Privacy Policy — cz555 Platform

1 Introduction

This Privacy Policy ("Policy") describes how cz555 (the "Platform", "we", "us", "our") collects, processes, stores, shares and protects personal data relating to users ("you", "User", "Account Holder") of the cz555 online gaming platform accessible at cz555.cam.

cz555 operates as an English-language online gaming platform offering sports betting, live casino and slot games. The Platform serves users across Pakistan, including those located in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities. This Policy applies to all personal data we process in connection with your use of the Platform, regardless of where you are located.

By registering an account, making a deposit, accessing any feature of the Platform or submitting personal data through any channel, you acknowledge that you have read and understood this Policy and that your data will be processed as described herein.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial information, identification documents and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, cz555.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under contractual instruction.
• "KYC Data" means identity and verification documents submitted by the User as part of the Know Your Customer process, including government-issued ID, proof of address and payment ownership evidence.
• "Cookies" means small data files placed on your device by the Platform's web infrastructure to support functionality, analytics and session management.
• "Account" means the individual user profile registered by a User on the cz555 Platform.
• "Sensitive Data" means categories of personal data that carry heightened processing obligations, such as data related to health, financial status or criminal records, where applicable.

3 Data Controller

For the purposes of this Policy, cz555 acts as the Data Controller in respect of personal data collected and processed through the Platform. As Data Controller, cz555 determines the purposes for which personal data is collected and the manner in which it is processed.

Where cz555 engages third-party service providers to process data on its behalf — for example, KYC verification partners, payment processors or fraud detection services — those parties act as Data Processors and are contractually required to process data only in accordance with cz555's instructions and to maintain appropriate security standards.

Contact details for data-related enquiries are set out in Section 17 (Contact Us) of this Policy.

4 Personal Data We Collect

cz555 collects the following categories of personal data in connection with your use of the Platform:

We do not intentionally collect special categories of sensitive data (such as health, political opinions or biometric data) unless specifically required by regulatory obligations and subject to appropriate safeguards.

5 How We Collect Your Data

cz555 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device fingerprinting, session activity and cookie data;
• Third-party sources: Data received from identity verification services, fraud detection providers, payment processors (such as those handling Easypaisa, JazzCash or Raast transactions on behalf of the Platform) and publicly available records where relevant to AML obligations;
• Responsible gambling monitoring: Behavioural indicators observed during Platform use that may trigger responsible gambling reviews or account flags under our duty-of-care obligations.

References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah in this context describe payment processing channels only. None of these providers acts as a Data Controller in relation to your cz555 account and none endorses, supports or is affiliated with gambling activities on this Platform.

6 Legal Basis for Processing

cz555 processes personal data on the following legal grounds, applied on a purpose-by-purpose basis:

• Contractual necessity: Processing required to perform the contract with you — registering your account, processing deposits, executing withdrawals and delivering gaming services;
• Legal obligation: Processing required to comply with anti-money laundering (AML) requirements, KYC obligations, licensing conditions and other applicable regulatory requirements imposed by the jurisdiction in which the Platform holds its gaming licence;
• Legitimate interests: Processing necessary for the Platform's legitimate operational interests, including fraud prevention, security monitoring, responsible gambling monitoring, analytics and service improvement — provided those interests are not overridden by your rights;
• Consent: Where processing is based on your freely given, specific and informed consent, such as for optional marketing communications (where offered). You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 How We Use Your Personal Data

cz555 uses the personal data we collect for the following purposes:

• Creating and managing your Account, including login authentication and account security;
• Verifying your identity and age as part of the KYC process prior to activating full account functionality or processing withdrawals;
• Processing deposits and withdrawal requests, including communicating with payment processors;
• Administering promotional offers, bonus awards and VIP loyalty tier management;
• Monitoring betting and gaming activity for the purposes of fraud detection, AML compliance and responsible gambling safeguards;
• Providing customer support through live chat and email channels in English and Urdu;
• Sending transactional communications — account confirmations, deposit receipts, withdrawal notifications, security alerts and KYC status updates;
• Sending marketing communications where you have opted in to receive them and have not subsequently withdrawn consent;
• Conducting statistical analysis and platform performance monitoring to improve the user experience;
• Complying with legal and regulatory obligations, including responding to lawful requests from competent authorities.

8 Data Sharing & Third-Party Disclosure

cz555 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents, screen against sanctions and politically exposed person (PEP) lists, and confirm age;
• Payment processors: Services that facilitate the processing of deposits and withdrawals, including those that may interface with Easypaisa, JazzCash, Raast or banking partners. Data shared is limited to what is necessary for transaction completion and AML screening;
• Fraud and security providers: Services that analyse technical and behavioural signals to detect fraudulent activity, account takeover attempts and suspicious betting patterns;
• Responsible gambling technology providers: Where third-party systems assist in monitoring for problem gambling indicators or administering self-exclusion lists;
• Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a lawful order, court process, regulatory inspection or AML reporting obligation;
• Group entities and successors: In the event of a business restructuring, acquisition or merger, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third-party Data Processors engaged by cz555 are subject to contractual data processing agreements that limit their use of your data to specified purposes and require them to maintain appropriate security standards.

