01 Who We Are
zx77 is an online casino and sports betting platform accessible at zx77.biz, operated under an international gaming licence and primarily serving registered players based in Pakistan. For the purposes of this Privacy Policy, zx77 acts as the data controller in respect of all personal information collected from users of the zx77 website, mobile platform, and related services.
Our platform offers a wide range of products including cricket betting, live dealer casino games, slot machines, Fortune Bingo, and the Ezugi Live studio lobby. Each of these products involves the processing of personal data in connection with account management, gameplay, and financial transactions, all of which is governed by this Privacy Policy.
Data Controller Contact: For any privacy-related enquiry, data rights request, or complaint, you may contact the zx77 data protection team by email at
[email protected]. Please include "Privacy Request" in the subject line so that your message is directed to the appropriate team without delay.
This Privacy Policy applies exclusively to data processed through the zx77 platform. It does not apply to third-party websites, payment processors, or game studio providers whose own privacy policies govern the data they independently collect when you interact with their services.
02 Data We Collect
zx77 collects the following categories of personal data from its users. The specific data points collected in each category depend on the nature of your interaction with the platform:
| Category |
Data Points |
Required? |
| Identity Data |
Full legal name, date of birth, CNIC number, passport number (if applicable), profile photograph for verification |
Mandatory |
| Contact Data |
Email address, mobile phone number (Pakistani network), city of residence (e.g., Karachi, Lahore, Islamabad) |
Mandatory |
| Financial Data |
JazzCash / EasyPaisa account references, HBL / UBL / Meezan Bank account details, USDT wallet address (TRC-20), deposit and withdrawal transaction history |
Mandatory for transactions |
| Gaming Activity Data |
Betting history, game session records, win/loss records, bonus claims, wagering activity |
Automatic |
| Technical Data |
IP address, device type and model, browser type and version, operating system, session timestamps, login history |
Automatic |
| Communications Data |
Live chat transcripts, support email correspondence, complaint records, feedback submissions |
When applicable |
| Preference Data |
Language and currency preferences, responsible gaming limit settings, marketing consent choices |
Optional / User-set |
Note on Sensitive Data: zx77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data for identification, or health data beyond what is strictly necessary for responsible gaming assessments (e.g., self-declared problem gambling history when using self-exclusion tools).
03 How We Collect Your Data
zx77 collects personal data through the following channels and mechanisms:
- Direct Registration: When you create a zx77 account, you directly provide your name, date of birth, CNIC details, email address, and mobile number through the registration form.
- KYC Verification Submissions: When you submit identity documents for Know Your Customer (KYC) verification — typically required before your first withdrawal — zx77 collects copies of your CNIC or passport and any supporting proof-of-address documentation you provide.
- Payment Transactions: Each time you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, zx77's payment processing systems record the relevant transaction data including the amount, method, timestamp, and wallet or account reference.
- Platform Usage: Your gameplay activity, bet placement, session durations, and responsible gaming settings are automatically recorded by the zx77 platform as part of normal operations and in fulfilment of our regulatory record-keeping obligations.
- Cookies and Similar Technologies: zx77 uses cookies, local storage, and similar tracking technologies to maintain your session, remember your preferences, and collect anonymous analytical data about platform usage. See Section 7 for full details.
- Customer Support Interactions: When you contact zx77 via live chat or email, the content of those communications is recorded and retained as part of your account support history.
- Third-Party Identity Verification Services: zx77 may use regulated third-party identity verification providers to cross-check CNIC and age verification data against official databases as part of the KYC process.
04 Why We Use Your Data
zx77 processes your personal data for the following specific purposes. Each purpose is linked to a lawful basis, which is detailed in Section 5:
- Account Creation and Management: To set up and maintain your zx77 account, verify your identity, and enable you to access the platform's products and services.
- Age and Identity Verification: To confirm that you are aged 21 or above and are who you claim to be, as required by our regulatory obligations and responsible gaming commitments.
- Payment Processing: To process your deposits and withdrawals securely via your chosen payment method, maintain accurate transaction records in PKR, and comply with anti-money laundering (AML) requirements.
- Platform Personalisation: To remember your language preferences, display your betting history, and tailor the platform experience to your activity patterns — for example, surfacing cricket markets relevant to PSL or Pakistan internationals during live match periods.
- Responsible Gaming Compliance: To enforce the deposit limits, session reminders, reality checks, and self-exclusion periods you have set, and to monitor your gaming patterns for signs of problem gambling in accordance with our international licence obligations.
- Fraud Prevention and Security: To detect and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and money laundering on the zx77 platform.
