ZK77 Privacy Policy – How We Protect Your Data in Pakistan

ZK77 ("we," "us," "our," "the Platform") takes the privacy of every player seriously. This Privacy Policy applies to all users of the ZK77 website at zk77.click and any associated services or mobile interfaces. It explains in straightforward terms how ZK77 handles the personal information of Pakistani players from the moment they register an account to after they stop using the platform.

Privacy in the online gaming space matters more than many players initially appreciate. When you deposit money in PKR, play games, claim bonuses or refer friends on ZK77, you are sharing information with us. We want you to know exactly what that information is, why we need it, what we do with it and what rights you have over it. This document is our commitment to that transparency.

By registering on ZK77 or by continuing to use your ZK77 account after any update to this policy, you confirm that you have read and understood this Privacy Policy. This policy should be read together with the ZK77 Terms and Conditions, which govern the overall use of the platform.

ZK77 collects personal information through three main channels: information you provide directly, information generated automatically by your use of the platform and information received from third-party payment processors.

Information you provide directly:

• Full legal name as it appears on your CNIC or other government-issued identity document.
• Date of birth, used to verify that you meet the 18-year minimum age requirement.
• Pakistani mobile phone number, used for account verification, SMS notifications and support communications.
• Email address, used for account communications, promotional messages (if opted in) and formal correspondence.
• Payment account details including Easypaisa wallet number, JazzCash number, NayaPay or SadaPay account reference, bank account details for IBFT or the last four digits of a registered Visa or Mastercard card. ZK77 does not store full card numbers.
• Identity verification documents submitted during KYC checks – typically a CNIC scan or photograph.
• Any information provided voluntarily in support communications, feedback forms or dispute submissions.

Information collected automatically:

• IP address and approximate geographic location derived from it.
• Device type, operating system and browser version.
• Session duration, pages visited, game activity and betting history within the ZK77 platform.
• Login timestamps and access logs.
• Cookie data as described in Section 6 of this policy.

Information from third parties:

• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT providers and card processors – limited to transaction reference numbers, amounts and timestamps.
• Fraud detection signals from payment security systems used by ZK77's processing partners.

ZK77 only collects personal information for specific, legitimate purposes. We do not collect data speculatively or for purposes that are not directly connected to operating your account and the ZK77 platform.

ZK77 does not use your personal data to make automated decisions that have significant legal or similarly significant effects on you, except for fraud detection systems that may automatically flag an account for human review. Any flagged account is reviewed by a human operator before action is taken.

ZK77 treats the security of player data as a non-negotiable operational priority. The following security measures are in place at all times:

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and ZK77 servers. This is the same level of encryption used by major banks globally.
• Encrypted data storage – personally identifiable information is stored in encrypted form in secure databases. Encryption keys are managed separately from the data they protect.
• Access controls – ZK77 staff access to player data is restricted on a strict need-to-know basis. Support agents can see your account status and transaction history but cannot access payment credentials or identity document images unless specifically authorised for a verified support case.
• Regular security audits – ZK77 conducts periodic internal and external security assessments of its data infrastructure. Vulnerabilities identified are patched on a priority basis.
• No full card storage – ZK77 does not store your full card number, CVV or card expiry date on its own servers. Card processing is handled entirely by PCI-DSS compliant payment partners.
• Two-factor authentication – ZK77 supports and encourages two-factor authentication for all accounts, adding an additional layer of protection beyond your password.

In the unlikely event of a data breach that affects the personal data of ZK77 players, ZK77 will notify affected players within 72 hours of becoming aware of the breach, consistent with good data governance practice. Notifications will be sent to the email address on your ZK77 account.

ZK77 does not sell your personal data to any third party. That is a firm commitment, not a conditional one. Your information will never be packaged and sold to advertisers, data brokers or any other commercial entity.

ZK77 does share limited data with the following categories of third party where it is strictly necessary to operate the platform:

• Payment processors – Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card processors receive only the transaction data required to process your specific deposit or withdrawal. These partners are bound by their own data security obligations.
• Identity verification services – where a third-party KYC service is used to verify CNIC documents, only the documents and basic account data required for verification are shared, under strict data processing agreements.
• Fraud prevention services – anonymised or pseudonymised signals may be shared with fraud detection partners to identify and prevent account manipulation, bonus abuse or money laundering patterns.
• Legal and regulatory authorities – ZK77 will disclose personal data when required to do so by valid legal process, court order or regulatory requirement. ZK77 will notify affected players of such disclosures where legally permitted to do so.

All third parties who handle ZK77 player data are required to maintain appropriate data security standards and to use the data only for the specific purpose for which it was shared. ZK77 does not authorise third parties to use your data for their own marketing purposes.

