zd22com Privacy
Policy

1.1 This Privacy Policy ("Policy") describes how zd22com ("zd22com," "we," "us," or "our") collects, processes, stores, and protects personal data relating to individuals ("Members," "you," or "your") who register for or use the zd22com online gaming and sports betting platform, accessible at zd22com.app.

1.2 zd22com is committed to handling your personal data responsibly and in accordance with applicable data protection laws and the requirements of our international gaming licence. This commitment to data privacy is not incidental — it is a core operational principle of the zd22com platform, and one that informs every system, process, and policy relating to Member information.

1.3 By registering a zd22com Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must refrain from creating an Account or using the zd22com platform.

1.4 This Policy should be read in conjunction with the zd22com Terms & Conditions, which form part of the overall legal framework governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

2.1 For the purposes of applicable data protection legislation, zd22com is the data controller in respect of personal data collected from Members of the zd22com platform. As data controller, zd22com is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully and transparently.

2.2 zd22com operates under a valid international gaming licence. The licensing authority under which zd22com operates also imposes specific data protection and KYC (Know Your Customer) obligations with which zd22com is required to comply — including mandatory data retention periods, identity verification procedures, and anti-money laundering reporting obligations.

2.3 For all data protection enquiries, access requests, or complaints relating to the handling of your personal data by zd22com, please contact our Privacy team using the details set out in Section 15 of this Policy.

3.1 zd22com collects personal data from Members through several channels — directly from Members during registration and account operation, automatically through use of the platform, and from third parties in limited circumstances as described below.

When you create a zd22com Account, we collect the information you provide directly, including:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — you must be 21 or older to register)
• Pakistani mobile number (used as primary contact and for JazzCash/EasyPaisa linkage)
• Email address (where provided)
• Residential address (city, province, and postal code — Karachi, Lahore, Islamabad, Faisalabad, and all other Pakistani cities)
• CNIC number (for identity verification purposes during KYC)
• Username and encrypted password credentials
• Preferred payment method details (mobile wallet numbers, bank account information)

To comply with anti-money laundering requirements and our licensing obligations, we collect copies of identity documents including your CNIC, passport, or driving licence; proof of residential address; and, where required, proof of source of funds. These documents are processed securely and retained only for as long as legally required.

We collect a complete record of all financial activity on your zd22com Account, including deposit amounts and timestamps, payment methods used, withdrawal requests and outcomes, wagering history (sports bets, casino game rounds, slot sessions), balance movements, and bonus transactions.

When you access zd22com, our systems automatically collect: your IP address; device type, model, and operating system; browser type and version; session duration and timestamps; pages visited and features used; and geolocation data (city-level, not precise coordinates). This data is used for security monitoring, fraud prevention, and platform optimisation.

Where you contact zd22com's support team — via live chat, email, or any other channel — we retain records of those communications, including the content of messages, the nature of the enquiry, and the outcome of any resolution process. These records are retained for quality assurance and regulatory compliance purposes.

4.1 zd22com uses your personal data solely for the purposes described in this Policy. We do not use your data in ways that are incompatible with the original purpose of collection. The primary purposes for which we process Member data are set out in the table below:

4.2 Where zd22com intends to use your personal data for a purpose not listed in this table, we will notify you in advance and, where required by law, seek your explicit consent before proceeding.

5.1 zd22com processes your personal data on one or more of the following legal bases, depending on the specific purpose and nature of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the contract formed when you accept the zd22com Terms & Conditions — including account management, game delivery, payment processing, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, anti-money laundering reporting, responsible gaming obligations imposed by our licensing authority, and data retention mandates.
• Legitimate Interests: Processing necessary for zd22com's legitimate business interests, including fraud prevention, platform security, analytics, and internal reporting — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we seek your consent for specific processing activities (such as marketing communications), we will do so clearly and will honour your right to withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 zd22com uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that enable certain platform functions, enhance security, and help us understand how Members use the platform.

6.2 We use the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functions including login session management, security enforcement, and payment processing. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Enable enhanced features such as language preferences, remembered login credentials (where you have opted for "Stay Logged In"), and personalised game recommendations based on your play history.
• Analytics Cookies: Collect anonymised or pseudonymised data about how Members navigate the platform — pages visited, time spent, features used — to help us improve the zd22com experience. No personally identifiable information is used for analytics purposes without your consent.
• Security Cookies: Support fraud detection, session authentication, and the identification of unusual access patterns that may indicate account compromise.

6.3 You may manage cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent core platform functions — including login and payment processing — from operating correctly.

7.1 zd22com does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared with third parties only in the specific, limited circumstances described below:

• Payment Processors: JazzCash, EasyPaisa, Raast, and banking partners (HBL, UBL, Meezan Bank, 1LINK) receive the minimum data necessary to process your transactions. These processors are contractually bound to handle your data in compliance with applicable data protection standards.
• KYC and Identity Verification Providers: Third-party identity verification services receive document copies and biometric data solely for the purpose of verifying your identity in accordance with our licensing obligations.
• Game Studios and Software Providers: Casino game providers receive anonymised session and wagering data necessary for game operation, fairness auditing, and RNG certification. No personally identifiable information is shared with game studios beyond what is operationally required.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, our gaming licence conditions, or a valid legal order, zd22com will disclose Member data to regulatory bodies, law enforcement agencies, or anti-money laundering authorities. Such disclosures are made strictly in accordance with legal requirements and are not voluntary commercial data sharing.
• Professional Advisers: Legal counsel, auditors, and financial advisers may access Member data on a strictly confidential, need-to-know basis where required for the conduct of their professional duties.

