This Privacy Policy explains how zak555 collects, uses, stores and protects your personal data, and what rights you hold in relation to that data. We are committed to handling your information transparently and responsibly.
All personal data is stored using industry-standard encryption. HTTPS/SSL protects data in transit. We do not store passwords in plain text under any circumstances.
Your personal information is never sold to advertisers or unaffiliated third parties. Data sharing is limited strictly to what is necessary for platform operation and regulatory compliance.
You have the right to access, correct, delete and port your personal data. You can object to certain types of processing. These rights are actionable — not just stated.
Identity documents including CNIC copies are processed solely for age verification and AML compliance, stored securely and never used beyond their stated purpose.
This Privacy Policy ("Policy") is issued by the operator of the zak555 online gaming platform ("zak555", "Platform", "we", "us", "our"), accessible at https://zak555.cam. It governs the collection, processing, storage, disclosure and protection of personal data relating to all users who register, access or interact with the Platform ("User", "you", "your").
zak555 is designed as an English-language gaming platform primarily serving Pakistani users. In the course of operating the Platform and meeting our legal and regulatory obligations — including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements — we necessarily collect and process certain personal information. This Policy explains exactly what we collect, why we collect it, how long we keep it, who we share it with and what choices you have.
We operate under internationally recognised data protection standards consistent with our licensing jurisdiction's requirements. Where these standards intersect with any applicable data protection law relevant to our Users, we aim to apply the higher standard of protection.
By registering an Account on zak555, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, you should not register or continue to use the Platform.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including name, email address, date of birth, national identity number, device identifiers and transaction records. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion. |
| "Data Controller" | The zak555 Operator — the entity responsible for determining the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller, such as KYC verification providers, payment processors and cloud infrastructure partners. |
| "KYC" | Know Your Customer — identity and address verification process required before withdrawals and at other compliance trigger points. |
| "AML" | Anti-Money Laundering — legal and platform-level controls to detect and prevent financial crime. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, analytics and session management. |
| "Account" | A registered user account on the zak555 Platform. |
We collect the following categories of personal data, depending on how you interact with the Platform:
Personal data is collected through the following means:
We process your personal data on the following legal bases, depending on the purpose:
| Legal Basis | Examples of Processing |
|---|---|
| Contractual Necessity | Account creation, processing deposits and withdrawals, resolving account queries, providing access to betting and gaming services. |
| Legal Obligation | KYC identity verification, AML screening, sanctions checks, age verification, regulatory reporting to the licensing authority. |
| Legitimate Interests | Fraud detection and prevention, platform security, responsible gambling monitoring, improving platform functionality based on usage analytics. |
| Consent | Marketing communications (email/SMS/push notifications) — only where you have explicitly opted in. You may withdraw consent at any time via account settings or by contacting support. |
Your personal data is used for the following purposes:
To create, maintain and manage your Account; to authenticate your identity at login; to process deposits, withdrawals and bonuses; and to communicate account-related information to your registered email address.
To satisfy KYC and AML obligations required under the Operator's licensing conditions; to perform age verification; to screen against sanctions lists and PEP databases; and to file any reports required by the applicable licensing regulator.
To monitor betting behaviour for signs of problem gambling; to implement deposit, loss and time limits you configure; to process self-exclusion requests; and to apply cool-off periods. Your responsible gambling data is treated with particular sensitivity and is not used for marketing profiling purposes.
To detect and prevent fraudulent account activity, multiple account creation, AML violations, bonus abuse and other conduct prohibited under our Terms and Conditions; to investigate security incidents; and to maintain platform integrity.
To respond to your queries, complaints and dispute submissions; to maintain records of interactions for quality and compliance purposes.
Where you have opted in to receive marketing communications, we may send promotional information about offers, bonuses, sports betting events (including cricket, PSL, ICC tournaments and other sports) and platform updates. You can withdraw consent at any time. We do not use your data for unsolicited third-party marketing.
To analyse aggregated, anonymised usage patterns; to improve platform performance, user experience and feature development. Individual users are not identifiable from analytics outputs used for improvement purposes.
