za77 Privacy Policy

za77 operates the online casino and sports betting platform accessible at za77.asia under an international gaming license. For the purposes of data protection law, za77 is the data controller in respect of the personal data collected and processed from players and visitors through the platform.

As the data controller, za77 is responsible for determining the purposes for which personal data is collected and the manner in which it is processed. za77 is also responsible for ensuring that all data processing activities comply with the data protection obligations imposed by the relevant regulatory framework under which it holds its international gaming license.

If you have any questions about how za77 processes your personal data, or if you wish to exercise any data rights described in this Policy, you may contact the za77 data protection point of contact via the details set out in Section 14.

za77 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data collected are described below:

2.1 Registration & Identity Data

When you create a za77 account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required for 21+ age verification).
• Pakistani mobile phone number (used for account verification, 2FA, and communications).
• Email address.
• Residential address, including city (e.g., Karachi, Lahore, Faisalabad, Islamabad) and postal code.
• Username and encrypted account password.

2.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer process, we collect and process identity verification documents, which may include:

• Copy of Pakistani CNIC (Computerized National Identity Card) — front and back.
• Copy of a valid Pakistani passport (where provided in lieu of CNIC).
• Proof of residential address (utility bills, bank statements issued in Pakistan).
• Selfie photographs or liveness verification images where required by our KYC provider.
• Proof of payment method ownership (screenshots or statements from JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank accounts used for deposits).

2.3 Financial Transaction Data

In connection with deposit and withdrawal transactions, za77 collects and retains:

• Payment method identifiers (e.g., masked JazzCash or EasyPaisa mobile number, partial bank account details).
• Transaction amounts in PKR.
• Transaction timestamps and reference numbers.
• Deposit and withdrawal status records.

za77 does not store complete payment credentials such as full bank account numbers or full mobile wallet account numbers. Payment processing is handled by PCI-DSS compliant third-party payment processors who are subject to binding confidentiality and data protection obligations.

2.4 Gaming & Betting Activity Data

za77 records detailed activity logs relating to your use of the platform, including:

• Betting history across all sportsbook markets (cricket, PSL, other sports).
• Casino game session histories (live dealer tables, slots, RNG table games).
• Wager amounts, game outcomes, and settlement records.
• Bonus and promotion usage records.
• Session duration and login/logout timestamps.

2.5 Technical & Device Data

• IP address at the time of login and during active sessions.
• Device type, operating system, and browser type and version.
• Mobile network operator (where applicable for Pakistani mobile users).
• Geolocation data derived from IP address (country and city level — not precise GPS location unless explicitly granted).
• Platform access logs and session identifiers.

2.6 Communication Data

When you contact za77's support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, training, compliance, and dispute resolution purposes.

za77 collects personal data through the following channels:

3.1 Directly from You

• Information you provide when completing the za77 account registration form.
• Identity documents and photographs submitted during the KYC verification process.
• Information you provide when contacting the za77 support team via live chat or email.
• Preferences and settings you configure within your account dashboard.

3.2 Automatically During Platform Use

• Technical and device data collected automatically when you access the za77 website or mobile interface.
• Cookies and similar tracking technologies as described in Section 7.
• Betting and gaming activity data generated as a result of your use of the za77 platform.

3.3 From Third-Party Service Providers

• Identity verification results and risk scoring from third-party KYC service providers.
• Transaction confirmation and fraud screening data from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank integration partners).
• Fraud and anti-money laundering screening results from compliance data providers.

za77 uses the personal data it collects for the following specific purposes:

za77 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between za77 and the player — i.e., the Terms & Conditions accepted at account registration. This includes account management, payment processing, and enabling platform gameplay.
• Legal Obligation: Processing required to comply with our international gaming license obligations, including KYC verification, AML record-keeping, responsible gaming monitoring, and regulatory reporting.
• Legitimate Interests: Processing conducted in pursuit of za77's legitimate business interests, including fraud prevention, platform security, and improving the platform experience — where such interests are not overridden by the player's privacy rights.
• Consent: Where za77 relies on consent as the legal basis for processing (e.g., optional marketing communications), players may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

za77 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for each purpose:

6.1 Payment Processors

To process deposits and withdrawals, za77 shares necessary transaction data with its payment processing partners — including the integration partners supporting JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions. Payment processors receive only the data required to execute and confirm the specific transaction. All payment processor partners are bound by contractual data protection obligations and, where applicable, PCI-DSS compliance requirements.

6.2 KYC & Identity Verification Providers

za77 uses third-party KYC service providers to verify the identity and age of players. KYC providers receive identity document data and, where required, selfie/liveness data solely for the purpose of identity verification. KYC providers are not permitted to use this data for any purpose other than fulfilling the verification service for za77 and are bound by strict confidentiality obligations.

