z222 Privacy Policy – How We Handle Your Personal Data

z222 ("z222", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://z222.biz. When you use z222 — to place a bet, play a game, claim a bonus or simply browse — certain personal data is inevitably involved. This Privacy Policy explains what that data is, why z222 needs it, what z222 does with it and how it is protected.

This policy has been written to be read and understood by real people, not just legal teams. If you have ever wondered why a platform asks for your CNIC, why your phone number is required for withdrawals or what happens to your transaction history — this document answers all of those questions plainly. z222 believes that privacy is not a legal checkbox; it is a fundamental part of the trust that Pakistani players place in the platform.

The z222 platform is designed for users in Pakistan. All references to applicable privacy standards in this policy are intended to reflect reasonable, internationally recognised data protection principles applied in the Pakistani context. z222 holds all personal data on behalf of users and processes it only for the purposes described in this policy.

z222 collects the following categories of personal data from users:

z222 does not collect sensitive categories of personal data such as biometric data, health information, religious beliefs or political opinions. z222 does not collect financial data beyond what is necessary for payment processing and responsible gaming monitoring.

z222 collects personal data through the following methods:

• Direct submission: When you register an account, you provide your mobile number and create a password. When you complete identity verification (KYC), you provide your name, date of birth and CNIC details.
• Payment processing: When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard, the relevant payment provider shares transaction confirmation data with z222 for processing purposes. z222 never receives or stores your full card number — payment providers tokenise card data in accordance with their own security standards.
• Automatic collection: When you use z222, technical data — including your IP address, device type and session information — is automatically logged. This is standard practice for all online platforms and is necessary for security monitoring, fraud detection and platform performance management.
• Cookies and similar technologies: z222 uses cookies and similar tracking technologies as described in Section 9 of this policy.
• Third-party sources: In certain circumstances, z222 may receive data about you from identity verification service providers used during the KYC process. z222 only uses such services where they operate in compliance with applicable data protection standards.

z222 uses the personal data it collects for the following specific purposes. Data is not used for purposes beyond those listed here without your prior consent or a clear legal requirement to do so.

• Account management: Creating and maintaining your z222 account, processing logins and managing account security.
• Payment processing: Facilitating deposits and withdrawals in PKR through your chosen payment method. This requires your contact details and financial data to be shared with the relevant payment provider at the time of the transaction.
• Identity verification (KYC): Verifying that you are who you say you are, that you are at least 18 years of age and that you are permitted to use z222. This is a legal requirement for all real-money gaming platforms and is not optional.
• Responsible gaming: Monitoring gameplay and financial activity to identify patterns that may indicate problematic gambling behaviour. This includes tracking deposit totals, session lengths and loss patterns against any limits you have set or that z222's system identifies as requiring attention.
• Fraud and security: Detecting and preventing fraud, money laundering, multiple account abuse, bot activity and other security threats. Technical data including IP addresses is central to this function.
• Customer support: Providing you with assistance when you contact z222. Support agents need access to your account history, transaction records and previous support interactions to help you effectively.
• Platform improvement: Analysing aggregated usage data to understand how players use z222, which features are most used and where improvements should be focused. This analysis uses anonymised or aggregated data where possible.
• Legal and regulatory compliance: Meeting obligations under applicable law, including responding to valid requests from law enforcement or regulatory authorities.

z222 does not sell your personal data to any third party. Data is shared only in the following controlled circumstances:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, your IBFT bank and Visa/Mastercard processors receive the data necessary to process your deposit or withdrawal. Each of these providers operates under their own privacy and security standards. z222 selects payment partners who maintain appropriate data protection practices.
• Identity verification providers: Where z222 uses a third-party KYC service to assist with identity verification, that provider receives the identity documents and data submitted by you for that purpose only. KYC providers are contractually bound to use this data only for verification and not for any other purpose.
• Technology and infrastructure providers: z222's platform is hosted and operated with the support of technology service providers including cloud hosting, database management and analytics services. These providers act as data processors under z222's instruction and are not permitted to use your data for their own purposes.
• Law enforcement and regulators: z222 will disclose personal data to law enforcement agencies, financial intelligence units or regulatory bodies where required to do so by a valid legal order or where z222 has a good-faith belief that disclosure is necessary to prevent a crime or protect the safety of a person.
• Business transfers: In the event that z222's business is sold, merged or transferred to another entity, user data may be transferred as part of that transaction. z222 would notify users of any such transfer in advance wherever reasonably practicable.

Because z222 handles real PKR transactions, it is worth being specific about how payment data is treated. When you make a deposit or withdrawal on z222, the following applies:

• Easypaisa and JazzCash: Transactions are processed through these providers' own secure systems. z222 receives a transaction reference number and confirmation of the amount. Your full wallet credentials are never transmitted to or stored by z222.
• Visa/Mastercard: Card-not-present transactions are processed through a PCI-DSS compliant payment gateway. z222 never receives, processes or stores your full 16-digit card number, CVV or card expiry date. The payment gateway tokenises your card details in accordance with card industry security standards.
• IBFT: Bank transfer transactions are initiated by you through your own bank's systems. z222 receives confirmation of the transfer amount and reference. No bank account credentials are shared with z222.

Your z222 account shows a transaction history of all deposits and withdrawals. This history is visible to you and to authorised z222 staff who need it for support or verification purposes. It is not shared externally except as described in Section 5.

z222 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your active account relationship with z222 and for a period of five years following account closure, in line with standard financial record-keeping requirements.
• Identity verification documents: CNIC copies and other KYC documents are retained for a minimum of five years from the date of verification, as required for anti-money laundering compliance.
• Transaction and betting records: Full transaction histories are retained for a minimum of five years to satisfy financial record-keeping obligations and to enable dispute resolution.
• Support communications: Chat logs and email correspondence with z222 support are retained for two years from the date of the interaction, or longer where they relate to an unresolved dispute.
• Technical and usage data: Server logs and session data are typically retained for 90 days for security monitoring purposes, after which they are deleted or anonymised.

When a retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. z222 does not hold data longer than necessary and conducts periodic reviews of data held in its systems.

z222 respects your rights over your own personal data. The following rights apply to all z222 users in relation to the personal data z222 holds about them:

To exercise any of the above rights, contact z222 at support@z222.biz with a clear description of your request. z222 aims to acknowledge all data rights requests within 3 business days and to fulfil them within 30 days, or to explain in writing if that timeframe cannot be met and why.