Your privacy matters at zk77. This Policy explains precisely what personal data we collect from Pakistani players, how we use and protect it, who we share it with, and what rights you hold over your own information. We believe in plain-language privacy — no hidden surprises.
A plain-English summary of the key privacy commitments zk77 makes to every Pakistani player on this platform. Full legal text follows in the sections below.
zk77 collects personal data limited to what is necessary for account management, KYC verification, payment processing, and regulatory compliance. We do not collect data indiscriminately or for purposes unrelated to your gaming experience.
All personal data held by zk77 is protected using AES-256 encryption at rest and TLS 1.3 in transit. Access to player data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging of all access events.
zk77 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Data is shared with third parties only where operationally necessary — such as payment processors, KYC providers, and our licensing authority.
You hold meaningful rights over your personal data held by zk77 — including the right to access, correct, restrict processing of, and request deletion of your data. Requests are processed promptly and free of charge through the support team.
zk77 uses cookies and similar technologies strictly for session management, security, and platform analytics. No advertising or cross-site tracking cookies are deployed. Cookie use is clearly disclosed and can be managed from your browser settings.
zk77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable financial regulations. Data is securely deleted when the retention period expires.
zk77 ("the Company", "we", "us", or "our") operates the online gaming platform accessible at zk77.biz. We are committed to protecting the privacy and personal data of all individuals who use our platform, with particular regard for the privacy expectations and regulatory context applicable to our Pakistani player base.
This Privacy Policy ("Policy") sets out in clear terms what categories of personal data zk77 collects about you, the purposes for which that data is processed, the legal bases on which we rely to process it, how long we retain it, with whom we share it, and what rights you hold in relation to it. This Policy should be read in conjunction with the zk77 Terms & Conditions and Responsible Gaming Policy, which together constitute the full framework of your relationship with the platform.
zk77 takes its data protection obligations seriously. Our practices are aligned with internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) framework, which we use as a benchmark for responsible data handling even where not legally mandated in a given jurisdiction.
For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is the operator of the zk77 platform. The Company is the legal entity responsible for operating zk77.biz under its international gaming licence.
All data protection enquiries, rights requests, and complaints should be directed to the zk77 Data Protection contact, accessible through the support team at the contact details provided in Section 15 of this Policy. We will acknowledge all data protection requests within 48 hours and aim to provide a substantive response within 30 calendar days.
zk77 collects personal data across the following categories. The specific data points collected in each category depend on your interactions with the platform and the services you use.
zk77 collects personal data through the following channels and mechanisms:
zk77 processes your personal data only where a valid legal basis exists. The applicable legal bases under internationally recognised data protection frameworks are as follows:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with you |
| KYC and age verification | Legal obligation under our gaming licence |
| Processing deposits and withdrawals (JazzCash, EasyPaisa, etc.) | Performance of a contract with you |
| Fraud prevention and anti-money-laundering | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Performance of a contract; legitimate interests |
| Responsible gaming monitoring and enforcement | Legal obligation under our gaming licence |
| Platform security and integrity | Legitimate interests |
| Bonus and promotional offer administration | Performance of a contract with you |
| Marketing communications (where opted in) | Consent |
| Platform analytics and improvement | Legitimate interests |
zk77 uses your personal data for the following specific purposes:
To create and maintain your zk77 account; authenticate your identity at login; process deposits and withdrawals in PKR via JazzCash, EasyPaisa, or bank transfer; apply bonus credits; maintain your Golden Bank loyalty points balance; and enable you to access all platform services including sports betting, live casino, and slots.
To fulfil our obligations under the international gaming licence under which zk77 operates — including mandatory KYC and age verification; anti-money-laundering (AML) transaction monitoring; responsible gaming obligation fulfilment; and the maintenance of player records as required by our licensing authority for audit purposes.
To monitor gaming behaviour for indicators of problem gambling; to apply deposit limits, loss limits, and cooling-off periods as requested by you; to action self-exclusion requests permanently and promptly; and to identify accounts that may require proactive intervention in accordance with our responsible gaming obligations.
To detect and prevent fraudulent activity including multi-accounting, bonus abuse, money laundering, match-fixing-related betting patterns, and unauthorised access to player accounts. Technical data including IP addresses and device identifiers is used for this purpose.
To respond to your enquiries and resolve complaints raised through live chat or email; to maintain records of your support interactions for quality assurance and dispute resolution; and to provide account recovery assistance.
If you have opted in to receive marketing communications from zk77, we may contact you by email or SMS with information about promotions, bonuses, new games, and other platform updates relevant to Pakistani players. You may opt out of marketing communications at any time through your account settings or by contacting support — opt-out requests will be actioned within five business days.
zk77 does not sell, rent, or licence your personal data to third parties for their own commercial purposes. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purposes:
JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial data protection requirements.
Where third-party identity verification services are used to confirm your CNIC details, date of birth, or other identity information, your data is shared with those providers under strict data processing agreements that limit use to the verification purpose only.
