Your Privacy at z277

1. Introduction

z277 ("we", "us", "our") is committed to protecting the personal data of all players who use the z277 online casino and sports betting platform accessible at z277.net ("the Platform"). This Privacy Policy sets out in clear terms what personal information we collect, why we collect it, how we use it, with whom we may share it, and the rights you have in respect of that information.

z277 is designed primarily for English-speaking Pakistani players and supports account operations in Pakistani Rupees (PKR) via payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. This Privacy Policy applies to all personal data collected through the Platform, regardless of the device or method of access you use.

We take our data protection responsibilities seriously. Our approach is grounded in the principle that your personal information should be collected only when genuinely necessary, stored only as long as required, and processed only in ways that are fair, transparent, and lawful.

2. Data Controller

For the purposes of this Privacy Policy, z277 acts as the data controller in respect of all personal data collected from players through the Platform. As data controller, z277 determines the purposes for which and the manner in which personal data is processed. z277 operates under an international gaming licence, and its data handling obligations are shaped in part by the requirements of that licence.

If you have any questions about how z277 processes your personal data, or if you wish to exercise any of your data rights, please contact the support team through the Support page. Written data-related queries will be acknowledged within five business days and substantively responded to within thirty calendar days.

3. Data We Collect

3.1 Registration Data

When you create a z277 account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your account, verify your identity, and communicate with you about your account.

3.2 Identity Verification (KYC) Data

In accordance with our international gaming licence obligations, z277 is required to verify the identity of all players. As part of the Know Your Customer (KYC) process, we may collect copies of government-issued identity documents such as your CNIC (Computerised National Identity Card) or passport, proof of residential address, and documentation confirming the ownership of your nominated payment methods. This data is processed for compliance and fraud prevention purposes only.

3.3 Financial Data

When you make deposits or withdrawals, z277 processes transaction data including the payment method used, transaction amounts, timestamps, and reference numbers. We do not store full bank account credentials or full card numbers on our servers. Payment processing is handled through secure, licensed payment infrastructure.

3.4 Gameplay & Betting Data

z277 records data relating to your activity on the Platform, including game sessions played, bets placed, wagers on cricket, PSL, and other sports markets, bonus usage, and account balance movements. This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, referral URL, pages visited, session duration, and clickstream data. This information is used to maintain Platform security, detect fraud, and improve the user experience.

3.6 Communication Data

If you contact z277's support team, submit a complaint, or otherwise communicate with us, we retain records of that correspondence. This includes emails, live chat transcripts, and any attachments you provide. These records are maintained for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Data

z277 uses the personal data we collect for the following purposes:

Purpose	Description
Account Management	Creating, operating, and maintaining your z277 player account, including processing deposits and withdrawals and applying bonuses.
Identity Verification	Conducting KYC checks to confirm your identity, age (21+), and the ownership of your payment methods as required by our gaming licence.
Transaction Processing	Processing your deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
Regulatory Compliance	Meeting our obligations under our international gaming licence, including anti-money laundering (AML) checks and regulatory reporting.
Fraud Prevention & Security	Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and prohibited activities on the Platform.
Responsible Gaming	Monitoring gameplay patterns to identify at-risk behaviour and applying player-protection tools where required under our licence.
Customer Support	Responding to your queries, complaints, and dispute submissions through the z277 support team.
Platform Improvement	Analysing aggregated usage data to improve Platform performance, game offerings, and the overall player experience.
Marketing Communications	Sending you relevant promotional offers, bonus notifications, and Platform updates — only where you have provided consent or where permitted under applicable law.

5. Legal Bases for Processing

z277 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to perform our obligations to you under the z277 Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with obligations imposed by our international gaming licence, anti-money laundering regulations, and applicable law, including KYC verification and regulatory reporting.
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and the improvement of our services, where those interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

6.1 Service Providers

z277 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (JazzCash, EasyPaisa, and banking partners), identity verification providers, fraud detection services, IT infrastructure providers, and customer support platforms. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to z277.

