KZ77 Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") describes how KZ77 (hereinafter referred to as "KZ77", "we", "us" or "our"), the operator of the online gaming and sports betting platform accessible at https://kz77.cam (the "Platform"), collects, uses, stores, processes and protects personal data relating to registered users, prospective users and visitors to the Platform.

KZ77 is committed to handling all personal information with transparency, integrity and care. This Policy is intended to give you a clear and honest account of our data practices so that you can make informed decisions about your use of the Platform and the information you share with us.

By accessing the Platform, creating a KZ77 account, or interacting with any feature or service on the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Where applicable law requires explicit consent for specific processing activities, we will seek that consent separately at the appropriate point of data collection.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to the identity of that person.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. KZ77 is the data controller for personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of KZ77 under a data processing agreement.
• "User" means any registered account holder on the KZ77 Platform, or any person who accesses or interacts with the Platform in any capacity.
• "KYC" means Know Your Customer — the identity and age verification process required under applicable regulatory obligations and internal platform policy.
• "Cookies" means small data files placed on a User's device by the Platform to facilitate functionality, analytics and user experience improvements.
• "Sensitive Personal Data" means categories of personal data that warrant enhanced protection, including health information, financial details, identity document data and biometric data where applicable.

KZ77, the operator of the Platform at https://kz77.cam, acts as the Data Controller for all personal data collected through the Platform. KZ77 determines the purposes for which personal data is collected and the means by which it is processed.

KZ77 operates under an international licensing framework. It does not hold a data protection registration under Pakistani law, nor does it claim oversight by the Personal Data Protection Bill framework currently under legislative consideration in Pakistan. Users in Pakistan should note that their personal data may be processed and stored on servers located outside of Pakistan, in jurisdictions that maintain their own data protection standards.

For all privacy-related enquiries, requests or complaints, the Data Controller can be reached at:

• Email: [email protected] (plain text reference only — not a clickable link. Copy and paste manually into your email client.)
• Live Chat: Available 24/7 through your account dashboard

KZ77 collects different categories of personal data depending on how you interact with the Platform. The following table provides an overview of the main categories of data we may collect:

The data categories listed above cover typical collection scenarios. The actual data collected in any specific interaction may be a subset of the above. KZ77 does not collect data beyond what is necessary for the stated purposes described in Section 6.

KZ77 collects personal data through the following channels and mechanisms:

• Registration: When you create a KZ77 account, you provide identity and contact information directly.
• KYC Verification: When you complete identity verification, you upload documents such as a CNIC, passport, proof of address, and selfie images through our secure HTTPS-protected verification portal.
• Transactions: When you make deposits or withdrawals, financial data is recorded including payment method identifiers, transaction amounts in PKR, and processing timestamps.
• Platform Activity: Technical and usage data is collected automatically through server logs, cookies, and session tracking technologies as you interact with the Platform.
• Customer Support: When you contact KZ77 through live chat or email, communications data including the content and context of your enquiry is recorded.
• Responsible Gambling Tools: When you set limits or activate self-exclusion, the settings and activation dates are recorded as part of your account profile.
• Third-Party Sources: In limited circumstances, KZ77 may receive data from third-party identity verification providers, payment processors, or fraud prevention services as part of the KYC or transaction screening process. Such data is handled in accordance with this Policy.

KZ77 processes personal data for the following purposes, each of which rests on an identifiable legal basis:

• Account Creation and Management (Contract Performance): Processing identity and contact data is necessary to establish and manage your account and to deliver the Services you have contracted for.
• KYC and Age Verification (Legal Obligation & Contract): Verifying your identity and age is a legal requirement under anti-money laundering controls and platform policy. Without KYC completion, withdrawal functionality cannot be enabled.
• Payment Processing (Contract Performance): Financial data must be processed to execute deposits, withdrawals and to maintain accurate transaction records in PKR and other applicable currencies.
• Fraud Prevention and AML Compliance (Legal Obligation & Legitimate Interest): KZ77 monitors transaction patterns, IP data and gameplay behaviour to detect fraud, money laundering, and terms-of-service violations. This processing is necessary to protect users and the integrity of the Platform.
• Responsible Gambling Monitoring (Legal Obligation & Legitimate Interest): Responsible gambling tool data — including limits set, self-exclusion records and session histories — is processed to fulfil KZ77's duty of care to users and to enable compliance with applicable regulatory standards.
• Platform Improvement and Analytics (Legitimate Interest): Usage and technical data is processed in aggregate and individual form to improve Platform performance, identify bugs, and refine the user experience.
• Customer Support (Contract Performance & Legitimate Interest): Communications data is retained to resolve current and future support queries, maintain quality standards and defend against disputes.
• Marketing and Promotions (Consent, where required): Where you have consented to receive promotional communications, contact data may be used to deliver bonus notifications, seasonal promotions and personalised offers. You may withdraw this consent at any time through your account settings or by contacting support.

