z7com Privacy Policy — How We Collect, Use & Protect Your Personal Data

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data you provide to or that is collected by the z7com platform is the z7com platform operator ("z7com", "we", "us", "our"), which operates the online casino and sportsbook accessible at z7com.bio.

As data controller, z7com determines the purposes for which and the means by which your personal data is processed. All data processing activities described in this Privacy Policy are carried out by z7com or by carefully selected third-party processors acting under z7com's instruction and bound by appropriate data processing agreements.

Personal Data We Collect

z7com collects the following categories of personal data in the course of providing its services to registered players. We collect only what is necessary for the specific purposes described in Section 4.

How We Collect Your Data

z7com collects personal data through the following channels and mechanisms:

• Direct provision by you: Data you enter during account registration, KYC submission, payment transactions, support communications, and use of responsible gaming tools.
• Automated technical collection: IP address, device identifiers, browser data, session timestamps, and navigation behaviour collected automatically when you access z7com.bio via cookies and similar tracking technologies (see Section 8).
• Payment provider data: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors when you initiate deposits or withdrawals.
• Game provider data: Game session records, round results, and RNG audit logs received from z7com's certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, and others.
• Third-party verification services: Identity verification results from KYC and AML screening services used to fulfil our compliance obligations.
• Support interactions: Chat logs, email correspondence, and call records from interactions with z7com's 24/7 support team.

How We Use Your Personal Data

z7com uses the personal data described in Section 2 for the following specific, defined purposes. We do not use your data for any purpose not listed here without either updating this Privacy Policy or obtaining your separate consent.

• Account creation and management: Registering your z7com account, verifying your identity, managing login sessions, resetting passwords, and maintaining your player profile.
• Age and eligibility verification: Confirming you are aged 21 or above and meet all eligibility criteria for platform access, as required by our responsible gaming obligations.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels; reconciling transactions; handling payment disputes.
• Provision of gaming services: Enabling access to all casino games, live tables, sports betting markets, jackpot games, and associated platform features.
• KYC and AML compliance: Meeting our anti-money laundering and Know Your Customer obligations, including identity verification, transaction monitoring, and suspicious activity reporting where required by law.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling, applying deposit limits and self-exclusion restrictions, and providing responsible gaming support.
• Platform security: Fraud detection and prevention, account security monitoring, brute-force attack prevention, and multi-device login anomaly detection.
• Customer support: Responding to account queries, payment issues, game disputes, and general support requests via live chat and email.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via SMS and email — but only where you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.

Legal Bases for Processing

z7com processes your personal data on the following legal bases, as relevant to each processing activity:

Data Sharing & Third Parties

z7com does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with the specific categories of third parties listed below, and only to the extent necessary for the purpose stated.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors receive only the transaction data necessary to process your specific deposit or withdrawal.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Play'n GO, and other certified providers receive anonymised session identifiers necessary to deliver their games and maintain RNG audit records.
• KYC and identity verification services: Regulated third-party KYC providers may receive identity document data strictly for the purpose of verifying your identity and age, bound by appropriate data processing agreements.
• AML and fraud screening services: Specialist compliance providers may process transaction data to screen for money laundering indicators as required by applicable regulation.
• IT infrastructure providers: Cloud hosting, database management, and security monitoring services that process data on z7com's behalf under strict data processing agreements.
• Legal and regulatory authorities: z7com will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of our users and platform.

All third-party processors engaged by z7com are bound by data processing agreements requiring them to process your data only on z7com's instruction, for the specified purpose, and in accordance with appropriate security standards.

Payment Data & PKR Transactions

z7com processes all player transactions in Pakistani Rupees (PKR). Given the specific nature of Pakistan's mobile payment ecosystem, z7com collects JazzCash account numbers, EasyPaisa account numbers, and bank account details (for HBL, UBL, and Meezan Bank transfers) from players initiating deposits or requesting withdrawals.

z7com applies the following specific data handling practices with respect to payment information:

• Payment account numbers are stored in encrypted form and are never displayed in full to any personnel beyond those with a specific operational need.
• Full card numbers (where applicable) are never stored on z7com's servers — payments are tokenised at the point of collection by the relevant payment processor.
• JazzCash and EasyPaisa account numbers are retained for the duration of your active account plus the applicable legal retention period to maintain transaction audit trails.
• Payment data is used solely for processing your transactions, verifying payment method ownership (to comply with our "withdraw to source" policy), and meeting AML record-keeping requirements.
• Third-party deposits — funds sent from a payment account registered to a different person — are subject to enhanced verification and the associated payment data is handled with additional scrutiny.

Cookies & Tracking Technologies

z7com uses cookies and similar tracking technologies (including local storage and session tokens) on the z7com.bio website. Cookies are small data files stored on your device that help us recognise your browser, maintain your login session, remember your preferences, and analyse how the platform is used.