6.2 Gaming Studios

z277 offers casino games and live dealer tables provided by licensed third-party gaming studios. These studios may receive limited gameplay data — such as session identifiers, wager amounts, and game outcomes — for the purpose of delivering the game and ensuring its integrity. Studios are contractually prohibited from using this data for any other purpose.

6.3 Regulatory and Law Enforcement Authorities

z277 is required under its international gaming licence and applicable law to disclose player data to regulatory authorities, licensing bodies, financial intelligence units, and law enforcement agencies where lawfully demanded. Such disclosures are made only to the extent required by law and do not constitute a breach of this Privacy Policy.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of z277's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to the privacy terms that apply to your data prior to the transfer taking effect.

6.5 No Sale of Data

z277 does not sell, rent, licence, or otherwise trade your personal data to third-party advertisers, data brokers, or marketing companies. Your data is not a commercial product.

7. International Data Transfers

z277 operates under an international gaming licence and uses infrastructure and service providers that may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, z277 ensures that appropriate safeguards are in place to protect your data, including contractual data transfer agreements based on recognised standard clauses, and that the recipient country or organisation provides an adequate level of data protection.

By using the z277 Platform, you acknowledge that your personal data may be transferred internationally in the manner described above. If you have concerns about international data transfers, please contact our support team through the Support page.

8. Data Retention

z277 retains your personal data for as long as your account remains active and for a period thereafter as required by our gaming licence obligations and applicable law. The standard retention periods applicable to key data categories are set out below:

• Account and registration data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by regulatory instruction.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gameplay and betting records: Retained for a minimum of three (3) years from the date of the relevant activity.
• Support and communication records: Retained for a minimum of two (2) years from the date of the communication.
• Marketing consent records: Retained for the duration of your consent plus three (3) years to evidence compliance.

Once retention periods have elapsed, personal data is securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. z277 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the Platform effectively, maintain your logged-in session, and collect usage analytics.

9.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Performance & analytics cookies: Used to collect anonymised data about how players interact with the Platform, such as pages visited and session duration. This data helps us improve Platform performance.
• Functional cookies: Used to remember your preferences — such as language settings and display options — to provide a more personalised experience.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and bot traffic.

9.3 Managing Cookies

You can control cookie settings through your browser's privacy or settings menu. Most browsers allow you to refuse, delete, or be notified when cookies are set. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the z277 Platform. z277 does not use cookies for third-party behavioural advertising purposes.

10. Your Data Rights

As a z277 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the support team through the Support page:

• Right of access: You have the right to request a copy of the personal data z277 holds about you, along with information about how that data is used.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by z277.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: You have the right to request that z277 restricts the processing of your personal data in certain circumstances, for example while a correction request is being investigated.
• Right to data portability: You have the right to receive a copy of personal data you have provided to z277 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on z277's legitimate interests. You also have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Children's Privacy

z277 operates a strict minimum age policy. The Platform is intended exclusively for players aged 21 years and above. z277 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the z277 registration and KYC process.

If z277 becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted promptly and the associated account will be closed. If you believe that a minor has registered for a z277 account, please notify us immediately through the Support page.

12. Security Measures

z277 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and z277's servers.
• Encryption of sensitive data fields — including identity document data and financial records — within z277's storage infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with applicable regulatory obligations.

While z277 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, z277 will notify you without undue delay in accordance with applicable legal requirements.

13. Third-Party Links

The z277 Platform may contain references to third-party game providers and services. This Privacy Policy applies solely to data collected and processed by z277 through the z277 Platform. z277 is not responsible for the privacy practices or the content of any third-party services. Where you interact directly with a third-party service — such as a game studio's platform — you should review the privacy policy of that third party separately.

14. Changes to This Privacy Policy

z277 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. Material changes to this Privacy Policy will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must cease using the Platform and may request account closure through the Support page.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way z277 handles your personal data, please contact the support team through the Support page. Our support team is available around the clock to assist with data-related queries.

For formal written correspondence regarding data protection matters, please use the contact email address displayed in the footer of this page. z277 aims to acknowledge all formal data protection queries within five business days and to provide a full response within thirty calendar days.