Privacy Policy – zc222 Data Protection & Player Rights

This Privacy Policy applies to zc222, the online gaming and sports betting platform available at zc222.ws. When this policy refers to "zc222", "we", "us", or "our", it means the operating entity behind the zc222 brand that holds the platform's gaming licence and acts as the data controller for all personal information collected through the platform.

As the data controller, zc222 determines the purposes and means by which your personal data is processed. This policy describes those purposes in full and explains the legal basis under which processing takes place. If you have questions about how your data is being handled, our contact details are provided in Section 13.

zc222 collects personal information in three ways: directly from you when you register and use the platform, automatically as you interact with our services, and from third-party verification services we use to confirm your identity. Below is a full breakdown.

zc222 does not collect sensitive personal data such as health information, religious beliefs, or political opinions unless specifically required by law. We do not collect biometric data except where photo ID verification mandates a comparison of a document photograph with a selfie, which is processed through our identity verification partner and not stored by zc222 after the check is complete.

Every piece of data zc222 collects has a defined purpose. We do not collect information speculatively or for purposes that haven't been identified in advance. Here is how we use each category:

• Account Management: Your identity and contact data allow us to create and maintain your account, verify your identity, communicate important account information, and process your transactions accurately. Without this data, it is not possible to operate a zc222 account.
• Transaction Processing: Financial data enables us to process your deposits and withdrawals, match payments to your account, and resolve any transaction disputes that arise. zc222 does not store full card numbers — payment processing for card transactions is handled by PCI-DSS compliant third-party processors.
• Legal Compliance: KYC and AML regulations require zc222 to verify who our players are and monitor for unusual financial activity. Identity data, financial data, and gaming activity are all used to fulfil these mandatory obligations, regardless of a player's preferences.
• Responsible Gaming: Gaming activity data — session lengths, loss patterns, bet frequency — is monitored by zc222's responsible gaming team to identify players who may be showing signs of problem gambling. This monitoring is in players' interests and forms part of our licensing obligations.
• Platform Improvement: Technical and usage data help us understand how zc222 is being used, identify bugs, improve the user interface, and make data-driven decisions about which features to develop next.
• Personalised Experience: Usage and gaming activity data allow zc222 to show you relevant promotions, suggest games you're likely to enjoy, and tailor your home screen to your habits. You can opt out of personalisation from your account settings.
• Marketing Communications: If you have opted in, contact data is used to send you promotional emails and SMS messages about zc222 offers and events. Opting out is available at any time and takes effect within 24 hours.
• Fraud Prevention and Security: Technical data — particularly IP addresses and device fingerprints — is used to detect suspicious login attempts, identify duplicate accounts, and protect the platform from automated abuse.

zc222 processes personal data only where there is a valid legal basis to do so. The applicable bases vary depending on the type of processing involved:

• Contract Performance: Processing your identity, contact, and financial data to operate your account and execute transactions is necessary for us to fulfil our contractual obligations to you. Without this processing, we cannot provide the service.
• Legal Obligation: KYC verification, AML monitoring, data retention for regulatory purposes, and cooperation with lawful authority requests are all forms of processing we are legally required to carry out. Player consent is not required for these, nor can it override them.
• Legitimate Interests: Fraud detection, security monitoring, platform improvement, and responsible gaming monitoring are carried out on the basis of zc222's legitimate interests. In each case, we have assessed that these interests do not override the privacy rights of our players.
• Consent: Marketing communications and non-essential cookies are processed on the basis of your consent, which can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

zc222 does not sell your personal data to third parties under any circumstances. However, to operate the platform, we do share data with a limited set of trusted third-party service providers. These providers are contractually bound to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards.

The categories of third parties we share data with include:

• Identity Verification Providers: When you submit KYC documents, they are processed by a third-party verification partner who checks the documents against official databases and confirms authenticity. zc222 receives the outcome (pass/fail) and the verification record, not a copy of your document data in a separate system.
• Payment Processors: Transaction data is shared with the payment processing providers that handle Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions, solely to process deposits and withdrawals on your behalf.
• Game Software Providers: Certain game titles in the zc222 lobby are operated by licensed third-party software providers. When you play these games, limited session data may be shared with the provider to operate the game and record results. These providers are all licensed gaming entities.
• Analytics and Security Services: Anonymised or pseudonymised technical data is shared with analytics and security platform providers to support platform improvement and fraud detection. These providers do not receive personally identifiable information.
• Regulatory and Legal Authorities: Where zc222 is required by law, court order, or the instruction of our licensing authority to disclose player data, we will do so. We do not have discretion to refuse lawful authority requests.

zc222 uses cookies and similar tracking technologies on its website and mobile application to make the platform work correctly, understand how it's being used, and deliver a personalised experience where you have consented to this.

