// CLAUSE_01
1. Who We Are
zk7777 is an online casino and sports betting platform accessible at zk7777.org, operated under an international gaming licence framework. We are the data controller responsible for the personal data you provide when registering and using our services. Throughout this Privacy Policy, references to "zk7777," "we," "us," or "our" refer to the zk7777 platform and its operating entity.
Our platform is designed primarily for English-speaking Pakistani users aged 21 and above. We offer casino games, live dealer tables, sports betting — including PSL cricket betting — and a range of payment options tailored for Pakistan, including JazzCash, EasyPaisa, Raast, and major Pakistani banks.
Data Controller Contact: For all privacy-related enquiries, data subject requests, or concerns about how zk7777 handles your personal data, please contact our Data Protection team at
[email protected]. We aim to acknowledge all privacy enquiries within 48 hours.
// CLAUSE_02
2. Personal Data We Collect
zk7777 collects personal data in several categories. The specific data points collected depend on how you interact with our platform:
// DATA_CATEGORIES_MATRIX
| Category |
Examples |
Required? |
| Identity Data |
Full name, date of birth, CNIC number, CNIC scan |
Mandatory (KYC) |
| Contact Data |
Email address, Pakistani mobile number, city of residence |
Mandatory |
| Financial Data |
JazzCash/EasyPaisa account number, bank account details, transaction history |
Mandatory (withdrawals) |
| Technical Data |
IP address, device type, browser type, operating system, session tokens |
Automatic |
| Usage Data |
Pages visited, games played, bet history, session duration, click paths |
Automatic |
| Communications Data |
Live chat transcripts, support emails, feedback submissions |
When provided |
| Responsible Gaming Data |
Self-exclusion status, deposit limits set, reality-check preferences |
When set by you |
What We Do Not Collect: zk7777 does not collect biometric data, precise geolocation data, sensitive personal data relating to health or religion, or data from individuals we know to be under 21 years of age. If we discover that data belonging to a person under 21 has been collected, it will be deleted immediately and the relevant account suspended.
// CLAUSE_03
3. How We Collect Your Data
zk7777 collects personal data through the following channels:
- Direct Registration: When you create a zk7777 Account, you provide your name, date of birth, mobile number, and email address directly through our registration form.
- KYC Verification: When you submit identity documents (such as your CNIC) to complete our Know Your Customer process, we collect and store those documents and the data extracted from them.
- Payment Transactions: When you make a deposit or request a withdrawal, your payment provider shares transaction reference data and account identifiers with us as part of the payment processing flow.
- Platform Usage: As you navigate the zk7777 platform — browsing games, placing bets, or adjusting account settings — our servers automatically log technical and usage data including your IP address, session timestamps, and interaction events.
- Customer Support: When you contact us via live chat or email at [email protected], the content of your communications is stored as part of your support history.
- Cookies and Tracking Technologies: Our platform uses cookies and similar technologies to maintain your session, remember your preferences, and analyse aggregate usage patterns. See Section 9 for full details.
zk7777 does not purchase data from third-party data brokers or acquire personal data about you from social media platforms without your explicit consent.
// CLAUSE_04
4. How We Use Your Personal Data
The personal data collected by zk7777 is used exclusively for the following defined purposes:
- Account Management: To create, operate, and maintain your registered player Account, including processing your login sessions and managing your Account settings and preferences.
- Service Delivery: To provide you with access to casino games, live dealer tables, sports betting markets, and all other features of the zk7777 platform that form the core service you signed up for.
- Payment Processing: To process deposits, verify payment method ownership, and execute withdrawal requests to your nominated Pakistani payment method.
- KYC & AML Compliance: To verify your identity, confirm your age is 21 or above, and comply with our anti-money laundering (AML) obligations under our international gaming licence. This includes screening against relevant sanctions and watchlists.
- Responsible Gaming: To administer deposit limits, loss limits, self-exclusion orders, session reminders, and other responsible gaming tools you have enabled on your Account.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other security incidents that could harm you or the integrity of our platform.
- Customer Support: To respond to your queries, complaints, and feedback, and to maintain a record of your support history for continuity of service.
- Legal Compliance: To meet our obligations under our international gaming licence, including record-keeping requirements, reporting to regulatory authorities, and responding to lawful requests from law enforcement agencies.
- Platform Improvement: To analyse aggregate, anonymised usage patterns to improve the design, performance, and content of the zk7777 platform. This analysis does not involve profiling you individually for marketing purposes.
- Marketing Communications: If you have opted in, to send you promotional offers, bonus notifications, and relevant gaming content via your registered email address or mobile number. You can opt out at any time — see Section 13.
// CLAUSE_05
5. Legal Basis for Processing
Every data processing activity at zk7777 is grounded in one of the following legal bases:
- Contract Performance: Processing necessary to deliver the services set out in our Terms & Conditions — including operating your Account, processing payments, and providing access to games.