We do not sell your personal data. We share data only in the following circumstances:
zak555 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small files stored on your device. We use the following categories of cookies:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, login state management. Cannot be disabled without breaking core functionality. | No — essential |
| Functional | Remembering language preference, layout settings and responsible gambling tool configurations. | Implied by use |
| Analytics | Aggregated, anonymised data on page visits, session duration and feature usage — used to improve the Platform. | Yes |
| Marketing (where opted in) | Tracking promotional campaign effectiveness for Users who have opted in to marketing communications. | Yes — explicit opt-in only |
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. We do not use third-party advertising cookies to build cross-site behavioural profiles of our users.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our regulatory obligations. General retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of Account plus minimum 5 years post-closure (regulatory requirement). |
| KYC Identity Documents | Minimum 5 years from the date of verification or account closure, whichever is later. |
| Financial Transaction Records | Minimum 5 years from the date of transaction (AML regulatory requirement). |
| Betting & Gaming History | Duration of Account plus 5 years post-closure. |
| Support Communications | 3 years from the date of the last interaction. |
| Marketing Preference Data | Until consent is withdrawn, then promptly deleted from marketing lists (account deletion subject to standard retention above). |
| Self-Exclusion Records | Retained for the duration of the exclusion period plus an additional 5 years to prevent re-registration during any applicable cooling-off period. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
zak555 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or disclosure:
No system is infallible. While we implement robust protections, we cannot guarantee absolute security. If you suspect unauthorised access to your Account, contact support immediately at [email protected] and change your password without delay.
Subject to applicable law and our regulatory obligations (which may limit certain rights, particularly in relation to AML and fraud investigation records), you hold the following rights in relation to your personal data:
You may request a copy of the personal data we hold about you. We will respond within a reasonable period as required by applicable law.
If you believe personal data we hold about you is inaccurate or incomplete, you may request correction. Some changes require re-submission of KYC documents.
You may request deletion of your personal data where it is no longer necessary for the purpose collected. Note: regulatory retention obligations (KYC, AML) may override this right for certain data categories.
You may request your personal data in a structured, machine-readable format where technically feasible and where processing is based on consent or contract.
You may object to processing based on legitimate interests — such as certain types of marketing analytics. Objections to legally required processing (AML, KYC) cannot be accommodated.
In certain circumstances, you may request that we restrict the active processing of your data — for example, while an accuracy dispute is resolved — while we retain it in a limited state.
To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request promptly and respond within the applicable timeframe. We may require identity verification before processing certain requests to protect against unauthorised access to another person's data.
As an internationally operating platform, zak555's data infrastructure — including servers, KYC processing partners and payment gateway integrations — may be located in jurisdictions outside Pakistan. This means that your personal data may be transferred to and processed in countries that have different data protection laws from those in Pakistan.
Where such transfers occur, we apply appropriate contractual safeguards — including standard contractual clauses and data processing agreements — to ensure that your personal data receives a level of protection consistent with internationally recognised standards regardless of where it is processed.
By using the zak555 Platform, you acknowledge that your personal data may be transferred internationally as described in this Policy.
zak555 is strictly an adults-only platform. We do not knowingly collect or process personal data from any person under the age of 18, or the higher minimum age required by the applicable licensing jurisdiction. Age verification is a mandatory component of our KYC process and is enforced before any real-money activity is permitted.
If we become aware that personal data has been collected from a minor, we will immediately close the associated Account, void all transactions and delete the minor's personal data from our systems, subject to any overriding legal or regulatory obligation to retain records of the underage attempt.
The zak555 Platform does not include external links to third-party websites. However, the Platform integrates certain third-party services (such as payment processors and KYC verification tools) that operate under their own privacy policies. zak555 is not responsible for the data practices of these third-party service providers beyond the contractual obligations we impose on them as Data Processors.
References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah in the context of deposit or withdrawal methods are for user familiarity only. If you use any of these services to fund your Account, their privacy policies and terms govern the data they independently collect from that transaction. zak555 receives only the tokenised or masked transaction reference necessary for account credit and record-keeping.
We reserve the right to update or amend this Privacy Policy at any time. Where changes are material — for example, introducing a new category of data collection or a new type of processing — we will provide advance notice to registered Users via email or a prominent notice on the Platform, and update the effective date shown at the top of this document.
Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should close your Account before the change takes effect.
For all privacy-related queries — including requests to exercise your data rights, concerns about how your information is being handled, or reports of a potential data breach — please contact us as follows:
Submit all data access, correction, deletion and portability requests to:
[email protected]Subject line: "Privacy Rights Request — [Your Request Type]"
We aim to acknowledge all privacy requests within 72 hours and provide a substantive response within 30 days. Complex requests may require additional time, and we will notify you if an extension is needed.
Do not send sensitive personal documents (CNIC scans, bank statements) via unencrypted email. Use the secure document upload in your Account dashboard for KYC submissions only.
For related information, please also review our Terms & Conditions and Responsible Gambling policy.
We only send marketing communications where you have explicitly opted in. Withdrawing consent is instant — via account settings or by emailing us — and we honour it without delay.
We do not keep data indefinitely. Retention periods are tied to regulatory obligations and operational necessity. Once no longer needed, data is securely deleted or anonymised.
Data rights requests are acknowledged within 72 hours and responded to within 30 days. We make it straightforward — no labyrinthine processes — just contact support with your request type.
Our support team is here to help with any privacy query, data access request or account concern — in English, with Urdu assistance available on request.