Privacy Policy

1.1 Scope. This Privacy Policy applies to all personal data collected and processed by zc666 in connection with the operation of the zc666 online casino and sportsbook platform at zc666.bio. It covers all registered Players, visitors to the zc666 website, individuals who contact the zc666 support team, and any other person whose personal data is processed by the Company in connection with its services.

1.2 Data Controller. For the purposes of this Privacy Policy, the data controller responsible for your personal information is zc666, the entity operating the zc666 platform under an international gaming license. When you create an Account on zc666, you enter into a data controller relationship with zc666 as defined in this Policy.

1.3 Relationship to Terms and Conditions. This Privacy Policy forms part of the overall legal framework governing your use of the zc666 platform. It should be read alongside the zc666 Terms and Conditions, which are available at zc666.bio/terms-conditions. In the event of any conflict between the provisions of this Privacy Policy and the Terms and Conditions as they relate to data protection matters, this Privacy Policy shall take precedence.

1.4 Acceptance. By registering an Account on zc666, accessing the platform, or submitting any personal information through any channel associated with zc666, you confirm that you have read this Privacy Policy in full and consent to the collection, use, and processing of your personal data as described herein. If you do not consent to this Privacy Policy, you must not create an Account or use any services offered by zc666.

2.1 Categories of Personal Data. zc666 collects and processes the following categories of personal data in connection with the operation of its services. The specific data collected depends on the nature of your interaction with the platform.

2.2 Sensitive Data. zc666 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond that required for KYC facial match purposes), or health information. Where any such data is inadvertently disclosed in communications with our support team, it will not be stored or processed for any purpose other than resolving the specific matter at hand.

3.1 Direct Collection. The majority of personal data held by zc666 is provided directly by you during the following interactions:

• Account Registration – Name, date of birth, mobile number or email address, and chosen account credentials submitted during the sign-up process.
• KYC Verification – Identity documents and supporting information submitted in response to zc666's identity verification requests.
• Financial Transactions – Payment details provided when making deposits or requesting withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other supported methods.
• Customer Support Interactions – Information shared via live chat, email, or other support channels when raising queries, complaints, or responsible gaming requests.
• Responsible Gaming Requests – Information submitted when setting deposit limits, loss limits, session time restrictions, or requesting self-exclusion from the zc666 platform.

3.2 Automated Collection. zc666 also collects certain technical data automatically when you access and use the platform, including through the use of cookies and similar tracking technologies. Automated data collection covers IP addresses, device identifiers, browser fingerprints, session logs, game activity data, and geolocation information. Further detail on cookies is provided in Section 9 of this Policy.

3.3 Third-Party Sources. zc666 may receive personal data about you from third-party sources in limited circumstances, including from payment service providers (for transaction verification purposes), fraud prevention and KYC verification service providers, and from public records or regulatory databases where required by our licensing compliance obligations.

4.1 Purposes of Processing. zc666 uses the personal data it collects for the following specific purposes:

• Account Management – To create, maintain, verify, and administer your zc666 Account, including processing your login credentials and managing your PKR balance.
• Service Delivery – To provide access to casino games, live dealer tables, sports betting markets, and all other features of the zc666 platform in accordance with your Account status.
• Payment Processing – To process deposits and withdrawals via your selected PKR payment methods, including JazzCash and EasyPaisa, and to maintain records of all financial transactions on your Account.
• Identity and Age Verification – To verify your identity and confirm that you are 21 years of age or older, as required by our international gaming license obligations and responsible gaming commitments.
• Regulatory Compliance – To comply with anti-money laundering (AML) requirements, gaming license conditions, fraud prevention obligations, and other applicable legal and regulatory requirements.
• Responsible Gaming – To administer deposit limits, loss limits, session time reminders, self-exclusion requests, and other player protection tools in accordance with our responsible gaming framework.
• Customer Support – To respond to your queries, investigate complaints, resolve disputes, and communicate with you regarding your Account and use of the zc666 platform.
• Security and Fraud Prevention – To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, and other conduct that may harm players or the integrity of the platform.
• Platform Improvement – To analyse usage patterns, game performance, and player experience data in aggregate form to continuously improve the zc666 platform and its services for Pakistani players.
• Marketing (where consented) – To send you promotional communications about zc666 offers, new games, sports betting promotions, and loyalty programme updates, where you have provided explicit opt-in consent.

5.1 Contractual Necessity. The primary legal basis for zc666's processing of your personal data is the performance of the contract between you and zc666, as established when you create and use an Account on the platform. Processing your identity data, financial data, and gaming activity data is necessary to deliver the services you have contracted for — without this data, the zc666 platform cannot function for you as a Player.

5.2 Legal Obligation. zc666 is subject to a range of legal and regulatory obligations arising from its international gaming license. These obligations require us to collect and retain KYC verification data, transaction records, gaming history, and responsible gaming compliance records for defined minimum periods. Processing for this purpose is mandatory and cannot be avoided or refused by a Player who wishes to use the platform.

