z22 Privacy Policy –
How We Handle Your Data

z22 is an online betting and gaming platform operating at z22.fun, offering sports betting, cricket and PSL markets, live casino, slot games, esports betting, and related entertainment products to players in Pakistan. For the purposes of this Privacy Policy, z22 is the data controller — meaning we determine how and why your personal data is collected and processed.

This Privacy Policy applies to all users of the z22 platform, including registered account holders, visitors to the website, and anyone who contacts our support team. By using z22, you acknowledge that you have read and understood this policy.

z22 collects personal data from you in three main ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party partners such as payment providers and identity verification services.

Information You Provide Directly

• Registration data – your full name, date of birth, email address, mobile number, and account credentials when you create a z22 account.
• Identity verification documents – copies of government-issued ID, proof of address, or similar documents requested during account verification.
• Payment information – your JazzCash or Easypaisa mobile number, bank account details, Raast ID, or card details when making a deposit or withdrawal. Full card numbers are never stored by z22; they are handled by our payment processor.
• Support communications – any messages, emails, or live chat conversations you have with the z22 support team, including the content of your queries.
• Responsible gaming preferences – deposit limits, session limits, and self-exclusion settings you configure in your account.

Information Collected Automatically

• Device and browser data – IP address, device type, operating system, browser version, and screen resolution.
• Usage data – pages visited, time spent on the platform, bet history, game activity, deposit and withdrawal history, and session timestamps.
• Cookies and similar technologies – session cookies, preference cookies, and analytics identifiers. Full details are in Section 6.
• Geolocation data – approximate location derived from your IP address, used to ensure the platform is being accessed appropriately.

Information from Third Parties

• Payment providers – transaction confirmations, wallet verification status, and fraud signals from JazzCash, Easypaisa, Raast, and card processing partners.
• Identity verification services – confirmation of identity document validity from third-party KYC providers used to complete account verification.
• Fraud prevention partners – risk signals and device fingerprint data used to identify suspicious account activity.

The table below summarises the main purposes for which z22 uses your personal data and the type of data involved in each case.

z22 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without a human review process being available. Our fraud detection systems flag accounts for human review rather than taking automated enforcement action independently.

z22 processes your personal data on one or more of the following legal grounds depending on the activity involved:

• Contract performance – processing your registration data, transactions, and bet history is necessary to provide the z22 service you have signed up for. Without this data, we cannot operate your account.
• Legal obligation – identity verification, age verification, and certain fraud-related data processing are carried out to meet obligations that apply to the operation of a platform of this nature.
• Legitimate interests – fraud prevention, security monitoring, platform analytics, and responsible gaming oversight are conducted on the basis of z22's legitimate interest in maintaining a secure, fair, and sustainable platform. These interests do not override your fundamental rights.
• Consent – marketing communications, optional personalisation features, and non-essential cookies are only used where you have given your explicit consent. You may withdraw consent at any time.

z22 does not sell your personal data. We share data only where it is necessary to provide the service or meet a legal requirement, and only with partners who are contractually bound to protect it.

Categories of Third Parties We Work With

• Payment processors – JazzCash, Easypaisa, Raast, bank transfer infrastructure providers, and card processors receive the minimum data required to complete your transaction. They operate under their own privacy frameworks and PKR processing standards.
• Identity verification providers – third-party KYC services receive your ID documents and personal details solely for the purpose of completing account verification checks.
• Fraud and security partners – device and behavioural data may be shared with fraud prevention services to protect the platform and all players from bad actors.
• Game studios and software providers – when you play a game provided by a third-party studio through z22, that studio's software receives your session identifier and game activity. They do not receive your financial or personal registration details.
• Analytics providers – aggregated, anonymised usage data may be shared with analytics platforms to help us understand platform performance and improve the user experience.
• Legal and regulatory authorities – z22 may be required to share data with law enforcement or regulatory bodies where we receive a lawful, formal request to do so.

z22 uses cookies and similar technologies to keep the platform working correctly, remember your preferences, and understand how players use the site. Here is a plain-English breakdown of what we use and why:

