Privacy Policy
z786 — How We Handle Your Data

This Privacy Policy ("Policy") sets out the basis on which z786 ("z786", "we", "us", "our") collects, processes, stores, and shares personal data about individuals who access the z786 platform at z786.pro, register an account, or otherwise interact with z786's services, including the live casino, cricket sportsbook, slots section, instant games, and VIP programme.

z786 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and equivalent frameworks. While z786 is an internationally licensed operator, we apply robust privacy standards to protect all players, including our registered Pakistani user base.

By accessing the z786 platform, registering an account, or otherwise using any part of our service, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the z786 platform and contact [email protected] to request account closure.

This Policy should be read alongside the z786 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between z786 and its registered players.

For the purposes of applicable data protection law, z786 is the data controller in respect of personal data collected through the z786 platform. As data controller, z786 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is conducted lawfully and fairly.

All data protection enquiries, subject access requests, and consent withdrawals should be directed to the z786 data protection contact at [email protected]. Please include "Privacy Request" in the subject line of your email to ensure correct routing to the appropriate team.

z786 collects the following categories of personal data in connection with the operation of its platform and fulfilment of its regulatory obligations:

z786 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions except where a player voluntarily discloses such information in a support communication, in which case it is used solely for the purpose of resolving the specific query.

z786 collects personal data through the following mechanisms:

• Direct Registration: When you create a z786 account, you provide your name, email address, Pakistani mobile number, date of birth, and chosen username and password directly through the registration interface.
• KYC Submission: When you initiate the identity verification process — required before your first withdrawal — you upload documentation including your CNIC and a selfie through the secure KYC portal within your z786 account dashboard.
• Payment Transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, financial data is exchanged between z786 and the relevant payment processor.
• Platform Usage: As you navigate the z786 platform, play games, place sports bets, and interact with the interface, technical and gaming data is automatically recorded by our platform systems.
• Cookies and Tracking Technologies: z786 uses first-party cookies and similar technologies as detailed in Section 10 of this Policy.
• Customer Support Interactions: When you contact z786 via email or live chat, the content and metadata of those communications are recorded for quality assurance, training, and dispute resolution purposes.
• Third-Party Verification Services: z786 may use third-party identity verification and fraud detection services that independently cross-reference information you provide against external databases to validate your identity and assess risk.

z786 processes personal data only for defined, legitimate purposes. The following table maps each processing purpose to the category of data used:

z786 does not use personal data for automated decision-making that produces significant legal effects on players, except where such processing is required for fraud detection or regulatory compliance, in which case a human review can always be requested by contacting [email protected].

z786 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to enter into and perform the contract between z786 and you as a registered player — including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with z786's obligations under its international gaming licence, including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing conducted for the legitimate interests of z786 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and product analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, primarily for the receipt of promotional communications and marketing messages from z786. You may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism included in promotional emails.

z786 does not sell your personal data to third parties. We share personal data only with the following categories of recipients and only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency network operators receive transaction data necessary to execute deposits and withdrawals on your behalf.
• Identity Verification Partners: Third-party KYC and document verification service providers who assist z786 in confirming your identity and age in compliance with our licensing obligations. These providers are contractually bound to process data only for the specified KYC purpose.
• Fraud Detection Services: Risk management and fraud prevention platforms that analyse transaction patterns and usage behaviour to protect the z786 platform and its players from fraudulent activity.
• Game Content Providers: Third-party game studios and live casino operators whose games are made available on the z786 platform. These providers may receive anonymised session identifiers required for game operation; they do not receive your full personal profile.
• Regulatory and Licensing Authorities: z786's international gaming licence authority and any relevant law enforcement or regulatory body, where disclosure is required by applicable law, court order, or regulatory direction.
• IT and Hosting Infrastructure Providers: Cloud hosting, database management, and platform security service providers who process data on z786's behalf under strict data processing agreements.