5.3 Legitimate Interests. zc666 processes certain categories of data — including technical data, security logs, and fraud monitoring data — on the basis of its legitimate interests in maintaining a secure, fraud-free platform that protects all Players and the integrity of the service. Where we rely on legitimate interests, we have assessed that those interests are not overridden by the individual rights and interests of affected Players.

5.4 Consent. Where zc666 processes your personal data for marketing communications or optional platform features, the legal basis for that processing is your explicit and freely given consent. You have the right to withdraw consent for marketing communications at any time without affecting your Account or your ability to use any core zc666 services.

6.1 Third-Party Service Providers. zc666 shares your personal data with carefully selected third-party service providers who process data on our behalf and under our instructions. These providers are subject to contractual obligations that prevent them from using your data for any purpose other than delivering the specific service contracted with zc666. Categories of service provider include:

• KYC and Identity Verification Providers – Specialist third-party services used to verify the identity documents and age confirmation required before withdrawal processing.
• Payment Service Providers – Including the technology infrastructure supporting JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transaction processing on the zc666 platform.
• Game Software Providers – Licensed casino game providers such as Evolution Gaming, Pragmatic Play, and others, who may receive anonymised session data in connection with game delivery and fairness auditing.
• Fraud Prevention Services – Third-party fraud detection and AML screening tools used to protect the platform and its Players from financial crime.
• Customer Support Technology – Live chat and support ticket platform providers who process communication data solely to enable the delivery of support services.

6.2 Regulatory and Legal Disclosure. zc666 may be required to disclose personal data to regulatory authorities, law enforcement agencies, gaming license supervisory bodies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory mandate. Such disclosures are made only to the extent required by the relevant legal obligation and are not used for any commercial purpose.

6.3 No Commercial Sale of Data. zc666 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data shared with third-party service providers is used exclusively in the context of delivering zc666 services and is not available for any third-party's independent marketing or commercial use.

7.1 Cross-Border Transfers. As zc666 operates as an international online gaming platform, your personal data may be transferred to, stored in, or processed in countries outside of Pakistan. This includes transfers to the jurisdiction in which zc666 holds its international gaming license, as well as to the locations of third-party service providers involved in delivering gaming, payment, and support services.

7.2 Transfer Safeguards. Where personal data is transferred internationally, zc666 ensures that appropriate safeguards are in place to protect the security and integrity of that data, including contractual data protection obligations with all international service providers, technical security standards commensurate with the sensitivity of the data being transferred, and compliance with the data transfer requirements applicable under zc666's gaming license framework.

7.3 Acceptance of International Transfers. By registering an Account on zc666 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

8.1 Retention Principles. zc666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming license obligations. We do not retain data beyond its useful purpose and apply a regular data review process to identify and securely delete data that is no longer required.

8.2 Minimum Retention Periods. Certain categories of data are subject to mandatory minimum retention periods under zc666's gaming license requirements. These include:

• Account and Identity Data – Retained for a minimum of five years following Account closure, as required by AML and gaming license compliance obligations.
• Financial Transaction Records – All deposit, withdrawal, and wagering transaction records are retained for a minimum of five years for regulatory and audit purposes.
• KYC Documentation – Identity verification documents are retained for the duration of the Account relationship and for five years following Account closure.
• Responsible Gaming Records – Self-exclusion requests, limit settings, and responsible gaming communications are retained for the duration of the exclusion period plus five years.
• Support and Complaint Records – Customer support transcripts and formal complaint records are retained for a minimum of three years.

8.3 Post-Closure Retention. Following the closure of a zc666 Account — whether at the Player's request or by zc666 — the Company will retain the minimum data necessary to comply with regulatory obligations, resolve any outstanding disputes, detect and prevent fraud, and maintain accurate financial records. Data not subject to mandatory retention obligations will be securely deleted within a reasonable timeframe following Account closure.

9.1 Use of Cookies. The zc666 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session when you are logged in, to remember your preferences, and to gather anonymised analytics data that helps us improve the platform. Cookies are small data files stored on your device by your browser.

9.2 Cookie Categories. The following categories of cookies are used on the zc666 platform:

9.3 Cookie Management. You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge on both desktop and mobile — include controls for viewing and deleting cookies and for preventing new cookies from being set. Please be aware that disabling certain cookies may affect the functionality of the zc666 platform, particularly session management features that keep you logged in to your Account.

10.1 Technical Security. zc666 employs a multi-layered technical security framework to protect the personal data and financial information of its Players. Key security measures include:

• 256-bit SSL Encryption – All data transmitted between your device and the zc666 platform is encrypted using 256-bit SSL/TLS protocols, the same standard used by international banks and financial institutions operating in Pakistan.
• Segregated Player Funds – Player PKR balances are held in dedicated accounts separate from zc666's operational funds, ensuring your money is protected independently of the Company's financial position.
• OTP Authentication – One-time password verification is applied on unrecognised logins, adding a second authentication factor to your zc666 Account security beyond your password alone.
• Access Controls – Personal data held by zc666 is accessible only to authorised personnel who require it to perform their specific job function. Access is controlled through role-based permissions and is logged for audit purposes.
• Intrusion Detection – Network-level monitoring systems actively scan for unusual access patterns, attempted breaches, and other indicators of unauthorised access to zc666 systems.

