bz777 Privacy Policy

Introduction

bz777 is Pakistan's premier online gaming destination, offering sports betting, live casino, slot games and fishing game products through bz777.bio. In providing these services, bz777 necessarily collects and processes personal data belonging to our members and prospective members. We recognise that the handling of personal data is a matter of trust, and we are committed to managing that data responsibly, transparently and in accordance with applicable data protection obligations.

This Policy applies to all personal data collected through the bz777 website at bz777.bio, through any bz777 account, through communications with our customer support team, and through any other interaction between you and bz777 as a service provider. It does not apply to third-party websites or services that may be linked to or from bz777 — those are governed by their own privacy policies.

We encourage all bz777 members — whether based in Karachi, Lahore, Islamabad, Faisalabad or anywhere else across Pakistan — to read this Policy carefully and to contact us with any questions before providing personal information if anything is unclear.

Data Controller

For the purposes of this Privacy Policy, bz777 acts as the data controller in respect of all personal data collected from members using the bz777 platform. As data controller, bz777 determines the purposes for which personal data is collected, the means by which it is processed, and the periods for which it is retained.

Where bz777 engages third-party processors — such as payment verification providers, identity verification services, or technology infrastructure vendors — those parties act as data processors on behalf of bz777 under written agreements that impose obligations consistent with this Policy and with applicable data protection law.

All enquiries regarding bz777's data controller responsibilities, including data subject rights requests and privacy-related complaints, should be directed to the contact details provided in Section 16 of this Policy.

Personal Data We Collect

bz777 collects personal data in the following categories. The table below summarises the data types, the context in which they are collected, and the purpose served by collection.

How We Collect Personal Data

bz777 collects personal data through the following channels:

• Direct Registration: Data you provide when creating your bz777 account — including your name, date of birth, and Pakistani mobile number — is collected directly from you at the point of registration.
• Account Activity: Transaction data, game play records and account setting changes are recorded automatically as you use the bz777 platform.
• Payment Providers: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast or 1LINK, the relevant payment provider confirms transaction details to bz777 to enable payment processing.
• Identity Verification: When you submit documents for KYC verification — such as a copy of your CNIC — the data contained in those documents is processed by bz777's verification team or an authorised third-party verification provider.
• Technical Collection: Certain technical data — including IP addresses, device identifiers and session data — is collected automatically through cookies, server logs and similar tracking technologies when you access bz777.bio. See Section 9 for details.
• Customer Support: Any personal data you voluntarily share when contacting bz777 support — whether via email or through the account support system — is recorded as part of the interaction log.
• Third-Party Verification Services: Where bz777 engages accredited identity verification partners to assist with age verification or fraud detection, data may be cross-referenced against regulated third-party databases to confirm accuracy.

Purpose & Legal Basis for Processing

bz777 processes personal data only where a lawful basis for doing so exists. The principal lawful bases applicable to bz777's data processing activities are:

• Contract Performance: Processing that is necessary to provide the bz777 services you have contracted for — including account management, bet settlement, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: bz777 is subject to anti-money laundering (AML) regulations, age verification requirements, and licensing conditions that impose mandatory data processing obligations. Compliance with these obligations constitutes a separate lawful basis for the relevant processing activities.
• Legitimate Interests: Certain processing activities — including security monitoring, fraud detection, abuse prevention, and platform analytics — are carried out on the basis of bz777's legitimate interest in maintaining a safe and well-functioning gaming platform. Where legitimate interests are relied upon, bz777 has assessed that those interests are not overridden by the rights and interests of data subjects.
• Consent: Where bz777 relies on your consent — including consent to receive marketing communications — that consent is freely given, specific, informed and revocable at any time without detriment to your account.