All third parties with whom z786 shares personal data are required, by contract, to implement appropriate technical and organisational measures to protect that data and to process it only in accordance with z786's documented instructions.

z786 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfaction of any applicable legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with international gaming licence requirements and AML record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction to which the documents relate.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in line with standard financial record-keeping requirements.
• Gaming and Betting History: Retained for the duration of the account and for three (3) years following account closure.
• Technical and Device Data: Retained for up to twelve (12) months from the date of collection, unless extended retention is required for an active fraud investigation or dispute.
• Support Communications: Retained for three (3) years from the date of the last communication in a support thread.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is not technically feasible, data is securely destroyed.

z786 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the z786 platform is encrypted using TLS 1.2 or higher. z786.pro enforces HTTPS across all pages and subdomains.
• Encryption at Rest: Sensitive personal data — including KYC documentation, payment identifiers, and account credentials — is stored in encrypted form within z786's database infrastructure.
• Access Controls: Access to personal data within z786's internal systems is governed by role-based access controls. Only authorised personnel with a documented business need may access personal data, and all access is logged.
• Two-Factor Authentication: z786 offers two-factor authentication (2FA) to all registered players and requires 2FA for all staff access to internal systems containing personal data.
• Penetration Testing: z786's platform infrastructure is subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident Response: z786 maintains a documented data breach incident response plan. In the event of a personal data breach that is likely to result in risk to affected individuals, z786 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

z786 uses first-party cookies and similar browser-based technologies to support the operation of the platform, maintain session security, and gather anonymised analytics data. z786 does not deploy third-party advertising cookies or tracking pixels that share your data with external advertising networks.

The following categories of cookies are used on the z786 platform:

• Strictly Necessary Cookies: These cookies are essential for the z786 platform to function. They maintain your logged-in session, preserve your language and currency preferences, and support security features including CSRF protection. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your preferences and personalisation settings — such as your preferred lobby view or last-used game category — to improve your experience on return visits.
• Analytics Cookies: z786 uses first-party analytics to understand aggregate usage patterns on the platform, including which game categories are most popular, page load performance metrics, and navigation flow. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Short-lived cookies used by z786's fraud detection layer to assess device consistency and detect anomalous login behaviour.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your z786 account. For queries about z786's cookie usage, contact [email protected].

Subject to applicable data protection law and the conditions described below, you hold the following rights in respect of your personal data held by z786:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". z786 will acknowledge your request within 5 business days and provide a substantive response within 30 days. Where requests are complex or numerous, the response period may be extended by a further 60 days, with notice provided to you.

Please note that certain rights are subject to exemptions where processing is required for compliance with legal obligations — particularly KYC and AML record-keeping requirements under z786's international gaming licence. Where an exemption applies, z786 will explain the basis for this in its response to your request.

The z786 platform is strictly for adults aged 21 years and above. z786 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through CNIC-based identity verification during the KYC process.

If z786 discovers or has reasonable grounds to believe that a registered account is held by an individual under 21 years of age, the account will be immediately suspended pending investigation. If the age of the account holder is confirmed to be below the minimum age, the account will be permanently closed and all deposits returned to the source payment method. Any winnings accumulated during the period of underage play will be forfeited.

Parents and guardians of Pakistani households are encouraged to use parental control and device-level filtering tools to prevent access to online gambling platforms by minors. If you believe a minor may have accessed or registered on the z786 platform, please contact [email protected] immediately with relevant details so that the matter can be investigated promptly.

As an internationally licensed online gaming operator, z786 may process and store personal data on servers located outside Pakistan. When personal data is transferred internationally, z786 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under international data protection best practice.

Safeguards used for international transfers include contractual clauses that impose data protection obligations on receiving parties equivalent to those z786 applies internally, and the selection of hosting and processing partners in jurisdictions with recognised data protection frameworks.

z786 does not transfer personal data to jurisdictions that z786 has assessed as presenting an unacceptably high risk to the privacy rights of data subjects without additional protective measures in place.

z786 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our platform operations. When material changes are made, z786 will notify registered players via their registered email address and update the "Last Reviewed" date at the top of this page.

Continued use of the z786 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to this Policy, you must cease using the platform and submit an account closure request to [email protected] before the revised Policy takes effect.

z786 recommends reviewing this Privacy Policy periodically. Archived versions of previous policies are available upon request from [email protected].

For all privacy-related enquiries, data rights requests, consent withdrawals, or concerns about how z786 handles your personal data, please contact us using the details below. We aim to handle all privacy requests with care and within the timelines specified in this Policy.

Data Protection Contact: [email protected]

Recommended Subject Lines:

• "Data Rights Request" — for access, rectification, erasure, or portability requests
• "Privacy Request" — for general privacy enquiries or consent withdrawals
• "Data Breach Report" — if you believe your account data has been compromised
• "Minor Account Report" — if you believe an underage individual has accessed the platform

Response Times: z786 acknowledges all privacy-related emails within 2 business days and provides substantive responses within 30 days unless the matter requires extended investigation, in which case we will notify you accordingly.