zs222 Privacy Policy — How We Protect Your Personal Data

1.1 This Privacy Policy is published by zs222 (referred to throughout as "we", "us", or "our") and applies to all personal data collected from users of the zs222 platform accessible at zs222.org (referred to as the "Platform"). It applies to all registered account holders, visitors to the Platform, and individuals who interact with zs222 through any channel including our customer support service.

1.2 This Policy constitutes part of the agreement between you and zs222 and should be read in conjunction with our Terms & Conditions. By registering a zs222 account or using the Platform in any capacity, you acknowledge that you have read, understood, and accepted the data processing practices described in this Policy.

1.3 zs222 operates the Platform under an international gaming licence framework and is subject to the data protection, anti-money laundering, and know-your-customer requirements associated with that licence. Some personal data processing described in this Policy is mandated by those regulatory obligations and cannot be refused or opted out of while maintaining an active zs222 account.

1.4 This Privacy Policy applies to all personal data processing activities connected to the Platform regardless of the device, browser, or operating system used to access zs222 — including mobile access by Pakistani users on Android and iOS devices.

2.1 zs222 collects personal data in three ways: directly from you when you provide it, automatically when you use the Platform, and occasionally from third parties such as payment processors or identity verification services. The categories of personal data we collect are set out below.

2.2 zs222 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where voluntarily disclosed in the context of a responsible gaming support request, in which case such data is handled with heightened care and used solely for the purpose of providing appropriate support.

3.1 zs222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the zs222 Terms & Conditions — including operating your account, processing PKR deposits and withdrawals, and providing access to games and betting markets;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements including anti-money laundering (AML) obligations, KYC requirements mandated by our gaming licence, and fraud prevention measures;
• Legitimate Interests: Processing carried out in pursuit of zs222's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, security monitoring, platform improvement, and responsible gaming monitoring;
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4.1 zs222 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your zs222 account, including processing login authentication, managing account settings, and responding to account queries from Pakistani players;
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard; processing withdrawal requests to your verified payment method; and maintaining accurate transaction records;
• Identity Verification (KYC): Verifying your identity and age (21+) in accordance with our gaming licence requirements, using CNIC or passport documentation and address verification evidence;
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multi-account usage, bonus abuse, and other prohibited conduct on the zs222 platform;
• Regulatory Compliance: Meeting anti-money laundering (AML) obligations, maintaining records required by our gaming licence authority, and cooperating with regulatory or law enforcement investigations where legally required;
• Responsible Gaming: Monitoring gaming activity for indicators of problematic gambling behaviour, applying deposit limits or cooling-off periods where requested, and communicating responsible gaming information to players who may require support;
• Platform Improvement: Analysing aggregated and anonymised platform usage data to improve the zs222 gaming experience, identify technical issues, and develop new features relevant to Pakistani users;
• Customer Support: Responding to your enquiries, complaints, and dispute requests through live chat and email support channels;
• Marketing: Sending promotional communications about zs222 bonuses, new games, and platform updates — strictly only to users who have consented to receive such communications and have not subsequently opted out.

5.1 zs222 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited and specific circumstances:

• Payment Service Providers: Your financial data is shared with payment processors (including JazzCash, EasyPaisa, HBL, UBL, and card networks) solely to the extent required to process your PKR deposit and withdrawal transactions;
• Identity Verification Services: Your identity documents and verification data may be processed by certified third-party KYC verification providers who assist zs222 in meeting its age verification and AML compliance obligations;
• Game Software Providers: Technical data (such as your account identifier and session information) is shared with certified game software providers as necessary to deliver their games through the zs222 platform. These providers operate under strict data processing agreements with zs222;
• Regulatory Authorities: zs222 is required to share player data with its gaming licence regulatory authority and, in specific circumstances, with law enforcement agencies or financial intelligence units, where required by applicable law or legal process;
• Fraud Prevention Networks: In cases of suspected fraud, multi-account activity, or money laundering, zs222 may share relevant data with industry fraud prevention networks and databases to protect the integrity of the platform and the broader gaming sector;
• Professional Advisors: Personal data may be accessed by zs222's legal advisors, auditors, or insurers on a strictly need-to-know basis and subject to confidentiality obligations.

5.2 All third parties with whom zs222 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that which zs222 has authorised.

6.1 zs222 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, analyse usage patterns, maintain session security, and deliver a personalised experience. A "cookie" is a small text file placed on your device by the Platform when you access it.

6.2 Types of Cookies Used by zs222:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and language preference cookies. These cannot be disabled without impairing your ability to use zs222;
• Functional Cookies: Remember your preferences such as your preferred game category, last visited section, and display settings to provide a more personalised zs222 experience;
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — which pages are visited most, how long sessions last, and which features are used — to help zs222 improve the platform for Pakistani players;
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login behaviour and multi-account activity.

6.3 You may control cookie settings through your browser's privacy settings. Note that disabling essential cookies will impair your ability to log into and use your zs222 account. zs222 does not use third-party advertising cookies or retargeting pixels.

7.1 zs222 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory minimum retention requirements.

7.2 The following retention periods apply as a general guideline, though specific circumstances may require variation:

• Account Data & KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required by AML regulations applicable to our gaming licence;
• Transaction Records (Deposits & Withdrawals): Retained for a minimum of five (5) years from the date of each transaction for financial regulatory compliance purposes;
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of account closure;
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the interaction;
• Marketing Preference Data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligation.

