Privacy Policy — zp786 Platform

Welcome to zp786. This Privacy Policy describes how zp786 ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("you", "your") who access or use the zp786 platform, including our website at zp786.com, mobile applications, and all associated services (collectively, the "Platform").

zp786 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We take our data protection responsibilities extremely seriously. This Policy has been drafted to give you a clear, honest, and complete picture of our data practices — written in plain English so every player can understand it.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should not use the zp786 Platform.

For the purposes of applicable data protection legislation, zp786 is the data controller responsible for your personal information. As data controller, zp786 determines the purposes for which and the manner in which your personal data is processed.

We have appointed a dedicated Data Protection Officer (DPO) who oversees compliance with this Privacy Policy and applicable data protection laws. The DPO can be contacted directly at the email address provided in Section 16 of this Policy.

Where zp786 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or customer support platforms), those parties act as data processors under written contracts that require them to process data only in accordance with zp786's instructions and in compliance with applicable law.

zp786 collects personal data across several categories, depending on how you interact with our Platform. The categories of personal data we may collect include:

zp786 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through cookies, server logs, device fingerprinting, and similar tracking technologies (see Section 10).
• Third-party identity verification: During the KYC and AML compliance process, zp786 may receive verification results and risk scores from accredited identity verification partners.
• Payment processors: Transaction references, confirmation codes, and fraud-screening signals shared by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers when you transact on the Platform.
• Fraud and security partners: Risk indicators and device reputation signals from third-party fraud prevention services used to protect the Platform and its players.
• Public sources: Publicly available information used for AML screening, politically exposed persons (PEP) checks, and sanctions list compliance (e.g., national registry data, regulatory watchlists).

zp786 processes your personal data only for specified, legitimate purposes. The primary purposes for which we use your data are as follows:

• Account management: Creating, maintaining, and managing your zp786 player account, including processing your registration, verifying your identity, and enabling access to Platform features.
• Payment processing: Executing deposits, processing withdrawal requests, verifying payment method ownership, and maintaining accurate financial records for each player account.
• Legal and regulatory compliance: Fulfilling our AML, KYC, and CTF obligations, responding to regulatory inquiries, filing mandatory reports with financial intelligence authorities, and maintaining records as required by our operating licence.
• Fraud prevention and security: Detecting and investigating fraudulent activity, multi-accounting, bonus abuse, collusion, money laundering, and other prohibited conduct. Protecting the integrity of the Platform and the interests of legitimate players.
• Customer support: Responding to your queries, resolving disputes, managing complaints, and providing assistance through live chat, tickets, and email.
• Platform improvement: Analysing usage patterns and technical data to improve Platform performance, user experience, game selection, and feature development.
• Responsible gaming: Monitoring player behaviour to identify indicators of problem gambling, applying self-exclusion and limit settings, and fulfilling our duty of care obligations under responsible gaming policy.
• Marketing (with consent): Sending promotional offers, bonus alerts, game recommendations, and event notifications where you have opted in to receive such communications. We will always honour your right to withdraw consent.
• Personalisation: Tailoring your Platform experience, including game recommendations and promotional offers, based on your account history and stated preferences.

zp786 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and zp786, including account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC requirements, and our gaming licence obligations.
• Legitimate interests: Processing for purposes that serve our legitimate business interests (and do not override your fundamental rights), including fraud prevention, Platform security, and service improvement.
• Consent: Processing for marketing communications and certain non-essential personalisation features, where you have given clear and specific prior consent. You may withdraw consent at any time.
• Vital interests: In rare circumstances, where processing is necessary to protect the vital interests of a data subject (for example, in a responsible gaming safeguarding scenario).

zp786 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors receive the transactional data necessary to process deposits and withdrawals on your behalf.
• Identity and KYC verification providers: Accredited third-party identity verification platforms receive identity documents and biometric references strictly for the purpose of verifying your eligibility to hold a zp786 account.
• Game content providers: Third-party game studios and live dealer platform providers may receive anonymous session data necessary to deliver the gaming experience, but they do not receive your full personal profile.
• Regulatory and law enforcement authorities: Where we are legally obligated or have a good-faith belief that disclosure is necessary to comply with applicable law, respond to a court order, or cooperate with a regulatory investigation.
• Fraud prevention networks: Anonymised or pseudonymised risk indicators may be shared within regulated fraud prevention consortia to protect the broader online gaming industry from organised fraud.
• Professional advisers: Lawyers, auditors, and insurers who require access to data in the course of providing professional services to zp786, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of zp786's business, your data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

zp786 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be re-identified. Where anonymisation is applied, the resulting anonymised dataset may be retained indefinitely for analytical purposes.