Essential cookies cannot be disabled as they are necessary for the platform to function. Functional, analytics, and marketing cookies can be managed through the cookie preference centre accessible in your account settings. You may also manage cookies through your browser settings, though disabling cookies may affect certain platform features.

Data Retention Periods

z7com retains personal data for the minimum period necessary for each data category, taking into account our operational requirements, legal obligations, and applicable limitation periods for legal claims.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from z7com's systems, or anonymised in a manner that prevents re-identification, so that it may be retained for statistical and analytical purposes without being attributable to you as an individual.

Security Measures

z7com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and z7com.bio uses TLS 1.3 with 256-bit AES encryption — the same standard employed by international banks and financial services.
• Encryption at rest: Personal data stored on z7com's servers is encrypted using AES-256 encryption. Database access is restricted to authenticated, authorised personnel only.
• Access controls: Internal access to personal data is granted on a strict need-to-know basis. Role-based access controls ensure that support staff, finance teams, and compliance personnel can only access the data categories relevant to their function.
• Password security: Account passwords are processed using one-way cryptographic hashing algorithms (bcrypt with appropriate work factor). Plain-text passwords are never stored, transmitted, or accessible by any z7com personnel.
• Multi-factor authentication: Sensitive account actions — including password changes, contact detail updates, and large withdrawals — require SMS OTP verification to a registered Pakistani mobile number.
• Intrusion detection: z7com operates automated intrusion detection and anomaly monitoring systems to identify and respond to potential security threats in real time.
• Regular security assessments: z7com's security infrastructure undergoes periodic independent security assessments. Identified vulnerabilities are remediated on a prioritised basis.
• Data minimisation in support: Support staff are trained to request only the minimum personal information necessary to resolve a query and to never request account passwords from players under any circumstances.

Your Data Rights

As a z7com player, you have the following rights with respect to your personal data. These rights may be exercised by contacting z7com's support team at [email protected] with the subject line "Data Rights Request — [Your Account ID]". z7com will respond to all data subject requests within 30 calendar days of receipt.

Children & Minors

z7com is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The z7com registration process includes mandatory date-of-birth collection and is subject to age verification via CNIC before any withdrawal is processed.

If z7com becomes aware that personal data has been collected from an individual under the age of 21, whether through the account registration process or any other means, the following steps will be taken immediately:

• The associated account will be immediately suspended pending investigation.
• All deposits made by the underage account holder will be identified and returned via the original payment method, less any applicable processing fees.
• All personal data associated with the underage account will be permanently deleted from z7com's systems following completion of the refund process, to the extent permitted by applicable legal obligations.
• Any winnings associated with gameplay by an underage account holder will be voided and will not be paid out.

International Data Transfers

As an internationally operating online casino and sportsbook, z7com may process and store personal data on servers located outside Pakistan. Where personal data is transferred internationally — for example, to cloud infrastructure providers or game providers' servers — z7com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international data transfers include: contractual data transfer agreements with receiving parties that impose equivalent data protection obligations; transfers only to jurisdictions or processors that maintain appropriate security certifications; and data minimisation practices that limit the personal data included in any international transfer to what is strictly necessary for the relevant processing purpose.

Your core financial data, including JazzCash and EasyPaisa account numbers and PKR transaction records, is processed in accordance with the operating requirements of the respective Pakistani payment providers and does not leave Pakistan's payment infrastructure ecosystem during transaction processing.

Privacy Policy Updates

z7com may update this Privacy Policy from time to time to reflect changes in our data processing practices, the introduction of new platform features, changes in applicable privacy regulation, or for other operational reasons. When material changes are made to this Privacy Policy, z7com will notify registered players via the email address or mobile number associated with their account at least seven (7) days before the updated policy takes effect.

The current version of this Privacy Policy is always accessible at z7com.bio/privacy-policy. The "Last Updated" date at the top of this page indicates when the current version came into effect. Continued use of z7com following any update to this Privacy Policy constitutes your acknowledgement of the revised version. If you disagree with a material change, you may close your account at any time.

Contact & Data Requests

For all privacy-related queries, data subject access requests, consent withdrawals, data deletion requests, or concerns about z7com's handling of your personal data, please contact us through the following channels:

• Email (preferred for data requests): [email protected] — please include "Privacy Request" and your Account ID in the subject line. Responses within 2 business days; data subject requests fulfilled within 30 calendar days.
• Live Chat: Available 24/7 on z7com.bio for general privacy queries. For formal data subject requests, please follow up with an email to create a documented record.
• Subject access requests: To request a copy of all personal data z7com holds about you, email [email protected] with "Subject Access Request — [Account ID]". Identity verification will be required before data is released.

z7com is committed to responding to all privacy-related communications promptly, transparently, and in plain English that is genuinely understandable to Pakistani players. If you feel your privacy concern has not been adequately addressed, you have the right to raise a formal complaint, which will be escalated to z7com's designated privacy officer within five (5) business days.