7.3 Upon expiry of the applicable retention period, personal data is either securely deleted or rendered irreversibly anonymised. Anonymised and aggregated data that cannot be linked back to you may be retained indefinitely for statistical and platform improvement purposes.

8.1 zs222 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated on an ongoing basis in line with developments in security technology and best practice.

8.2 Technical Security Measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zs222 platform;
• Encrypted storage of sensitive personal data and financial information at rest;
• Multi-factor authentication options for account login;
• Continuous server-side security monitoring and intrusion detection systems;
• Regular penetration testing and vulnerability assessments by qualified security professionals;
• Firewall protection and restricted network access controls for zs222 infrastructure.

8.3 Organisational Security Measures:

• Strict access controls ensuring only authorised personnel can access personal data, limited to what is required for their specific role;
• Mandatory privacy and data security training for all zs222 staff with access to personal data;
• Confidentiality obligations for all zs222 employees and contracted service providers;
• A documented incident response procedure for handling any potential data breach.

8.4 In the event of a personal data breach that poses a risk to your rights and freedoms, zs222 will notify affected users in accordance with the notification requirements under its applicable regulatory framework without undue delay.

9.1 As a user of the zs222 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact zs222 at the details provided in Section 15 of this Policy.

9.2 zs222 will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or numerous in scope, zs222 may extend this period by a further 60 days, with notification of the extension provided within the initial 30-day window.

9.3 Limitations on Rights: Certain privacy rights are subject to limitations where processing is required by law — particularly in respect of KYC records and transaction data retained under AML regulatory obligations. In these cases, zs222 will explain the specific legal ground preventing full compliance with your request.

10.1 The zs222 platform is strictly restricted to adults aged 21 years and above. zs222 does not knowingly collect personal data from any individual under the age of 21. The registration process and KYC verification procedure are designed specifically to verify that all users meet this minimum age requirement.

10.2 If zs222 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be permanently suspended, and any balance within the account will be handled in accordance with zs222's responsible gaming protocols.

10.3 If you are a parent or guardian and believe that a person under 21 may have created a zs222 account, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

11.1 In connection with the operation of the zs222 platform and the delivery of services to Pakistani players, your personal data may be transferred to and processed in countries outside Pakistan. This may occur when your data is processed by third-party service providers — such as game software companies, KYC verification services, or payment processors — whose operations are based outside Pakistan.

11.2 Where personal data is transferred internationally, zs222 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data protection clauses, adequacy decisions, or the application of recognised international data protection standards.

11.3 By using the zs222 platform, you acknowledge and consent to the international transfer of your personal data where operationally required, subject to the safeguards described above.

12.1 The zs222 platform integrates with third-party services including game software providers, payment gateways, and identity verification systems. Each of these third parties operates under its own privacy policy and data protection practices, which are independent of this zs222 Privacy Policy.

12.2 zs222 carefully selects third-party service providers and requires, through contractual data processing agreements, that they:

• Process personal data only on zs222's documented instructions;
• Implement appropriate technical and organisational security measures;
• Not transfer personal data to any sub-processor without zs222's prior written approval;
• Delete or return all personal data upon termination of their service agreement with zs222.

12.3 This Privacy Policy does not extend to cover any websites, services, or applications that may be operated by third parties and are linked to or accessible from the zs222 platform. zs222 is not responsible for the privacy practices of those third-party operators.

13.1 zs222 may send you promotional communications about platform offers, new game releases, PSL cricket betting promotions, bonus events, and other updates relevant to Pakistani players — but only where you have provided your explicit consent to receive such communications during the registration process or at a later point.

13.2 You may withdraw your consent to receive marketing communications from zs222 at any time by:

• Updating your marketing preferences within your zs222 account settings;
• Using the unsubscribe link included in any zs222 marketing email;
• Contacting zs222 customer support with a specific opt-out request.

13.3 Withdrawal of marketing consent will be processed promptly and will not affect your ability to continue using the zs222 platform or your entitlement to standard transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent regardless of marketing preference).

13.4 zs222 does not engage in unsolicited bulk marketing and does not share your contact details with third-party marketers. All marketing communications sent by zs222 are sent by us directly and relate exclusively to the zs222 platform.

14.1 zs222 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the features and functionality of the zs222 platform.

14.2 Where changes to this Policy are material — meaning they significantly affect the way we process your personal data or the rights available to you — zs222 will notify registered users through a prominent notice on the Platform and, where appropriate, by email to the address registered on your account.

14.3 The "Last Updated" date displayed in the hero section at the top of this page reflects the most recent revision. The version displayed on zs222.org/privacy-policy at any given time is the binding current version. If you disagree with any amendment to this Policy, you may close your account by contacting support.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zs222, please contact our support team through the channels listed below. When submitting a privacy rights request, please clearly identify yourself and specify the right you wish to exercise so that we can process your request efficiently.

• Email (Privacy Enquiries): [email protected] — mark the subject line "Privacy Request" to ensure your message is routed to the appropriate team;
• Live Chat: Available 24/7 from within your logged-in zs222 account — suitable for general privacy questions and initial enquiries;
• Help Centre: Common questions about your data and account privacy are addressed on the zs222 FAQ page.

15.2 zs222 will acknowledge receipt of privacy rights requests within 5 business days and will provide a substantive response within 30 calendar days. For complex requests, we may extend this period by up to 60 additional days with appropriate notice.