zc666 Privacy
Policy

zc666 ("the Company", "We", "Us", "Our") operates the online gaming and sports betting platform accessible at zc666.club (the "Platform"). zc666 is licensed and regulated under an international gaming licence, and this Privacy Policy applies to all users, registered members, and visitors of the zc666 Platform, including Pakistani members accessing the site from Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan.

For the purposes of this Privacy Policy, zc666 acts as the data controller in respect of all personal data collected through the Platform. This means we are responsible for determining the purposes and means by which your personal data is processed, and we are accountable for that processing to you and to applicable regulatory authorities.

zc666 collects personal data from you through several channels: directly when you register an account or interact with the Platform; automatically as you browse and use the Platform; and from third parties such as payment processors and KYC verification providers. The categories of data we collect are as follows:

zc666 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification, health data, or data concerning sexual orientation — unless explicitly required by applicable law or regulation.

zc666 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or notifying you via an update to this Privacy Policy:

• Account Registration & Management: To create, maintain, and administer your zc666 member account, verify your identity during the KYC process, and manage your account settings and preferences.
• Service Delivery: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods; to facilitate gameplay on casino games and the sportsbook; and to settle bets on cricket, PSL, and other markets.
• Regulatory Compliance: To comply with our obligations under our international gaming licence, including anti-money laundering (AML) checks, counter-terrorism financing (CTF) screening, and age verification requirements.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and prohibited conduct as defined in the zc666 Terms and Conditions.
• Customer Support: To respond to support queries submitted via live chat or email, resolve disputes, and maintain records of support interactions for quality assurance.
• Responsible Gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour and to proactively apply responsible gaming interventions including deposit limit reviews, reality check notifications, and self-exclusion processing.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the Platform's features, performance, user experience, and game selection for our Pakistani members.
• Marketing Communications: To send you promotional emails and in-platform notifications about bonuses, new games, and special events — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time.
• Legal Obligations: To comply with any legal obligation, court order, or lawful request from a regulatory authority or law enforcement body.

zc666 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing described in Section 3 is necessary for the performance of the contract between you and zc666 — specifically the Terms and Conditions you agreed to upon registration. Without this processing, zc666 cannot provide its services to you.
• Legal Obligation: Certain processing activities — including identity verification, AML checks, and regulatory reporting — are required by the legal and regulatory obligations applicable to zc666 as a licensed gaming operator.
• Legitimate Interests: zc666 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, and analytics for service improvement. Where legitimate interests are relied upon, we have balanced those interests against your rights and determined that our interests do not override your fundamental privacy rights.
• Consent: Where processing is based on consent — such as marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zc666 uses cookies and similar tracking technologies on the Platform to support essential site functions, analyse usage patterns, and — where you have consented — deliver personalised content. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session authentication, account security, and the shopping cart in the Cashier. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: These cookies remember your preferences — such as language settings and game lobby display preferences — to provide a more personalised experience. They are set based on your actions on the Platform.
• Analytical Cookies: These cookies collect anonymised data about how members use the Platform — which pages are visited, how long sessions last, and which features are most used. This data helps zc666 improve the Platform. These cookies are only set with your consent.
• Marketing Cookies: These cookies are used to track the effectiveness of our promotional campaigns and — where consent has been given — to show you relevant promotions based on your interests. You may withdraw consent for marketing cookies at any time via the cookie preference centre.

You can manage your cookie preferences at any time via the cookie settings panel accessible in the Platform footer. Withdrawing consent for non-essential cookies will not affect your ability to use the core features of the zc666 Platform.

zc666 does not sell, rent, or trade your personal data. We share your personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your deposit and withdrawal transactions. These providers are bound by their own privacy obligations and are not permitted to use your data for any other purpose.
• KYC & AML Providers: Identity and document verification is carried out by authorised third-party KYC and AML compliance providers. Your CNIC and proof of address documents are shared with these providers solely for verification purposes under strict data processing agreements.
• Game Software Providers: When you play casino games or use the sportsbook, limited technical data (such as your session token and bet data) is transmitted to the relevant game software provider to facilitate gameplay. Game providers do not receive your name, CNIC, or contact details.
• Regulatory Authorities: Where required by our international gaming licence or by applicable law, zc666 may be required to disclose personal data to regulatory authorities, financial intelligence units, or law enforcement agencies. Such disclosures are made only to the extent required by law.
• Customer Support Platform: Your communications data (live chat transcripts and support emails) may be processed by a third-party customer support platform. All such platforms operate under data processing agreements with zc666 and are prohibited from using your data for any purpose other than delivering support services.

