Privacy Policy

§1 Introduction

zc222 is an English-language online sports betting and casino information platform serving adult users primarily located in Pakistan, including cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are committed to handling your personal information with transparency, care and in compliance with internationally recognised data protection principles.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. Where this Policy refers to data processing activities that are conditional on your consent, you retain the right to withdraw that consent at any time by contacting us using the details in Section 14.

We do not sell your personal data to third parties. We do not share your information with any Pakistani governmental authority, financial institution or payments provider except where strictly required by applicable law or the terms of our operating licence. Payment provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear as contextual references only and those entities do not receive your data from zc222 by virtue of being mentioned here.

§2 Definitions

The following terms carry the meanings assigned below throughout this Policy unless context clearly requires otherwise:

§3 Data We Collect

zc222 collects only the personal data necessary to operate the Platform lawfully, deliver a safe and personalised user experience, and meet our compliance obligations. The categories of data we collect are set out below:

3.1 Registration Data

When you create an account on zc222, we collect the information you provide during the registration process. This includes your chosen username, email address, date of birth, country of residence, and a password (stored in hashed form — we never store plaintext passwords).

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age, we may request copies of government-issued identity documents (such as a CNIC, passport or driving licence), proof of address (such as a recent utility bill or bank statement), and in certain circumstances a selfie or live verification image. These documents are processed securely and retained only for as long as required by our licence obligations.

3.3 Financial Data

When you make a deposit or request a withdrawal, we collect transaction details including the amount, currency (PKR or otherwise), payment method reference, and timestamp. We do not store complete payment card numbers. Any payment method identifiers are retained solely for fraud prevention, AML compliance and chargeback management purposes.

3.4 Usage and Behavioural Data

We automatically collect data about how you interact with the Platform. This includes pages visited, bet types and amounts placed, casino games accessed, session duration, search queries entered within the Platform, and click-path data. This data helps us improve our content, personalise your experience and identify problem gambling indicators under our responsible gambling obligations.

3.5 Technical and Device Data

We collect technical information about the device and connection you use to access zc222, including your IP address, browser type and version, operating system, device type, screen resolution, time zone and referring URL. IP addresses are used to infer approximate geographic location for compliance and fraud detection purposes.

3.6 Communications Data

If you contact our support team by email or live chat, we retain records of those communications — including the content of messages and associated metadata — to handle your query, resolve disputes and improve our service quality.

3.7 Marketing Preferences

Where you have opted in to receive marketing communications, we hold a record of your preferences and the channels (email, push notification) through which you have consented to receive them. You may update or withdraw these preferences at any time from your account settings or by contacting support.

§4 How We Use Your Data

zc222 uses the personal data we collect for the following specific purposes:

§5 Legal Basis for Processing

zc222 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing required to perform the contract between you and zc222 — including account management, bet settlement and payment processing — is undertaken on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements and licence conditions, is undertaken on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement and responsible gambling monitoring is undertaken on the basis of our legitimate interests in operating a safe, secure and compliant platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is undertaken on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

§6 Data Sharing & Third Parties

Your personal data may be shared with the following categories of third party:

• Payment Service Providers: To process deposits and withdrawals, transaction data is shared with our licensed payment processing partners. These providers are bound by their own regulatory obligations and data processing agreements with zc222. Payment method names referenced on the Platform — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited for contextual familiarity only; they are not direct data recipients by virtue of being named here.
• Identity Verification Providers: KYC documentation is shared with accredited identity verification service providers to perform age and identity checks in accordance with our licence obligations.
• Fraud Prevention & AML Services: Transaction and behavioural data may be shared with specialist fraud detection and AML screening providers to identify and prevent financial crime.
• Technology & Infrastructure Providers: Our hosting, cloud infrastructure and software service providers may have access to personal data as Data Processors acting under our instruction and bound by data processing agreements.
• Regulatory Authorities: We may be required to disclose personal data to our licensing authority, financial intelligence units or other regulatory bodies in connection with our compliance obligations. We will only make such disclosures to the extent required by law and will not voluntarily disclose user data to Pakistani authorities beyond any applicable legal requirement.
• Legal Proceedings: We may disclose personal data where required by a valid court order, judicial process or binding legal demand, subject to our assessment of the legality and proportionality of such a demand.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of our business, user data may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the recipient.

