Privacy Policy — How TZ777 Handles Your Data

This Privacy Policy ("Policy") describes how TZ777 ("Platform", "we", "us", "our"), accessible at https://tz777.cam, collects, processes, stores, shares and protects the personal data of individuals ("Users", "Players", "you") who register accounts, make transactions or otherwise interact with the Platform.

TZ777 is an English-language online gaming information and services platform primarily serving Pakistani users. As part of operating this Platform, we necessarily collect personal data to manage accounts, verify identities, process payments, prevent fraud and comply with applicable anti-money laundering and licensing obligations.

This Policy is incorporated by reference into the TZ777 Terms & Conditions. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you should not use the Platform.

For the purposes of this Policy, the following terms carry the meanings set out below:

TZ777 acts as the data controller in respect of personal data collected through and in connection with the Platform. As data controller, TZ777 is responsible for determining the purposes for which and the means by which your personal data is processed.

For data-related enquiries, access requests and exercise of your rights under this Policy, please contact our Data Protection contact via the channels listed in Section 16 (Contact Us) of this Policy. We will respond to data rights requests within the timelines specified in Section 9.

Where TZ777 engages third-party service providers to process personal data on its behalf, those providers act as data processors under written contractual agreements that require them to handle data only in accordance with TZ777's instructions and maintain appropriate security standards.

TZ777 collects personal data from you in the following categories, depending on how you use the Platform:

4.1 Registration Data

When you create an account, we collect your full legal name, date of birth, residential address, email address, telephone number and chosen username. This data is required to establish your account and verify your eligibility to use the Platform.

4.2 Identity Verification (KYC) Data

To comply with age verification, AML and licensing requirements, we collect identity documents, which for Pakistani users typically include:

• A copy of your valid Computerised National Identity Card (CNIC) or passport;
• A selfie or liveness check image alongside the identity document;
• Proof of address documentation where required (utility bill, bank statement);
• Payment method verification documentation (screenshot or statement) where applicable.

4.3 Payment and Transaction Data

We collect records of all financial transactions — deposits, withdrawals, bonus redemptions and wagering activity. This includes payment method identifiers (e.g., partial account numbers, wallet IDs), transaction amounts in PKR or other applicable currency, timestamps and transaction status. We do not store full payment card numbers or PINs.

4.4 Device and Technical Data

When you access the Platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited and referring URL. This data is used for security monitoring, fraud prevention and platform performance optimisation.

4.5 Behavioural and Gaming Data

We collect data about your gaming activity — games played, bet amounts, wager frequency, session length, bonus usage and responsible gambling tool settings. This data is used to operate the Platform, detect problem gambling patterns and personalise your experience where you have consented to personalisation.

4.6 Communications Data

Records of your communications with TZ777 support — including live chat transcripts, email correspondence and any uploaded evidence in support of a complaint — are stored for quality assurance, dispute resolution and regulatory audit purposes.

4.7 Marketing Preferences

Where you have separately opted in to receive marketing communications, we hold a record of your consent and your stated preferences regarding communication frequency, channels and content. This data is used solely to send communications you have asked to receive and to honour opt-out requests.

TZ777 processes personal data under one or more of the following legal bases, depending on the nature and purpose of the processing:

TZ777 uses collected personal data for the following specific purposes:

• Account Management: Creating and maintaining your account, verifying login credentials, processing password resets and managing account preferences;
• Identity Verification: Confirming your age, identity and residential address in compliance with KYC and AML requirements before withdrawals are processed;
• Payment Processing: Authorising deposits and withdrawals, verifying payment method ownership and maintaining transaction records for financial compliance;
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, multi-accounting and unauthorised access;
• Responsible Gambling: Monitoring gaming patterns that may indicate problem gambling, applying account limits where requested and enforcing self-exclusion;
• Customer Support: Responding to queries, investigating complaints, resolving disputes and maintaining support records;
• Legal Compliance: Meeting obligations under applicable licensing conditions, AML regulations and any applicable data protection law in our operating jurisdiction;
• Platform Improvement: Analysing aggregated usage data to improve platform performance, user experience and game selection — using anonymised or pseudonymised data wherever practicable;
• Marketing (with consent only): Sending promotional communications about TZ777 offers, game releases and sports betting markets — only where you have explicitly opted in.

TZ777 does not use your personal data to make fully automated decisions that produce significant legal effects without human review. Responsible gambling flags and fraud detection alerts are reviewed by compliance staff before material account actions are taken.

TZ777 does not sell personal data to third parties for commercial advertising or marketing purposes. Personal data is shared with third parties only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process data on our behalf under contractual data processing agreements. These include:

• KYC and identity verification platform providers;
• Payment gateway and transaction processing services;
• Fraud detection and AML screening technology providers;
• Platform hosting and cloud infrastructure providers;
• Email and live chat communication service providers;
• Analytics providers using pseudonymised or aggregated data.

All service providers are contractually prohibited from using your data for purposes beyond those we have specified.