All third parties with whom zc666 shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared. zc666 does not transfer personal data to countries that do not maintain adequate data protection standards without implementing appropriate safeguards.

zc666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with zc666's data destruction procedures. Anonymised data that cannot be linked back to any individual may be retained for longer periods for statistical analysis and platform improvement purposes.

zc666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your browser and the zc666 Platform is encrypted using TLS 1.3 with 256-bit SSL certificates. This protects your login credentials, financial data, and personal information from interception.
• Encryption at Rest: All personally identifiable data stored in zc666's databases is encrypted at rest using AES-256 encryption. KYC documents are stored in an isolated, access-controlled document vault.
• Access Controls: Access to personal data within zc666's systems is restricted on a strict need-to-know basis. Role-based access controls (RBAC) are enforced across all internal systems, and all access is logged and audited.
• Two-Factor Authentication: zc666 strongly recommends that all members enable two-factor authentication (2FA) on their accounts. Internal staff accounts with access to member data are required to use 2FA without exception.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and security audits. Identified vulnerabilities are triaged and remediated in accordance with zc666's security response policy.
• Data Breach Response: zc666 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, zc666 will notify you and the relevant regulatory authority within the timeframes required by applicable law.

As a zc666 member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all verifiable requests within 30 days of receipt:

• Right of Access: You have the right to request a copy of all personal data that zc666 holds about you, along with information about how it is used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as contact information, you can update these directly in your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances. Please note that this right is subject to override where zc666 is required to retain data to comply with legal and regulatory obligations — particularly AML and KYC retention requirements.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that zc666 restricts the processing of your personal data — for example, while a dispute about its accuracy is resolved.
• Right to Data Portability: Where data is processed on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. You may also withdraw your marketing consent at any time via the account settings panel or by contacting support.

zc666 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply, or zc666 may decline to act on the request — with written reasons provided.

zc666 operates a strict 21+ age policy. The Platform is not directed at, and should not be accessed by, any person under 21 years of age. zc666 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory component of the zc666 KYC process. All members are required to provide a valid Pakistani CNIC — which contains date of birth — as part of identity verification. Any account found to be held by a person under 21 years of age will be closed immediately and any balance will be handled in accordance with applicable regulatory guidance.

As an internationally licensed gaming operator, zc666 may transfer your personal data to, and store it in, countries outside Pakistan. Where such transfers occur, zc666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in jurisdictions with robust data protection frameworks.

Safeguards used for international transfers include:

• Data processing agreements incorporating standard contractual clauses with all third-party processors located outside Pakistan.
• Transfer impact assessments conducted prior to any new international data transfer arrangement.
• Preference for processors located in jurisdictions that maintain adequacy decisions or equivalent data protection standards.

If you would like further information about the specific safeguards applied to any particular international transfer of your data, please contact our support team.

zc666 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date and version number at the top of this document are updated with each revision.

Where a material change is made to this Privacy Policy — meaning a change that significantly affects how we process your personal data or your rights in relation to it — zc666 will notify registered members via email and/or an in-platform notification at least 14 days before the change takes effect. For non-material changes, the updated Policy will be published on this page and the effective date amended accordingly.

Your continued use of the zc666 Platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the updated Policy, you should cease using the Platform and request account closure by contacting our support team.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way zc666 handles your personal data, please get in touch with us using the following channels:

• Live Chat: Available on all pages of the zc666 Platform, 24 hours a day, 7 days a week, on Pakistan Standard Time (PKT — UTC+5).
• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related queries within 5 business days and to all formal data rights requests within 30 days of receipt.

If you are not satisfied with the way zc666 has handled your privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority applicable in your jurisdiction, or to the dispute resolution body designated under our international gaming licence.

zc666 takes all privacy complaints seriously. Every formal complaint is logged, investigated, and responded to in writing. We are committed to resolving privacy concerns fairly and transparently.