z444 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy is published by z444 ("z444," "we," "us," or "our"), an internationally licensed online gaming operator serving Pakistani players. z444 acts as the data controller in respect of all personal data collected from individuals who access the z444 Platform at z444.biz, including all casino games, sports betting markets, account features, and customer support services.

This Policy applies to all personal data collected from registered account holders, visitors to the z444 website, individuals who contact z444 customer support, and any other person whose data is processed by z444 in connection with the operation of the Platform. By using the z444 Platform or by registering a z444 account, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

This Policy should be read together with z444's Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and another z444 document, this Privacy Policy shall govern matters relating to the collection, use, and protection of personal data.

z444 collects personal data only to the extent necessary for the legitimate operation of the Platform, compliance with regulatory requirements under our international gaming licence, and the provision of a safe and functional gaming experience for Pakistani players. The following table summarises the categories of personal data collected by z444:

2.1 Data You Are Not Required to Provide

z444 does not require you to provide sensitive personal data beyond what is stated above. You are not required to share information about your religious beliefs, political views, medical history, or ethnicity. If any such information is incidentally included in communications you send to z444 support, it will not be processed or stored separately from those communications.

2.2 Data Provided by Third Parties

In limited circumstances, z444 may receive personal data about you from third parties, including: payment service providers such as JazzCash and EasyPaisa (for transaction verification purposes), identity verification service providers used during KYC processing, and fraud prevention services that provide risk signals associated with specific account identifiers. All third-party data receipt is subject to appropriate contractual safeguards.

z444 processes personal data for the following specific purposes. We do not use your personal data for any purpose not listed here without first obtaining your informed consent or establishing a valid alternative legal basis for the processing.

• Account Registration and Management: To create, verify, and maintain your z444 account, including identity verification, password security, and account preference settings.
• KYC and Age Verification: To comply with z444's international gaming licence requirements, including mandatory verification that all account holders are 21 years of age or older and that deposited funds originate from legitimate personal sources.
• Payment Processing: To process deposits and withdrawals in PKR through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels, and to maintain accurate transaction records for financial reconciliation and dispute resolution purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, bonus abuse, and other prohibited conduct on the Platform.
• Customer Support: To respond to support requests, complaints, account queries, and any other communications submitted by you to the z444 support team via live chat or email.
• Responsible Gaming: To monitor gaming patterns for signs of potentially problematic behaviour and to deliver responsible gaming tools, limit notifications, and self-exclusion services to players who request them or who appear to need them.
• Legal and Regulatory Compliance: To meet obligations imposed by z444's international gaming licence, anti-money laundering requirements, record-keeping obligations, and any other applicable regulatory requirements.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the z444 Platform, identifying technical issues, and enhancing the player experience for Pakistani users.
• Marketing Communications (opt-in only): To send promotional emails, SMS notifications, and bonus offers to players who have explicitly opted in to receive marketing communications from z444. You may withdraw consent at any time.

z444 processes personal data in accordance with recognised international data protection principles. For each processing activity, we rely on one of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between z444 and you, including account management, payment processing, game access, and customer support.
• Legal Obligation: Processing required to comply with z444's regulatory obligations, including KYC identity verification, AML record-keeping, age verification, and reporting obligations to our gaming licence authority.
• Legitimate Interests: Processing carried out on the basis of z444's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, which is conducted only on the basis of your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

z444 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the Platform and meeting our regulatory obligations, z444 shares personal data with the following categories of third parties in specific, controlled circumstances:

5.1 Payment Service Providers

z444 shares necessary transaction data with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing services — solely for the purpose of processing deposits and withdrawals in PKR. These providers receive only the data necessary to facilitate the specific transaction and are bound by their own privacy and security obligations.

5.2 Identity Verification and KYC Services

To fulfil our gaming licence KYC obligations, z444 may share identity documentation — including CNIC images and proof of address — with accredited third-party identity verification service providers. These providers process your documents solely for the purpose of identity verification and are contractually prohibited from using the data for any other purpose.

5.3 Gaming Software Providers

Game providers whose titles appear in the z444 library — such as Evolution Gaming, Pragmatic Play, NetEnt, and others — may receive technical data including IP addresses and session identifiers for the purpose of game delivery, fair play monitoring, and technical troubleshooting. These providers do not receive personal identity data.

5.4 Regulatory and Law Enforcement Authorities

z444 may be required to disclose personal data to gaming regulatory authorities, anti-money laundering investigation bodies, and law enforcement agencies in circumstances where disclosure is required by applicable law, a court order, or a formal regulatory demand. In such cases, z444 discloses only the specific data requested and informs you of the disclosure where permitted by law to do so.