7.2 Regulatory and Legal Disclosure

We may disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units or courts where we are legally required to do so. We will not voluntarily disclose data to authorities beyond what is legally mandated.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of TZ777 or its assets, personal data held by TZ777 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

7.4 Payment Context — Pakistani Providers

TZ777 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

Following the expiry of applicable retention periods, data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data. To exercise any of these rights, contact us using the details in Section 16. We will respond within 30 calendar days of receiving a verifiable request.

TZ777 uses cookies and similar tracking technologies (collectively "cookies") on the Platform. Cookies are small text files stored on your device that enable the Platform to recognise your browser session and provide a consistent experience.

10.1 Types of Cookies Used

10.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings. Note that disabling functional cookies may affect your experience on the Platform — for example, preference settings may not be saved between sessions.

TZ777 does not use third-party advertising cookies or tracking pixels for commercial advertising campaigns on the Platform. Any analytics cookies used operate on pseudonymised data and do not allow individual User re-identification by the analytics provider.

TZ777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration and destruction. Our security practices include:

• Transport Layer Security (TLS): All connections between your device and TZ777 servers are encrypted using TLS 1.2 or higher. This protects your login credentials, personal data and payment information in transit;
• Data Encryption at Rest: Sensitive personal data — including identity documents and payment records — is stored with appropriate encryption controls;
• Access Controls: Access to personal data systems is restricted to staff who require it for their specific role. Access rights are reviewed regularly and revoked promptly when no longer needed;
• Security Monitoring: Platform activity is monitored for anomalous patterns that may indicate unauthorised access or fraud. Suspicious activity triggers automated alerts and human review;
• Third-Party Security Standards: Third-party data processors are contractually required to maintain security standards equivalent to those applied by TZ777;
• Incident Response: TZ777 maintains an incident response procedure for data breaches. Where a breach is likely to result in significant risk to affected individuals, we will notify as required by applicable law.

Despite these measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. Do not share your password with anyone — TZ777 staff will never ask for it.

As an online platform serving Pakistani users but operated from a separate licensing jurisdiction, TZ777 necessarily involves the international transfer of personal data. Your personal data may be processed in countries outside Pakistan — including the jurisdiction in which TZ777 is licensed and incorporated, and the locations of our third-party service providers.

Where personal data is transferred internationally, TZ777 takes steps to ensure that appropriate safeguards are in place to protect your data. These safeguards may include:

• Contractual data processing agreements with appropriate data protection clauses;
• Transfers to countries that maintain an adequate level of data protection in TZ777's assessment;
• Standard contractual clauses or equivalent mechanisms where applicable under the licensing jurisdiction's data protection framework.

By using the Platform, you acknowledge that your data may be transferred, stored and processed in jurisdictions outside Pakistan, and you consent to such transfers as necessary to provide the Platform services.

TZ777 is strictly an adults-only platform. The Platform is not directed at or intended for individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction — and we do not knowingly collect personal data from anyone below the applicable minimum age.

If you are a parent or guardian and believe that your minor child has registered an account with TZ777, please contact us immediately using the details in Section 16. We will investigate and take appropriate action.

TZ777 recognises that Pakistani users have specific contextual concerns around data privacy, financial data and identity documentation. This section provides additional context specific to the Pakistani user experience.

14.1 CNIC Data Handling

Your Computerised National Identity Card (CNIC) number and document image are collected solely for the purpose of KYC identity and age verification. This data is processed by our KYC vendor under a data processing agreement and is not used for any purpose beyond identity verification and AML compliance. CNIC data is not shared with third-party advertisers or data brokers under any circumstances.

14.2 Payment Data — Pakistani Context

Payment transaction data associated with Pakistani payment methods — including mobile wallet transactions where Easypaisa, JazzCash or Raast are available as deposit methods — is processed solely for the purpose of processing the transaction, verifying payment method ownership and maintaining financial compliance records. Payment provider names referenced on this platform are contextual references only; TZ777 has no general data sharing relationship with these providers beyond what is necessary to process a specific transaction.

14.3 No Sale of Pakistani User Data

TZ777 does not sell, lease or commercially transfer the personal data of Pakistani users — or any other users — to third-party data brokers, advertising networks or commercial profiling organisations. This is an absolute commitment, not qualified by any commercial arrangement.

14.4 Applicable Law Acknowledgement

Pakistan does not currently have a comprehensive general data protection statute equivalent to the GDPR. TZ777 is operated in compliance with the data protection requirements of its licensing jurisdiction. Pakistani users should be aware that domestic legal recourse for data protection matters may depend on applicable Pakistani law as it develops, including any applicable provisions of the Pakistan Electronic Crimes Act 2016 (PECA) and related instruments.

TZ777 reserves the right to amend this Privacy Policy at any time. Where changes materially affect how we collect or use your personal data, we will provide at least 14 calendar days' notice via a Platform notification or email to your registered address before the amended Policy takes effect.

Minor amendments — such as clarifications of existing practices, corrections of typographical errors or updates to contact information — may be made without advance notice. The "Effective Date" at the top of this Policy reflects the date of the most recent substantive revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. The current version is always available at https://tz777.cam/privacy-policy.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related complaint, please contact TZ777 using the following channels. All data rights requests must be submitted in writing to allow us to verify your identity before providing information or taking action on your account.