10.2 Incident Response. In the event of a personal data breach that poses a risk to the rights and interests of affected Players, zc666 will take immediate steps to contain and investigate the breach, notify the relevant regulatory authority in accordance with its license obligations, and where required, notify affected Players of the nature of the breach and the steps they should take to protect themselves.

10.3 Player Responsibility. While zc666 takes all reasonable measures to protect your personal data, the security of your Account also depends on your own actions. You are responsible for keeping your login credentials confidential, using a strong and unique password, and logging out of your Account on any shared device. If you suspect your Account has been accessed without your authorisation, please contact the zc666 support team immediately.

11.1 Rights Overview. zc666 recognises and respects the following rights of Players in relation to their personal data. These rights may be exercised by contacting the zc666 support team at [email protected]. Please note that some rights are subject to exemptions where exercising them would conflict with zc666's regulatory and legal obligations under its gaming license.

12.1 Strict 21+ Policy. The zc666 platform is strictly intended for individuals who are 21 years of age or older. zc666 does not knowingly collect or process the personal data of individuals under the age of 21 in connection with the creation or maintenance of a gaming Account. All Account registration processes include an age declaration and are subject to KYC verification that confirms the Account holder's age before withdrawal rights are activated.

12.2 Discovery of Underage Data. If zc666 discovers or is informed that personal data belonging to an individual under the age of 21 has been collected — whether through deliberate misrepresentation of age during registration or any other means — the Company will immediately suspend the relevant Account, delete the personal data collected, and return any deposited funds to the originating payment method. Any winnings accumulated during the period of underage access will be forfeited.

12.3 Reporting Concerns. If you are a parent, guardian, or other concerned person who believes that a minor may have created a zc666 Account, please contact the support team immediately at [email protected]. We treat all such reports with priority and will investigate and respond within 24 hours.

13.1 Opt-In Consent Required. zc666 will only send you promotional and marketing communications — including information about new games, sportsbook promotions, PSL betting offers, bonus opportunities, and loyalty programme updates — where you have provided explicit opt-in consent during registration or subsequently through your Account communication preferences settings.

13.2 Transactional Communications. Certain communications from zc666 are transactional in nature and are sent regardless of your marketing preferences. These include deposit and withdrawal confirmations, Account security alerts, OTP verification messages, responsible gaming notifications, and communications required by our legal and regulatory obligations. These messages are not marketing and cannot be opted out of without closing your Account.

13.3 Withdrawing Marketing Consent. You may withdraw your consent to receive marketing communications from zc666 at any time by updating your preferences in the Account settings panel, or by contacting the support team at [email protected]. Withdrawal of marketing consent will not affect your ability to use any core zc666 services and will take effect within 48 hours of your request.

13.4 No Marketing to Excluded Players. Players who have activated self-exclusion from the zc666 platform will be immediately removed from all marketing communications lists. zc666 does not send promotional materials to self-excluded players, and any contact from zc666 during a self-exclusion period will be limited to mandatory operational communications only.

14.1 Right to Update. zc666 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable data protection requirements, gaming license obligations, platform features, or best practice standards. The effective date at the top of this document reflects the date of the most recent update.

14.2 Notification of Material Changes. Where a proposed update to this Privacy Policy represents a material change to how zc666 processes your personal data, we will provide advance notice to registered Players via their registered email address or via a prominent notification displayed upon next login to the zc666 platform, with a minimum of 14 days' notice before the change takes effect.

14.3 Continued Use as Acceptance. Your continued use of the zc666 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must cease using the zc666 platform and may request Account closure by contacting the support team.

15.1 Privacy Enquiries. If you have any questions, concerns, or complaints about how zc666 handles your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, please contact us through the following channels:

• Live Chat – Available 24 hours a day, 7 days a week from within your zc666 Account dashboard. This is the fastest channel for urgent privacy or security concerns.
• Email – [email protected]. Please include "Privacy Request" in the subject line and provide your registered Account username or mobile number to help us locate your data promptly. We aim to respond to all privacy-related email enquiries within 72 hours.

15.2 Data Rights Requests. When submitting a formal data rights request — such as a request for access to your personal data, a deletion request, or a rectification request — please provide your full name as registered on your zc666 Account, your registered mobile number or email address, a clear description of the specific right you wish to exercise, and any additional information that may help us process your request accurately. zc666 will respond to all data rights requests within 30 days of receipt.

15.3 Complaints. If you are dissatisfied with zc666's response to a privacy concern or data rights request, you may raise the matter as a formal complaint through the escalation process described in the zc666 Terms and Conditions, or seek further advice from the relevant data protection supervisory authority in your jurisdiction.