zm77 Privacy Policy

This Privacy Policy ("Policy") describes how zm77 ("zm77", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use the zm77 online gaming and sports betting platform available at zm77.app.

zm77 is committed to handling personal data responsibly, transparently, and in accordance with the data protection standards required under its international gaming licence. This Policy applies to all personal data collected in connection with the zm77 platform, including data collected via the zm77 website, mobile-optimised interfaces, customer support channels, and any other zm77-branded digital touchpoints.

This Policy should be read alongside the zm77 Terms & Conditions, which govern the overall relationship between zm77 and registered players. Capitalised terms used but not defined in this Policy have the meanings given to them in the zm77 Terms & Conditions.

zm77 serves players across Pakistan, including cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. While zm77 makes no representation regarding the legal status of online gaming in any particular jurisdiction, zm77 takes seriously its obligation to protect the personal data of every individual who interacts with the platform, regardless of their location.

For the purposes of this Policy, zm77 acts as the data controller in respect of the personal data of registered players and website visitors. As data controller, zm77 determines the purposes for which personal data is collected and the means by which it is processed.

zm77 may engage third-party data processors — including payment service providers, identity verification services, game technology providers, and customer support platform operators — to process personal data on zm77's behalf. All such processors are engaged under written data processing agreements that require them to handle personal data only on zm77's documented instructions and to maintain appropriate security measures.

zm77 collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically through technical means as you use the platform, and from third parties where necessary for verification or fraud prevention purposes.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

3.3 Data Received from Third Parties

zm77 may receive personal data about you from third-party identity verification providers engaged to conduct KYC checks, from payment processors in connection with deposit and withdrawal transactions, and from fraud prevention services that help zm77 identify suspicious account activity. Such third-party sourced data is handled in accordance with this Policy.

zm77 processes personal data only where a lawful basis for doing so exists. The applicable lawful basis varies depending on the purpose of processing, as set out below:

• Contract Performance: Processing necessary to register your zm77 account, process deposits and withdrawals, settle bets, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing required to comply with zm77's obligations under its gaming licence, including KYC/AML checks, age verification, responsible gaming record-keeping, and regulatory reporting.
• Legitimate Interests: Processing necessary for fraud detection and prevention, platform security, service improvement, and the detection of prohibited conduct — where such processing does not override your fundamental rights and interests.
• Consent: Processing for optional marketing communications, personalised promotions, and non-essential analytics cookies — where you have given explicit, informed, and freely withdrawable consent.

Where zm77 relies on consent as the lawful basis for processing, you may withdraw that consent at any time by contacting the zm77 support team or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

zm77 uses the personal data it collects for the following specific purposes:

5.1 Account Administration

Identity and contact data is used to create and maintain your zm77 account, authenticate your zm77 login, enable account recovery, and communicate important account-related notifications including security alerts, policy updates, and transaction confirmations.

5.2 Payment Processing

Financial data is used exclusively to process deposits and withdrawals via your registered payment method — JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT TRC20. zm77 does not store full payment credentials beyond what is technically necessary for transaction processing and does not process payments to accounts other than those registered to the zm77 account holder.

5.3 Identity and Age Verification

Document data and identity data are processed as part of zm77's KYC programme to verify that players are who they claim to be, that they are aged 21 or over, and that their source of funds is legitimate. This processing is a legal obligation under zm77's gaming licence and cannot be waived.

5.4 Responsible Gaming Monitoring

Usage data and transaction data are analysed to identify patterns of play that may indicate problem gambling behaviour, in accordance with zm77's responsible gaming obligations. Where such patterns are detected, zm77 may contact the player proactively and may apply account-level restrictions in the player's interests.

5.5 Fraud Prevention and Security

Technical data, usage data, and transaction data are used to detect and investigate fraudulent activity, identify prohibited conduct, and protect the integrity of the zm77 platform. This processing is carried out on the basis of zm77's legitimate interests in maintaining a secure and fair gaming environment.

5.6 Customer Support

Support data is retained to enable zm77 to provide effective customer service, to maintain a record of reported issues and their resolution, and to identify recurring problems that require platform-level fixes. Support interactions are conducted via the zm77 live chat function.

5.7 Marketing Communications

Where you have provided explicit consent, zm77 may send you personalised promotional communications regarding zm77 bonuses, new game releases, cricket betting specials, and platform updates. You may opt out of marketing communications at any time through your zm77 account settings or by contacting support.

zm77 does not sell your personal data to any third party. zm77 shares personal data only in the following limited and controlled circumstances:

• Payment Service Providers: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT wallet infrastructure providers solely to process your deposit and withdrawal transactions.
• Identity Verification Providers: Identity and document data is shared with zm77's appointed KYC/AML verification partner for the purpose of conducting legally required identity and age checks.
• Game Technology Providers: Usage data and session identifiers may be shared with zm77's third-party game suppliers to enable the delivery of live casino, slot, and arcade game content.
• Customer Support Platforms: Contact data and support data may be processed by the operator of the live chat and support ticketing platform used to deliver zm77 customer service.
• Fraud Prevention Services: Technical data and transaction data may be shared with third-party fraud detection services to identify and prevent fraudulent account activity.
• Regulatory Authorities: zm77 may disclose personal data to its gaming licence authority, financial intelligence units, or law enforcement agencies where required to do so by applicable law or by a binding legal order. zm77 will notify you of such disclosures where it is legally permitted to do so.

