Privacy Policy — zc777f

zc777f ("the Platform", "the Operator", "we", "us", "our") operates the online gaming and sports betting website at zc777f.cam. This Privacy Policy sets out how we collect, use, store, share and protect personal data provided to us by users ("you", "User", "Player") when registering an account, using the Services, or otherwise interacting with the platform.

We are committed to data protection as a matter of operational integrity, not merely legal compliance. Every data handling decision at zc777f is evaluated against the principle of using only the minimum data necessary to deliver safe, fair and functional gaming services.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which form part of the overall agreement between you and zc777f.

The following definitions apply throughout this Privacy Policy. Terms not defined here carry the meaning given in our Terms & Conditions.

• Personal Data: Any information relating to an identified or identifiable natural person — including name, email address, phone number, IP address, device identifiers, financial data and behavioural data collected through platform use.
• Processing: Any operation performed on personal data, whether automated or manual — including collection, storage, retrieval, use, disclosure, erasure or destruction.
• Data Controller: The entity that determines the purposes and means of processing personal data — in this context, the Operator of zc777f.
• Data Processor: A third party that processes personal data on behalf of the Data Controller, under contractual obligations.
• KYC Data: Identity and age verification documents and associated data collected for regulatory and fraud-prevention purposes.
• Sensitive Data: Categories of personal data that require heightened protection — including financial details, identification documents and any data relevant to health or vulnerability disclosures made in a responsible gambling context.
• Cookie: A small text file placed on your device by the platform to enable functionality, analytics or security operations.

zc777f collects personal data across several categories, depending on how you use the platform. The categories below describe what we may hold about you.

We do not intentionally collect personal data from individuals under 18 years of age. If we become aware that data from a minor has been collected, that Account will be closed and data removed promptly.

We collect personal data through the following primary methods:

• Direct provision: Data you supply during account registration, KYC submission, deposit and withdrawal requests, support contact and any feedback or communication you send to us.
• Automated collection: Technical and behavioural data collected automatically as you navigate and use the platform, including through cookies, server logs and analytics tools (see Section 10).
• Third-party verification providers: Identity and age verification data returned to us by licensed KYC and anti-money-laundering (AML) service providers during the verification process.
• Payment processors: Transaction status and reference data returned by payment processing partners when you deposit or withdraw funds. We do not store full card numbers or wallet credentials directly.
• Device and session data: Device identifiers, IP geolocation estimates and browser fingerprint components collected for fraud prevention and security monitoring purposes.

We process your personal data under one or more of the following legal bases, applied contextually to each processing activity:

1. Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, transaction processing, KYC verification and customer support.
2. Legal obligation: Processing required to comply with applicable anti-money-laundering (AML), counter-terrorist-financing (CTF), licensing obligations and data retention requirements imposed by the Operator's licensing jurisdiction.
3. Legitimate interests: Processing necessary for the Operator's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, abuse detection and business analytics — provided such interests are not overridden by your rights.
4. Consent: Where processing is based on your explicit consent (for example, optional marketing communications), you may withdraw that consent at any time by contacting the support team or adjusting your Account communication preferences.

Where consent is the basis for processing, withdrawal of consent will not affect the lawfulness of any processing conducted prior to that withdrawal.

Personal data collected by zc777f is used for the following purposes, aligned with the legal bases described in Section 5:

• Account management: Creating, maintaining and administering your registered Account, including authentication, password management and communication preferences.
• Transaction processing: Processing deposits, withdrawals and bonus credits; maintaining accurate PKR transaction records; resolving payment queries.
• Identity and age verification (KYC): Verifying that you meet the minimum age requirement (18+ or higher as required) and confirming your identity to prevent fraud and meet AML obligations.
• Responsible gambling: Monitoring account activity for indicators of problem gambling; applying player-requested limits and restrictions; processing self-exclusion requests; maintaining records of responsible gambling interactions.
• Security and fraud prevention: Detecting and preventing unauthorized access, collusion, bonus abuse, identity fraud and other platform integrity violations.
• Customer support: Responding to queries, resolving disputes, processing complaints and providing assistance related to your Account or betting activity.
• Platform improvement: Aggregated and anonymized analytics used to improve game selection, user interface performance, payment flow and support effectiveness.
• Legal compliance: Maintaining records required by licensing authorities, responding to lawful information requests and fulfilling AML/CTF obligations.
• Marketing (where consented): Sending promotional communications about bonuses, events and platform updates to Users who have opted in. You may opt out at any time.

zc777f does not sell personal data. We share personal data only where operationally necessary and under contractual or legal obligations to the following categories of recipients:

• KYC and AML verification providers: Licensed third-party identity verification services that process your identity documents and confirm your eligibility to use the platform.
• Payment processing partners: Entities involved in processing your deposit and withdrawal transactions. Data shared is limited to what is required to complete the transaction and maintain records.
• Game technology providers: Platform partners that supply casino and betting software. Data shared is typically limited to session identifiers necessary to deliver game functionality and detect abuse.
• Infrastructure and hosting providers: Cloud and server infrastructure providers who process data as Data Processors under binding data protection agreements.
• Analytics providers: Where analytics tools are used, data is aggregated and anonymized to the greatest extent practicable before being processed by third-party tools.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory instruction, we will disclose personal data to competent authorities. We do not volunteer data beyond what is legally required.

