za222 Privacy Policy
— Your Data, Protected

This Privacy Policy is published by za222 ("za222", "we", "us", "our"), the operator of the online gaming platform available at za222.net ("Platform"). za222 is an internationally licensed online gaming operator serving Pakistani players.

For the purposes of this Privacy Policy, za222 acts as the data controller in respect of the personal data it collects and processes from registered users and visitors to the Platform. This means za222 determines the purposes and means of processing your personal data.

If you have any questions or concerns about this Privacy Policy or about how za222 handles your personal data, you may contact us at any time using the details provided in Section 14 of this document.

za222 collects the following categories of personal data from users of the Platform:

za222 does not collect sensitive personal data (such as medical, racial, or religious data) unless specifically required by applicable regulatory obligations and only with your explicit consent where consent is the applicable legal basis.

za222 collects personal data through the following channels and methods:

3.1 Data You Provide Directly

The majority of personal data za222 holds about you is provided by you directly during the course of your relationship with the Platform. This includes data entered at registration, data submitted during KYC verification, payment details entered during deposit and withdrawal processes, and any communications you initiate with za222 support.

3.2 Data Collected Automatically

When you access the za222 Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser and operating system information, pages visited, session duration, and navigation paths through the Platform. This data is collected using cookies and similar tracking technologies described further in Section 7 of this Policy.

3.3 Data from Third-Party Verification Services

Where za222 engages third-party identity verification or fraud detection services to assist with KYC obligations, those services may provide za222 with data related to the verification outcome (e.g., confirmation of CNIC validity). za222 selects such service providers carefully and ensures they operate under appropriate data protection standards.

3.4 Data from Payment Processors

When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, za222 receives transaction confirmation data from the relevant payment provider. za222 does not receive full account credentials from your payment provider — only the data necessary to confirm and record the transaction.

za222 uses your personal data for the following purposes:

• Account registration and management — to create, maintain, and manage your za222 account, including verifying your identity, age, and eligibility to use the Platform;
• Transaction processing — to process deposits, withdrawals, and all financial transactions associated with your account in PKR via supported Pakistani payment methods;
• Regulatory compliance — to fulfil za222's obligations under its international gaming licence, including anti-money laundering (AML) checks, Know Your Customer (KYC) verification, and player protection requirements;
• Platform operation and improvement — to operate, maintain, and improve the za222 Platform, including diagnosing technical issues, monitoring performance, and developing new features;
• Responsible gaming — to monitor account activity for signs of problem gambling, enforce responsible gaming tools you have activated, and meet our obligations to protect at-risk players;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, and other unlawful conduct on the Platform;
• Customer support — to respond to your queries, complaints, and requests via live chat and email;
• Marketing communications — to send you relevant promotions and offers from za222, subject to your communication preferences. You may opt out of marketing communications at any time via your account settings or by contacting support.

za222 processes your personal data on the following legal bases, which vary depending on the purpose of processing:

• Contractual necessity — processing is necessary for the performance of the agreement between you and za222, including account management, transaction processing, and Platform access;
• Legal obligation — processing is required by za222's applicable regulatory obligations, including KYC verification, AML compliance, and licensing requirements under our international gaming licence;
• Legitimate interests — processing is necessary for za222's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and Platform improvement, provided these interests are not overridden by your rights;
• Consent — where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

za222 does not sell, rent, or trade your personal data. za222 may share your personal data with the following categories of third parties in the circumstances described below:

6.1 Service Providers

za222 engages third-party service providers who process data on our behalf in order to operate the Platform. These include KYC and identity verification providers, payment processing providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK), game software providers, customer support platform providers, and cloud infrastructure providers. All such providers operate under data processing agreements that restrict their use of your data to the specific services they provide to za222.

6.2 Regulatory and Law Enforcement Authorities

za222 may disclose your personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or the terms of our gaming licence. za222 will provide the minimum data necessary to satisfy such requirements.

6.3 Anti-Fraud and AML Organisations

za222 may share data with industry anti-fraud networks and AML screening services where required by our regulatory obligations or where necessary to prevent, detect, or investigate financial crime or platform abuse.

6.4 Business Transfers

In the event that za222 undergoes a merger, acquisition, or transfer of all or part of its business assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and any material changes to data processing arrangements that arise from it.

za222 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. za222 uses the following categories of cookies:

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session cookies that maintain your logged-in state, security cookies that support fraud prevention, and cookies that remember your language and currency preferences. Essential cookies cannot be disabled without severely impairing Platform functionality.

