Privacy Policy – ZC7 Online Gaming Platform Pakistan

1 Introduction

ZC7 operates the online gaming platform at zc7.onl. As part of running this platform for players in Pakistan, we collect and process certain personal data. This Privacy Policy describes what that data is, how it is collected, the purposes for which it is used, and the rights you have in relation to it.

This policy applies to all users of the ZC7 platform — registered players, visitors browsing the site, and anyone who contacts ZC7 support. By creating an account or using zc7.onl in any way, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside the Terms and Conditions, which govern the overall agreement between you and ZC7. ZC7 may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Continued use of the platform after updates constitutes acceptance of the revised policy.

2 Data We Collect

ZC7 collects personal data in the following categories:

We collect data directly from you when you register, deposit, play, make a withdrawal, or contact support. We also collect technical data automatically when you visit or use the platform, including via cookies as described in Section 7.

3 How We Use Your Data

ZC7 uses your personal data for the following purposes:

• Account management: Creating and maintaining your ZC7 account, verifying your identity and age, and managing your account settings and preferences.
• Transaction processing: Processing PKR deposits via JazzCash, Easypaisa, Raast, bank transfer and card payments; processing PKR withdrawals to your verified payment method.
• Platform operation: Making games available to you, recording bet and game outcomes, tracking VIP points, calculating cashback and bonuses, and running the VIP programme.
• Security and fraud prevention: Detecting and preventing fraudulent activity, multiple account creation, bonus abuse, money laundering and other prohibited conduct as described in the Terms and Conditions.
• Customer support: Responding to your queries, resolving account issues, processing withdrawal requests and handling responsible gaming requests including self-exclusion.
• Legal and compliance obligations: Maintaining records required for anti-money laundering compliance, responding to lawful requests from authorities, and retaining data for the periods required by applicable obligations.
• Platform improvement: Analysing aggregate usage data to understand how players interact with the platform and to improve performance, game selection and user experience.
• Marketing communications: Sending promotional emails and notifications about bonuses, new games and platform updates — but only to players who have opted in to receive these communications.

4 Legal Basis for Processing

ZC7 processes your personal data on the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing required to operate your account, process your deposits and withdrawals, and deliver the gaming services you signed up for. Without this processing, ZC7 cannot provide the platform service.
• Legitimate interests: Fraud detection, platform security, preventing multiple account creation, and aggregate analytics to improve the platform. These interests do not override your fundamental privacy rights.
• Legal obligation: Identity verification, transaction record-keeping and reporting obligations related to anti-money laundering compliance.
• Consent: Marketing communications and any non-essential cookies. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Data

ZC7 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We share data only where necessary to operate the platform, as follows:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card processors receive the financial data necessary to execute your transactions. These processors operate under their own privacy policies and are not controlled by ZC7.
• Identity verification providers: Third-party KYC verification services may receive identity documents you submit for verification. These providers are contractually bound to process data only for the stated verification purpose.
• Game content providers: Game outcome data may be shared with game providers for certification and auditing purposes. This does not include your personal contact or financial data.
• Technology and hosting providers: Infrastructure and hosting services that process data on ZC7's behalf under data processing agreements that restrict use to authorised purposes only.
• Regulatory and legal authorities: Where required by law, ZC7 may disclose personal data to relevant authorities. ZC7 will only do so where legally compelled and will not disclose more data than required.

All third parties who process data on ZC7's behalf are contractually required to maintain appropriate data security measures and to use the data only for the specific purpose authorised by ZC7.

6 Payment Data and PKR Transactions

All financial transactions on ZC7 are conducted in Pakistani Rupees (PKR). When you make a deposit using JazzCash, Easypaisa, Raast or any other supported method, the transaction is processed through secure, encrypted channels.

ZC7 does not store your full payment credentials. For mobile wallet transactions, ZC7 retains a reference identifier sufficient to process refunds and withdrawals to the same method. For card payments, card data is handled directly by the payment processor and ZC7 retains only a tokenised reference.

Transaction history — showing deposit and withdrawal amounts in PKR, dates and methods — is retained in your ZC7 account for your own reference and for ZC7's compliance obligations. You can view your transaction history within your account dashboard at any time.

ZC7 requires that payment methods used for deposits and withdrawals belong to the registered account holder. Third-party payment is not permitted as described in the Terms and Conditions.

7 Cookies and Tracking Technologies

ZC7 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help the platform function properly and help us understand how the platform is used.

ZC7 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a gaming session. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings and display preferences. These are enabled by default but can be managed in your browser settings.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate the platform — which pages are visited, how long sessions last, and which games are most popular. This data helps ZC7 improve the platform experience. Analytics cookies require your consent.
• Marketing cookies: Used where you have opted in to promotional communications. These help ZC7 identify which promotions are relevant to your activity. Marketing cookies require your explicit consent.

