ZC22 Privacy Policy

ZC22 ("we", "us", "our") is an English-language online betting and casino information platform accessible at https://zc22.cam ("Platform"). This Privacy Policy ("Policy") describes how ZC22 collects, uses, stores, discloses and protects the personal data of users ("you", "your") who access or interact with the Platform.

This Policy applies to all personal data processed in connection with your use of the ZC22 Platform, including data collected during account registration, platform interaction, payment processing, KYC verification and customer support. By using the Platform, you acknowledge that you have read and understood this Policy.

ZC22 is committed to handling personal data responsibly, transparently and in compliance with applicable data protection obligations. This Policy has been written in plain, accessible English to ensure that Pakistani users — and all users of the Platform — can understand how their data is handled.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — a person who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure and deletion.
• "Data Controller" means ZC22, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of ZC22, under contract and subject to data processing agreements.
• "KYC" means Know Your Customer — the identity and document verification process required to satisfy regulatory and anti-fraud obligations before processing financial transactions.
• "Cookies" means small text files stored on your device by your browser when you visit a website, used to retain session information and track usage patterns.
• "Platform" means the ZC22 website at https://zc22.cam and all associated pages, features, tools and services.

ZC22 collects personal data across several categories, depending on how you interact with the Platform. The table below provides an overview of the main data categories, examples and primary collection purposes.

We do not intentionally collect special category personal data (such as health, religion or biometric data) unless strictly required for regulatory identity verification purposes, in which case such data is handled with heightened protection.

ZC22 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC forms, contacting support or updating your profile;
• Automated collection: Technical and usage data collected automatically when you access the Platform, through cookies, server logs and analytics tools;
• Transaction records: Financial data generated when you make deposits, request withdrawals or participate in promotions;
• Third-party verification services: Identity and document verification data provided by KYC and fraud-prevention partners during the account verification process;
• Payment processors: Transaction reference data shared by payment processors to confirm or reconcile financial activity on your account.

ZC22 processes personal data on the following legal bases, as applicable under the data protection law of the relevant jurisdiction:

• Contractual necessity: Processing required to perform the contract between you and ZC22 — including account registration, payment processing, support and service delivery;
• Legal obligation: Processing required to comply with applicable regulatory obligations, including KYC, anti-money laundering and responsible gambling requirements;
• Legitimate interests: Processing carried out for ZC22's legitimate business interests, including fraud prevention, platform security, analytics and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your explicit, freely given consent — such as marketing communications — which you may withdraw at any time without detriment to your account.

ZC22 uses your personal data for the following purposes:

• Account management: Creating, maintaining and administering your registered account, including password resets and preference management;
• Identity and age verification: Verifying that you meet the minimum age requirement (18+ or the higher minimum required by the Operator or license jurisdiction) and satisfy KYC obligations;
• Transaction processing: Processing deposits, withdrawals and related financial activity in PKR or other accepted currencies;
• Fraud prevention and security: Detecting and investigating irregular, abusive or fraudulent account activity, including collusion and multi-accounting;
• Responsible gambling compliance: Managing self-exclusion requests, deposit limits, loss limits and session time preferences to protect vulnerable users;
• Customer support: Responding to queries, complaints and account-related requests submitted via live chat, email or the help centre;
• Platform improvement: Analysing usage patterns to improve content quality, navigation, performance and user experience;
• Marketing communications: Sending promotional emails, offers and newsletters where you have provided consent — you may opt out at any time;
• Legal and regulatory compliance: Meeting applicable obligations including record-keeping, reporting and cooperation with lawful requests from authorities.

ZC22 does not sell your personal data to third parties for their independent marketing or commercial purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Service providers and processors: Technology, hosting, payment processing, analytics, customer support and KYC/identity verification vendors contracted to support Platform operations;
• Anti-fraud and security partners: Specialist fraud prevention and security monitoring services used to detect and prevent illegal or abusive activity;
• Regulatory and legal authorities: Government bodies, law enforcement agencies or regulators where ZC22 is required by law or court order to disclose data;
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets, your personal data may be transferred as part of that transaction, subject to the protections in this Policy;
• Professional advisers: Legal, financial and compliance advisers bound by professional confidentiality obligations who require access to data to provide services to ZC22.