zm77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and zm77's licensing obligations. The following retention periods apply:

At the expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained for longer periods for statistical analysis and service improvement purposes.

zm77 implements a multi-layered technical and organisational security programme to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include:

• TLS/SSL encryption for all data in transit between player devices and zm77 servers.
• Encryption at rest for sensitive personal data including identity documents and financial account details stored on zm77 infrastructure.
• Role-based access controls ensuring that zm77 staff can access personal data only to the extent required by their specific job function.
• Multi-factor authentication requirements for zm77 administrative systems that process personal data.
• Regular security assessments and penetration testing of the zm77 platform and underlying infrastructure.
• Incident response procedures enabling zm77 to detect, contain, investigate, and report data security incidents in a timely manner.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. zm77 encourages players to take responsibility for the security of their own zm77 login credentials and to use the account security features available, including strong passwords and account activity notifications.

In the event of a data security incident that is likely to result in a risk to players' rights and interests, zm77 will take prompt action to contain the incident and will notify affected players without undue delay, providing clear information about the nature of the incident and the steps zm77 is taking in response.

zm77 uses cookies and similar tracking technologies on the zm77 platform. A cookie is a small text file placed on your device by a website you visit. Cookies serve several functions on the zm77 platform, as described below.

9.1 Strictly Necessary Cookies

These cookies are essential for the zm77 platform to function correctly. They enable core features such as zm77 login session management, security token validation, and shopping cart-style bet slip functionality. These cookies cannot be disabled without significantly impairing your ability to use the zm77 platform.

9.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, display settings, and notification options — so that zm77 can provide a more personalised experience on subsequent visits. These cookies do not track your activity across third-party websites.

9.3 Analytics Cookies

With your consent, zm77 uses analytics cookies to collect aggregated, anonymised data about how players use the platform — including which pages are most visited, how long players spend on different sections, and which features generate the most engagement. This data helps zm77 improve the platform experience over time. Analytics cookies are not activated without your explicit consent.

9.4 Managing Cookies

You can manage your cookie preferences through the zm77 cookie consent tool displayed when you first visit the platform. You may also configure your browser to block or delete cookies; however, blocking strictly necessary cookies may prevent you from accessing core zm77 features including your account and the betting interface.

As a data subject whose personal data is processed by zm77, you have a number of rights in relation to that data. zm77 is committed to facilitating the exercise of these rights promptly and without undue complication. The following rights are available to all zm77 players:

To exercise any of the above rights, please contact the zm77 support team via live chat. zm77 will respond to all data subject requests within 30 days of receipt. In complex cases, zm77 may extend this period by a further 60 days, and will notify you of any such extension. zm77 will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.

The zm77 platform is strictly intended for use by adults aged 21 years and over. zm77 does not knowingly collect personal data from individuals under the age of 21. By registering a zm77 account, you represent and warrant that you are at least 21 years of age.

Where zm77 discovers or has reasonable grounds to suspect that personal data belonging to an individual under the age of 21 has been collected — whether through a fraudulent registration, a failed age verification check, or any other means — zm77 will immediately suspend the relevant account, permanently delete the associated personal data to the extent permitted by its legal obligations, and report the matter to the appropriate regulatory authority where required.

zm77 operates internationally and may transfer personal data to, and process personal data in, countries other than Pakistan. In particular, zm77's server infrastructure, third-party game providers, and certain payment processing systems may be located in jurisdictions outside Pakistan.

Where personal data is transferred outside of Pakistan, zm77 takes appropriate steps to ensure that such transfers are conducted in accordance with the data protection standards required under zm77's gaming licence. These steps include the use of standard contractual clauses, data processing agreements, and transfers to jurisdictions that maintain adequate levels of data protection.

zm77 will not transfer personal data to a country or territory that does not provide adequate protection for personal data without first implementing appropriate safeguards and, where required, obtaining your explicit consent.

zm77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in zm77's data processing practices, applicable law, or regulatory requirements. When zm77 makes material changes to this Policy, it will notify registered players via account notification or email at least 7 days before the revised Policy takes effect.

The effective date of the current version of this Policy is stated at the top of this page. zm77 encourages players to review this Policy periodically. Continued use of the zm77 platform following the publication of a revised Policy constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or zm77's handling of your personal data, please get in touch with the zm77 data team using the following contact details:

• Live Chat: Available 24 hours a day, 7 days a week via the zm77 platform — the fastest way to reach the zm77 support team.
• Email: [email protected] (plain text — not a clickable link)

zm77 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. If you are not satisfied with zm77's response to a privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.