Data Sharing & Disclosure

bz777 does not sell personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK and other payment intermediaries as required to execute deposit and withdrawal instructions.
• Identity Verification Providers: For KYC and age verification purposes, bz777 may share identity data — including CNIC information — with accredited third-party verification services operating under data processing agreements with bz777.
• Technology and Infrastructure Providers: bz777 uses third-party cloud infrastructure, game content providers, and software vendors whose services involve processing of Member data. All such providers operate under contractual obligations that prohibit independent use of Member data.
• Regulatory and Law Enforcement Authorities: bz777 will disclose personal data to competent regulatory authorities, law enforcement bodies, or courts of competent jurisdiction where required to do so by law, by court order, or by the terms of bz777's gaming licence.
• Anti-Money Laundering Compliance: As required under applicable AML regulations, bz777 may report suspicious transaction activity to relevant financial intelligence authorities. Such reports may include personal data of the account holder involved.
• Business Transfers: In the event of a corporate restructuring, merger, acquisition or sale of all or part of bz777's business, Member personal data may form part of the transferred assets. Members will be notified of any such transfer where required by applicable law.

International Data Transfers

bz777 operates globally and some of the technology infrastructure and service providers used by bz777 may be located in countries outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that available in Pakistan, bz777 implements appropriate transfer safeguards — including standard contractual clauses, processor agreements and technical controls — to ensure that your personal data remains protected to an adequate standard regardless of where it is processed.

All international data transfers carried out by or on behalf of bz777 are subject to review to ensure that the recipient jurisdiction or the specific transfer mechanism provides sufficient protection for the personal data involved. Where required by regulatory guidance, enhanced due diligence is applied before any cross-border transfer is authorised.

Data Retention

bz777 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active bz777 account is retained for the duration of the account and for a minimum of five (5) years following permanent account closure, in order to meet anti-money laundering regulatory retention requirements.
• Transaction Records: All deposit, withdrawal and bet transaction records are retained for a minimum of five (5) years from the date of the transaction, regardless of account status.
• Identity Verification Documents: CNIC copies and other identity documents are retained for the period required under bz777's KYC and AML obligations — typically five (5) years from the date of verification or account closure, whichever is later.
• Support Records: Customer support correspondence is retained for a minimum of three (3) years from the date of the most recent interaction, to enable dispute resolution and quality review.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for a minimum of three (3) years from the date of consent or withdrawal, to demonstrate compliance with applicable marketing regulations.
• Technical Logs: Security logs and access logs are retained for a minimum of twelve (12) months and a maximum of three (3) years, subject to ongoing security requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with bz777's data deletion procedures. Where data cannot be immediately deleted due to technical constraints in backup systems, it will be isolated and protected until it can be securely destroyed.

Cookies & Tracking Technologies

bz777 uses cookies and similar tracking technologies on bz777.bio to provide a functional, secure and personalised experience. A cookie is a small text file placed on your device by a web server; it does not access your device's storage independently and cannot carry viruses or install software.

bz777 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential to the operation of bz777.bio. They enable core functions including account login session maintenance, security token validation and shopping cart functionality in the cashier. These cookies cannot be disabled without significantly impairing your ability to use bz777.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how Members use bz777.bio — including pages visited, time on site and navigation patterns. This data is used to improve the platform. Individual users are not identifiable from this data.
• Functionality Cookies: These cookies remember your preferences — such as language setting and display preferences — to provide a more personalised experience on return visits to bz777.bio.
• Security Cookies: bz777 uses session security cookies to support fraud detection, to flag suspicious login activity from unrecognised devices, and to maintain session integrity during active gaming sessions.

You can manage cookie preferences through your browser settings. Disabling all cookies may prevent certain features of bz777.bio from functioning correctly, including the login session and cashier functions. bz777 does not use third-party advertising or social media tracking cookies.

Security Measures

bz777 applies a comprehensive set of technical and organisational security measures to protect Member personal data against unauthorised access, accidental loss, destruction, disclosure or misuse. Key measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and bz777.bio is encrypted using TLS with 256-bit AES encryption — the same standard used in online banking by HBL, UBL and Meezan Bank.
• At-Rest Encryption: Personal data stored in bz777 databases is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the data they protect.
• Access Controls: Internal access to Member personal data is restricted to authorised personnel who require it for their specific role. Access permissions are reviewed regularly and revoked upon termination of employment or change of role.
• Two-Factor Authentication: Members are encouraged to enable 2FA on their bz777 accounts. This adds a second layer of protection requiring an OTP sent to your registered Pakistani mobile number before account access is granted from a new device.
• Intrusion Detection: bz777 operates continuous security monitoring with automated alerts for unusual access patterns, multiple failed login attempts and other indicators of potential compromise.
• Vulnerability Management: The bz777 platform undergoes regular security assessments and penetration testing. Identified vulnerabilities are prioritised and remediated according to their severity rating.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of Members, bz777 will notify affected Members and the relevant supervisory authority in accordance with applicable breach notification obligations.

