mz777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is issued by the operator of the mz777 online casino and sports betting platform, accessible at mz777.biz (referred to throughout this document as "mz777", "we", "us", or "our"). mz777 operates as the data controller in respect of all personal information collected from players and visitors through the mz777 platform.

mz777 is licensed under an internationally recognised gaming regulatory framework. Our licensing obligations impose mandatory data protection, anti-money laundering, and Know Your Customer standards that directly shape how we collect and process personal data — standards that are, in several respects, more stringent than general commercial data protection requirements.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you can contact mz777's data support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the mz777 platform — with Urdu-speaking agents available during peak Pakistan Standard Time hours.
• Email: [email protected] — for written data subject requests, formal privacy complaints, and correspondence requiring a documented response trail.

mz777 is committed to responding to all data-related queries within a reasonable timeframe and, in any event, within the periods required by our applicable regulatory framework.

mz777 collects personal data across several categories, depending on the nature of your interaction with the platform. The following table outlines the categories of data we collect and the primary source of each category:

mz777 uses the personal data it collects for the following purposes:

3.1 Account Management & Service Delivery

We use your registration data and account activity information to create and maintain your mz777 player account, authenticate your identity at login, process deposits and withdrawals, provide access to casino games and sports betting markets, and deliver the full range of mz777 platform services to you as a registered player.

3.2 Identity Verification & Anti-Money Laundering Compliance

mz777's gaming licence requires us to verify the identity of all players before processing withdrawal requests, and to screen player information against relevant sanctions lists and politically exposed persons (PEP) databases. We use KYC data — including your CNIC and supporting documents — for these mandatory compliance purposes. This processing is a legal obligation under our licensing framework and cannot be waived or opted out of.

3.3 Fraud Prevention & Platform Security

We analyse technical data, transaction patterns, and account activity to detect and prevent fraud, money laundering, duplicate account creation, and other forms of prohibited conduct. IP addresses, device fingerprints, and login history are used to identify suspicious access patterns and to protect the security of your account and the integrity of the mz777 platform as a whole.

3.4 Responsible Gaming

mz777 uses your gaming and betting activity data, together with any responsible gaming settings you have configured on your account, to monitor for indicators of harmful gambling behaviour and to enforce the limits and restrictions you have imposed. Where our responsible gaming systems detect patterns that may indicate problem gambling, we may contact you proactively to offer support tools — this processing is in your legitimate interest and is required by our licensing obligations.

3.5 Customer Support

Communications data, including live chat transcripts and email correspondence, is retained so that our support team can provide informed, consistent assistance across multiple interactions and so that formal complaints can be properly investigated and resolved.

3.6 Marketing Communications

Where you have given explicit consent, mz777 may use your email address or mobile number to send you information about promotions, new games, and special offers relevant to your gaming preferences on the platform. You may withdraw consent for marketing communications at any time by updating your notification preferences in Account Settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

3.7 Platform Improvement & Analytics

Aggregated, anonymised data derived from player activity is used to improve platform performance, optimise the game catalogue, develop new features, and improve the overall mz777 player experience. Individual players cannot be identified from the aggregated data used for analytics purposes.

mz777 processes personal data under the following lawful bases, as applicable to each processing purpose:

• Contractual Necessity: Processing your registration data, managing your account, processing transactions, and delivering gaming and betting services are all necessary for the performance of the contract between you and mz777 — i.e., the Terms & Conditions you accepted at registration.
• Legal Obligation: KYC identity verification, AML transaction screening, sanctions checking, age verification, and regulatory reporting are all carried out to comply with mz777's mandatory legal and licensing obligations. This processing cannot be refused by the player without consequential account restrictions.
• Legitimate Interests: Fraud detection, platform security monitoring, responsible gaming monitoring, customer support record-keeping, and anonymised analytics are carried out on the basis of mz777's legitimate interest in maintaining a safe, fair, and compliant platform. We have assessed that these legitimate interests are not overridden by your privacy rights in the context of an internationally licensed gaming platform.
• Consent: Marketing communications are sent only where you have given your explicit, freely given, and informed consent. You may withdraw this consent at any time without consequence to any other aspect of your account.

The mz777 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure gaming experience. The categories of cookies used by mz777 are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your account authentication state, and enable core platform functionality such as game loading and wallet balance display. Essential cookies cannot be disabled without preventing you from using the mz777 platform.
• Analytics Cookies: These cookies collect aggregated information about how players navigate the mz777 platform — which pages are visited most frequently, where players spend the most time, and how the platform is being used across different device types. This data is used in anonymised form to improve platform performance and user experience.
• Functional Cookies: These cookies remember your platform preferences — such as your preferred language, display settings, and responsible gaming configurations — so that you do not need to reconfigure them at each login.
• Security Cookies: These cookies support mz777's fraud detection systems by helping identify unusual login patterns and suspicious account activity. They form part of the platform's multi-layer security architecture.

