ze22 Privacy
Policy

Who We Are

This Privacy Policy is issued by ze22 ("ze22", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at ze22.app. ze22 is an internationally licensed gaming operator providing cricket betting, live casino, slot games, and related services to players including those based in Pakistan.

For the purposes of this Policy, ze22 acts as the data controller with respect to the personal information you provide when registering for, accessing, and using the ze22 platform. This means ze22 determines the purposes for which your personal data is processed and the means by which that processing takes place.

This Policy applies to all personal data collected through ze22.app, the ze22 mobile experience, live chat and email support interactions, and any other channel through which you engage with ze22 directly. It does not apply to third-party websites or services that may be linked from ze22 — those parties operate under their own privacy policies.

Data We Collect

ze22 collects the following categories of personal data from its players and visitors:

ze22 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or biometric data beyond what is strictly required for identity verification within the KYC process.

How We Collect Data

ze22 collects personal data through the following means:

• Directly from you: When you register a ze22 account, complete the KYC process, make deposits or withdrawals, place bets, use live chat, or email ze22 support;
• Automatically through technology: When you access ze22, our servers automatically log technical data such as your IP address, device identifiers, browser information, and session timing. Cookies and similar tracking technologies also collect behavioural and session data as described in Section 7 of this Policy;
• From third parties: ze22 may receive identity and fraud-risk data from KYC verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), and screening services used for anti-money laundering (AML) checks;
• From publicly available sources: In connection with fraud prevention and compliance obligations, ze22 may cross-reference data against publicly available registers or legally accessible databases.

Why We Use Your Data

ze22 uses your personal data for the following documented purposes:

• Account creation and management: To register your ze22 account, verify your identity, maintain account security, and manage your profile settings;
• KYC and regulatory compliance: To verify that you meet ze22's age requirement (21+), to comply with the identity verification obligations imposed by ze22's international gaming licence, and to meet applicable anti-money laundering (AML) requirements;
• Payment processing: To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and to maintain accurate financial records for each transaction;
• Platform operation and gameplay: To deliver game content, record bet outcomes, calculate winnings, apply bonuses and promotional credits, and provide a functioning gaming experience;
• Customer support: To respond to your queries, resolve account issues, and maintain records of support interactions for quality assurance purposes;
• Fraud prevention and security: To detect and investigate suspicious account activity, prevent bonus abuse, and protect the integrity of the ze22 platform;
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to administer deposit limits, cool-off periods, and self-exclusion requests;
• Communications: To send transactional communications (deposit confirmations, withdrawal notifications, password reset emails) and, where you have opted in, promotional communications about ze22 bonuses, PSL cricket promotions, and new games;
• Platform improvement: To analyse aggregated, anonymised usage data and improve ze22's game library, interface, and performance.

Legal Basis for Processing

ze22 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases ze22 relies upon are:

• Contract performance: Processing necessary to create and manage your ze22 account, process payments, and deliver gaming services under the agreement between you and ze22;
• Legal obligation: Processing required to comply with ze22's gaming licence conditions, including KYC, AML screening, age verification (21+), and record-keeping obligations imposed by the licensing authority;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of ze22 services — where such interests are not overridden by your fundamental privacy rights;
• Consent: Processing for optional marketing communications, where ze22 will only send promotional emails or messages if you have actively opted in at registration or through your account settings. You may withdraw this consent at any time.

Sharing Your Data

ze22 does not sell your personal data. ze22 shares your personal data only with the following categories of third parties, and only to the extent strictly necessary for the purpose stated:

• KYC and identity verification providers: Third-party services that verify the authenticity of CNIC documents, perform facial recognition matching, and screen against AML watchlists. These providers process your data under ze22's instruction and under contractual data protection obligations;
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer partners receive the transactional and account reference data necessary to process your PKR deposits and withdrawals. These parties are independent data controllers in respect of their own payment infrastructure;
• Gaming technology providers: Game software providers whose titles appear in the ze22 lobby may receive aggregated, non-personally-identifiable gameplay data for licensing and RNG audit purposes. No personally identifiable player data is shared with game providers unless required by a specific regulatory investigation;
• Regulatory and licensing authorities: ze22's licensing authority may require access to player records, transaction logs, and KYC documentation as part of routine audits or specific regulatory investigations. ze22 is obligated to comply with such requests;
• Law enforcement and government authorities: ze22 will disclose personal data to police, financial intelligence units, or other government bodies where required by applicable law, court order, or regulatory direction — including in connection with criminal investigations involving money laundering, fraud, or underage gambling;
• Professional advisers: ze22's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis in connection with their professional engagements with ze22.

All third parties that process personal data on ze22's behalf are required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection obligations. ze22 does not permit third-party service providers to use ze22 player data for their own independent commercial purposes.

