Privacy Policy — ZC333

ZC333 ("ZC333", "we", "us", "our") operates the online betting and gaming platform accessible at zc333.cam (the "Platform"). This Privacy Policy ("Policy") describes how ZC333 collects, uses, processes, stores, shares and protects personal data relating to individuals who access or use the Platform ("you", "User").

ZC333 is committed to handling personal data responsibly and in accordance with the data protection principles applicable under the licensing jurisdiction governing Platform operations. This Policy is designed to give you clear, transparent information about our data practices so that you can make informed decisions about using the Platform.

By accessing the Platform, registering an account or otherwise using ZC333's services, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the ZC333 Terms & Conditions and Responsible Gambling Policy, which together govern the relationship between you and ZC333.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, date of birth, payment details and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means ZC333, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of ZC333 under a contractual arrangement.
• "Sensitive Data" means a subset of Personal Data requiring heightened protection, such as identity document numbers, financial data and verification selfies submitted during KYC.
• "Cookies" means small text files placed on your device by the Platform to collect and store information about your interactions.
• "KYC" means Know Your Customer — the identity and age verification process mandated by the operator's licensing jurisdiction.
• "Retention Period" means the period during which ZC333 stores Personal Data before it is securely deleted or anonymised.

ZC333 collects Personal Data in several categories depending on how you interact with the Platform. The table below sets out the main data categories and the context in which they are collected.

ZC333 does not deliberately collect special category data (such as health information, political opinions or religious beliefs) from Users. If such data is incidentally included in a support communication or submitted document, it will not be processed beyond what is strictly necessary to handle the specific query.

ZC333 collects Personal Data through the following channels:

4.1 Directly From You

• When you complete the account registration form;
• When you submit documents through the KYC verification portal;
• When you make a deposit or withdrawal request through the cashier;
• When you contact our customer support team via live chat or email;
• When you respond to a survey, promotion or feedback request.

4.2 Automatically

• Technical Data and Usage Data are collected automatically through server logs, cookies, pixel tags and similar tracking technologies when you access or use the Platform;
• Device and network information is collected to support fraud prevention, security monitoring and platform performance optimisation.

4.3 From Third Parties

• Identity verification data may be cross-referenced through third-party identity verification service providers as part of the KYC process;
• Payment processors may share transaction status data with ZC333 to confirm deposit and withdrawal completion;
• Fraud prevention and AML screening partners may provide risk signals based on information you have provided.

ZC333 processes your Personal Data for the following purposes:

1. Account Management: To create, maintain and administer your ZC333 account, including managing your profile, balance and betting history;
2. Identity and Age Verification (KYC): To verify your identity, confirm you meet the minimum age requirement and comply with anti-money laundering (AML) obligations imposed by the operator's licensing jurisdiction;
3. Transaction Processing: To process deposits, withdrawals and any associated currency conversions, and to maintain accurate financial records;
4. Customer Support: To respond to your queries, complaints and support requests, and to maintain records of support interactions;
5. Security and Fraud Prevention: To detect, investigate and prevent fraud, money laundering, multi-accounting, bonus abuse and other prohibited conduct;
6. Responsible Gambling: To monitor betting and gaming patterns, identify signs of problem gambling behaviour and administer responsible gambling tools including deposit limits and self-exclusion;
7. Platform Improvement: To analyse how the Platform is used, identify technical issues and improve the user experience for Pakistani users and others;
8. Marketing Communications: To send you promotional offers, product updates and relevant information about ZC333 — only where you have opted in or where we have a legitimate interest to do so and you have not opted out;
9. Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities and enforce our Terms and Conditions.

ZC333 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing is necessary to perform our contract with you — providing the betting and gaming services you have registered for, processing your transactions and managing your account;
• Legal Obligation: Processing is required to comply with legal and regulatory obligations applicable to ZC333, including KYC and AML requirements under the operator's licensing jurisdiction;
• Legitimate Interests: Processing is necessary for ZC333's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by your rights and interests;
• Consent: For marketing communications and non-essential cookies, ZC333 processes your data on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ZC333 does not sell, rent or trade your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only to the extent necessary for the stated purposes:

7.1 Service Providers (Data Processors)

Third-party companies engaged by ZC333 to deliver specific functions under contractual data processing agreements. These include identity verification providers, payment processors, fraud detection services, cloud infrastructure providers and customer support platform operators. All processors are required to handle your data only on ZC333's documented instructions and to maintain appropriate security standards.

7.2 Payment Providers

When you make a deposit or request a withdrawal, transaction data is shared with the relevant payment provider to facilitate the transfer. References to payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual. ZC333 does not imply that any of these providers endorse online gambling or are affiliated with this Platform. Data shared with payment providers is governed by their own privacy policies.

7.3 Regulatory and Law Enforcement Authorities

ZC333 may be required to disclose Personal Data to regulatory bodies, licensing authorities, law enforcement agencies or courts where required by applicable law, a valid court order or a legitimate statutory request. Such disclosures will be limited to what is legally required.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving ZC333, Personal Data held on the Platform may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any changes to how their data will be handled where required by applicable law.