You can manage or block non-essential cookies through your browser settings. Blocking essential cookies may prevent you from logging in or using the platform fully. For analytics and marketing cookies specifically, you can withdraw consent through your account settings at any time.

8 How Long We Keep Your Data

ZC7 retains personal data for as long as it is needed for the purposes described in this policy, or as required by applicable legal and compliance obligations. The key retention periods are:

• Active account data: Retained for the duration of your account and for a reasonable period following account closure to facilitate any outstanding matters.
• Transaction records in PKR: Financial transaction records are retained for a minimum of five years from the date of the transaction, consistent with standard anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for the period required for KYC and AML compliance purposes, typically five years from the end of the customer relationship.
• Support communications: Chat logs and email correspondence with ZC7 support are retained for up to two years from the date of the communication.
• Marketing data: Opt-in records and associated marketing preferences are retained until you opt out, at which point marketing communications cease and opt-out records are kept to confirm your preference.

When data is no longer required and no legal retention obligation applies, ZC7 deletes or anonymises it securely.

9 Data Security

ZC7 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure.

Security measures implemented by ZC7 include:

• Encryption of data in transit using TLS/SSL protocols across the entire platform
• Encryption of sensitive data at rest within ZC7's systems
• Access controls ensuring that internal staff can only access personal data relevant to their specific role
• Regular security reviews and monitoring of platform access logs
• Tokenisation of payment credentials — full card and wallet numbers are not stored in ZC7's systems
• Multi-factor authentication options for player accounts to provide an additional layer of security

Despite these measures, no internet-based system can be guaranteed to be completely secure. You also have a responsibility to protect your own account: use a strong password, do not share your login credentials with anyone, and log out of shared devices after every session. If you believe your ZC7 account may have been compromised, contact support immediately.

10 Your Rights Over Your Data

As a ZC7 player, you have the following rights in relation to your personal data:

• Access: You can request a copy of the personal data ZC7 holds about you. We will provide this within a reasonable timeframe upon receiving a valid request.
• Correction: If any data we hold about you is inaccurate or incomplete, you can request that it be corrected. Basic account details can be updated directly in your account settings.
• Erasure: In certain circumstances — for example, if your account is closed and no legal retention obligation applies — you can request that ZC7 delete your personal data.
• Restriction: You can request that ZC7 restrict processing of your data in specific circumstances, such as while a correction request is under review.
• Portability: You can request your data in a structured, commonly used format where technically feasible.
• Objection: You can object to processing carried out on the basis of legitimate interests. ZC7 will review the objection and cease processing if it cannot demonstrate overriding legitimate grounds.

To exercise any of these rights, contact ZC7 support. We may need to verify your identity before processing a data rights request. Requests are processed within a reasonable period — ZC7 aims to respond within 30 days.

11 Children's Privacy

ZC7 is strictly an adult platform. The platform is only available to individuals aged 18 and over. ZC7 does not knowingly collect personal data from anyone under 18.

If you are a parent or guardian and believe that someone under 18 has created a ZC7 account or provided personal data to the platform, please contact ZC7 support immediately. Any account confirmed to be held by a person under 18 will be closed immediately and any associated data will be deleted.

Account holders are responsible for ensuring that minors do not access their ZC7 accounts. If you share a device with younger family members, please ensure your ZC7 account is logged out and secured between sessions.

12 Marketing Communications

ZC7 may send promotional communications — including information about bonuses, new games, VIP programme updates and seasonal promotions — to players who have opted in to receive them. Marketing communications are sent by email and through in-platform notifications.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email
• Updating your communication preferences in your ZC7 account settings
• Contacting ZC7 support and requesting removal from the mailing list

Opting out of marketing communications does not affect transactional communications — ZC7 will still send you notifications about your account activity, deposit confirmations, withdrawal updates and support responses, as these are necessary for operating your account.

13 Changes to This Privacy Policy

ZC7 may update this Privacy Policy periodically to reflect changes in how we operate the platform, changes in applicable obligations, or changes in the data we collect. When we update this policy, the revised version will be published on this page with a new effective date.

For material changes — such as changes to the categories of data collected, new purposes for processing, or changes to how data is shared — ZC7 will take reasonable steps to notify registered players in advance of the changes taking effect. This may include an in-platform notification or an email to your registered address.

If you continue to use the ZC7 platform after a policy update, that constitutes your acceptance of the revised Privacy Policy. If you disagree with any update, you should stop using the platform and contact support to close your account and arrange withdrawal of your balance.

14 Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or the way ZC7 handles your personal data, please get in touch with the support team:

For data erasure requests, data access requests, or any other exercise of your rights described in Section 10, please contact support directly and clearly state the nature of your request so it can be routed to the correct team.

For responsible gaming support including self-exclusion — which involves processing your data specifically to prevent you from accessing the platform — please also contact support directly. These requests are handled immediately without delay.