6.3 Fraud Detection & AML Compliance Services

za77 uses fraud detection and anti-money laundering screening services to identify and prevent prohibited financial activity on the platform. These services may process transaction data and device data to generate risk assessments. Such providers operate under binding data processing agreements and are not permitted to share za77 player data with any other party.

6.4 Regulatory and Law Enforcement Disclosure

za77 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, by court order, or in connection with our obligations under our international gaming license. In such cases, za77 will disclose only the minimum data required to satisfy the legal obligation.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of za77's business or assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from the transaction.

za77 uses cookies and similar browser-based technologies on the za77.asia website. Cookies are small data files placed on your device that allow the platform to remember certain information about your session and preferences.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the za77 platform to function correctly. They include session authentication cookies, security tokens, and cookies that maintain your login state. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings and display options. They are not strictly necessary but improve the usability of the platform. Disabling them may reduce platform functionality.
• Analytics Cookies: za77 uses privacy-conscious analytics tools to understand how visitors navigate the platform. Analytics data is processed in aggregate and is not linked to individual player identities. This helps za77 identify technical issues and improve the player experience, particularly for Pakistani mobile users operating on 3G and 4G networks.
• Security & Fraud Prevention Cookies: These cookies assist za77 in identifying and preventing fraudulent login attempts, session hijacking, and other security threats.

7.2 Cookie Management

Most web browsers allow you to manage cookie preferences through your browser settings. You may configure your browser to refuse all non-essential cookies, or to notify you when a cookie is being set. Please note that disabling strictly necessary cookies will prevent you from logging into or using the za77 platform. za77 does not use advertising or cross-site tracking cookies.

za77 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and as required by our international gaming license regulatory obligations. The following retention periods apply to principal data categories:

Upon expiry of the applicable retention period, za77 will securely delete or anonymise personal data such that it can no longer be linked to an individual player. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.

za77 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the za77 platform is protected using TLS (Transport Layer Security) encryption. This applies to login sessions, payment transactions, and all other platform interactions.
• Encryption at Rest: Sensitive personal data stored in za77's systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within za77's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role.
• Two-Factor Authentication (2FA): za77 offers 2FA via registered Pakistani mobile number to all account holders. za77 staff accessing internal systems containing player data are required to use 2FA.
• Regular Security Audits: za77's technical infrastructure undergoes regular security audits and penetration testing by qualified security professionals.
• Incident Response: za77 maintains a data breach incident response procedure. In the event of a data breach that is likely to result in a risk to player rights, za77 will notify affected players promptly and report to relevant regulatory authorities as required.

While za77 applies robust security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to maintain strong, unique passwords for their za77 account and to enable 2FA to maximise the security of their personal data and account balance.

za77 respects your rights in relation to your personal data. The following rights are available to za77 players and platform visitors. To exercise any of these rights, please contact za77 using the details provided in Section 14.

za77 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by up to a further 60 days, in which case za77 will notify you of the extension and the reason for it. za77 will not charge a fee for processing data rights requests except in cases of manifestly unfounded or excessive repetition, in which case a reasonable administrative fee may apply.

If za77 becomes aware that personal data has been collected from a person under 21 years of age, it will promptly delete that data and terminate the associated account. If you are a parent or guardian and believe that your child under 21 has created a za77 account, please contact za77 support immediately using the details in Section 14.

za77 operates as an internationally licensed platform and may process or store personal data in jurisdictions outside of Pakistan. This includes the jurisdictions in which za77's servers, KYC providers, and payment processing partners are based.

Where personal data is transferred internationally, za77 ensures that appropriate data protection safeguards are in place to protect the transferred data, including contractual data protection obligations in agreements with third-party service providers and, where applicable, adherence to internationally recognised data transfer frameworks.

By using the za77 platform, Pakistani players acknowledge and consent to the transfer of their personal data to jurisdictions outside Pakistan as described in this Section. za77 takes reasonable steps to ensure that any international recipients of Pakistani player data maintain data protection standards consistent with the principles described in this Privacy Policy.

za77 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect how za77 collects, uses, or shares personal data — za77 will notify registered players via email to their registered address and/or via an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy reflects the most recent revision. Players are encouraged to review this Policy periodically to remain informed of how za77 manages their personal data. Continued use of the za77 platform following notification of a material Privacy Policy update constitutes acceptance of the revised Policy. If you do not agree with any update, you may request voluntary account closure as described in the za77 Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by za77, please use the following contact channels:

This Privacy Policy was last reviewed and updated in January 2026 and applies to all users of the za77 platform, including all Pakistani players accessing za77 from Karachi, Lahore, Faisalabad, Islamabad, and all other locations.