KZ77 processes personal data using both automated and manual means. Automated processing is used for: transaction execution and record-keeping; fraud detection and risk scoring; session analytics; responsible gambling monitoring; and generation of account activity reports.

KZ77 does not make purely automated decisions that produce legal or similarly significant effects on Users without human review. Where automated risk-scoring or fraud-detection systems flag an account for review, a trained member of the compliance team will review the flagged case before any material action (such as account suspension or transaction hold) is finalised.

All processing activities are conducted with a view to minimising the volume of personal data used. KZ77 operates on a data minimisation principle: we collect only what is necessary, retain it only for as long as required, and restrict access within the organisation to those who genuinely need it to perform their duties.

KZ77 does not sell or rent personal data to any third party. KZ77 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Processors: To execute deposit and withdrawal transactions, financial data is shared with the relevant payment service provider. The data shared is limited to what is strictly necessary to process the transaction and is governed by the processor's own privacy terms.
• Identity Verification Providers: KZ77 may engage third-party KYC and identity verification services to assist with document validation, liveness checks and age verification. These providers process identity data as data processors under a binding data processing agreement with KZ77.
• Fraud Prevention and AML Services: To fulfil anti-money laundering and fraud prevention obligations, KZ77 may share transaction data and identity indicators with specialist compliance service providers.
• IT and Infrastructure Providers: KZ77 uses third-party cloud hosting, database management and cybersecurity services. These providers access data as data processors and are bound by confidentiality and security obligations.
• Legal and Regulatory Authorities: KZ77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. KZ77 will endeavour to notify affected Users of such disclosure where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets involving KZ77, personal data may be transferred to the acquiring entity, subject to the acquirer assuming equivalent privacy obligations under this Policy.

In all cases where data is shared with third-party processors, KZ77 requires contractual confirmation that the processor will apply appropriate technical and organisational security measures and will process data solely for the purposes defined by KZ77.

Given that KZ77 operates under an international licensing framework and uses globally distributed cloud infrastructure, personal data collected from Pakistani users may be transferred to and processed in countries outside Pakistan. These countries may have data protection laws that differ from those in Pakistan.

Where personal data is transferred internationally, KZ77 takes measures to ensure that an appropriate level of protection is maintained, including through contractual safeguards with recipients and selection of service providers operating in jurisdictions with recognised data protection standards.

By using the Platform and providing your personal data, you acknowledge and consent to such cross-border transfers as described in this section. If you have questions about specific transfer destinations or the safeguards in place, contact us at [email protected] (plain text — not a clickable link).

KZ77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active KZ77 account is retained for the full duration of the account's active status, and for a minimum period following account closure as required by AML and record-keeping obligations applicable to the operator's license jurisdiction.
• KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements under applicable licensing rules.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the date of each transaction.
• Communications Data: Customer support transcripts, email correspondence and complaint records are typically retained for three (3) years following the resolution of the relevant interaction, unless a longer period is required for ongoing dispute or legal proceedings.
• Marketing Data: Where you have consented to marketing communications, your contact details for this purpose are retained until you withdraw consent. Upon withdrawal, data is removed from active marketing lists within a reasonable timeframe.
• Technical and Usage Data: Aggregated and anonymised usage analytics may be retained indefinitely for Platform improvement purposes, as they no longer constitute personal data once fully anonymised.

Once the applicable retention period expires and no legal obligation requires further retention, KZ77 will securely delete or anonymise the relevant personal data.