ZC333 and its service providers may process Personal Data in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where Personal Data is transferred internationally, ZC333 takes appropriate measures to ensure that such transfers are carried out in accordance with applicable data protection requirements, which may include the use of contractual safeguards, data transfer agreements or other recognised transfer mechanisms applicable under the governing licensing framework.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. If you have questions about specific transfer mechanisms in place for your data, please contact us using the details in Section 16.

ZC333 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting requirements. The applicable Retention Period varies by data type and purpose:

• Account Data: Retained for the duration of your active Account and for a defined period following Account closure, as required by the operator's licensing and AML obligations;
• KYC Verification Documents: Retained for the period mandated by applicable AML legislation in the licensing jurisdiction, typically a minimum of five years following the end of the business relationship;
• Transaction Records: Retained for a minimum period as required under applicable financial regulations in the licensing jurisdiction;
• Support Communications: Retained for a reasonable period necessary to resolve disputes, respond to complaints and maintain a record of customer service interactions;
• Technical and Usage Data: Retained for defined periods necessary for security, fraud prevention and platform analytics purposes, after which data is anonymised or deleted;
• Marketing Data: Retained until you withdraw consent or opt out of communications, whichever is earlier.

When Personal Data is no longer required and the applicable Retention Period has expired, ZC333 will securely delete or anonymise it so that it can no longer be attributed to you.

ZC333 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, improve user experience and collect analytics data. The following categories of cookies may be used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as account login, session management and security. These cookies cannot be disabled without preventing basic Platform functionality.

10.2 Performance and Analytics Cookies

These cookies collect anonymised information about how Users interact with the Platform — such as pages visited, time spent and error messages encountered. This data helps ZC333 improve Platform performance. You may opt out of analytics cookies through your browser settings.

10.3 Functionality Cookies

These cookies remember your preferences, such as language settings, preferred odds format and display options, to provide a more personalised experience.

10.4 Marketing and Targeting Cookies

Where you have consented, marketing cookies may be used to deliver relevant promotional content and to track the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time through your browser cookie settings or by contacting our support team.

Depending on the data protection laws applicable in the licensing jurisdiction, you may have some or all of the following rights in relation to your Personal Data held by ZC333:

To exercise any of the above rights, please contact ZC333 using the details provided in Section 16. ZC333 will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing your request. We will not charge a fee for reasonable access requests but may charge a reasonable administration fee for manifestly unfounded or excessive requests.

The ZC333 Platform is strictly for adults. It is not directed at, intended for or accessible to individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction. ZC333 does not knowingly collect, process or store Personal Data relating to individuals who are under the minimum age requirement.

Age verification is a mandatory step in the registration and KYC process. Where ZC333 becomes aware that Personal Data of an underage individual has been collected — whether through error, misrepresentation or otherwise — that data will be deleted promptly and the associated Account will be closed.

If you believe that a minor has registered on the Platform or that their data has been collected without appropriate authorisation, please contact ZC333 immediately using the details in Section 16.

ZC333 implements technical and organisational security measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including identity documents and financial data;
• Access controls limiting Personal Data access to authorised ZC333 personnel and service providers who need it to perform their functions;
• Regular security assessments and monitoring for vulnerabilities and anomalous access patterns;
• Two-factor authentication options for User accounts;
• Contractual requirements for all Data Processors to maintain appropriate security standards.

While ZC333 takes these measures seriously, no system is entirely immune from security risks. You are responsible for maintaining the security of your own Account credentials and for notifying ZC333 promptly if you suspect any unauthorised access to your Account.

The ZC333 Platform does not contain links to external third-party websites as a general practice. Where references are made to third-party payment providers, sports leagues or organisations — including references to Pakistan Super League (PSL), ICC tournaments or familiar Pakistani payment services such as Easypaisa, JazzCash and Raast — these are contextual references only.

ZC333 is not responsible for the privacy practices, data processing activities or content of any third-party services. Payment providers' handling of your data is governed by their own privacy policies. ZC333 encourages you to review the privacy policies of any third-party services you use in connection with your Platform activity.

ZC333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Platform features, legal obligations or applicable data protection standards.

Where amendments are material — for example, a significant change in how we use your Personal Data, a new category of data sharing, or a new legal basis for processing — ZC333 will take reasonable steps to notify registered Users. Notification may be provided through an in-platform notice, an email to the registered address, or a prominent notice on the homepage, depending on the significance of the change.

The "Last reviewed" date displayed at the top of this page indicates when this Policy was most recently updated. We encourage you to check this page periodically. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms, except where your explicit consent is required by applicable law.

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how ZC333 has handled your Personal Data, please contact us through the following channels:

ZC333 will acknowledge formal data subject requests within a reasonable period and aims to resolve them within the timeframe required under applicable law. Where a complaint cannot be resolved through our internal process, you may have the right to escalate the matter to the relevant supervisory authority in the licensing jurisdiction.