z7game Privacy Policy — Data Protection & Your Rights

This Privacy Policy ("Policy") sets out how z7game ("Platform", "we", "us", "our"), operated at https://z7game.cam, collects, uses, stores, shares and protects personal data relating to users of the Platform ("User", "you", "your"). This Policy applies to all personal data processed in connection with your use of the z7game website, account services, betting and gaming features, customer support interactions, and any other services we provide.

z7game is committed to responsible data handling in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality. This commitment applies equally to users accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations.

By registering an account on z7game or continuing to use the Platform after this Policy is made available to you, you acknowledge that you have read and understood how your personal data is processed as described herein.

The following definitions apply throughout this Policy:

• "Personal Data" — any information that identifies or can be used to identify a natural person, directly or in combination with other data. This includes name, email address, date of birth, CNIC number, IP address and account transaction history.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction, whether automated or manual.
• "Data Controller" — z7game, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of z7game under a contractual instruction and data processing agreement.
• "Consent" — a freely given, specific, informed and unambiguous indication of the user's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer — the identity verification process through which z7game collects and verifies user identity documents, including CNICs, passports and supporting documentation.
• "Sensitive Personal Data" — a subset of personal data warranting heightened protection, including government-issued identity numbers, financial account details and biometric data collected during liveness checks.

z7game collects personal data in several categories, each serving a distinct operational or legal purpose. The table below summarises the primary data categories:

z7game collects personal data through the following channels:

• Account registration forms (name, email, date of birth, country).
• KYC verification submissions (identity documents, selfies, liveness checks).
• Deposit and withdrawal requests (payment method details, transaction amounts).
• Customer support interactions via live chat and email.
• Responsible gambling tool configurations (limit settings, self-exclusion requests).
• Survey or feedback submissions, where applicable.

• Session and activity logs generated when you browse, bet or play games on the Platform.
• Technical data collected by cookies, local storage and similar technologies (see Section 11).
• IP address and device information captured automatically when you connect to the Platform.

• Identity verification providers used to cross-check KYC document authenticity.
• Fraud detection and AML screening services that flag high-risk indicators.
• Payment processors confirming successful or failed transaction status.
• Responsible gambling databases where applicable under operator licensing obligations.

z7game processes personal data only for legitimate, defined purposes. The following describes the primary processing activities and the purpose each serves:

• Account Management: Creating, maintaining and securing user accounts; communicating account-related information; processing password resets and security alerts.
• Identity Verification (KYC): Confirming that users meet the minimum age requirement (18+), verifying identity to prevent fraud and impersonation, and complying with AML screening obligations.
• Payment Processing: Facilitating deposits and withdrawals; reconciling account balances in PKR; maintaining financial transaction records for regulatory purposes.
• Service Delivery: Providing access to sports betting markets, live casino games, slots, esports, virtual sports and all other platform features in accordance with the Terms & Conditions.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, match fixing and unauthorised access.
• Regulatory Compliance: Meeting record-keeping, reporting and cooperation obligations under applicable licensing conditions and AML regulations.
• Responsible Gambling Monitoring: Identifying behavioural indicators of problem gambling and administering self-imposed limits, exclusions and intervention tools.
• Customer Support: Responding to and resolving user queries, complaints and requests via live chat, email and any other support channel.
• Analytics & Platform Improvement: Aggregated, anonymised usage analysis to improve platform functionality, usability and content relevance. Individual user behaviour is not sold or profiled for external advertising purposes.

z7game processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the user agreement — including account creation, KYC, payment processing and service delivery — is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Certain processing activities — including AML record-keeping, identity verification and mandatory cooperation with regulatory or law enforcement authorities — are required by applicable law and cannot be waived by either party.
• Legitimate Interests: Fraud prevention, platform security monitoring, responsible gambling behavioural analysis and internal analytics are conducted on the basis of z7game's legitimate interests in operating a secure, compliant and well-functioning platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not required by contract or law (for example, non-essential marketing communications or optional analytics cookies), z7game will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

z7game does not sell personal data to third parties. Data is shared only in the following circumstances:

z7game engages trusted third-party service providers to assist with platform operations under data processing agreements that restrict their use of your data to the specific service they are providing. These include:

• KYC and identity verification technology providers.
• Payment processing infrastructure providers.
• Anti-fraud and AML screening platforms.
• Cloud hosting and data storage providers.
• Customer support software providers (live chat platforms).
• Game software suppliers whose titles appear in the z7game casino library.

z7game may disclose personal data to regulatory authorities, law enforcement agencies or courts of competent jurisdiction where required to do so by applicable law, court order or regulatory instruction. z7game will not notify you of such disclosures where legally prohibited from doing so.