§7 Cookies & Tracking Technologies

zc222 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how users interact with our content. The categories of cookies we use are as follows:

On your first visit to the Platform, you will be presented with a cookie consent notice allowing you to accept or decline non-essential cookie categories. You may update your cookie preferences at any time through the cookie settings panel available in your account settings or in the Platform footer. Declining non-essential cookies will not prevent you from accessing the core features of the Platform.

Please note that disabling certain functional cookies may affect the availability of preference-based features such as your chosen odds format or saved betting filters.

§8 Data Retention

zc222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or our operating licence. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with zc222. Following account closure, core account data is retained for a minimum of five (5) years to satisfy AML record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• KYC Documents: Retained for five (5) years following account closure, or longer where required by the applicable licence jurisdiction's AML regulations.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with standard financial record-keeping requirements.
• Support Communications: Retained for two (2) years following resolution of the query, or longer if the communication forms part of a formal dispute or legal proceeding.
• Marketing Preferences: Retained until you withdraw consent, at which point your details are removed from active marketing lists within thirty (30) days. Suppression records may be retained indefinitely to prevent re-adding your details.
• Cookie and Analytics Data: Aggregated analytics data is retained for up to twenty-four (24) months. Session cookies expire on browser close; persistent preference cookies expire within twelve (12) months unless renewed by continued use.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

§9 Data Security

zc222 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) protocols. We enforce HTTPS across all Platform pages and reject unencrypted connections.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: User passwords are never stored in plaintext. All passwords are hashed using a strong one-way hashing algorithm with per-user salting before storage.
• Access Controls: Access to personal data by zc222 staff is governed by strict role-based access controls. Only personnel with a legitimate need to access specific categories of data are authorised to do so, and all access is logged for audit purposes.
• Two-Factor Authentication: We offer optional two-factor authentication (2FA) on user accounts and enforce it for internal staff accounts with access to user data systems.
• Penetration Testing: Our systems are subjected to regular independent security assessments and vulnerability scanning to identify and remediate potential weaknesses.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, zc222 will notify the relevant supervisory authority and, where required, affected users, within the timeframes prescribed by applicable law.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. You are also responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, please contact us immediately at [email protected].

§10 Your Rights Over Your Data

Subject to applicable law and the terms of our operating licence, you hold the following rights in relation to the personal data that zc222 holds about you. To exercise any of these rights, please submit a written request to [email protected] with sufficient detail to identify yourself and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where correction requires identity re-verification, we may request supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where we have processed it unlawfully. This right is subject to our legal retention obligations — in particular, we cannot erase transaction records or KYC documents within their mandatory retention periods.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We aim to resolve all data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days and will notify you if an extension is required. We will not charge a fee for reasonable requests, but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

§11 Minors & Age Policy

All users are required to confirm that they meet the minimum age requirement at registration. zc222 performs age verification as part of its KYC process before permitting real-money transactions. Where we discover that an account has been registered by a minor, or that age has been misrepresented during registration, we will immediately close the account, void all associated bets and transactions, and securely delete all personal data collected in connection with that account to the extent not required to be retained for fraud investigation purposes.

If you believe that a minor has gained access to the Platform, please contact us immediately at [email protected]. We will investigate and act promptly. Parents and guardians in Pakistan and elsewhere are encouraged to use parental control software to restrict access to gambling websites on devices accessible to minors.

§12 International Data Transfers

zc222 operates internationally, and your personal data may be transferred to, processed in, or stored in countries outside Pakistan, including countries where the applicable data protection laws may differ from those in your home jurisdiction. Such transfers may occur in connection with our use of cloud infrastructure providers, payment processors, KYC verification services and other third-party Data Processors.

Where personal data is transferred outside of the applicable licence jurisdiction, zc222 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where applicable;
• Adequacy decisions in respect of the recipient country's data protection framework where available;
• Other lawful transfer mechanisms recognised under the data protection laws of the applicable licence jurisdiction.

By using the Platform, you acknowledge that your personal data may be transferred internationally as described in this section. If you have concerns about international data transfers in connection with your account, please contact us at [email protected].

§13 Amendments to This Policy

zc222 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our operating licence requirements. When material changes are made, we will notify registered users by email or by displaying a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

Where a change to this Policy requires your fresh consent — for example, where we wish to use your data for a new purpose not covered by the original basis — we will seek that consent separately before commencing the new processing activity.

§14 Contact Us

If you have any questions, concerns or complaints about this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact our Data Protection team using the details below. All communications are handled in English, with Urdu-language assistance available during selected hours.