• Essential cookies – these are strictly necessary for the platform to function. They manage your login session, keep you authenticated while you navigate, and maintain your account state. You cannot opt out of essential cookies while using z22.
• Preference cookies – these remember settings you have chosen, such as your preferred language or display options, so you do not have to set them again each visit.
• Analytics cookies – these help z22 understand which features are popular, where players encounter issues, and how the platform can be improved. Analytics data is aggregated and does not identify you individually. These cookies require your consent and can be disabled.
• Marketing cookies – where you have consented to marketing, these cookies help ensure that promotional messages you see are relevant to your interests and are not shown repeatedly. These are fully optional and consent can be withdrawn at any time.

You can manage your cookie preferences through the z22 cookie settings panel, accessible from the footer of the platform, or through your browser settings. Note that disabling essential cookies will affect platform functionality including your ability to stay logged in.

z22 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable obligations. Our standard retention practices are as follows:

• Active account data – retained for the lifetime of your account plus a reasonable period after closure to handle any disputes, chargebacks, or audit requirements.
• Transaction and betting records – financial transaction records and betting history are retained for a minimum of five years from the date of the transaction to support audit and dispute resolution requirements.
• Identity verification documents – retained for the duration of your account relationship and for a defined period after account closure.
• Support communications – retained for up to three years from the date of the interaction, or longer if a live dispute or investigation is ongoing.
• Marketing consent records – retained for as long as necessary to demonstrate that consent was properly given and managed.
• Analytics data – aggregated and anonymised, retained indefinitely as it no longer constitutes personal data.

When data is no longer required under our retention schedule, it is securely deleted or anonymised so it can no longer be linked back to you.

You have meaningful rights over your personal data. z22 is committed to making it easy for you to exercise them. Here is what you can ask for and how:

z22 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been registered by a minor, we will close the account immediately, return any eligible PKR balance, and delete the associated personal data.

If you believe a minor has registered on z22 using false information about their age, please contact our support team immediately with the relevant details. We take underage access to gambling platforms seriously and will act quickly on any such report.

Parents and guardians who are concerned about a young person accessing online betting platforms are encouraged to use device-level parental controls and filtering software to restrict access to such sites.

z22 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. Our key security practices include:

• Encryption in transit – all data transmitted between your browser or device and the z22 platform is encrypted using TLS. You will see the padlock icon and https in your browser address bar.
• Encryption at rest – sensitive data stored in z22's systems, including identity documents and financial records, is encrypted at rest using industry-standard methods.
• Access control – internal access to personal data is limited to staff with a legitimate need to access it as part of their role. Access is logged and regularly reviewed.
• Fraud detection – automated systems monitor account and transaction activity in real time for signs of fraudulent or suspicious behaviour, protecting both z22 and its players.
• Regular security reviews – z22 conducts ongoing reviews of its security practices and updates them in line with industry developments.

While z22 takes these precautions, no online platform can guarantee absolute security. You also have a role to play by keeping your login credentials confidential, using a strong password, and contacting support immediately if you suspect any unauthorised activity on your account.

z22 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable requirements, or improvements in our data practices. When we make material changes, we will notify active account holders via email or an in-platform notification before the changes take effect.

The "Last updated" date at the top of this page will always show when the most recent revision was made. We encourage you to review this policy periodically. Your continued use of z22 after an updated policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you are entitled to close your account and request deletion of your data.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how z22 has handled your personal information, please get in touch with our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly from your z22 account dashboard, available around the clock
• Response time: Privacy-related requests are acknowledged within 5 business days and fully resolved within 30 days in the majority of cases

We will do our best to resolve your concern directly and promptly. If you feel your privacy concern has not been handled to your satisfaction after contacting z22, you may have the right to escalate to a relevant data protection body or seek independent advice.

For questions specifically about responsible gaming tools, deposit limits, or self-exclusion, please also visit our Responsible Gaming page, which contains full details of the controls available to you as a z22 player.