- Legal and Regulatory Compliance: To fulfil the record-keeping, reporting, and audit requirements imposed by our international gaming licence and applicable financial crime prevention regulations.
- Customer Support: To respond to your enquiries, process complaints, and maintain a support correspondence history linked to your account.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or on-platform notification, where you have given explicit consent to receive such communications. You may withdraw consent at any time.
- Platform Analytics and Improvement: To analyse aggregated, anonymised usage data to identify platform performance issues, improve game loading speeds, and enhance the overall user experience for players across Karachi, Lahore, Faisalabad, Islamabad, and other cities in Pakistan.
05 Legal Basis for Processing
Every instance of personal data processing carried out by zx77 is grounded in one of the following lawful bases, consistent with international data protection standards applicable under our gaming licence jurisdiction:
- Contractual Necessity: Processing required to fulfil the contract between you and zx77 — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
- Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC verification, AML record-keeping, age verification, and regulatory reporting — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of zx77's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies is carried out only where you have given clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Withdrawing Consent: If you have previously given consent for marketing communications from zx77 and wish to withdraw it, you can do so at any time by updating your notification preferences in your account settings dashboard, or by emailing
[email protected] with the subject line "Unsubscribe." Withdrawal of marketing consent does not affect your ability to use the zx77 platform.
06 Sharing Your Data
zx77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:
- Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive the minimum financial data necessary to process your deposit or withdrawal transactions. Each provider is bound by its own privacy policy and applicable financial regulations.
- Identity Verification Providers: Regulated third-party KYC and age verification service providers may receive copies of your CNIC or passport data for the sole purpose of verifying your identity as required by our licence conditions. These providers are bound by strict data processing agreements with zx77.
- Game Studio Providers: Live casino providers including Ezugi may receive your session token and account reference (but not your full personal identity data) to deliver game content within the zx77 platform. Game studios operate under their own data governance frameworks and are contractually prohibited from using your data for any purpose other than game delivery.
- Regulatory Authorities: zx77 is obligated to disclose player data to its licensing authority, financial intelligence units, and law enforcement agencies upon lawful request. Such disclosures are made only to the extent required by the applicable legal obligation.
- IT Infrastructure and Cloud Service Providers: Trusted technology partners that host, maintain, and secure the zx77 platform infrastructure may process personal data on our behalf under strict data processing agreements that prohibit any independent use of your data.
- Anti-Fraud and AML Screening Services: Specialist providers that help zx77 screen transactions and account activity for money laundering, fraud, and sanctions compliance may receive limited data for this specific purpose.
No Sale of Data: zx77 has never sold personal data to advertisers, data brokers, or marketing agencies, and has no plans to do so. If this policy ever changes, registered account holders will be notified in advance and given the opportunity to opt out before any such sharing takes effect.
07 Cookies & Tracking Technologies
zx77 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the platform. The following categories of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the zx77 platform to function. They maintain your login session, remember your language preference, and enable secure navigation between pages. You cannot opt out of strictly necessary cookies while using the platform.
- Functional Cookies: These cookies remember your platform preferences — such as your preferred payment method display and responsible gaming settings — so you do not have to re-enter them each visit.
- Analytical Cookies: zx77 uses anonymised analytical tracking to understand how users navigate the platform, which game categories are most visited, and where users encounter difficulties. This data is processed in aggregate and is not linked to individual identities.
- Security Cookies: These cookies help zx77 detect and prevent fraudulent login attempts, account takeovers, and bot activity by maintaining a device fingerprint associated with your verified account.
zx77 does not use third-party advertising cookies or cross-site behavioural tracking cookies. You can manage your cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may impair some platform functionality, including remembered preferences and certain security features.
For detailed information on managing cookies in your specific browser, refer to your browser's help documentation. Most modern browsers allow you to view, delete, and block cookies on a per-site basis without affecting your browsing on other websites.
08 Data Retention
zx77 retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by our regulatory obligations. The following retention periods apply:
- Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by anti-money laundering regulations and gaming licence record-keeping obligations.
- Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial crime prevention regulations applicable to our licensing jurisdiction.
- Gaming Activity Records: Retained for the duration of your account plus two (2) years following closure, or longer if required for an open regulatory investigation or dispute resolution process.
- Customer Support Correspondence: Retained for three (3) years from the date of each interaction, or until the matter to which it relates is fully resolved and the applicable dispute window has closed.
- Marketing Consent Records: Retained for the duration of your account. If you withdraw marketing consent, the withdrawal record itself is retained to demonstrate compliance.
