mz777 Privacy Policy

mz777 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy ("Policy") describes how mz777 collects, processes, stores, shares and protects personal data obtained from users ("you", "User", "Player") in connection with the operation of the mz777 online gaming platform.

This Policy applies to all personal data collected through the mz777 website, mobile interfaces, customer support channels and any other touchpoint through which you interact with the platform. By registering an account, making a deposit or otherwise using the mz777 Services, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the mz777 platform. Defined terms used in this Policy carry the same meaning as defined in the Terms & Conditions unless otherwise stated here.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly — including name, email address, IP address, account identifiers and government-issued identity documents.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, combination, restriction, erasure and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, mz777.
• "Data Processor" means a third party that processes personal data on behalf of the data controller, under the controller's instructions.
• "KYC" means Know Your Customer — identity and address verification procedures required for anti-money laundering compliance.
• "Cookie" means a small text file placed on a user's device by a website to store preferences, session identifiers and analytical data.
• "Sensitive Data" means a special category of personal data that warrants heightened protection under applicable data protection law, which may include financial account information, government-issued identification and biometric identifiers.

mz777 collects personal data in the following categories. The specific data elements collected may vary depending on your jurisdiction, the type of account you hold and the services you use:

mz777 collects personal data through the following channels:

• Direct submission: Information you voluntarily provide when registering an account, completing KYC, making a deposit or withdrawal, or contacting customer support.
• Automated technical collection: IP addresses, device identifiers, browser type and session data collected automatically when you access the platform, via server logs and cookies.
• Third-party verification providers: Identity and address data obtained from KYC/AML verification service providers in the course of verifying your account.
• Payment processors: Transaction confirmation data received from payment service providers upon processing deposits or withdrawals.
• Fraud prevention and risk systems: Risk signals and fraud indicators received from third-party compliance and fraud prevention services integrated into the platform.

Where applicable data protection law requires us to identify a legal basis for processing personal data, mz777 relies on the following bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, transaction processing, KYC verification and customer support.
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including AML/CFT obligations, record-keeping requirements and regulatory reporting.
• Legitimate interests: Processing necessary for our legitimate business interests — including fraud prevention, security monitoring, platform improvement and responsible gambling monitoring — where those interests are not overridden by your privacy rights.
• Consent: Where we send optional marketing communications, we do so only on the basis of your prior opt-in consent, which you may withdraw at any time.

mz777 uses the personal data we collect for the following specific purposes:

• To create, verify and maintain your player Account, including age and identity verification.
• To process deposits, withdrawals and other financial transactions associated with your Account.
• To comply with applicable KYC and AML obligations, including monitoring transactions for suspicious activity patterns.
• To provide customer support, respond to enquiries and resolve complaints and disputes.
• To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse and other prohibited conduct under our Terms & Conditions.
• To monitor gaming activity in connection with our responsible gambling obligations, including identifying potentially at-risk behaviour patterns.
• To send transactional communications such as account confirmations, deposit receipts, withdrawal updates and security alerts.
• To send promotional communications — only where you have explicitly opted in — and to manage your marketing preferences.
• To analyse aggregated, anonymised usage data for the purpose of improving platform features, performance and user experience.
• To comply with our legal obligations under applicable law and to respond to lawful requests from competent authorities.

mz777 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection controls:

• KYC and identity verification providers: Third-party platforms that perform identity, age and address verification checks as part of our compliance programme.
• Payment service providers: Regulated payment processors and financial technology companies involved in processing your deposits and withdrawals. References to payment brands familiar to Pakistani users (such as HBL, UBL, Meezan Bank or Bank Alfalah in a banking context) relate solely to technical transaction processing; such brands do not endorse mz777's gambling activities.
• Fraud prevention and risk management services: Third-party services that assist in identifying fraudulent transactions, suspicious accounts and risk indicators.
• Technology and hosting providers: Cloud infrastructure, data centre and platform technology providers who process data on our behalf under strict data processing agreements.
• Customer support technology providers: Third-party live chat and ticketing platforms used to deliver customer support services.
• Regulatory and law enforcement authorities: Competent authorities, courts or regulatory bodies where disclosure is required or permitted by applicable law, including in connection with AML/CFT reporting obligations.
• Professional advisers: Legal, accounting and auditing professionals engaged by mz777, subject to professional confidentiality obligations.

As an international online gaming platform, mz777 may store and process personal data in countries outside your country of residence, including countries that may have different data protection standards from those in your jurisdiction. When we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data, including contractual protections with data processors and service providers.