- Legal Obligation: Processing required to comply with our international gaming licence obligations, including KYC verification, AML screening, transaction record-keeping, and reporting to regulatory authorities.
- Legitimate Interests: Processing for purposes that serve zk7777's legitimate business interests without overriding your privacy rights — including fraud prevention, platform security, and aggregate usage analytics.
- Consent: Processing you have explicitly agreed to, specifically the receipt of marketing communications. Consent-based processing can be withdrawn by you at any time without affecting your Account or access to the platform.
No Automated Decision-Making: zk7777 does not make legally significant automated decisions about you — such as account suspension or withdrawal rejection — based solely on automated processing without human review. Where automated systems flag an account for investigation, a human team member reviews the case before any action is taken.
// CLAUSE_06
6. Sharing Your Personal Data
zk7777 does not sell your personal data. We share it only with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual data protection obligations:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, Raast, 1LINK, SadaPay, and cryptocurrency processing partners receive only the minimum transaction data necessary to execute your deposit or withdrawal.
- KYC/Identity Verification Providers: Third-party identity verification services that assist in processing CNIC checks and document verification as part of our KYC obligations. These providers act as data processors under our instruction.
- Regulatory and Licensing Authorities: Our international gaming licence regulator and, where legally required, Pakistani governmental or law enforcement bodies, may receive data we are obligated to disclose by law.
- Fraud Prevention Networks: We participate in industry-standard fraud prevention and anti-money laundering information-sharing networks. Data shared is limited to identifiers associated with confirmed fraudulent or prohibited conduct.
- IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
- Game Content Providers: Third-party game studios whose titles are available on the zk7777 platform receive anonymised session tokens to deliver game content. They do not receive your name, CNIC, or payment information.
No Unauthorised Disclosure: Any third-party service provider that receives your personal data from zk7777 is contractually prohibited from using that data for their own commercial purposes, sharing it onward without our authorisation, or retaining it beyond the period necessary to perform the contracted service.
// CLAUSE_07
7. International Data Transfers
As an internationally licensed gaming platform, zk7777's infrastructure and some of its service providers operate outside Pakistan. Your personal data may therefore be transferred to, and stored or processed in, countries other than Pakistan.
When such transfers occur, zk7777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing framework, including:
- Contractual clauses binding the recipient to data protection standards equivalent to those applied by zk7777.
- Transfer only to service providers whose jurisdictions or internal practices offer an adequate level of data protection.
- Encryption of data in transit and at rest, regardless of the destination country.
If you would like more information about the specific safeguards applicable to a particular international transfer, please contact us at [email protected].
// CLAUSE_08
8. Data Retention
zk7777 retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by our licensing obligations. The following retention periods apply:
// RETENTION_SCHEDULE
| Data Type |
Retention Period |
Basis |
| Account & Identity Data |
5 years after account closure |
Licence Obligation |
| Financial Transaction Records |
7 years after transaction date |
AML / Legal Requirement |
| KYC Documents (CNIC etc.) |
5 years after account closure |
Licence Obligation |
| Customer Support Records |
3 years after last interaction |
Legitimate Interest |
| Technical / Server Logs |
12 months rolling |
Security / Operations |
| Marketing Consent Records |
Until consent withdrawn + 1 year |
Consent |
| Self-Exclusion Records |
Permanent (licence requirement) |
Responsible Gaming |
Once the applicable retention period has expired and no legal hold is in place, zk7777 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.
// CLAUSE_09
9. Cookies & Tracking Technologies
zk7777 uses cookies and similar technologies — including local storage, session tokens, and pixel tags — to operate the platform efficiently and provide you with a seamless experience. The cookies we use fall into the following categories:
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
- Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling these does not prevent platform use but may reduce convenience.
- Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and use the platform. This data helps us improve page performance, fix broken flows, and prioritise feature development. We do not use analytics data for individual profiling.
- Marketing Cookies: Only placed with your explicit consent. Used to track whether you arrived via a specific promotional campaign so that we can measure the effectiveness of our marketing. You can withdraw consent at any time by adjusting your cookie preferences in Account Settings.
Cookie Consent: On your first visit to zk7777.org, a cookie consent banner will be displayed. You may accept all cookies, accept necessary cookies only, or customise your preferences by category. Your choices are stored and respected on all subsequent visits. You can update your cookie preferences at any time from the Cookie Settings link in the footer of any page.
// CLAUSE_10
10. Security Measures
zk7777 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our primary technical and organisational security measures include:
- Transport Layer Security: All data transmitted between your device and zk7777 servers is protected by TLS 1.3 encryption. Our domains enforce HTTPS with HSTS headers to prevent downgrade attacks.
- Data Encryption at Rest: Personal data and financial records stored in our databases are encrypted using AES-256. Encryption keys are managed through a dedicated key management system with strict access controls.
- Access Controls: Access to systems containing personal data is restricted by role-based access control (RBAC). Staff are granted only the minimum permissions necessary for their role. All privileged access is logged and reviewed.