- Analytical and Technical Data: Anonymised analytical data is retained indefinitely in aggregate form. Raw technical logs (IP addresses, session logs) are retained for twelve (12) months for security and fraud investigation purposes.
When personal data is no longer required and no legal retention obligation applies, zx77 securely destroys or anonymises the data in accordance with our internal data destruction policy.
09 Data Security
zx77 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures include:
- Encryption: All personal data is encrypted at rest using AES-256 encryption. All data in transit between your browser and the zx77 servers is protected by TLS 1.3, the current industry standard for secure web communications.
- Access Controls: Access to personal data within zx77's internal systems is restricted on a strict need-to-know basis. Staff access is controlled via role-based permissions, and all access events are logged and audited.
- Two-Factor Authentication: All zx77 staff with access to personal data systems are required to use two-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts from the account security settings page.
- Penetration Testing: zx77 conducts regular independent security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: zx77 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, affected account holders will be notified without undue delay.
Your Responsibility: While zx77 implements robust server-side security measures, the security of your account also depends on the strength and confidentiality of your zx77 Login credentials. Use a strong, unique password and enable two-factor authentication. Never share your login details with anyone — zx77 staff will never ask for your password.
10 Your Rights
As a data subject whose personal information is processed by zx77, you have the following rights under applicable data protection principles. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username:
- Right of Access: You have the right to request a copy of the personal data zx77 holds about you, along with information about how it is being used. zx77 will provide this within 30 days of receiving a valid request.
- Right to Rectification: If any personal data held by zx77 is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require supporting documentation, particularly for identity data.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other lawful basis applies. This right is subject to zx77's legal data retention obligations — data that must be retained for regulatory compliance cannot be erased before the mandatory retention period expires.
- Right to Restriction: You have the right to request that zx77 temporarily pause its processing of your personal data in certain circumstances, such as while the accuracy of data is being verified following a rectification request.
- Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection or responsible gaming monitoring, where your particular circumstances justify such an objection.
- Right to Withdraw Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time without penalty.
Response Timeframe: zx77 aims to respond to all data rights requests within 30 calendar days of receipt. In cases of particular complexity, this period may be extended by a further 30 days, and you will be notified of the extension and the reason for it within the initial 30-day window.
11 Children & Minors
The zx77 platform is strictly for adults aged 21 years and above. zx77 does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Robust age verification controls are applied at registration and at the point of first withdrawal to enforce this restriction.
If zx77 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, the account in question will be immediately suspended, all personal data associated with the account will be securely deleted (subject to any regulatory retention obligations relating to the detection of underage gambling), and any deposited funds will be returned via the original payment method after verification.
Parents and guardians who believe a minor may have registered on the zx77 platform are urged to contact [email protected] immediately. zx77 will treat such reports as a priority and act on them without undue delay. We also recommend that parents and guardians use parental control software to restrict access to online gambling platforms on shared or family devices.
12 International Data Transfers
As an internationally licensed gaming platform, zx77 may process and store personal data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that required under our licence conditions, zx77 ensures that appropriate safeguards are in place, including:
- Data processing agreements with all third-party processors that include contractual data protection obligations no less protective than those in this Privacy Policy.
- Technical security controls (encryption, access management, audit logging) that apply regardless of the geographic location of the data.
- Restrictions on onward transfers by our data processors to sub-processors without zx77's prior written authorisation.
By registering and using the zx77 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section, subject to the safeguards described above.
13 Changes to This Policy
zx77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When material changes are made, zx77 will:
- Update the effective date displayed at the top of this page.
- Send a notification email to the registered email address associated with your zx77 account, summarising the key changes.
- Display a prominent in-platform notice for a minimum of 30 days following any material update.
Your continued use of the zx77 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should cease using the platform and request account closure via [email protected], whereupon your verified account balance will be returned via your nominated withdrawal method.
14 Contact & Complaints
For any privacy-related question, data rights request, or complaint regarding how zx77 processes your personal data, please contact us through the following channels:
- Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" as appropriate
- Live Chat: Available on the zx77 platform from 09:00 to 01:00 PST daily
zx77 aims to acknowledge all privacy complaints within 24 hours and to provide a full written resolution within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the data protection supervisory authority applicable under zx77's gaming licence jurisdiction. Details of the relevant authority are available from the zx77 support team upon request.
Pakistan Standard Time Support: Our data protection team operates on Pakistan Standard Time (PST, UTC+5). If you submit a privacy request outside of support hours, it will be queued and addressed at the opening of the next available support window. We aim to meet all response deadlines regardless of when the request is received.