Pakistani users acknowledge that their data may be processed in jurisdictions outside Pakistan. mz777 applies data security standards and contractual protections to all international data transfers, but users should be aware that the legal framework applicable to data processing may differ from Pakistan's domestic legal standards.

mz777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship and for a defined period following account closure, in accordance with AML record-keeping requirements.
• KYC and identity documents: Retained for the period required by applicable AML/CFT regulations, which typically extends for a minimum of five (5) years from the end of the customer relationship.
• Transaction records: Retained for the period required by applicable financial crime regulations — typically a minimum of five (5) years.
• Customer support communications: Retained for a reasonable period to facilitate dispute resolution and quality assurance, typically up to three (3) years.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of prior consent status.
• Technical and usage data: Retained in aggregated or anonymised form for analytical purposes after the standard active retention period expires.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data management procedures.

mz777 uses cookies and similar tracking technologies to operate the platform, maintain session state, detect fraud, analyse usage patterns and improve the user experience. The following categories of cookies may be used:

• Strictly necessary cookies: Essential for platform operation, including session management, authentication and security functions. These cannot be disabled without affecting core platform functionality.
• Performance and analytics cookies: Used to collect anonymised or aggregated data about how users interact with the platform, enabling us to identify areas for improvement.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Fraud detection cookies: Technical identifiers used to identify and prevent fraudulent activity, including multi-accounting and unauthorised access.

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies may impair or prevent your ability to use certain platform features, including account login. mz777 does not use cross-site advertising cookies or share cookie data with advertising networks.

Subject to the applicable data protection law in your jurisdiction, you may have the following rights in respect of your personal data held by mz777. To exercise any of these rights, please contact us as set out in Section 16.

mz777 will respond to data rights requests within a reasonable timeframe in accordance with applicable law. Verification of your identity will be required before we can action any request. Certain rights may be limited where they conflict with legal obligations, including AML/CFT record-keeping requirements.

mz777 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and mz777 servers.
• Encryption of sensitive data at rest, including financial and identity information.
• Role-based access controls limiting access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular internal security reviews, vulnerability assessments and penetration testing.
• Secure data destruction procedures applied upon expiry of applicable retention periods.
• Staff training and data protection awareness programmes.

While we implement robust security measures, no method of data transmission over the internet or electronic storage system is entirely secure. mz777 cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, we will take appropriate steps in accordance with applicable law, which may include notifying affected individuals.

The mz777 platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction or the user's country of residence. mz777 does not knowingly collect personal data from minors.

If we become aware that personal data has been collected from a person under the applicable minimum age, we will take prompt steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account or provided data to mz777, please contact our support team immediately.

Pakistani users accessing mz777 should be aware of the following specific considerations regarding their personal data and the applicable legal context:

• mz777 is not registered, licensed or operating as a data controller under the laws of Pakistan, including the Personal Data Protection Bill or any related provincial legislation. Pakistani users' data is processed in accordance with the privacy laws applicable in mz777's operational jurisdictions.
• mz777 does not share user data with the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority in the ordinary course of operations.
• Where Pakistani users provide payment details for deposit or withdrawal purposes, those details are processed by regulated payment service providers. References to payment institutions familiar to Pakistani users (such as HBL, UBL, Meezan Bank, Bank Alfalah) in this context are operational references only — they do not imply endorsement of mz777's activities by those institutions.
• Pakistani users are solely responsible for understanding and complying with applicable local law regarding online gaming and the transfer of funds in connection with gaming activity. This Privacy Policy does not constitute legal advice.

mz777 reserves the right to amend, update or replace this Privacy Policy at any time. The date of the most recent update is displayed at the top of this page. We recommend that you review this Policy periodically to remain informed of how your personal data is being handled.

Where changes are material, we may notify registered users by email to the address on file. Your continued use of the platform following the publication of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and may contact us to close your account.

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the mz777 data protection team. All data rights requests will be processed in accordance with applicable law and our internal procedures. We will acknowledge your request promptly and respond within a reasonable timeframe.

Our customer support team is available 24 hours a day, 7 days a week, in both English and Urdu. Email addresses are provided as plain text only and are not clickable links.

For responsible gambling support, account self-exclusion or deposit limit adjustments, please visit our dedicated Responsible Gambling page.

For the full terms governing your use of the platform, please review our Terms & Conditions.