In the event of a merger, acquisition, corporate restructuring or sale of the Platform's assets, personal data held at that time may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and any material change in data processing arrangements in advance where practicable.

z7game will share your personal data with any other third party only with your explicit, informed consent, which you may withdraw at any time.

z7game may transfer personal data to countries outside the user's country of residence, including to the jurisdiction in which the Platform is incorporated and to countries where our service providers operate. Where such transfers occur, z7game implements appropriate safeguards to ensure personal data receives an equivalent level of protection, including:

• Contractual clauses between z7game and the receiving party that bind the recipient to confidentiality and data protection obligations.
• Use of service providers in jurisdictions recognised as providing adequate levels of data protection under applicable international frameworks.
• Internal data handling policies requiring all personnel with access to personal data to treat it with equivalent care regardless of physical location.

z7game retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention guidelines apply:

• Active accounts: Personal data is retained for the duration of the account relationship and for a defined period thereafter to enable any post-closure queries, disputes or regulatory obligations to be addressed.
• KYC and financial records: Identity documents, transaction records and AML-related data are typically retained for a minimum of five (5) years following account closure, as required under standard AML record-keeping obligations. Applicable licensing conditions may specify a different period.
• Communication records: Live chat transcripts and email correspondence are retained for a period sufficient to resolve disputes and satisfy any applicable regulatory audit requirements.
• Responsible gambling data: Self-exclusion records and limit configurations are retained for the full duration of the exclusion period and for a reasonable period thereafter to prevent re-registration in circumvention of the exclusion.
• Technical and usage data: Aggregated, anonymised analytics data may be retained indefinitely. Individual session logs and IP records are retained for a limited period for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

z7game employs a multi-layered approach to personal data security, including the following technical and organisational measures:

• TLS/HTTPS encryption: All data transmitted between your browser and the z7game Platform is encrypted using current TLS standards. Accessing the Platform over an unencrypted connection is not permitted.
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on access-controlled infrastructure.
• Access controls: Access to personal data is restricted to z7game personnel and authorised service providers who require it to perform their designated functions, under a principle of least privilege.
• Two-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Secure KYC portal: Identity documents must be submitted exclusively through the Platform's official HTTPS-secured verification flow. Documents received through unsecured channels (email, social media, third-party chat) are not processed and users are directed to the correct channel.
• Incident response: z7game maintains documented procedures for identifying, containing and reporting personal data breaches within applicable notification timeframes.

z7game uses cookies and similar technologies (including local storage, session tokens and browser fingerprinting) to operate the Platform and improve the user experience. Cookies are categorised as follows:

These cookies are essential for the Platform to function and cannot be disabled without impairing core features. They include session authentication tokens, load balancer routing cookies and security cookies that prevent cross-site request forgery. No consent is required for strictly necessary cookies.

Functional cookies remember your preferences — such as language settings, display preferences and last-visited sections — so that you do not need to reconfigure them on each visit. These are activated with your consent where required.

Analytics cookies collect aggregated, anonymised data about how users navigate the Platform — including pages visited, session duration and feature interactions. This data helps z7game identify usability issues and prioritise improvements. Individual user identities are not associated with analytics data for external reporting purposes.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling certain cookies may prevent some Platform features from operating correctly. z7game does not currently respond to Do Not Track (DNT) browser signals, as no universal standard for this signal has been established.

Subject to applicable law and any overriding legal obligations that z7game is required to comply with, you have the following rights in relation to your personal data:

To exercise any of the above rights, contact our support team via live chat or by email (see Section 17). We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, extendable in complex cases with prior notification.

We may require you to verify your identity before processing a rights request, to ensure we do not inadvertently disclose or delete data in response to an unauthorised request.

z7game is strictly an adults-only platform. Access is limited to users aged 18 years and above, or the higher minimum age required by the operator's licensing jurisdiction. The Platform does not knowingly collect personal data from individuals who are under the applicable minimum age.

Age verification is conducted as part of the KYC process. Where z7game discovers that personal data has been collected from a minor — whether as a result of a misrepresentation of age during registration or otherwise — that account will be immediately suspended, all balances will be reversed and the personal data will be securely deleted or isolated pending further review.

Data collected in connection with responsible gambling tools — including deposit limit configurations, session time limits, loss limits, self-exclusion requests and behavioural monitoring indicators — is treated with particular sensitivity. This data is used exclusively for the following purposes:

• Administering the specific tool or limit the user has activated.
• Monitoring compliance with self-exclusion periods to prevent re-registration in circumvention of an active exclusion.
• Identifying patterns that may indicate problem gambling behaviour, in accordance with responsible gambling obligations applicable under the operator's licensing conditions.
• Responding to requests from the user, their legal representative or relevant responsible gambling organisations where the user has granted authorisation.

Responsible gambling data is not shared with third parties for marketing, profiling or commercial purposes. For further information on the tools available, visit our Responsible Gambling page.

The z7game platform integrates with third-party services — including game software providers, payment infrastructure, identity verification platforms and analytics tools. While these providers are contractually bound to handle personal data in accordance with our instructions, z7game is not responsible for the independent privacy practices of third parties in contexts outside of the services they provide to z7game.

Where a third-party provider's own privacy policy applies — for example, in relation to an individual game provider's software — this will be disclosed to users in the relevant context. Users are encouraged to review any third-party privacy notices that may apply to services they interact with through the Platform.

z7game does not permit third-party service providers to use personal data obtained through this Platform for their own independent marketing or profiling purposes.

z7game reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform operations or data processing practices. When changes are made, the updated Policy will be published on this page with a revised effective date.

For material changes — particularly those that affect how your personal data is processed or your rights in relation to that data — z7game will endeavour to provide advance notice via the email address associated with your account or through a prominent notice on the Platform. Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the updated terms.

We encourage you to review this Policy periodically to stay informed about how your personal data is being protected.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by z7game, please contact us through the following channels. We are committed to addressing all data-related enquiries in a timely and transparent manner.

z7game will acknowledge all data-related requests within five (5) business days and will provide a substantive response within thirty (30) calendar days. In exceptional cases requiring extended investigation, we will notify you of the extension and the expected resolution date.