zt22 Privacy Policy

This Privacy Policy ("Policy") describes how zt22 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data belonging to users ("you", "the Player") who access or use the zt22 online gaming platform available at zt22.org.

zt22 is committed to safeguarding the privacy and personal data of all players across Pakistan — including those in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every other city from which our platform is accessed. We understand that trust is the foundation of any long-term relationship, and responsible data handling is central to earning and maintaining that trust.

This Policy applies to all personal data processed through the zt22 website, mobile-optimised interfaces, customer support channels, payment processing systems, and any other services operated by zt22. By registering an account or using the platform in any capacity, you confirm that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the zt22 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Where any conflict arises between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail on matters of contractual obligation; this Policy shall govern on matters of data protection.

For the purposes of applicable data protection legislation, zt22 acts as the data controller in respect of all personal data collected through the platform. As data controller, zt22 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

zt22 operates under applicable international gaming regulations and processes personal data in accordance with globally recognised data protection standards, including principles aligned with the General Data Protection Regulation (GDPR) framework. While Pakistan is developing its own national data protection legislation, zt22 proactively applies GDPR-aligned standards to all player data as a matter of best practice and player protection.

zt22 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the categories of personal data we process and provides examples within each category:

zt22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is required for identity verification), or health data — except where a player voluntarily discloses health-related information in the context of a responsible gaming request (e.g., disclosing a gambling addiction in a self-exclusion application). Such disclosures are treated with the highest level of confidentiality and are processed solely for the purpose of implementing the requested player protection measure.

zt22 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a zt22 account, you voluntarily provide your full name, date of birth, Pakistani mobile number, email address, and city of residence. This data is collected through our secure registration form.
• KYC Verification: During the identity verification process, you submit copies of your CNIC and, where required, proof of address or payment method documentation. These documents are processed by our identity verification system and securely stored.
• Deposit & Withdrawal Transactions: When you make PKR deposits via EasyPaisa, JazzCash, HBL, UBL, or Meezan Bank, our payment processing partners transmit transaction confirmation data to zt22 to credit your account. This includes your registered mobile number, transaction reference, and amount.
• Platform Usage: As you navigate the zt22 platform — placing cricket bets, spinning slots, or playing live casino — our systems automatically record your gaming activity, session data, and account interactions.
• Cookies & Device Signals: Our platform uses cookies and similar tracking technologies to collect technical data about your device and browsing behaviour. See Section 10 for full details.
• Customer Support: When you contact our support team via live chat or email, we collect the content of your communications and any personal information you share during the interaction.
• Third-Party Sources: In limited circumstances, zt22 may receive data about you from fraud prevention databases, identity verification bureaus, or payment processors to cross-verify information you have provided. We do not purchase marketing lists or receive data from social media platforms.

zt22 processes your personal data only where a clear and lawful legal basis exists. The purposes for which we process your data, together with the corresponding legal basis for each, are set out below:

Where zt22 relies on your consent as the legal basis for processing (such as marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

zt22 integrates with Pakistan's leading digital payment networks — including EasyPaisa (Telenor/Easypaisa Bank), JazzCash, HBL, UBL, and Meezan Bank — to facilitate instant PKR deposits and withdrawals for Pakistani players. Given the sensitive nature of financial data, zt22 applies a heightened standard of care to all payment-related personal information.

• Your registered Pakistani mobile number (used as your EasyPaisa or JazzCash wallet identifier) is stored in encrypted form within zt22's secure database and is used exclusively for payment processing, account verification, and OTP delivery.
• Bank account details submitted for HBL, UBL, or Meezan Bank withdrawals are encrypted at rest and in transit, and are accessible only to authorised payment processing personnel.
• All payment transaction records are retained for a minimum period of five (5) years in compliance with applicable financial record-keeping requirements, even after account closure.
• Payment data is never used for marketing profiling or shared with advertising networks.
• In the event that zt22's payment processors are changed or updated, your payment data will be migrated using secure data transfer protocols and you will be notified of any material changes to payment processing arrangements.

For large PKR withdrawals exceeding Rs. 50,000, zt22 may conduct enhanced due diligence as part of our Anti-Money Laundering (AML) obligations. This may involve requesting additional documentation that confirms the source of deposited funds. Such reviews are conducted by trained compliance staff and are treated with strict confidentiality.

zt22 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the limited and specific circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

• Payment Processors: EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank receive the minimum financial data required to process your PKR deposits and withdrawals. These providers are contractually bound to handle your data in accordance with applicable financial regulations and data protection standards.
• Identity Verification Providers: zt22 uses reputable third-party KYC verification services to validate CNIC documents and confirm player age. These providers process identity data solely for verification purposes and are prohibited from retaining or repurposing your data.
• Game Software Providers: zt22's slot, live casino, and cricket betting content is delivered by licensed third-party game providers. These providers may receive technical session data (e.g., game round IDs, wagering amounts) to ensure accurate game delivery and results. They do not receive your personally identifiable information beyond what is technically necessary.
• Fraud Prevention Services: In cases of suspected fraud, account abuse, or AML concerns, zt22 may share relevant data with specialist fraud prevention databases and compliance partners to investigate and prevent financial crime.
• Regulatory & Legal Authorities: zt22 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where legally required to do so. Such disclosures are made only upon receipt of a valid legal request and to the minimum extent required by law.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving zt22, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the applicable privacy arrangements before it takes effect.