All third-party processors engaged by zc777f are required to comply with data protection obligations equivalent to our own, under written Data Processing Agreements. We do not permit third parties to use your data for their own marketing or unrelated purposes.

You have the following rights in relation to your personal data. The availability and scope of each right may vary depending on applicable law and the legal basis for a specific processing activity. To exercise any right, please contact us at the address in Section 12.

We aim to respond to data subject requests within 30 days of receipt. Complex or multiple requests may require an extension of up to a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day period.

We may need to verify your identity before fulfilling a data subject request. This is a security measure to prevent unauthorized disclosure. Verification may require confirmation of your registered email address and Account details.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Active Account data: Retained for the duration of the active Account relationship plus any applicable regulatory hold period.
• KYC and identity documents: Retained for a minimum of 5 years following the closure of the Account (or the final transaction, whichever is later), consistent with standard AML record-keeping obligations under the Operator's licensing framework.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support and communications data: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Responsible gambling records: Self-exclusion, limit-setting and vulnerability disclosure records are retained for 5 years from Account closure to ensure reinstatement requests are assessed properly and that exclusions are honoured.
• Technical and log data: Security logs and access records retained for 12 months unless a security event requires longer retention for investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. You may request early deletion subject to the conditions outlined in Section 8, noting that legal obligations may prevent deletion of certain data categories before their retention period ends.

zc777f uses cookies and similar tracking technologies to operate and improve the platform. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential to the operation of the platform. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without rendering core platform functions inoperable.
• Functional Cookies: Used to remember your preferences — such as language settings, odds format selection (decimal/fractional/malay) and responsible gambling tool settings. Disabling these cookies will result in preferences not being saved between sessions.
• Analytical Cookies: Used to understand aggregate platform usage patterns — which pages are most visited, how long sessions last and where users encounter errors. Data collected is aggregated and anonymized to the greatest extent practicable.
• Security Cookies: Used to detect and prevent fraud, unauthorized access attempts, bot activity and account takeover. These cookies support the platform's integrity monitoring systems.

We do not use third-party advertising or behavioural retargeting cookies. Where analytical cookies rely on third-party tools, data transfer is subject to contractual data protection obligations.

You may manage cookie preferences through your browser settings. Please note that blocking strictly necessary cookies will affect your ability to use the platform. A cookie preference interface may be available within your Account settings — refer to the Help Center for current options.

zc777f implements technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, disclosure, alteration or destruction. These measures include, but are not limited to:

• Encryption of data in transit using TLS (Transport Layer Security) protocols across all platform connections.
• Encryption of sensitive data at rest, including stored KYC documents and financial records.
• Access controls and role-based permissions ensuring staff can access only the data categories necessary for their function.
• Regular security assessments, penetration testing and vulnerability scanning of platform infrastructure.
• Two-factor authentication options available to all registered users for Account protection.
• Anomaly detection and automated alerting systems monitoring for unusual access patterns, potential intrusions and suspicious transaction activity.
• Data processor agreements requiring equivalent security standards from all third-party service providers.

While we apply robust security measures, no online platform can guarantee complete immunity from security incidents. If you become aware of any suspicious activity on your Account — including unauthorized logins, unexpected transactions or identity compromise — you should contact us immediately at the address in Section 12.

For all privacy-related enquiries, data subject access requests, corrections, deletion requests or complaints regarding how we handle your personal data, please contact us through the following channel:

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the data protection authority or supervisory body in the Operator's licensing jurisdiction. Details of the applicable supervisory authority are available upon request from the support team.

For general support enquiries unrelated to data protection, you may contact us via the Live Chat feature available on the platform, which is staffed 24 hours a day.

zc777f reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, applicable law, regulatory guidance or platform functionality. When material changes are made, we will notify registered users by one or more of the following means:

• An on-platform notification displayed upon login following the update.
• An email notification to your registered email address summarising the key changes.
• An updated "Last updated" date displayed prominently at the top of this page.

Your continued use of the platform following notice of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you may request Account closure and the return of any eligible balance by contacting the support team.

We recommend reviewing this Privacy Policy periodically, particularly before providing any new category of personal data to the platform or submitting new KYC documentation. Previous versions of this policy are available upon request from the support team.