zp786 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption at rest for all sensitive personal and financial data stored on our infrastructure.
• Multi-factor authentication (MFA) for all zp786 administrative staff and backend systems access.
• Role-based access controls (RBAC) ensuring that employees can only access personal data that is strictly necessary for their job function.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 intrusion detection and monitoring with automated alerting for anomalous access patterns.
• Incident response plan with documented procedures for identifying, containing, and notifying affected parties in the event of a data breach.

zp786 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and where consent is given, deliver personalised content and promotions. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These enable session management, authentication, fraud prevention, and core Platform operations. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and other personalisation choices to improve your experience on return visits.
• Analytical cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data helps us improve Platform performance.
• Marketing cookies: Used only with your prior consent to track your engagement with promotional content and deliver tailored offers. These can be rejected or withdrawn at any time.

You can manage your cookie preferences through your browser settings or the cookie preference centre accessible from the Platform footer. Please note that disabling certain functional cookies may impact your experience on the Platform.

Subject to applicable law and certain exemptions (including those relating to AML and regulatory compliance obligations), you have the following rights in respect of your personal data held by zp786:

• Right of access: You may request a copy of the personal data zp786 holds about you, free of charge, within 30 days of your request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections (such as updating your contact number) can often be made directly in your account settings.
• Right to erasure: In certain circumstances, you may request that zp786 delete your personal data. This right is subject to overriding legal obligations — for example, we cannot erase data we are required to retain by AML law.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute regarding data accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to zp786, for the purpose of transferring it to another service provider.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though this right is not absolute.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request". We will respond within 30 days, and will request appropriate identity verification before processing any request.

The zp786 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from persons under the age of 21. The zp786 registration process includes mandatory age verification, and accounts are suspended immediately where under-age use is detected.

If you are a parent or guardian and believe that a minor under your care has registered on zp786 without your knowledge, please contact us immediately at [email protected]. We will investigate promptly, suspend the account, and securely delete any personal data associated with an underage registration as quickly as practicable.

As an internationally operating online gaming platform, zp786 may transfer your personal data to service providers and partners located outside Pakistan. In particular, certain identity verification, cloud infrastructure, and game content providers may process data on servers located in other jurisdictions.

Where personal data is transferred internationally, zp786 ensures appropriate safeguards are in place, including:

• Transfers to countries recognised as providing an adequate level of data protection by relevant regulatory standards.
• Standard contractual clauses (SCCs) or equivalent contractual protections incorporated into data processing agreements with international third-party processors.
• Binding corporate rules where applicable within corporate group structures.

You may request details of the specific safeguards in place for any international transfer of your personal data by contacting our Data Protection Officer at [email protected].

The zp786 Platform may contain references to third-party game providers and technology partners. Where third-party game content is delivered through embedded iframes or integrated SDKs within the Platform, those providers may collect limited technical data (such as session tokens and device identifiers) necessary to deliver the gaming experience.

zp786 is not responsible for the privacy practices of third-party game studios or technology providers whose content appears within the Platform. We recommend reviewing the privacy policies of any third-party services you interact with separately. Our data processing agreements with game content providers prohibit them from using any player data for purposes beyond direct service delivery.

zp786 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

When we make significant changes to this Policy, we will notify registered players through one or more of the following channels: a notice displayed upon login to the Platform, an email to your registered address, or a prominent notice on this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

Your continued use of the zp786 Platform following publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any updated terms, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zp786 handles your personal data, please contact our Data Protection Officer using the details below. We take all privacy enquiries seriously and aim to respond to all written requests within 30 calendar days.

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 via the zp786 Platform interface — ask to be connected to the Data Protection team
• Support Ticket: Submit via the Help section of your zp786 account dashboard
• Response Time: We aim to acknowledge all privacy requests within 48 hours and resolve within 30 calendar days