You can manage cookie preferences through your browser settings. Please note that disabling essential or security cookies will materially affect your ability to use the mz777 platform and may prevent you from logging in or accessing certain features.

mz777 may share your personal data with the following categories of third parties:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, Mastercard, and our Cash OTC processing partners receive the minimum transaction data necessary to process your deposits and withdrawals. These partners are contractually bound to use your data only for the purpose of processing your mz777 transactions.
• Identity Verification Providers: mz777 uses third-party KYC and AML screening services to verify player identities, screen against sanctions lists, and meet our regulatory obligations. These providers process your identity documents and personal details under strict contractual data processing agreements.
• Game Software Providers: Third-party casino game developers and live dealer providers may receive anonymised session data necessary to deliver their games through the mz777 platform. Individual player personal information is not shared with game providers except where required by the game's specific technical operation.
• Regulatory and Law Enforcement Authorities: mz777 is required by its gaming licence and by applicable law to share information with regulatory authorities, law enforcement agencies, and financial intelligence units where required — for example, in connection with suspicious transaction reporting under anti-money laundering regulations. Such sharing does not require your consent.
• Group Companies and Platform Infrastructure Providers: Where mz777 uses affiliated companies or contracted technology partners to operate platform infrastructure — including cloud hosting, data storage, and cybersecurity services — those entities may have access to personal data in the course of providing those services. They are bound by data processing agreements that restrict their use of personal data to the services they are providing for mz777.

Given that mz777 operates under an international gaming licence and uses third-party service providers that may be located in various jurisdictions, some personal data processed by mz777 may be transferred to, stored in, or processed in countries outside Pakistan. Where such transfers occur, mz777 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that bind the recipient to process personal data only for specified purposes and to apply equivalent data protection standards to those mz777 applies itself.
• Assessment of the data protection framework of the destination country, including any applicable adequacy decisions or equivalent safeguards recognised by mz777's licensing authority.
• Technical measures — including encryption in transit and at rest — that protect transferred data from unauthorised access regardless of the jurisdiction in which it is stored.

If you would like more information about the specific safeguards applied to any international data transfer in connection with your mz777 account, please contact us via live chat or at [email protected]

mz777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal and licensing obligations, and to defend against any legal claims that may arise. The following general retention guidelines apply:

Upon expiry of the applicable retention period, mz777 will securely delete or anonymise your personal data in accordance with our data deletion procedures. Anonymised data may be retained indefinitely for aggregated analytics purposes without any identifying linkage to you as an individual player.

As a mz777 player, you have the following rights in relation to your personal data. These rights are subject to applicable legal limitations and, in some cases, to mz777's overriding licensing and regulatory obligations:

• Right of Access: You have the right to request a copy of the personal data mz777 holds about you. mz777 will provide this within 30 days of receiving a valid request, at no charge for standard requests.
• Right to Rectification: If any personal data mz777 holds about you is inaccurate or incomplete, you have the right to request correction. Where the inaccuracy relates to KYC information, updated documentation will be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. Note that erasure requests cannot be fulfilled where mz777 is required by law or licensing obligation to retain the data in question — for example, transaction records and KYC documents held for AML compliance.
• Right to Restriction: You may request that mz777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is carried out on the basis of your consent or on the basis of a contract, and where the processing is automated, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of mz777's legitimate interests, including direct marketing and profiling for marketing purposes. Objection to marketing communications will be honoured unconditionally. Objection to other legitimate interest processing will be considered, but may be overridden where mz777 can demonstrate compelling legitimate grounds.

To exercise any of these rights, please contact mz777 via live chat on the platform or by email to [email protected]. mz777 may need to verify your identity before processing any data rights request in order to protect against fraudulent requests.

mz777 employs multiple technical and procedural measures to prevent underage access, including age declaration at registration, mandatory CNIC-based identity verification before withdrawal processing, and algorithmic monitoring for behavioural indicators that may suggest underage use of the platform.

Where mz777 becomes aware, or has reasonable grounds to suspect, that an account has been registered by or used by a person under the age of 21, mz777 will immediately:

• Suspend the account and restrict all further transactions and gameplay.
• Initiate an age verification investigation.
• Where underage use is confirmed, void all transactions conducted during the period of underage use and return any remaining real-money balance to its source where technically feasible.
• Permanently close the account and retain records as required by our regulatory obligations.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account with mz777, please contact us immediately via live chat or at [email protected]. mz777 treats all underage access reports as urgent priority matters and will act without delay.

mz777 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security: All data transmitted between your device and mz777's servers is encrypted using 256-bit SSL/TLS encryption, preventing interception in transit.
• Data-at-Rest Encryption: Sensitive personal data stored in mz777's systems — including identity documents, financial records, and authentication credentials — is encrypted using industry-standard cryptographic algorithms.
• Password Security: mz777 player passwords are never stored in readable form. They are processed through industry-standard one-way cryptographic hashing, meaning that even mz777's own systems cannot retrieve your original password.
• Two-Factor Authentication: mz777 offers optional two-factor authentication (2FA) via SMS for all player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even in the event that your password is compromised.
• Access Controls: mz777 internal systems operate on a strict role-based access control model. Only authorised personnel with a legitimate operational need are permitted to access personal player data, and all access is logged and audited.
• Intrusion Detection & Monitoring: mz777's systems are monitored continuously for anomalous access patterns, potential intrusion attempts, and security incidents. Our security team responds to alerts in real time, 24/7.
• Regular Security Audits: mz777 undergoes periodic independent security assessments as part of its licensing obligations, covering both technical platform security and data protection compliance.

While mz777 takes every reasonable precaution to protect your data, no online platform can provide an absolute guarantee of security. In the event of a data breach that poses a risk to your rights and freedoms, mz777 will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements and as promptly as circumstances allow.

mz777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the mz777 platform. Where changes are material — meaning they substantively affect how we use your personal data or the rights available to you — mz777 will provide reasonable advance notice via a prominent platform notification and, where practicable, via email to your registered address.

The date on which this Privacy Policy was last revised is indicated in the "Effective Date" field at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how mz777 manages your personal data. The current version of this Privacy Policy is always accessible at mz777.biz/privacy-policy.