zs777g Privacy Policy —
How We Protect Your Data

This Privacy Policy (the "Policy") sets out how zs777g (the "Platform", "we", "us" or "our") collects, stores, processes and protects the personal data of users ("you" or "your") who access and use the zs777g website at zs777g.cam and any associated services.

This Policy applies to all users of the Platform, including registered account holders and unregistered visitors who browse the website. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated into the overall agreement between you and zs777g.

By accessing the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please discontinue use of the Platform. We reserve the right to update this Policy at any time. Material changes will be communicated as described in Section 14.

zs777g does not claim to be licensed, regulated or approved by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any Pakistani provincial authority. This Policy is governed by the laws of the jurisdiction in which the operator holds its operating licence. Users in Pakistan are responsible for understanding applicable local laws regarding data protection and online gambling before using this Platform.

For the purposes of this Policy, the following terms have the meanings assigned:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, email address, date of birth, device identifiers and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, retrieval, deletion or any combination thereof.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, the operator of the zs777g Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, subject to written instructions and data processing agreements.
• "Consent" — a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity verification procedures required for account compliance, withdrawal processing and fraud prevention.
• "Cookies" — small text files placed on your device by the Platform to store session, preference and analytics data.

We collect Personal Data in the categories listed below. We collect only what is necessary for the purposes described in this Policy.

We do not knowingly collect sensitive categories of personal data (such as health, religion, ethnicity or political opinions) unless specifically required by a regulatory compliance process and with appropriate safeguards in place.

We collect Personal Data through the following mechanisms:

• During account registration, when you provide your name, date of birth, email address and chosen password;
• During KYC verification, when you upload identity and address documents;
• When you make deposit or withdrawal requests via the Cashier section;
• When you contact our support team via live chat or email;
• When you submit responsible gambling limit requests or self-exclusion applications.

When you access the Platform, our servers and analytics systems automatically log Technical Data including your IP address, device identifiers, session activity and browser information. This occurs through cookies and similar tracking technologies described in Section 8.

We may receive Personal Data from third-party service providers including identity verification bureaus, payment processing partners, fraud detection services and, where applicable, responsible gambling self-exclusion registries. Data received from these sources is used strictly in accordance with this Policy and the purposes for which it was obtained.

We process your Personal Data for the following specific purposes:

1. Account Creation and Management: To register your account, verify your identity, maintain your account settings and respond to account-related queries;
2. Transaction Processing: To process deposits, withdrawals, bonus credits and other financial transactions in your account currency (PKR), and to maintain accurate transaction records;
3. Compliance and Fraud Prevention: To fulfil our KYC, anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; to detect, investigate and prevent fraudulent activity, unauthorised account access and Platform abuse;
4. Responsible Gambling: To administer the deposit limits, loss limits, session limits, cool-off periods and self-exclusion requests you submit through the account dashboard; to monitor account activity for indicators of problem gambling where required by applicable operating standards;
5. Customer Support: To respond to your enquiries, process complaints and maintain records of support interactions for audit and quality purposes;
6. Platform Performance and Security: To identify and resolve technical issues, optimise mobile performance, and protect the Platform from security threats and unauthorised access;
7. Marketing Communications: Where you have given explicit consent, to send you promotional emails, bonus offers, and notifications about cricket markets, PSL match specials, or new game titles we believe may interest you. You may withdraw marketing consent at any time.

We will not use your Personal Data for any purpose not described in this Policy without first obtaining your consent or establishing a separate legal basis for that processing.

Each processing activity we undertake rests on one of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and zs777g, including account operation, payment processing and support services;
• Legitimate Interests: Processing necessary for our legitimate interests in operating a secure, fraud-free and commercially viable platform, where those interests are not overridden by your data protection rights;
• Legal Obligation: Processing required to comply with applicable regulatory, KYC, AML and other legal requirements in the operator's licensing jurisdiction;
• Consent: Processing based on your explicit, informed and freely given consent — principally for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

We do not sell your Personal Data. We do not share it with third parties for their own independent marketing purposes. We may share your data in the following limited circumstances:

We engage third-party service providers who process data on our behalf under contractual obligations consistent with this Policy. These include identity verification services, payment gateway operators, cybersecurity providers, cloud infrastructure providers and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of your data to the scope we specify.