KZ77 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the Platform to enable core functionality, improve user experience, and gather analytics data. The main categories of cookies used are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, load balancing cookies and security cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your chosen language, display settings and logged-in state — to provide a more personalised experience across sessions.
• Analytics Cookies: Used to collect aggregate information about how users interact with the Platform, including pages visited, session duration, and feature usage. This data helps KZ77 improve Platform design and performance. Analytics data is processed in aggregate where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect account integrity.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may prevent some parts of the Platform from functioning correctly. Instructions for managing cookies in popular browsers are available in each browser's help documentation.

KZ77 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between User devices and KZ77 servers
• Password hashing using industry-standard one-way cryptographic algorithms — KZ77 does not store plaintext passwords
• Role-based access controls limiting internal access to personal data to authorised personnel only
• Regular security audits and vulnerability assessments of Platform infrastructure
• Secure HTTPS-only document upload portal for KYC verification — documents must never be sent through unsecured channels
• Monitoring systems for unusual account activity, suspicious login attempts and fraudulent transaction patterns

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. KZ77 cannot provide an absolute guarantee of security. In the event of a data breach that is likely to result in a high risk to the rights and freedoms of Users, KZ77 will notify affected Users in accordance with applicable obligations.

Users are responsible for maintaining the security of their own account credentials. KZ77 will never ask you to share your password via email, live chat, or any other channel. If you suspect unauthorised access to your account, contact support immediately via live chat.

Subject to applicable law and the operator's license jurisdiction requirements, KZ77 recognises the following data subject rights in relation to the personal data we hold about you:

To exercise any of the above rights, please contact us via live chat in your account dashboard or by emailing [email protected] (plain text only — not a clickable link). KZ77 will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing a rights request to prevent unauthorised disclosure.

The KZ77 Platform is strictly intended for adults aged eighteen (18) years or older, or the higher minimum age required by the operator's license jurisdiction. KZ77 does not knowingly collect personal data from individuals under the applicable minimum age.

Where KZ77 discovers or reasonably suspects that personal data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account. Any deposits made by or on behalf of a minor will be reversed where practicable, and any winnings accumulated will be forfeited.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on devices used by minors. If you believe a minor has accessed KZ77, please contact support immediately.

KZ77 is an English-language platform designed to serve Pakistani users. The following additional points are noted specifically for users located in or accessing the Platform from Pakistan:

• KZ77 is not registered under Pakistan's current data protection framework and does not claim compliance with the Pakistan Electronic Crimes Act (PECA) 2016 as a data protection statute. Users in Pakistan should be aware that domestic data protection legislation is evolving and KZ77's position may be subject to change.
• Pakistani Rupee (PKR) transaction records form part of your financial data and are retained as described in Section 10 above. Payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah appear on the Platform as contextual references. KZ77 does not share personal data with these providers beyond what is strictly necessary to process a specific transaction you initiate.
• KZ77 does not disclose account holder identity, transaction records or communications data to Pakistani governmental or tax authorities except where legally compelled to do so by a court or competent international authority with recognised jurisdiction.
• CNIC numbers and passport details submitted during KYC are treated as sensitive personal data and are subject to the highest level of access restriction within KZ77's systems. They are not disclosed to any third party except as required for KYC verification purposes and as described in Section 8.

KZ77 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be posted on this page with an updated effective date. Where changes are material — meaning they significantly affect the manner in which we collect or use your personal data — KZ77 will endeavour to provide advance notice through account notifications or email where practicable.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised Policy. If you do not agree with any update, you must discontinue use of the Platform and may request account closure by contacting support.

We encourage you to review this Policy periodically to remain informed about how KZ77 handles your personal data.

For all privacy-related questions, requests to exercise your data rights, or complaints about how KZ77 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 in your KZ77 account dashboard — the fastest and most direct channel for privacy enquiries.
• Email: [email protected] (plain text only — this is not a clickable link. Please copy and paste it manually into your email client.)

KZ77 aims to acknowledge all privacy-related requests within two (2) business days and to substantively respond within thirty (30) days of receipt of a verified request. Complex requests may require additional time; we will notify you of any extension and its reason.

If you are dissatisfied with KZ77's response to a privacy complaint, you may have the right to escalate the matter to a supervisory or data protection authority in the jurisdiction that governs KZ77's operations. Details of the relevant authority are available upon request.