Your Data Protection Rights

As a bz777 Member, you hold the following rights in respect of your personal data. Requests to exercise these rights should be submitted to bz777 through the contact details in Section 16. bz777 will respond to verified data subject requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data bz777 holds about you, together with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data bz777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information directly through your bz777 account settings; other corrections may require support team assistance.
• Right to Erasure: In certain circumstances you have the right to request that bz777 delete your personal data. This right is subject to exceptions where retention is required for legal compliance — particularly where AML and KYC regulations mandate the retention of identity and transaction records.
• Right to Restriction: You may request that bz777 restrict the processing of your personal data in specific circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of processing but do not wish the data deleted.
• Right to Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bz777's legitimate interests. bz777 will cease such processing unless compelling legitimate grounds are demonstrated that override your interests and rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

Children's Privacy

bz777 does not knowingly collect personal data from individuals under the age of 21. The bz777 platform is strictly an adult entertainment service and registration is prohibited for persons under 21 years of age. This is enforced through mandatory age declaration at registration and identity verification requirements before first withdrawal processing.

If bz777 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresented age at registration or any other means — the relevant account will be immediately suspended, the personal data will be deleted or securely isolated pending investigation, and any deposits will be returned subject to applicable regulatory requirements.

Parents and guardians who believe a person under 21 has registered on bz777 are encouraged to contact us immediately at the details provided in Section 16 so that the matter can be addressed without delay.

Marketing Communications

bz777 may send you promotional communications about bonuses, new game launches, PSL betting offers, seasonal promotions and platform updates where you have opted in to receive such communications. Marketing consent is requested separately during registration and is not a condition of opening or maintaining a bz777 account.

You may opt out of marketing communications at any time by updating your communication preferences in your bz777 account settings or by contacting support with your opt-out request. Opt-out requests will be processed within a reasonable time — typically within five business days — after which you will no longer receive promotional messages from bz777.

Even if you opt out of marketing communications, bz777 will continue to send you transactional and account-related notifications — including deposit confirmations, withdrawal notifications, security alerts and mandatory account communications — as these are necessary for the operation of your bz777 account and cannot be opted out of while your account remains active.

Third-Party Links

bz777.bio may contain references or links to third-party websites, services or content. This Privacy Policy applies solely to personal data processed by bz777 and does not extend to any third-party website or service, regardless of how you arrived at that third-party site.

bz777 does not control and is not responsible for the privacy practices, data processing activities or content of any third-party website. Members who follow links to third-party sites from bz777.bio do so at their own discretion and are advised to review the applicable privacy policy of any third-party site before providing personal information.

Changes to This Privacy Policy

bz777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or guidance, or improvements to our privacy governance framework. The current version of this Policy, together with its effective date, is always available at bz777.bio/privacy-policy.

For material changes to this Policy that significantly affect Member rights or the manner in which personal data is processed, bz777 will notify Members via their registered mobile number or account notification system prior to the changes taking effect. Where required by applicable law, renewed consent will be sought before implementing changes to processing activities previously based on consent.

Your continued use of bz777 following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the updated Policy, you should discontinue use of bz777 and contact support to close your account.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions.

Contact Us

For all privacy-related enquiries, data subject rights requests, questions about this Policy or concerns regarding bz777's data handling practices, please contact us through the following channels:

• Privacy and Data Protection Enquiries: [email protected]
• Account Support (24/7): [email protected]

When submitting a privacy enquiry or data subject rights request, please include your bz777 username, the nature of your request, and any relevant details that will allow us to identify your account and respond accurately. bz777 aims to acknowledge all privacy enquiries within two business days and to provide a substantive response within 30 calendar days.

If you are dissatisfied with bz777's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the regulatory body under whose authority bz777 holds its gaming licence.