z277 — Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how z277, operating at z277.cam ("Platform", "z277", "we", "us" or "our"), collects, uses, stores, shares and protects personal data provided by or obtained from users ("you" or "User") in connection with their use of the Platform.

z277 is an online gaming information platform serving users in Pakistan with transparent, educational content about sports betting, live casino, online slots and responsible gambling. By accessing or registering on the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

2. Definitions

• "Personal Data" — any information that identifies or can identify a natural person, directly or indirectly, including name, CNIC number, email address, IP address and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. z277 is the Data Controller for data collected through this Platform.
• "Data Processor" — a third party that processes personal data on behalf of z277 under a contractual data processing agreement.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer; the identity and age verification process required for account activation and withdrawal eligibility.
• "Cookies" — small text files stored on your device by a website to retain session and preference information.
• "CNIC" — Computerised National Identity Card issued by the National Database and Registration Authority (NADRA) of Pakistan.

3. Data Controller

3.1 z277 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, z277 determines what data is collected, the purposes for which it is processed and the safeguards applied to protect it.

3.2 Where z277 engages third-party service providers to process data on its behalf — such as KYC verification providers, payment processors and cloud infrastructure providers — those parties act as Data Processors and are bound by written data processing agreements that require them to process data only in accordance with z277's instructions and this Policy.

3.3 For all data-related enquiries, please contact our Data Protection team at: [email protected]

4. Personal Data We Collect

z277 collects personal data in the following categories:

4.1 Account Registration Data

When you create an account, we collect: full legal name, date of birth, email address, phone number, residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar), and chosen account credentials.

4.2 Identity Verification (KYC) Data

For age verification and AML compliance, we may collect: a copy of your Pakistani CNIC or passport, proof of address documentation (such as a utility bill or bank statement dated within 90 days), and a selfie or liveness verification image.

4.3 Financial Data

Transaction records, deposit and withdrawal history, payment method identifiers (such as wallet references associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or cryptocurrency wallets) and PKR-denominated balance information. We do not store full card numbers or banking PINs. Payment provider names are referenced for informational context only and their use does not imply endorsement of gambling services.

4.4 Usage & Technical Data

IP address, device type, operating system, browser type, session timestamps, pages visited, features accessed, game logs and click-path data collected automatically during your interaction with the Platform.

4.5 Communications Data

Records of your correspondence with z277's support team, including support tickets, live chat transcripts and email exchanges.

4.6 Responsible Gambling Data

Records of any responsible gambling tool activations, including deposit limits, loss limits, cool-off periods and self-exclusion elections, for compliance and safeguarding purposes.

5. Lawful Basis for Processing

z277 processes personal data only where a valid lawful basis exists. The applicable bases are:

6. How We Use Your Personal Data

z277 uses collected personal data for the following specific purposes:

• Account Services: Creating, managing and securing your account; processing logins; managing account settings and preferences.
• Identity Verification: Completing KYC to verify age and identity, satisfying AML obligations and enabling withdrawals.
• Payment Processing: Facilitating deposits and withdrawals through available payment channels; maintaining transaction records.
• Fraud & Security: Detecting, investigating and preventing fraud, identity theft, money laundering, collusion and platform abuse.
• Responsible Gambling: Monitoring for indicators of problem gambling behaviour; administering limit activations and self-exclusions; safeguarding vulnerable users.
• Platform Improvement: Analysing usage patterns to improve content, navigation, performance and game recommendations.
• Legal Compliance: Meeting regulatory, legal and judicial obligations including responding to lawful authority requests.
• Customer Support: Handling support queries, disputes and account recovery requests in English (and Urdu on request).
• Communications: Sending transactional notifications, security alerts and — where you have opted in — promotional communications.

7. Cookies & Tracking Technologies

7.1 z277 uses cookies and similar tracking technologies to deliver a functional and personalised experience. Cookies allow us to maintain your login session, remember your preferences and analyse how users interact with the Platform.

7.2 Types of Cookies Used:

• Essential Cookies: Required for the Platform to function correctly. These cannot be disabled without impairing core functionality.
• Analytical Cookies: Collect aggregated, anonymised data about page visits, session duration and navigation paths for performance analysis.
• Functional Cookies: Store your preferences (such as language settings and responsible gambling limit preferences) to improve your experience.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised access attempts.