- Two-Factor Authentication: All internal staff accounts with access to player data require two-factor authentication. We strongly encourage players to enable 2FA on their own zk7777 Accounts as well.
- Penetration Testing: zk7777 conducts regular third-party penetration testing of our infrastructure and web application layer to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected players and relevant authorities within the timeframes required by our licensing obligations.
Your Responsibility: No security system is infallible. You play an important role in keeping your Account secure — use a strong unique password, enable two-factor authentication, and never share your login credentials with anyone. zk7777 will never ask for your password by email, chat, or phone.
// CLAUSE_11
11. Your Data Rights
As a zk7777 player, you have the following rights over your personal data. These rights are not absolute — some are subject to our legal retention obligations under our gaming licence — but we will always explain clearly which data we must retain and why, if a full deletion is not immediately possible.
- Right to Access: You may request a copy of all personal data zk7777 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For basic profile information, you can update this directly within your Account Settings.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. Where no legal retention obligation applies, we will delete your data promptly. Where a retention obligation does apply (e.g., transaction records), we will explain what must be kept and for how long.
- Right to Restrict Processing: In certain circumstances — for example, while you dispute the accuracy of data we hold — you may request that we restrict our processing of your data to storage only, pending resolution of the dispute.
- Right to Data Portability: For data you have provided to us directly, you may request that we export it in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
- Right to Object: You may object at any time to processing based on legitimate interests, including any profiling for platform improvement purposes. You may also withdraw marketing consent at any time (see Section 13).
How to Exercise Your Rights: Submit a data subject request by emailing
[email protected] with the subject line "Data Subject Request — [Your Request Type]". Include your registered Account username and a brief description of your request. We may need to verify your identity before processing the request. We will acknowledge receipt within 48 hours and provide a full response within 30 calendar days.
// CLAUSE_12
12. Children & Minors
zk7777 operates exclusively for adults aged 21 years and above. Our platform is not directed at, and must not be used by, any person under the age of 21.
We do not knowingly collect personal data from individuals under 21. Our registration process includes date-of-birth verification, and our KYC process requires submission of a valid CNIC, which confirms identity and age. If we become aware that a person under 21 has provided us with personal data, we will:
- Immediately suspend the Account in question.
- Delete all personal data associated with the underage user as soon as legally permissible.
- Void and reverse any transactions made during the period of underage access.
- Report the matter to the relevant licensing authority as required by our licence conditions.
If you are a parent or guardian and believe your child may have registered on zk7777, please contact us immediately at [email protected] so we can take prompt action.
// CLAUSE_13
13. Marketing Communications
zk7777 may send you marketing communications about bonuses, promotions, new game launches, and special events — but only if you have explicitly opted in to receive such communications during registration or subsequently through your Account Settings.
Marketing communications may be delivered via:
- Email to your registered email address.
- SMS to your registered Pakistani mobile number.
- In-platform notifications when you are logged into your Account.
You can withdraw your marketing consent and opt out of all marketing communications at any time by:
- Clicking the "Unsubscribe" link at the bottom of any zk7777 marketing email.
- Updating your communication preferences in Account Settings > Notifications.
- Emailing [email protected] with the subject line "Marketing Opt-Out — [Your Username]".
Opt-Out Processing Time: Opt-out requests will be processed within 5 business days. You may receive a small number of communications during this period while your preferences are being updated across our systems. Opting out of marketing does not affect transactional or account-related communications such as deposit confirmations, withdrawal updates, or security alerts — these are necessary for the operation of your Account.
// CLAUSE_14
14. Changes to This Privacy Policy
zk7777 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable regulations, or our licensing obligations. When material changes are made, we will:
- Update the "Last Updated" date at the top of this page.
- Display a prominent notice on the zk7777 homepage and login page for a minimum of 14 days following the change.
- Send an email notification to all registered players summarising the key changes.
Continued use of the zk7777 platform after the effective date of a Privacy Policy update constitutes your acknowledgement of the updated policy. If you have concerns about any changes, you are encouraged to contact us at [email protected] before the effective date. If you do not agree with the updated Privacy Policy, you may close your Account at any time by contacting support.
Minor, non-material changes — such as typographical corrections or clarifications that do not alter the substance of our data processing — may be made without individual notification.
// CLAUSE_15
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way zk7777 handles your personal data, please do not hesitate to get in touch with our Data Protection team:
- Email: [email protected] (subject line: "Privacy Enquiry — [Your Username]")
- Live Chat: Available 24/7 from within your logged-in zk7777 Account
- Response Time: All privacy-related enquiries are acknowledged within 48 hours and resolved within 30 calendar days
Escalation: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority under our international licensing jurisdiction. Details of the applicable authority will be provided in our written response to your complaint.
zk7777 is committed to resolving all privacy concerns fairly and transparently. We treat every data subject request seriously and our team is trained to handle your information with the care and respect it deserves.