We may disclose Personal Data to regulatory bodies, law enforcement agencies or courts of competent jurisdiction where required by applicable law, a valid legal order or our licensing obligations. Where legally permissible, we will attempt to notify you of such disclosure requests.

Where required by the operator's license jurisdiction, we may share relevant data with responsible gambling self-exclusion registries to enforce exclusion requests and prevent excluded players from opening new accounts.

In the event of a merger, acquisition, restructuring or sale of the Platform or its operator, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any resulting changes to this Policy.

zs777g uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. They enable secure login sessions, load balancing and fraud detection. These cookies cannot be disabled without breaking core Platform functionality.
• Performance / Analytics Cookies: Collect anonymous, aggregated data about how users interact with the Platform — page load times, navigation paths, session durations. This data helps us improve the mobile experience for users on Pakistani networks.
• Functionality Cookies: Remember your preferences such as language settings, account currency display (PKR) and responsible gambling limit configurations.
• Marketing Cookies: Used only where you have consented to receive personalised promotional communications. These cookies track whether you have opened or clicked Platform communications.

You may manage or withdraw consent to non-essential cookies at any time through your browser settings or, where available, the cookie preference controls on the Platform. Disabling strictly necessary cookies may impair your ability to log in or use core features.

We retain Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention principles apply:

• Active Accounts: Personal Data is retained for the full duration of an active account relationship plus any mandatory retention period required by the operator's licensing or AML obligations;
• Closed Accounts: Following account closure, transaction and identity records are typically retained for a minimum period to satisfy AML, KYC and regulatory audit requirements in the operator's licensing jurisdiction;
• Self-Excluded Accounts: Data necessary to enforce the self-exclusion and prevent re-registration is retained for the full period of the exclusion plus a reasonable post-exclusion period;
• Support Communications: Records of support interactions are retained for a defined audit period to enable dispute resolution and service quality review;
• Marketing Data: Marketing preference records are deleted or anonymised promptly upon withdrawal of marketing consent.

When retained data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

We implement appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. Our security programme includes:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encrypted storage for sensitive data including KYC documents and financial records;
• Two-factor authentication (2FA) options for user account access;
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Incident response procedures for detecting, responding to and reporting data breaches.

Notwithstanding the above, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security and accept no liability for unauthorised access that occurs despite reasonable preventive measures being in place.

You are responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your account, please contact our support team immediately via live chat or email so that we can take prompt protective action.

Subject to applicable data protection law and any overriding legal obligations (such as AML retention requirements), you hold the following rights in respect of your Personal Data:

To exercise any of these rights, please contact our support team using the details in Section 15. We will acknowledge your request promptly and respond within the timeframe required by applicable law. We may need to verify your identity before processing certain requests.

As an internationally operated Platform, your Personal Data may be transferred to, stored in, or processed in countries outside of Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place — including contractual data protection clauses with receiving entities — consistent with the standards required by the operator's licensing jurisdiction.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions whose data protection laws may differ from those in Pakistan. We take reasonable measures to ensure that any international transfer is conducted with adequate protection for your data rights.

The Platform is strictly intended for adults aged 18 and above, or such higher minimum age as is required by the operator's license jurisdiction. We do not knowingly collect Personal Data from individuals below the applicable minimum age.

If we discover that an account has been opened by or on behalf of a minor, we will immediately suspend that account, initiate age verification procedures, and delete any Personal Data collected in connection with that account to the extent permissible by applicable law and our compliance obligations.

Adults who have responsibility for minors must ensure that those minors do not access the Platform or provide their personal details to zs777g.

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. The "Last updated" date at the top of this document records the date of the most recent revision.

Where changes are material — that is, where they significantly affect how we process your data or the rights you hold — we will notify registered users by email to the address on record, or by a prominent notice displayed on the Platform, at least 14 days before the changes take effect.

Your continued use of the Platform following notification of an amendment constitutes your acceptance of the revised Policy. If you do not accept a revised Policy, you may close your account by contacting our support team.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, you may contact our support team through the following channels:

• Live Chat: Available 24/7 from within your account dashboard — the recommended channel for urgent data-related requests;
• Email: support@zs777g.cam — plain text only; copy the address manually into your email client. This address is not a clickable link.

Support is provided in English. Urdu assistance is available on request for users who prefer to communicate in their national language. We aim to respond to all data subject requests within the timeframes required by applicable data protection law, and to email enquiries generally within 2 business days.