7.3 You may control cookie preferences through your browser settings. Disabling all cookies may affect Platform functionality. z277 does not currently use third-party advertising or behavioural tracking cookies.

8. Data Sharing & Disclosure

8.1 We do not sell your personal data. z277 shares personal data only in the limited circumstances described below:

• KYC Verification Providers: Identity verification partners who process submitted documents to confirm identity and age. These providers act as Data Processors under binding agreements.
• Payment Processors: Financial intermediaries necessary to process your deposits and withdrawals. These parties receive only the data necessary to complete the transaction.
• Cloud & Infrastructure Providers: Secure cloud hosting providers that store Platform data. All providers operate under strict data security standards.
• Fraud Prevention Services: Risk management partners used to detect fraudulent account activity and AML violations.
• Legal & Regulatory Authorities: Where z277 is legally required to disclose data by court order, regulatory direction or law enforcement request, disclosure will be made in strict compliance with the applicable legal requirement.
• Business Transfers: In the event of a merger, acquisition or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

9. International Data Transfers

9.1 z277's servers and some of its third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, z277 ensures that appropriate safeguards are in place, including contractual data protection clauses, to maintain a standard of protection equivalent to that described in this Policy.

9.2 By using the Platform, you acknowledge that your data may be processed outside of Pakistan and consent to such transfer where it is necessary for the delivery of services to you.

10. Data Retention

10.1 z277 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or AML obligations. In practice:

• Account Data: Retained for the duration of your active account relationship and for a minimum period thereafter as required by applicable regulations.
• KYC Documents: Retained for the minimum period required by AML and identity verification regulations, typically five years from the date of submission or account closure.
• Transaction Records: Financial transaction records are typically retained for a minimum of five years in line with standard AML and financial record-keeping requirements.
• Support Communications: Retained for up to two years after resolution of the relevant support issue.
• Analytical Data: Aggregated, anonymised analytical data may be retained indefinitely as it cannot be used to identify individual users.

10.2 Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.

11. Security Measures

11.1 z277 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure. Key security controls include:

• 256-bit TLS/SSL encryption on all data transmissions across the Platform
• Encrypted storage for sensitive data including identity documents and payment information
• Role-based access controls ensuring personal data is accessible only to authorised personnel with a genuine operational need
• Regular security assessments and vulnerability testing
• Secure, audited processes for handling KYC documents
• Multi-factor authentication options for user accounts

11.2 While z277 takes all reasonable steps to protect personal data, no internet transmission or electronic storage system is entirely without risk. Users are responsible for maintaining the confidentiality of their own account credentials and for reporting any suspected security breach to z277 promptly.

12. Your Data Rights

You hold the following rights in respect of your personal data held by z277. To exercise any right, contact us at [email protected].

13. Minors & Under-Age Access

13.1 z277 strictly prohibits access by persons under the age of 18, or the higher minimum age required by the applicable operator or licence jurisdiction. The Platform is designed for adults only.

13.2 z277 does not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without verifiable parental consent, that data will be deleted promptly and the associated account closed.

13.3 If you believe a minor has registered on the Platform, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

14. Third-Party Links & External Services

14.1 The Platform may contain references to or contextual mentions of third-party services including payment providers (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) and sports organisations (PSL, ICC). These references are for informational context only. z277 is not responsible for the privacy practices of any third-party service.

14.2 If the Platform links to third-party websites (for example, responsible gambling support organisations), those sites operate under their own independent privacy policies. z277 has no control over and accepts no responsibility for the privacy practices of third-party websites.

15. Changes to This Privacy Policy

15.1 z277 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations or the services we provide. The effective date at the top of this document will be updated upon any material revision.

15.2 Where changes are material, z277 will provide notice through the Platform or via your registered email address. Your continued use of the Platform following notification of a change constitutes your acceptance of the revised Policy.

15.3 We recommend reviewing this Policy periodically to remain informed of how z277 protects your data.

16. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" in your email subject for faster routing
• Support Hours: 24/7 in English; Urdu language assistance available on request
• Response Target: Within 30 calendar days of receipt

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon request.