cz77 Privacy Policy — How We Collect, Use & Protect Your Data

This Privacy Policy ("Policy") is issued by cz77, the online gaming platform operated at cz77.one. It describes the personal data we collect from individuals who access or use the cz77 platform, the purposes for which that data is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights available to individuals in respect of their data.

This Policy applies to all personal data processed in connection with your use of cz77 — including the cz77.one website, the cz77 PKR wallet, cz77 casino games, sports betting markets, customer support interactions, and any promotional communications you may receive.

By registering a cz77 account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should refrain from using the cz77 platform and contact support to request account closure if an account already exists.

For the purposes of this Privacy Policy, cz77 acts as the data controller in respect of all personal information collected through the cz77.one platform. As data controller, cz77 determines the purposes and means by which your personal data is processed.

All enquiries relating to data processing, requests to exercise data subject rights, and privacy-related complaints should be directed to the cz77 privacy team via the contact information provided in Section 15 of this Policy.

cz77 collects personal information in three primary ways: directly from you when you register or interact with the platform, automatically through your use of the site, and from trusted third parties for verification and fraud prevention purposes.

cz77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where strictly required for responsible gaming assessments (e.g. self-exclusion records), in which case such data is processed with the highest level of protection.

cz77 uses the personal data collected from you for the following purposes:

• Account registration and management: To create, maintain, and secure your cz77 member account, including authentication and account recovery.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK channels, and to maintain accurate financial records.
• Identity verification (KYC): To confirm your identity and age (21+) in compliance with anti-money laundering and responsible gaming obligations.
• Platform operation and personalisation: To deliver the games, sports betting markets, and features you access, and to tailor the cz77 experience to your preferences and usage history.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limit, and session reminder tools where activated by a member or required by policy.
• Customer support: To respond to your enquiries, resolve account disputes, and provide assistance through the cz77 live chat and email channels.
• Legal compliance: To meet regulatory, tax, and anti-money laundering record-keeping obligations applicable to cz77's operations.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications (see Section 13).

cz77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the cz77 Member Agreement — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, and financial record-keeping regulations.
• Legitimate interests: Processing conducted for fraud prevention, platform security, and responsible gaming monitoring, where cz77's interests are balanced against and do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

The cz77 platform uses cookies and similar tracking technologies to operate correctly, improve performance, and analyse user behaviour. The following categories of cookies are used:

• Strictly necessary cookies: Required for the cz77 platform to function. These include session management cookies that maintain your login state and PKR wallet session. These cookies cannot be disabled without rendering the platform non-functional.
• Performance and analytics cookies: Used to collect anonymised data about how members navigate the cz77 platform — which pages are visited most frequently, where users enter and exit, and which features are used. This data is used to improve the platform.
• Functionality cookies: Used to remember your preferences — such as language settings and game lobby filters — so that the platform behaves consistently across sessions.
• Security cookies: Used to support fraud detection and abuse prevention functions, including login anomaly detection.

cz77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your information only in the following circumstances, and only to the extent necessary for each specific purpose:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive the minimum financial data required to process your PKR deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC providers receive identity documents and personal details to conduct age and identity verification checks. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention services: Payment fraud and account fraud detection providers receive technical and transactional data necessary to identify and prevent fraudulent activity on the platform.
• Game software providers: Third-party game providers may receive a pseudonymous session identifier to deliver their games through the cz77 lobby. They do not receive your full identity or payment data.
• Legal authorities: cz77 will disclose personal data to law enforcement, financial intelligence units, or courts where required to do so by applicable law, regulatory directive, or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of cz77 assets, member data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.

cz77 operates with infrastructure and service partners that may be located outside Pakistan. Where your personal data is transferred to a jurisdiction that does not provide the same level of data protection as your home country, cz77 ensures that appropriate safeguards are in place. These include contractual data protection clauses that bind the recipient to handle your data in accordance with international privacy standards.

By using the cz77 platform, you consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy, subject to the protections described above.

cz77 retains personal data for as long as your account remains active and for the minimum period required thereafter to comply with legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of membership plus 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for 5 years from the date of each transaction, in compliance with applicable financial record-keeping standards.
• Customer support communications: Retained for 2 years from the date of each interaction, or longer where an unresolved dispute exists.
• Marketing consent records: Retained for the duration of your consent and for 1 year thereafter as evidence of consent.
• Technical and usage data: Retained in aggregated or pseudonymised form for platform analytics. Raw logs are deleted after 90 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

cz77 implements a layered technical and organisational security framework to protect member data from unauthorised access, alteration, disclosure, or destruction. Key measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and the cz77 platform is encrypted in transit using TLS 1.3.
• At-rest encryption: Personal data stored in cz77 databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data within cz77 is restricted on a strict need-to-know basis. Employee access is logged, reviewed, and revoked immediately upon role change or departure.
• Two-factor authentication (2FA): All cz77 members have access to 2FA for account login, and all administrative access to cz77 systems requires multi-factor authentication.
• Penetration testing: cz77 engages independent security firms to conduct regular penetration tests of its platform infrastructure.
• Incident response: cz77 maintains a documented data breach response plan. In the event of a breach that poses a risk to member rights and freedoms, affected members will be notified without undue delay.

As a cz77 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact the cz77 support team. We will respond within 30 days of receiving your request:

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your cz77 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to cz77.
• Right to object: You may object to processing of your personal data where cz77 relies on legitimate interests as the legal basis, or where data is used for direct marketing.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without penalty.

The cz77 platform is strictly intended for adults aged 21 years and over. cz77 does not knowingly collect personal data from individuals under the age of 21. All registrations are subject to age verification.

If cz77 becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, all data associated with the account will be deleted, and any deposited funds will be returned to the originating payment method where possible.

If you are a parent or guardian and believe that your child has registered a cz77 account, please contact our support team immediately with the relevant account details so that the matter can be resolved promptly.

cz77 may send promotional offers, bonus notifications, new game announcements, and other marketing communications to members who have opted in to receiving them. Marketing communications are sent via email or SMS to the contact details registered on your account.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from cz77;
• Updating your communication preferences in your cz77 account settings; or
• Contacting the cz77 support team and requesting removal from the marketing list.

Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent regardless of marketing preferences as they are essential to platform operation.

cz77 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When material changes are made, we will notify registered members via email to the address on their account, or by displaying a prominent notice on the cz77 platform, no less than 7 days before the updated Policy takes effect.

The effective date at the top of this Policy will always reflect when the current version came into force. Your continued use of the cz77 platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the changes, you must stop using the platform and request account closure before the effective date.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the cz77 privacy team using the details below. We aim to respond to all privacy enquiries within 30 calendar days.

If you are not satisfied with cz77's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. cz77 will cooperate fully with any such investigation.