All third parties with whom zt22 shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose other than that for which it was shared.

zt22 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data (for example, statistical gaming data stripped of all personally identifiable information) may be retained indefinitely for business analytics and platform improvement purposes.

zt22 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security architecture includes the following controls:

• TLS Encryption in Transit: All data transmitted between your device and zt22's servers is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring that your login credentials, payment data, and personal information cannot be intercepted during transmission.
• AES-256 Encryption at Rest: Sensitive data stored in zt22's databases — including CNIC numbers, EasyPaisa/JazzCash account references, and financial identifiers — is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data is restricted to authorised zt22 personnel on a strict need-to-know basis. All internal access is logged, audited, and subject to regular review.
• Two-Factor Authentication: zt22's internal administrative systems require multi-factor authentication for all staff access to databases containing player personal data.
• Regular Security Audits: Our platform undergoes regular independent security assessments, penetration testing, and vulnerability scanning to identify and remediate potential weaknesses before they can be exploited.
• Fraud Detection Systems: zt22 operates real-time fraud detection and anomaly monitoring systems that flag suspicious account activity, unusual login patterns, and potentially compromised sessions for immediate investigation.
• Secure Payment Environment: All EasyPaisa, JazzCash, and bank transfer integrations operate within PCI-DSS aligned payment environments to protect your financial data throughout the transaction lifecycle.

While zt22 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your zt22 account password and for immediately notifying our support team if you suspect any unauthorised access to your account.

zt22 uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, and analyse how Pakistani players interact with our services. A cookie is a small text file placed on your device when you visit our website.

Essential and security cookies are strictly necessary for the platform to function and cannot be disabled. Functional and analytics cookies can be managed through your browser settings. Note that disabling certain cookies may affect the functionality and personalisation features of the zt22 platform.

zt22 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites to serve you advertisements.

As a zt22 player, you hold the following rights in relation to your personal data. zt22 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, contact our support team at [email protected].

zt22 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified within the initial 30-day period. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

zt22 strictly prohibits access to the platform by individuals under the age of 21. Our platform offers real-money gaming services and is designed exclusively for adults aged 21 and above. This is not merely a contractual requirement — it is a firm ethical commitment that zt22 enforces through active technical and procedural controls.

• Every player must submit a valid Pakistani CNIC during the KYC verification process. The CNIC date of birth is used to confirm that the applicant is aged 21 or older at the time of registration.
• Where a player's age cannot be conclusively verified from the CNIC submission, the account is suspended and placed under enhanced review until additional age-confirming documentation is provided.
• zt22 does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. If we become aware that personal data of a minor has been collected, it will be permanently deleted without delay and the associated account will be closed.
• If you are a parent or guardian and have reason to believe that a person under 21 has created a zt22 account using false information, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

zt22 operates internationally, and your personal data may be stored and processed in countries outside Pakistan where our servers, data centres, or service providers are located. In all cases, zt22 ensures that such international transfers are conducted with appropriate safeguards to maintain a level of data protection equivalent to the standards described in this Policy.

Safeguards used for international data transfers include:

• Standard contractual clauses (SCCs) approved by relevant data protection authorities, incorporated into agreements with all international data processors.
• Data processing agreements that bind all recipients to GDPR-aligned data handling obligations, including restrictions on onward transfer, sub-processing, and data retention.
• Technical encryption measures that ensure data remains protected regardless of the jurisdiction in which it is stored or processed.

zt22 does not transfer personal data to countries or jurisdictions that lack adequate legal frameworks for data protection unless the specific safeguards above are contractually in place. If you have questions about international transfers of your data, please contact [email protected].

zt22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. The updated Policy will be published on this page with a revised effective date at the top of the document.

For material changes — that is, changes that significantly affect how your personal data is collected or used — zt22 will provide advance notice to registered players via email or an in-platform notification at least 14 days before the change takes effect. For minor or administrative updates (such as correcting typographical errors or clarifying existing language without changing its effect), the Policy may be updated without prior notice.

Your continued use of the zt22 platform after the effective date of any Policy update constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way zt22 handles your personal data, our dedicated Data Protection team is available around the clock to assist you — including during PSL season, Eid ul-Fitr, Eid ul-Adha, and all public holidays in Pakistan.

You can reach us at: [email protected] — Available 24 hours, 7 days a week.

zt22 aims to resolve all data protection queries and complaints within 14 working days of receipt. Complex matters involving data access requests, erasure, or cross-jurisdictional issues may take up to 30 calendar days. You will always be kept informed of the status of your request.

If you are not satisfied with zt22's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to you. Pakistani players may also seek guidance from Pakistan's emerging data protection regulatory framework as it develops.