7.2 Functional Cookies

These cookies remember your preferences and settings — such as responsible gaming limits you have set — to provide a more personalised experience when you return to the Platform. They are not used for tracking across other websites.

7.3 Analytics Cookies

za222 uses analytics cookies to understand how players use the Platform — which pages are visited most, where navigation difficulties occur, and how gaming sessions are distributed. This data helps za222 improve the Platform for all users. Analytics data is aggregated and does not identify individual users.

7.4 Managing Cookies

You can manage or disable non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the za222 Platform. Most modern browsers allow you to view, delete, or block cookies from specific websites.

za222 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account registration and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements;
• Transaction records — retained for a minimum of five (5) years following the date of the relevant transaction, to comply with financial record-keeping obligations;
• KYC documents — retained for the duration of your account registration and for a minimum of five (5) years following account closure;
• Communications data (support interactions) — retained for up to two (2) years from the date of the interaction, unless retention is required beyond that period due to an unresolved complaint or legal proceedings;
• Technical and analytics data — typically retained in identifiable form for up to thirteen (13) months from the date of collection, after which it may be retained in aggregated, anonymised form indefinitely.

Where za222 retains data beyond the periods described above, it is because an applicable legal obligation, regulatory requirement, or legitimate dispute resolution process requires it. When data is no longer required, it is securely deleted or anonymised in accordance with za222's data disposal procedures.

za222 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and za222's servers;
• Encryption at rest for sensitive data categories including identity documents and financial records;
• Access controls ensuring that za222 staff access to personal data is restricted to those with a legitimate operational need;
• Two-factor authentication for player account access via registered Pakistani mobile number;
• Continuous security monitoring of za222 infrastructure for anomalous activity and intrusion attempts;
• Regular security assessments conducted by qualified third-party security specialists;
• Incident response procedures to ensure that any data breach is identified, contained, and — where required — reported to the appropriate regulatory authority within applicable timeframes.

Subject to applicable law and regulatory requirements, you have the following rights with respect to your personal data held by za222:

To exercise any of the above rights, please contact za222 at [email protected] or via live chat. za222 will respond to all data rights requests within 30 days of receipt. Where a request is complex or multiple, this period may be extended by a further 30 days, with notice provided to you.

The za222 Platform is strictly intended for persons aged 21 years and above. za222 does not knowingly collect or process personal data from persons under the age of 21. Access to the Platform by persons under 21 is prohibited and za222 applies CNIC-based age verification to enforce this requirement.

If za222 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately and permanently closed, all deposited funds will be returned to source, and all personal data associated with that account will be securely deleted, except to the extent that retention is required by applicable regulatory obligations.

The za222 Platform may reference or integrate with third-party services, including game providers, payment processors, and customer support platforms. Each of these third parties operates under their own privacy policies and data practices, which are separate from and independent of this za222 Privacy Policy.

za222 selects third-party service providers carefully and requires, by contract, that they maintain data protection standards appropriate to the sensitivity of the data they handle on za222's behalf. However, za222 is not responsible for the privacy practices of independently operated third-party services once data is processed by those services in their own right.

The za222 Platform does not contain links to unaffiliated third-party websites. If you access a third-party website independently in connection with a payment method (e.g., JazzCash or EasyPaisa's own portal), your activity on that site is governed by that service's own privacy policy.

za222 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory obligations, or Platform operations. The Effective Date and version number displayed at the top of this document will be updated whenever changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — za222 will provide advance notice to registered users via email to the address registered on your account, and/or via an on-Platform notification, before the changes take effect.

Your continued use of the za222 Platform following the Effective Date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, please cease use of the Platform and contact za222 support to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how za222 has handled your personal data, please contact us using the following channels:

• Live Chat: Available 24/7 directly from the za222 Platform. Average response time: under 2 minutes.
• Email: [email protected] — responses typically within 1 hour. For formal data rights requests, please include "Privacy Request" in your email subject line.

za222 is committed to resolving all privacy-related queries and complaints promptly and transparently. If you are not satisfied with za222's response to a privacy concern, you may have the right to escalate the matter to the applicable regulatory authority under za222's gaming licence. Details of the relevant authority are available from za222 support upon request.