Privacy Policy or equivalent protections.

7. Data Retention

zu777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your registered account plus a minimum of five (5) years following account closure, in accordance with standard AML and gaming regulatory record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• Communication & Support Records: Live chat transcripts and email correspondence are retained for a period of three (3) years to support dispute resolution and quality assurance.
• Marketing Data: Retained only while your opt-in consent remains active. Upon withdrawal of consent, marketing data is deleted or anonymised within 30 days.
• Technical & Log Data: Server logs and technical access records are retained for a period of twelve (12) months, after which they are automatically purged or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8. Cookies & Tracking Technologies

zu777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your logged-in session, and analyse how the Platform is used. Cookies are small text files stored on your device by your browser.

The following categories of cookies are used on the zu777 platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable core functions such as session management, login authentication, and security features. The Platform cannot function properly without these cookies, and they do not require your consent.
• Functional Cookies: Used to remember your preferences — such as language settings and display preferences — to personalise your experience. These are set only with your consent.
• Analytical Cookies: Used to collect anonymised data about how Players navigate and interact with the Platform, helping us identify areas for improvement. Analytical cookies are set only with your consent and do not track you across other websites.
• Security Cookies: Used to detect fraudulent activity, flag suspicious login patterns, and protect the integrity of your account session.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use core Platform features including login and game loading. For full details on cookies used, please refer to the cookie management tool available within the Platform settings.

9. Your Rights

Subject to applicable law and certain exceptions related to regulatory compliance obligations, you hold the following rights in respect of your personal data held by zu777:

• Right of Access: You have the right to request a copy of the personal data zu777 holds about you, along with information about how it is used and shared.
• Right to Rectification: If any personal data held by zu777 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — such as where the data is no longer necessary for its original purpose, or where you withdraw consent and no other legal basis applies — you may request deletion of your personal data. Note that zu777 may be required to retain certain data for regulatory compliance purposes even following a deletion request.
• Right to Restrict Processing: You may request that zu777 restrict the processing of your data in specific circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10. Children & Minors

The zu777 platform is strictly for adults aged 21 years and over. zu777 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Gambling services are not directed at, and should not be accessed by, persons under the minimum age threshold.

If zu777 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21, it will take immediate steps to suspend the relevant account, delete the data, and where appropriate report the matter to relevant authorities. If you believe a minor has created an account on the zu777 Platform, please contact us immediately at [email protected].

11. Security Measures

zu777 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for personal data stored in zu777's databases.
• Multi-factor authentication (MFA) available for all Player accounts and mandatory for administrative access to data systems.
• Role-based access controls ensuring that staff can only access personal data that is strictly necessary for their job function.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Automated intrusion detection and real-time anomaly monitoring on all production systems.
• Staff training on data protection obligations and secure data handling procedures.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zu777 will notify affected users without undue delay in accordance with applicable breach notification obligations.

12. Third-Party Services & Links

The zu777 Platform may reference or interact with third-party service providers as described in Section 6. This Privacy Policy applies only to data processed directly by zu777. Third-party service providers — including payment processors such as JazzCash and EasyPaisa — operate under their own privacy policies, which govern how they handle your data within their respective systems. zu777 recommends that you review the privacy practices of any third-party service you interact with.

zu777 does not embed third-party advertising trackers or social media widgets that would share your browsing behaviour on the zu777 Platform with unrelated external parties.

13. Amendments to This Policy

zu777 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is processed or your rights in respect of it — will be communicated to registered Players via email to their registered address and via a prominent notice on the Platform at least 14 days before the changes take effect.

Non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of the Policy, may be made without prior notice. The "Effective" date at the top of this page will always reflect the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed of how your data is being protected.

Your continued use of the zu777 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the amended Policy, you should close your account and request withdrawal of any remaining Real Funds balance before the changes take effect.

14. Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which zu777 handles your personal data, our support team is available around the clock, every day of the year.

Email: [email protected]
Subject line for privacy matters: "Data Privacy Request — [Your Username]"
Live Chat: Available within the Platform after login
Response Time: Within 48 hours for email; typically under 5 minutes via live chat

For formal data rights requests (access, rectification, erasure, portability), please include your registered email address and a brief description of the request. zu777 may ask you to verify your identity before processing any request that involves disclosure or deletion of personal data.

This Privacy Policy was last reviewed and published on 1 January 2026. Archived versions of previous policies are available upon written request to the Data Protection team.