9 International Data Transfers

Given the nature of online gaming operations, personal data processed by cz555 may be transferred to, stored in, or processed in countries outside your own jurisdiction, including countries that may not offer the same level of data protection as your country of residence.

Where such transfers occur, cz555 takes steps to ensure that appropriate safeguards are in place — such as contractual obligations binding the receiving party to handle data consistently with this Policy and applicable data protection standards. Users in Pakistan should be aware that Pakistani data protection law is evolving and that the Platform does not represent compliance with any specific Pakistani legislative framework. Users accept this cross-border processing as a condition of using the Platform.

10 Cookies & Tracking Technologies

cz555 uses cookies and similar tracking technologies (including local storage and session tokens) on the Platform. These technologies serve the following purposes:

• Essential cookies: Required for basic Platform functionality — login sessions, security tokens, load balancing and fraud prevention signals. These cannot be disabled without preventing core features from operating;
• Analytics cookies: Used to measure aggregate traffic patterns, page performance and user flow through the Platform. Data collected is statistical in nature and not linked to individual identities for analytics purposes;
• Functional cookies: Store user preferences such as language settings, display configurations and responsible gambling alert preferences to improve the experience on return visits.

Most modern browsers allow you to manage cookie settings. Please note that disabling essential cookies may impair or entirely prevent your ability to use the Platform. The Platform does not operate third-party advertising cookie networks that share data with external marketing platforms.

11 Data Retention

cz555 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your Account's active status plus the period required by applicable AML and licensing regulations following account closure (typically a minimum of five years from the date of account closure, subject to the specific jurisdiction);
• KYC documents: Retained in accordance with AML regulatory requirements, which typically mandate retention for a minimum of five years following the end of the customer relationship;
• Transaction records: Retained as required by applicable financial reporting and AML obligations;
• Support communications: Retained for a reasonable operational period to support dispute resolution and quality assurance, typically two to three years;
• Technical and session data: Retained for shorter periods consistent with security monitoring and fraud detection purposes, typically up to 12 months unless specific incidents require longer retention.

On expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. We do not retain identifiable personal data beyond the minimum necessary period.

12 Your Rights

Subject to applicable law and to verification of your identity, you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention;
• Right to restrict processing: You may request that we limit processing of your data in certain circumstances, such as while accuracy is disputed;
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your fundamental rights override those interests;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please note that certain rights are subject to exceptions — for example, we cannot delete data we are legally required to retain under AML or licensing obligations. We will explain any applicable limitations when responding to your request.

13 Data Security

cz555 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include, but are not limited to:

• Encryption of data in transit using TLS (Transport Layer Security) protocols;
• Encryption at rest for sensitive data categories including KYC documents and payment instrument details;
• Access controls limiting data access to authorised personnel on a role-based, need-to-know basis;
• Session security controls including two-factor authentication options for account access;
• Regular review of security practices and third-party processor security requirements.

While cz555 applies industry-standard security practices, no online system can be guaranteed to be entirely secure. In the event of a data security incident that is likely to result in a high risk to the rights and freedoms of affected users, we will take appropriate steps to investigate and, where required by applicable law, notify affected individuals and relevant authorities within required timeframes.

You are responsible for maintaining the security of your own account credentials. Do not share your password with any third party. If you suspect your account has been compromised, contact support via live chat immediately.

14 Children's Privacy

The cz555 Platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the applicable licensing jurisdiction. We do not knowingly collect or process personal data from persons under the minimum eligible age.

Where it is discovered that personal data has been collected from a person who was below the minimum eligible age at the time of registration, the Account will be closed, any balance held will be handled in accordance with applicable regulatory requirements, and the data will be processed in line with our legal obligations. Where appropriate, we may report the matter to relevant authorities.

If you have reason to believe that a minor has registered an account on cz555, please contact our support team immediately.

15 Third-Party Links & External Services

The cz555 Platform may reference or display links to third-party services in the context of payment processing, responsible gambling information or regulatory compliance. cz555 does not control the privacy practices of those third-party services and accepts no responsibility for their data collection or processing activities.

Where you interact with third-party payment channels — for example, completing a transaction via Easypaisa, JazzCash or a bank's online portal — that interaction is governed by the respective provider's own privacy policy and terms of service. cz555 is not a party to those interactions and has no visibility into how those providers process data beyond what is communicated to us for transaction completion purposes.

16 Amendments to This Policy

cz555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will update the "Last reviewed" date at the top of this page and, where reasonably practicable, notify registered Account Holders via their registered email address or a prominent Platform notice.

Your continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may contact support to request account closure.

The current version of this Policy is always available at cz555.cam/privacy-policy.

17 Contact Us

For any questions, requests or concerns relating to this Privacy Policy or the processing of your personal data by cz555, please contact us through the following channels:

• Live Chat: Available 24/7 within the Platform — English and Urdu support available. This is the fastest channel for urgent data or account security matters.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide sufficient detail for us to identify your account securely.

We aim to acknowledge written privacy requests within a reasonable period. Complex requests — for example, full subject access requests involving large volumes of data, or erasure requests requiring legal review — may take longer. We will communicate expected timelines when acknowledging your request.

cz555 serves players across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Support communications may be conducted in English or Urdu at your preference.