Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how zc66 ("zc66", "we", "us", "our", "the Operator", "the Platform") collects, uses, stores, shares, and protects personal information relating to individuals ("User", "you", "your") who access or use the zc66 website at https://zc66.cam and all associated services, mobile interfaces, and products (collectively, the "Services").

By creating an account, accessing the zc66 platform, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must not use the Services.

zc66 is committed to handling your personal data with transparency, integrity, and care. We recognise that players across Pakistan — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan, and Peshawar — trust us with sensitive information, and we take that responsibility seriously.

2 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

3 Data We Collect

zc66 collects personal data from you directly, automatically, and in some cases from third-party sources. The categories of personal data we may collect include:

3.1 Identity & Registration Data

• Full legal name, date of birth, and gender.
• Government-issued identification documents, such as a Pakistani CNIC, passport, or driving licence.
• Username and account credentials (password stored in encrypted form only).
• Selfie or biometric verification image where required for remote KYC processes.

3.2 Contact & Address Data

• Email address and phone number.
• Residential address and proof of address documentation.
• City and country of residence (e.g., Karachi, Lahore, Islamabad).

3.3 Financial Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references.
• Payment method identifiers (e.g., masked account or wallet numbers). Full payment credentials are never stored on our servers — they are handled by PCI-compliant payment processors.
• Source of funds documentation where required for AML compliance.

3.4 Usage & Behavioural Data

• Gaming history, betting patterns, session duration, and platform interactions.
• Login timestamps, IP address, and device fingerprint.
• Pages visited, features used, and in-platform navigation paths.
• Responsible gambling tool usage, including limit settings and self-exclusion requests.

3.5 Technical & Device Data

• Browser type and version, operating system, device model, and screen resolution.
• Geolocation data (country and region level) derived from IP address.
• Cookie identifiers and similar tracking technology data as described in Section 7.

3.6 Communications Data

• Customer support chat logs, email correspondence, and feedback submissions.
• Survey responses and voluntary information provided through platform interactions.

4 How We Process Your Data

zc66 processes your personal data for the following purposes:

5 Legal Basis for Processing

zc66 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and service delivery — is necessary to fulfil our obligations under the Terms & Conditions you agreed to upon registration.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and regulatory reporting — are required by applicable laws and our operating license conditions. We cannot waive these obligations.
• Legitimate Interests: We process data where we have a legitimate business interest, such as fraud detection, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on consent — most notably for direct marketing communications — you may withdraw that consent at any time by contacting us or using the unsubscribe function in any marketing message. Withdrawal of consent will not affect the lawfulness of processing conducted before the withdrawal.

6 Data Sharing & Disclosure

zc66 does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients, strictly for the purposes described:

• Payment Service Providers: To process deposits and withdrawals. Payment references including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are mentioned for contextual familiarity only and do not imply those providers endorse or support gambling services.
• KYC & Identity Verification Providers: Specialist third-party services that assist with identity document verification and age checks on our behalf, under strict data processing agreements.
• Game Content Providers: Third-party software studios that supply casino games and live dealer content. These providers may receive limited session data necessary to deliver their game content.
• Fraud Prevention & Security Services: Third-party providers that assist with detecting and preventing fraud, money laundering, and other illegal activities on the platform.
• Analytics Providers: Services used to analyse aggregated, anonymised usage data to improve the platform. No directly identifiable personal data is shared for analytics purposes where it can be avoided.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or our license conditions, we will disclose personal data to competent regulatory bodies, law enforcement agencies, or other authorities. We will only do so to the extent strictly required.
• Corporate Transactions: In the event of a merger, acquisition, or sale of business assets, personal data held by zc66 may be transferred to a successor entity. Users will be notified in advance of any such transfer where practicable.

7 Cookies & Tracking Technologies

zc66 uses cookies and similar technologies (including pixel tags and local storage) to operate the platform effectively and improve your experience. The categories of cookies we use are as follows:

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some platform features. Strictly necessary cookies cannot be turned off as they are required for basic platform operation.

8 Data Retention

zc66 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal, regulatory, or licensing requirements. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration of your account and for a minimum period following account closure, as required by our license conditions and AML obligations.
• KYC & Identity Documents: Retained for the period specified by applicable AML regulations following the end of the business relationship, typically five years or as otherwise required by law.
• Transaction Records: Financial transaction records are retained in line with applicable accounting and AML record-keeping requirements.
• Customer Support Records: Support communications are retained for a reasonable period to enable dispute resolution and service quality monitoring.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is removed from active marketing lists.
• Anonymised Analytics Data: Aggregated, anonymised usage data may be retained indefinitely as it no longer constitutes personal data.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

9 Data Security

zc66 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security practices include:

• Encryption: Personal data is encrypted in transit using TLS (Transport Layer Security) and sensitive data at rest is stored using industry-standard encryption methods.
• Access Controls: Access to personal data is strictly limited to authorised personnel with a legitimate operational need. Access rights are regularly reviewed and revoked upon role changes.
• Password Security: User passwords are never stored in plain text. We use strong one-way hashing algorithms with salting to protect credential data.
• Infrastructure Security: Our platform is hosted on secure, regularly audited infrastructure. Firewalls, intrusion detection systems, and vulnerability management processes are in place.
• Incident Response: We maintain a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and, where required, the relevant supervisory authority within the timeframes prescribed by applicable law.

10 Your Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by zc66. To exercise any of these rights, please contact our support team at [email protected].

11 International Data Transfers

zc66 operates internationally and your personal data may be transferred to, stored in, or processed in countries outside of Pakistan or your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, including contractual protections that require the receiving party to apply data protection standards consistent with this Policy. By using the Services, you acknowledge and consent to such international transfers as described herein.

12 Minors & Age Protection

The zc66 platform is strictly for adults aged 18 and over, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age.

Age verification is a mandatory part of our KYC process. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the source payment method, minus any amounts already wagered, pending investigation.

If you have reason to believe that a minor has registered with zc66, please notify us immediately at [email protected].

13 Third-Party Services

The zc66 platform may contain references to, or integrations with, third-party services — including game software providers, payment facilitators, and analytics tools. These third parties operate independently and are governed by their own privacy policies.

zc66 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third party whose services you access in connection with the zc66 platform. Our contractual arrangements with third-party data processors require them to handle your data securely and in accordance with applicable data protection principles, but we cannot guarantee the practices of entities operating outside our direct control.

14 Changes to This Policy

zc66 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — such as changes to the types of data we collect, the purposes for which we use it, or the parties with whom we share it — we will provide reasonable prior notice via email or a prominent notice on the platform.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Services following the publication of any amendments constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how we handle your data.

If you have concerns about any change to this Policy, you are welcome to contact our support team before continuing to use the Services.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zc66 handles your personal data, please get in touch with us through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 through the Help Centre on the zc66 platform.
• Languages: English support is available at all times. Urdu support availability — check the Help Centre for current channel options.

We aim to acknowledge all privacy-related requests promptly and resolve them within the timeframes required by applicable law. For general platform queries, please also refer to our FAQ page or our Terms & Conditions.