ZK77 uses cookies and similar tracking technologies to operate the platform effectively and improve the experience for Pakistani players. A cookie is a small text file placed on your device by your browser when you visit ZK77. Cookies do not contain your personal details and cannot run programmes on your device.

Essential cookies cannot be disabled as they are required for the ZK77 platform to function. Analytics and preference cookies can be managed through your browser settings. Most modern browsers allow you to block or delete cookies – please refer to your browser's help documentation for instructions specific to your device.

ZK77 does not use third-party advertising cookies or social media tracking pixels that monitor your activity across websites outside of zk77.click.

All financial transactions on ZK77 are processed in Pakistani Rupees (PKR) through local payment infrastructure. ZK77 handles payment data with additional care beyond general personal data because of its sensitivity.

• ZK77 stores the last four digits of your linked payment accounts (card last four digits, Easypaisa number suffix, etc.) for the purpose of identifying your accounts in support interactions. Full account numbers are never stored in full on ZK77 servers.
• Deposit and withdrawal transaction records are retained as part of your account history. This includes transaction reference numbers, amounts in PKR, timestamps and payment method identifiers. This data is required for anti-fraud monitoring, dispute resolution and responsible gaming compliance.
• Payment data is transmitted to processors exclusively over encrypted channels. ZK77 does not transmit payment credentials over email, SMS or any unencrypted medium.
• ZK77 does not process international currency transactions. All deposits and withdrawals are in PKR exclusively, which means no foreign exchange data is stored or transmitted.

ZK77 will only send you promotional emails, SMS messages or in-platform notifications about bonuses, new games, tournaments and special offers if you have explicitly opted in to receive them. This consent is requested at registration and can be changed at any time.

To opt out of marketing communications from ZK77:

• Click the unsubscribe link at the bottom of any marketing email.
• Reply STOP to any marketing SMS sent from ZK77.
• Update your notification preferences in the ZK77 account settings panel.
• Contact support@zk77.click directly and request removal from marketing lists.

Opting out of marketing does not affect transactional communications. ZK77 will continue to send you essential account communications including deposit confirmations, withdrawal notifications, security alerts and support responses regardless of your marketing preferences, as these are necessary for the operation of your account.

ZK77 recognises that your personal data belongs to you. The following rights are available to all ZK77 players and can be exercised by contacting support@zk77.click with your registered account email address:

ZK77 retains personal data only for as long as it is necessary for the purposes for which it was collected, subject to the following retention rules:

• Active accounts – personal data is retained for the lifetime of the account plus a period of 6 months following permanent account closure.
• Financial transaction records – deposit and withdrawal history is retained for a minimum of 5 years following the transaction date. This is required for anti-money laundering compliance and financial audit purposes.
• Identity verification documents – KYC documents including CNIC scans are retained for a minimum of 5 years following account closure.
• Support communications – chat logs, email exchanges and dispute records are retained for 2 years following resolution of the relevant case.
• Marketing data – if you have opted out of marketing, your opt-out preference is retained indefinitely to ensure you are not re-added to marketing lists in error.

Data that is no longer required is securely deleted or anonymised. ZK77 does not archive or store data beyond defined retention periods without a documented legal or operational justification.

ZK77 does not knowingly collect personal data from individuals under 18 years of age. The platform is strictly for adults and registration requires confirmation that the user is at least 18 years old.

If ZK77 becomes aware that an account has been opened by a person under 18, all personal data associated with that account will be deleted and the account will be permanently closed. Any deposits made will be returned to the payment source used, after standard fraud and chargeback checks.

If you believe a minor has opened an account on ZK77, please report it immediately to support@zk77.click. ZK77 takes these reports seriously and acts on them promptly.

ZK77 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or best practice. When material changes are made, ZK77 will notify registered players via email or in-platform notification at least 7 days before the new version takes effect.

The current version of the Privacy Policy is always available at zk77.click/privacy-policy. The date of the most recent update is displayed at the top of this page. Continuing to use ZK77 after a Privacy Policy update takes effect constitutes acceptance of the new version.

If you have concerns about any planned changes to this policy, you are encouraged to contact support@zk77.click before the effective date. ZK77 will respond to privacy-related queries within 48 hours.

For any question, concern or request related to your personal data and ZK77's handling of it, please reach out through any of the following channels. Please include your registered ZK77 account email address in any privacy-related communication so we can locate your account and respond accurately.

• Email: support@zk77.click – Privacy requests receive a response within 48 hours. Subject line: "Privacy Request – [Your Account Email]"
• Live Chat: Available 24/7 within the ZK77 platform. For simple privacy queries, live chat is the fastest option.
• WhatsApp: WhatsApp support contact details are provided within the ZK77 platform after account registration.

ZK77 aims to resolve all data subject requests within 14 working days of receipt. If a request requires additional verification or is particularly complex, we will inform you within the initial 14-day period and provide a revised timeline.