5.5 Fraud Prevention and Security Services

z444 uses third-party fraud detection and security services that may process technical data — including IP addresses, device identifiers, and behavioural patterns — for the purpose of identifying and preventing fraudulent activity on the Platform. These services operate under strict data processing agreements with z444.

z444 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve the user experience, and analyse Platform usage. A cookie is a small text file placed on your device by a website you visit. The z444 Platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, account authentication, security features, and maintaining your login state. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as your preferred language, display settings, and game lobby filters — to provide a more personalised experience across sessions.
• Analytics Cookies: Allow z444 to understand how the Platform is being used, which pages and features are most visited, and where technical errors may occur. Analytics data is processed in aggregate and anonymised form.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats. These cookies form part of z444's active fraud detection infrastructure.

You can manage or disable non-essential cookies through your browser settings. However, disabling strictly necessary cookies will impair your ability to use core z444 account features, including logging in. z444 does not use third-party advertising cookies or track your browsing activity on external websites.

z444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply to key categories of personal data:

Upon expiry of the applicable retention period, personal data is permanently and securely deleted from z444's systems using methods that prevent reconstruction or recovery of the deleted data. Where data has been provided to third parties, z444 instructs those parties to apply equivalent deletion procedures.

z444 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security architecture includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and z444's servers is encrypted using TLS 1.3 — the same encryption standard used by international banks and financial institutions.
• AES-256 Data Encryption at Rest: Personal data stored in z444's databases is encrypted using AES-256 encryption, ensuring that even in the event of unauthorised database access, the data remains unreadable without the applicable decryption keys.
• Access Controls: Access to personal data within z444's internal systems is restricted on a strict need-to-know basis. Employees and contractors are only granted access to data categories required for their specific role and responsibilities.
• Two-Factor Authentication: z444 offers SMS-based two-factor authentication to all account holders as an additional layer of login security. We recommend that all Pakistani players enable 2FA via their account settings.
• Regular Security Audits: z444's platform infrastructure and data security practices are subject to regular independent security assessments and penetration testing as part of our gaming licence compliance obligations.
• Data Breach Response Protocol: z444 maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights, z444 will notify affected account holders and relevant authorities within the timeframes required by our regulatory obligations.

As a z444 account holder, you hold the following rights in respect of your personal data. These rights are genuine and exercisable — not simply listed for compliance purposes. To exercise any of these rights, contact the z444 support team via live chat or email at [email protected].

• Right of Access: You have the right to request a copy of all personal data that z444 holds about you. z444 will provide this information within a reasonable timeframe following verification of your identity.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that z444 holds. Where personal data affects your account functionality, corrections will be applied promptly following verification.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent for marketing processing. Note that z444 may be unable to delete data where retention is required by regulatory obligations.
• Right to Restrict Processing: You have the right to request that z444 restrict the processing of your personal data in specific circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to z444 in a structured, commonly used, machine-readable format, and to have this data transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where z444 relies on legitimate interests as the legal basis for processing. z444 will assess your objection and cease the relevant processing unless compelling legitimate grounds exist to continue.
• Right to Withdraw Marketing Consent: You may withdraw your consent to receive marketing communications from z444 at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

z444 is an adults-only gaming platform. Access to the Platform is strictly prohibited for individuals under 21 years of age. z444 does not knowingly collect personal data from individuals under 21 years of age. If z444 discovers, through KYC verification or any other means, that an account holder is under 21, the account will be immediately suspended, any deposited funds returned, and all associated personal data deleted, except where retention is required for regulatory reporting purposes.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has attempted to create a z444 account, please contact z444 support immediately via live chat or email. z444 will investigate the matter promptly and take appropriate action, including permanent account closure and data deletion.

z444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulatory requirements, or improvements to the Platform. Material changes to this Policy will be communicated to registered account holders by email notification to the registered email address and by a prominent notice on the z444 website, prior to the changes taking effect.

Your continued use of the z444 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how z444 protects your personal data. The "Last Revised" date at the top of this document indicates when the Policy was most recently updated.

If you have objections to any changes made to this Privacy Policy, you have the right to close your z444 account and cease using the Platform. Account closure requests can be submitted via the z444 live chat support team at any time.

If you have any questions, concerns, or requests regarding this Privacy Policy, the personal data z444 holds about you, or the exercise of any of your data rights as set out in Section 9, please contact the z444 support team using any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the z444 Platform. Urdu and English-speaking agents are available at all times. Average response time is under 5 minutes.
• Email: Written privacy requests and data subject rights requests can be submitted to [email protected]. z444 will acknowledge receipt of your request within 48 hours and provide a substantive response within a reasonable timeframe.

When submitting a data access, rectification, or deletion request, please include your registered email address and sufficient information to allow z444 to verify your identity before processing the request. This verification step is required to protect the security of your personal data and to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.