Cookies & Tracking Technologies

ze22 uses cookies and similar technologies to support the operation and improvement of the platform. Cookies are small text files stored on your device when you visit ze22.app. ze22 uses the following categories of cookies:

• Strictly necessary cookies: Required for ze22 to function — session management, login authentication, and security tokens. These cannot be disabled without breaking core platform functionality;
• Functional cookies: Store your preferences such as language settings, game lobby filter choices, and responsible gaming configurations. Disabling these does not prevent access to ze22 but may reduce convenience;
• Analytics cookies: Allow ze22 to measure aggregate usage patterns — which game categories attract most visits, how players navigate the lobby, and where technical errors occur. This data is anonymised before analysis and is not used to identify individuals;
• Marketing cookies (with consent only): If you have opted in to receiving ze22 promotional communications, these cookies help ze22 measure the effectiveness of promotions and ensure you do not receive duplicate offer notifications.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in to and use ze22. For detailed instructions on managing cookies across popular browsers, refer to your browser's help documentation.

Data Retention

ze22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to ze22's regulatory obligations that mandate specific minimum retention periods.

• Active account data (identity, contact, financial, gameplay) is retained throughout the active life of your ze22 account and for a minimum of five years following account closure, in compliance with AML and gaming licence record-keeping requirements;
• KYC documents (CNIC scans, passport copies) are retained for a minimum of five years from the date of submission or account closure, whichever is later, as required by ze22's licensing authority;
• Transaction records (PKR deposits, withdrawals, bet logs) are retained for a minimum of seven years for financial audit and regulatory compliance purposes;
• Support communications (live chat transcripts, emails) are retained for three years from the date of the interaction;
• Technical and session data (IP logs, device data) is retained for up to 12 months for fraud investigation purposes, after which it is anonymised or deleted.

Where data is no longer required for any active purpose and the applicable retention period has elapsed, ze22 securely deletes or irreversibly anonymises that data.

Data Security

ze22 implements a multi-layered security programme to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place at ze22 include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and ze22's servers;
• AES-256 encryption at rest for sensitive personal and financial data stored in ze22's database infrastructure;
• Role-based access control (RBAC) ensuring that employee access to personal data is restricted to the minimum necessary for their role, with all access logged;
• Multi-factor authentication for ze22 internal systems and for player accounts where 2-step verification is enabled;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident response procedures to contain, investigate, and remediate security incidents, including notification obligations to affected players and relevant authorities where applicable.

While ze22 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ze22 accounts, enable 2-step verification, and contact ze22 support immediately if they suspect their account has been compromised.

Your Data Rights

As a ze22 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact ze22 support via live chat or email. ze22 will respond to verified data rights requests within 30 days.

Please note that certain data rights cannot be fulfilled in their entirety where ze22's regulatory obligations require the retention or processing of your data. In such cases, ze22 will explain the specific legal basis preventing full compliance with your request.

Children & Minors

ze22 is strictly an adult platform. ze22's services are available exclusively to individuals who are 21 years of age or older. ze22 does not knowingly collect personal data from individuals under the age of 21.

If ze22 becomes aware, through any means, that personal data belonging to a person under the age of 21 has been collected in connection with a ze22 account, ze22 will immediately suspend the account, delete the collected data to the extent permitted by its regulatory obligations, and take all reasonable steps to prevent recurrence.

Parents and guardians in Pakistan who believe their child may have accessed ze22 are encouraged to contact ze22 support immediately. ze22 will investigate and take prompt action in all such cases. ze22 also encourages the use of parental control software on shared household devices to prevent underage access to online gaming platforms.

Cross-Border Data Transfers

ze22 is an internationally operated platform. Personal data collected from Pakistani players may be transferred to and processed in countries other than Pakistan in connection with ze22's server infrastructure, KYC providers, payment processors, and game technology partners.

Where such transfers occur, ze22 takes steps to ensure that adequate protections are in place, including the use of standard contractual clauses, data processing agreements that impose equivalent data protection obligations on the receiving party, and, where applicable, transfers to jurisdictions recognised as providing adequate data protection standards.

If you have questions about the specific countries to which your data may be transferred or the safeguards applied, please contact ze22 support.

Policy Updates

ze22 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or ze22's data processing activities. When material changes are made, ze22 will notify registered players via the email address on file or through a prominent notice displayed upon next login.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. Continued use of ze22 after a policy update constitutes acceptance of the revised Policy. Players who do not agree with an updated Policy should stop using ze22 and contact support to close their account before the updated Policy takes effect.

ze22 recommends that players review this Policy periodically. Previous versions of this Policy are available on request from ze22 support.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how ze22 has handled your personal data, please contact the ze22 Data Support team through the following channels:

• Live Chat: Available 24/7 directly from ze22.app in English and Urdu — the fastest channel for privacy-related queries;
• Email: [email protected] — please include "Privacy Request" in the subject line. ze22 aims to respond to all privacy-related email enquiries within 24 hours and to resolve substantive data rights requests within 30 days.

If you are not satisfied with ze22's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to ze22's gaming licence dispute resolution mechanism. ze22 will provide details of the appropriate escalation route upon request.