Privacy Policy — Your Data, Your Rights

BZ777 ("the Platform", "we", "us" or "our"), accessible at bz777.cam, operates as an English-language online gaming information platform serving users in Pakistan and other eligible jurisdictions. We understand that your personal data is valuable and deserves to be handled with care, transparency and full accountability.

This Privacy Policy (hereinafter "Policy") describes how BZ777 collects, uses, stores, shares and protects personal information submitted by users ("you", "your") when you access or use the Platform. It also sets out the rights you hold over your personal data and the mechanisms available to exercise those rights.

This Policy should be read in conjunction with the BZ777 Terms & Conditions, which govern your general use of the Platform and are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

BZ777, operating the Platform at bz777.cam, acts as the Data Controller with respect to all Personal Data collected through the Platform. As Data Controller, BZ777 is responsible for determining why and how your Personal Data is processed and for ensuring that processing activities are carried out in accordance with applicable data protection principles.

Where BZ777 engages third-party service providers to process Personal Data on its behalf (for example, cloud infrastructure providers, analytics platforms or KYC verification services), those providers operate as Data Processors under contractual arrangements that require them to process Personal Data only on BZ777's documented instructions and to maintain equivalent data security standards.

For all data protection enquiries, rights requests and complaints, users may contact BZ777 using the details set out in Section 15 (Contact Us) of this Policy.

4.1 Data You Provide Directly

When you register an account, complete a KYC verification, contact our support team or interact with any feature on the Platform, you may provide us with the following categories of Personal Data:

• Registration Data: Full name, date of birth, email address, chosen username, password (stored in encrypted form), city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and country.
• Identity Verification (KYC) Documents: Copies of a Pakistani CNIC or valid passport, proof of residential address, and liveness or selfie verification images.
• Financial Reference Data: Preferred payment method references (e.g., Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah). Note: BZ777 does not store full payment card numbers or banking credentials.
• Communications Data: Messages, queries and attachments submitted to our support team via live chat or email.
• Responsible Gambling Preferences: Self-exclusion requests, deposit limit settings, loss limit configurations and session time preferences.

4.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically through standard web server logs and analytics tools:

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution and language settings.
• Usage Data: Pages visited, time spent on each page, click-through patterns, navigation paths, session duration, referral URLs and internal search queries.
• Cookies & Tracking Technologies: Session cookies, preference cookies and analytics cookies as described in Section 9 of this Policy.
• Location Data: Approximate geographic location derived from IP address (country and city-level precision only — no precise GPS tracking).

4.3 Data Received from Third Parties

BZ777 may receive Personal Data from third-party service providers in limited circumstances, including identity verification results from KYC service providers, fraud detection signals from security partners, and aggregated analytics data from platform performance tools. All third-party data sharing is governed by contractual data processing agreements.

BZ777 processes your Personal Data only where there is a clearly identified lawful basis for doing so. The following table sets out the primary purposes of processing and the corresponding legal basis for each:

BZ777 does not sell, rent or trade your Personal Data to any third party for commercial or advertising purposes. We may share your Personal Data in the following limited and controlled circumstances:

6.1 Service Providers & Data Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These include cloud hosting infrastructure providers, KYC and identity verification platforms, fraud detection services and customer support tools. Such providers are permitted to use your data only for the specific purposes for which they have been engaged.

6.2 Legal & Regulatory Disclosure

BZ777 may disclose your Personal Data to law enforcement authorities, regulatory bodies, courts or other public authorities where required to do so by applicable law, court order or binding legal process. Where lawfully permitted, we will endeavour to notify you of such a disclosure prior to compliance.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets or other corporate transaction involving BZ777, your Personal Data may form part of the assets transferred to or assessed by the acquiring entity. Any such transfer will be subject to the same data protection commitments outlined in this Policy, and affected users will be notified in advance where required by law.

6.4 Aggregated & Anonymised Data

BZ777 may share aggregated, anonymised or de-identified data (which cannot reasonably identify you as an individual) with third parties for analytical, research or commercial purposes without restriction.

BZ777 retains your Personal Data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable legal or regulatory obligations, whichever is longer. The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with BZ777 and for a minimum of five (5) years following account closure, unless a longer period is mandated by applicable AML, responsible gambling or financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in compliance with standard AML document retention requirements.
• Transaction and Activity Logs: Retained for a minimum of five (5) years from the date of each transaction or activity record.
• Support Communications: Retained for three (3) years from the date of the most recent interaction, to enable ongoing dispute resolution and quality assurance.
• Analytics Data: Retained in aggregated, anonymised form for up to three (3) years for platform improvement purposes.
• Marketing Consent Records: Retained from the date of consent until you withdraw consent, plus a reasonable additional period for compliance record-keeping purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where deletion is technically impracticable (for example, in backup systems), data will be securely isolated and protected until it can be deleted.