The types of cookies used on zc222 are:

• Essential Cookies: Required for the platform to function. These include cookies that keep you logged in between pages, maintain your session, and store your language and currency preferences. Essential cookies cannot be disabled without breaking the platform's core functionality.
• Analytics Cookies: These track which pages you visit, how long you spend on each, and which features you use, helping us understand how zc222 is performing and where improvements can be made. The data collected is aggregated and not linked to your personal identity. Analytics cookies are only placed with your consent.
• Personalisation Cookies: Used to remember your game preferences, recently played titles, and deposit habits so we can show you more relevant content and promotions. Consent-based and can be disabled from your account settings.
• Security Cookies: Used to detect suspicious login attempts, prevent cross-site request forgery, and protect the platform from automated bots. These are essential and cannot be disabled.

You can manage cookie preferences from the cookie consent banner displayed on your first visit to zc222, or from your browser settings. Please note that disabling non-essential cookies may affect the quality of your experience on the platform.

zc222 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or loss.

• All data transmitted between your device and zc222's servers is encrypted using 256-bit TLS/SSL. This applies to account login, transaction submission, and any form submission that carries personal data.
• Player passwords are stored as one-way hashed values. zc222 staff cannot see your password — if you forget it, the account recovery process generates a new one rather than retrieving the existing one.
• Access to player data within zc222's systems is role-based and strictly limited. Only staff members with a specific operational need for access to particular data categories can view them, and all access is logged.
• Financial transaction data is handled within PCI-DSS compliant environments for card payments, and within the security frameworks of the relevant mobile wallet providers for Easypaisa, JazzCash, NayaPay, and SadaPay transactions.
• zc222 conducts periodic security audits and penetration tests on its platform infrastructure. Identified vulnerabilities are addressed under a defined remediation timeline based on severity.

zc222 does not hold your personal data longer than is necessary for the purpose for which it was collected, except where legal or regulatory obligations require longer retention periods. Below is a summary of our principal retention periods:

• Active Account Data: Retained for the full duration of your registered account on zc222, plus a minimum of five years following account closure. This retention is required by our AML and KYC obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements applicable to licensed gaming operators.
• KYC Verification Documents: Retained for the same five-year minimum period. The original document images are stored in an access-controlled environment and reviewed only in the context of account or compliance queries.
• Support Communications: Chat transcripts and email threads are retained for three years from the date of each interaction, to allow reference in the event of a later dispute.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to maintain a compliance audit trail. This does not mean we continue sending you communications after you have opted out — it means we retain the evidence that you opted out and when.
• Analytics Data: Aggregated, anonymised analytics data has no defined retention limit as it no longer constitutes personal data. Session-level analytics tied to pseudonymous identifiers are retained for 24 months.

At the end of applicable retention periods, data is securely deleted or anonymised such that it can no longer be linked to a specific individual.

As a zc222 player, you have meaningful rights over the personal data we hold about you. These rights are not procedural technicalities — we take them seriously and respond to valid requests promptly.

To exercise any of these rights, contact zc222 support at support@zc222.ws with "Privacy Rights Request" in the subject line. Please include your registered mobile number or username to help us locate your account quickly. We will respond within 30 days and will not charge a fee for reasonable requests.

zc222 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If during the verification process we determine that a registered player is under 18, we will immediately suspend the account, void any transactions made, and delete all data associated with the account in accordance with our minor protection procedures.

If you have reason to believe that a minor has registered on zc222 using false age information, please contact us immediately at support@zc222.ws. We will investigate the report promptly and take the appropriate action.

Parents and guardians who are concerned about their children's exposure to online gaming content are encouraged to use parental control software alongside the responsible gaming measures available on zc222's platform.

The zc222 platform does not contain outbound links to external third-party websites. However, in the unlikely event that any linked resource or embedded content from a licensed third-party game provider leads to an external destination, zc222 is not responsible for the privacy practices of that external site or service. Their own privacy policy will govern how they handle any data you submit to them.

We recommend reviewing the privacy policy of any third-party service you interact with independently of zc222, regardless of how you arrived there.

zc222 reviews this Privacy Policy regularly and will update it when our data practices change, when relevant law changes, or when our licensing authority requires policy amendments. The "Last Updated" date at the top of this page always reflects the most recent version.

Where changes are material — meaning they meaningfully affect how we handle player data or alter player rights — zc222 will notify registered players by email or in-platform notification before the changes take effect. For minor revisions, such as clarifications or formatting updates that do not alter the substance of any section, notification is not guaranteed.

Continued use of zc222 after a policy update is published constitutes acceptance of the revised policy. If you do not accept the changes, please contact support to discuss account closure and data deletion options.

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to raise a complaint about how zc222 has handled your personal information, please contact us through the following channels:

• Live Chat: Available inside your zc222 account, 24/7. For urgent data security concerns — such as a suspected account compromise — live chat is the fastest way to reach us.
• Email: support@zc222.ws — please use "Privacy Policy Query" or "Data Rights Request" as your subject line so your message is routed to the right team immediately.

zc222 aims to respond to all privacy-related queries within 72 hours for routine questions and within 30 days for formal data rights requests. If you are not satisfied with our response to a complaint, you have the right to escalate to the data protection supervisory authority in the jurisdiction applicable to your case.