All third-party processors are required to handle personal data in accordance with applicable data protection law and our contractual instructions. We do not permit third-party processors to use your data for their own purposes beyond the scope of their service to ZC22.

ZC22 uses cookies and similar technologies (including pixel tags and local storage objects) to enhance Platform functionality, remember your preferences, analyse traffic and support security. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session management, authentication tokens and security controls. These cannot be disabled without impairing core functionality.
• Functional cookies: Used to remember your settings and preferences (e.g., language, display options) to provide a more personalised experience across sessions.
• Analytical / performance cookies: Used to collect aggregated data on how visitors interact with the Platform — pages visited, session duration, navigation paths — to help us improve content and performance.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing activity. These are only set where you have provided consent.

You may manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. Continued use of the Platform without adjusting cookie settings constitutes acceptance of our use of cookies as described in this Policy.

ZC22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation or legitimate business need. The following general retention principles apply:

• Account data: Retained for the duration of your active account and for a defined period following closure — typically five to seven years — to meet regulatory record-keeping and anti-money laundering obligations;
• Financial records: Retained for a minimum period as required by applicable financial regulation, typically five years from the date of the relevant transaction;
• KYC documentation: Retained for a minimum period as required by AML/CFT regulations in the Operator's license jurisdiction;
• Support communications: Retained for a reasonable period to allow resolution of disputes and to maintain a record of advice provided;
• Technical and usage data: Retained in anonymised or aggregated form for analytics purposes. Raw technical logs are typically retained for shorter periods.

When data is no longer required for any applicable purpose, it is securely deleted or anonymised in accordance with our data disposal procedures.

ZC22 applies appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols;
• Encryption of sensitive data at rest, including account credentials and financial records;
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate need;
• Regular security assessments, vulnerability testing and internal audits of data handling procedures;
• Staff training on data protection obligations and secure data handling practices.

While we take reasonable precautions, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials. If you suspect unauthorised access to your account, contact us immediately at [email protected].

Given that ZC22 targets Pakistani users through a globally accessible platform, your personal data may be transferred to and processed in countries other than Pakistan, including the operator's license jurisdiction and the locations of our service providers. Such transfers may be to countries that do not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to maintain a level of data protection consistent with this Policy. By using the Platform, you acknowledge and consent to such international transfers as described herein.

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by ZC22. To exercise any of these rights, please contact us at [email protected] with sufficient information to verify your identity.

We will respond to verified data subject requests within a reasonable timeframe — typically 30 days — in accordance with applicable legal requirements. We may need to verify your identity before processing your request. If we are unable to fulfil a request (for example, due to conflicting legal obligations), we will explain why.

The ZC22 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the Operator or applicable license jurisdiction. We do not knowingly collect or process personal data from individuals below the minimum age threshold.

If we become aware that personal data has been collected from a minor without appropriate consent or in breach of our age restriction policy, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

The ZC22 Platform may reference or describe third-party services, payment providers or other platforms for informational purposes. Where the Platform links to or describes third-party services, ZC22 has no control over the privacy practices or content of those third parties.

This Privacy Policy applies solely to personal data collected and processed by ZC22 through the Platform. Any personal data you submit to a third-party service — including an Operator's registration page, payment portal, or support system — is governed by that third party's own privacy policy. We encourage you to review the privacy policies of any third-party service you use.

ZC22 reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material — such as new categories of data collected, new processing purposes or changes to your rights — we will make reasonable efforts to notify registered users through the Platform or by email.

Your continued use of the Platform after publication of any amended Policy constitutes your acceptance of the updated terms. If you do not agree to the amended Policy, you should discontinue use of the Platform and contact us to request account closure and data deletion where applicable.

We recommend reviewing this Policy periodically to stay informed about how your data is protected. This Policy was last updated and is effective as of 1 January 2026.

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the ZC22 Data & Privacy team using the details below. We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 days.

For account-related support, responsible gambling enquiries or general platform questions, you can also access the FAQ page or review the Terms & Conditions for further context.

ZC22 is not affiliated with, endorsed by or operating under the authority of the Government of Pakistan, the PTA, the State Bank of Pakistan, or any Pakistani financial institution. Payment brand names referenced on this platform are for local familiarity only and do not imply their endorsement or facilitation of gambling.