BZ777 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• HTTPS / TLS Encryption: All data transmitted between your browser and BZ777 servers is encrypted using Transport Layer Security (TLS). The presence of a padlock icon in your browser's address bar confirms that your connection is protected.
• Password Hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms and are never stored in plain text.
• Access Controls: Personal Data is accessible internally only to personnel who require it for their specific job function. Access is governed by role-based permissions and logged for audit purposes.
• Secure KYC Portal: Identity documents are submitted through a dedicated, HTTPS-protected verification portal. Users must never transmit KYC documents via email or unsecured messaging applications.
• Intrusion Detection: Systems are monitored continuously for unusual activity patterns, potential security breaches and unauthorised access attempts.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, BZ777 will notify affected users and relevant authorities within the timeframes required by applicable law.

While BZ777 applies rigorous security practices, no internet transmission or electronic storage system can be guaranteed as completely secure. You are also responsible for maintaining the security of your own account by using a strong, unique password and safeguarding your login credentials.

BZ777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns and improve the overall user experience. The following categories of cookies may be placed on your device:

You may control cookie settings through your browser's privacy settings. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge). Please note that disabling essential cookies may impair Platform functionality.

BZ777 does not use cookies or tracking technologies to serve targeted third-party advertising or to profile users for commercial marketing without explicit consent.

The BZ777 platform is strictly for adults aged 18 years and above, or the higher minimum age required by the applicable operator or license jurisdiction. BZ777 does not knowingly collect, process or retain Personal Data from individuals who are under the applicable minimum age.

If BZ777 becomes aware that Personal Data has been collected from a minor, it will take immediate steps to delete that data and close the associated account. KYC verification is a mandatory step in the account registration process specifically to confirm that the user meets the minimum age requirement.

Parents or guardians who believe that their child has submitted Personal Data to BZ777 without authorisation are encouraged to contact our support team immediately via the live chat function or by email. We will investigate and, where confirmed, promptly delete all associated Personal Data.

Note for Pakistani users: The presence of an 18+ age requirement on this Platform does not imply that gambling is lawful for adults in Pakistan. Local laws, including the Prevention of Gambling Act, 1977, may impose additional restrictions. Users remain solely responsible for determining the legality of their gambling activity in their jurisdiction.

Subject to applicable law, you hold the following rights over your Personal Data held by BZ777. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified rights requests within a reasonable timeframe, typically within thirty (30) calendar days.

Rights requests are processed free of charge in the ordinary course. BZ777 reserves the right to charge a reasonable administrative fee or decline manifestly unfounded or excessive requests. Identity verification will be required before any rights request is actioned to protect against unauthorised access to another user's data.

BZ777 operates globally and may transfer your Personal Data to servers or service providers located in jurisdictions outside of Pakistan. Where such transfers occur, BZ777 ensures that appropriate safeguards are in place to protect your Personal Data to an equivalent standard as that described in this Policy.

Safeguards for international transfers may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, adequacy decisions, or other lawful transfer mechanisms appropriate to the destination jurisdiction. If you would like further information about international data transfers and the safeguards applied, please contact us using the details in Section 15.

The Platform may contain references to or descriptions of third-party services, platforms or products (including third-party gambling operators). BZ777 is not responsible for the privacy practices, terms or data handling of any third-party service. References to third-party payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made for contextual purposes only — these institutions operate under their own independent privacy policies.

We strongly recommend that you review the privacy policy of any third-party platform before submitting your Personal Data to it. BZ777 has no control over the content, data practices or privacy standards of external platforms.

BZ777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or operational requirements. When material changes are made, we will endeavour to notify registered users via email or through a prominently displayed notice on the Platform.

The "Last Reviewed" date displayed at the top of this page will be updated whenever the Policy is revised. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns or requests relating to this Privacy Policy or BZ777's data handling practices — including requests to exercise your data rights under Section 11 — please contact us through one of the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week through the support function inside your account dashboard. This is our fastest response channel for all data protection enquiries.
• Email: [email protected] — displayed as plain text only. Please do not send sensitive identity documents, passwords or financial credentials by email. Use the secure KYC verification portal within your account for document submissions.

All data rights requests will be acknowledged within five (5) working days and resolved within thirty (30) calendar days of receipt. Complex requests may take longer, in which case you will be notified of the extended timeline and the reason for the delay.