Third-party game providers (including Evolution Gaming and Pragmatic Play) receive your player identifier and game session data to enable game play, credit winnings, and resolve technical disputes. These providers do not receive your full identity or payment data.
Our international gaming licensing authority may require access to player data records for the purposes of regulatory audit, compliance inspection, or investigation of a specific complaint or incident. Such access is conducted under formal regulatory frameworks.
zk77 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of the Company, its players, or the public.
In the event of a merger, acquisition, or sale of the Company or its assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the acquiring entity will be required to honour the privacy commitments set out in this Policy.
As an internationally licensed online gaming platform, zk77 operates infrastructure and engages service providers across multiple jurisdictions. Your personal data may therefore be transferred to and processed in countries outside of Pakistan. Where such transfers occur, zk77 takes all reasonable steps to ensure that your data receives an equivalent level of protection to that provided under internationally recognised data protection standards.
Specific safeguards employed for international transfers include: contractual data processing agreements with all third-party processors; use of standard contractual clauses where applicable; and selection of processors whose data protection practices we have assessed as adequate for the nature of the data transferred.
zk77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected. The following retention periods apply as a general framework:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account + 5 years post-closure |
| KYC and age verification documents | Duration of account + 5 years post-closure |
| Financial transaction records (deposits, withdrawals) | 7 years (financial regulation requirement) |
| Gaming activity / bet history | Duration of account + 3 years post-closure |
| Customer support communications | 3 years from last interaction |
| Technical / server log data | 12 months from collection |
| Self-exclusion records | Indefinitely (to prevent re-registration) |
| Marketing opt-in records | Until opt-out + 1 year |
On expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.
zk77 uses cookies and similar tracking technologies on zk77.biz. A cookie is a small text file stored on your device by your browser when you visit the platform. The following categories of cookies are used:
These cookies are strictly necessary for the operation of the zk77 platform. They enable session authentication, maintain your login state, and support core security functions. Essential cookies cannot be disabled without making the platform non-functional. They store no personally identifiable information beyond a session token.
zk77 uses analytics cookies to understand how players navigate and use the platform — including which pages are visited most frequently, how long sessions last, and where technical issues occur. This data is used in aggregate and anonymised form to improve platform performance and user experience. No individual player's browsing is tracked for commercial advertising purposes.
Security cookies assist in detecting and preventing fraudulent login attempts, bot activity, and other security threats. They record device fingerprint information and session anomalies to protect your account from unauthorised access.
zk77 does not use advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair platform functionality and may prevent you from logging in to your zk77 account.
As a player on the zk77 platform, you hold the following rights in relation to your personal data. zk77 is committed to facilitating the exercise of these rights promptly and free of charge:
You have the right to request a copy of the personal data zk77 holds about you. Upon a verified access request, we will provide you with a structured summary of your personal data and the purposes for which it is processed, within 30 calendar days.
If any personal data zk77 holds about you is inaccurate or incomplete, you have the right to request its correction. Many data points — such as your email address and contact number — can be updated directly from your account settings. For identity data that has been KYC-verified, corrections must be supported by updated documentation.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest exists. Note that deletion requests may not be fully fulfilled where retention is required by law — for example, financial transaction records subject to a 7-year retention obligation cannot be deleted on request.
You may request that zk77 restrict the processing of your personal data — for example, while a rectification request is pending, or pending the outcome of an objection to processing. During a restriction period, your data will be stored but not otherwise processed.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes — such objections will be actioned immediately.
zk77 does not make decisions about you that produce significant legal or similarly significant effects based solely on automated processing without any human review. Where automated systems flag an account for fraud review or responsible gaming intervention, a human compliance team member reviews the flagged data before any consequential action is taken.
If you are a parent or guardian and believe that a minor has registered a zk77 account or provided personal data to the platform, please contact us immediately through the details provided in Section 15. We will investigate and take appropriate action, including account closure and data deletion, without delay.
zk77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
While zk77 employs robust security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your account — including by using a strong password, enabling two-factor authentication, and never sharing your login credentials with any third party.
zk77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will publish a notice on the zk77 platform and update the "Last Updated" date at the top of this Policy. For significant changes, we may also notify registered players by email or via an in-account notification.
Your continued use of the zk77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you may request account closure and deletion of your data to the extent permitted by our retention obligations.
We encourage you to review this Privacy Policy periodically to stay informed about how zk77 is protecting your personal information. This Policy was last substantively reviewed and updated in January 2026.
For all privacy-related enquiries, data rights requests, or concerns regarding the processing of your personal data by zk77, please contact our support team. We are available 24 hours a day, seven days a week:
We will acknowledge all privacy requests within 48 hours and provide a substantive response within 30 calendar days. In complex cases requiring extended investigation, we will notify you of the extended timeline within the initial 30-day window.
If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction, or to the data protection authority associated with the jurisdiction of our gaming licence. Details of the applicable supervisory authority are available from the zk77 support team upon request.
Now that you understand exactly how your data is handled, you can enjoy the full zk77 experience with confidence. Sports betting, live cricket odds, PSL markets, live casino tables, and 500+ slots — all in PKR, all protected by our security framework.