8.1 Given that zd22com holds an international gaming licence and works with globally-certified game studios and payment processors, some of your personal data may be processed by parties located outside Pakistan. Where such international transfers occur, zd22com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

8.2 Safeguards for international data transfers may include: contractual data processing agreements incorporating standard data protection clauses; transfer of data only to jurisdictions that maintain adequate data protection standards; and technical security measures that apply regardless of where data is physically processed.

8.3 For information about the specific safeguards in place for any particular international data transfer, please contact our Privacy team using the details in Section 15.

9.1 zd22com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the zd22com servers is protected by 256-bit SSL/TLS encryption. This includes login credentials, payment information, personal data submitted during KYC, and all other platform communications.
• Encryption at Rest: Sensitive personal data stored on zd22com servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Member personal data is restricted to zd22com personnel who require it for legitimate operational purposes. All staff with data access are subject to confidentiality obligations and receive data protection training.
• Intrusion Detection and Monitoring: zd22com maintains continuous monitoring of its systems for unusual access patterns, attempted breaches, and security incidents. Automated alerts are configured for suspicious activity thresholds.
• Password Security: Member passwords are stored using one-way cryptographic hashing. zd22com is technically incapable of recovering or viewing plain-text passwords — our support staff will never request your password under any circumstances.
• Two-Factor Authentication: New device login triggers SMS-based one-time code verification, adding a second layer of authentication beyond the password.
• Regular Security Audits: zd22com undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities in advance of exploitation.

9.2 Data Breach Response. In the event of a personal data breach that poses a risk to Member rights and freedoms, zd22com will notify affected Members and, where required, relevant regulatory authorities within the timeframes prescribed by applicable law. Notifications will include a description of the breach, the categories of data affected, and the steps taken to mitigate harm.

10.1 zd22com retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention guidelines apply:

10.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is securely destroyed in accordance with industry-standard data destruction procedures.

11.1 As a Member of zd22com, you hold a number of rights in relation to your personal data. These rights are described below, together with information on how to exercise each one:

11.2 To exercise any of the above rights, please contact the zd22com Privacy team at the details provided in Section 15 of this Policy. We will verify your identity before processing any rights request to prevent unauthorised access to your data. We aim to respond to all rights requests within 30 days. Where the request is complex or numerous, this period may be extended by a further 60 days, and we will notify you accordingly.

11.3 There is no charge for submitting a data subject rights request. However, where requests are manifestly unfounded or excessive — in particular due to their repetitive nature — zd22com reserves the right to charge a reasonable fee or decline to act, with written reasons provided.

12.1 The zd22com platform is strictly an adult service. Access to zd22com is prohibited for individuals under the age of 21. We do not knowingly collect, solicit, or retain personal data from any person under the age of 21.

12.2 If zd22com becomes aware that personal data has been collected from a person under the age of 21 — whether through registration fraud or any other means — we will immediately close the associated Account, delete all collected data, and report the matter to relevant authorities as required by our licensing obligations.

12.3 If you are a parent or guardian and believe that a minor under your care has accessed or registered an Account on zd22com, please contact our support team immediately using the details in Section 15. We will act on such notifications promptly and without delay.

13.1 With your consent, zd22com may send you promotional communications about platform offers, bonuses, new game launches, PSL and cricket betting promotions, seasonal campaigns, and VIP programme updates, via SMS to your registered Pakistani mobile number and/or email to your registered address.

13.2 Consent to marketing communications is entirely voluntary. Declining or withdrawing consent will not affect your ability to use any core zd22com service, access your account, make deposits, or withdraw winnings.

13.3 You may withdraw your consent to marketing communications at any time by: updating your notification preferences in your zd22com Account settings; replying "STOP" to any SMS marketing message; or contacting the zd22com support team and requesting removal from marketing communications. Opt-out requests are processed within 5 Business Days.

13.4 Even where you have opted out of marketing communications, zd22com may still send you service-related communications — such as transaction confirmations, KYC requests, security alerts, and account status updates. These are operational, not promotional, and cannot be opted out of while your account remains active.

14.1 zd22com reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, licensing requirements, or platform operations. Material changes will be communicated to Members via in-platform notifications and/or email to the registered address prior to taking effect.

14.2 The "Effective" date displayed at the top of this Policy indicates when the current version came into force. We encourage Members to review this Policy periodically to stay informed about how zd22com protects their data.

14.3 Your continued use of the zd22com platform following notification of a Policy update constitutes acceptance of the revised Policy. Where a proposed update materially diminishes your rights, we will seek your explicit consent before the change takes effect.

15.1 For all enquiries relating to this Privacy Policy, the personal data zd22com holds about you, the exercise of your data subject rights, or to raise a privacy concern or complaint, please contact the zd22com Privacy and Data Protection team using the following details:

• Email: support@zd22com.app — Please include "Privacy Enquiry" or "Data Subject Request" in the subject line.
• Live Chat: Available 24/7 through the zd22com platform — accessible from any page after logging in to your Account. Our support agents are available in both English and Urdu to assist Pakistani Members.
• Response Times: We acknowledge all privacy enquiries within 48 hours and aim to provide a substantive response within 30 days. Complex requests may take longer, and we will notify you in writing if an extension is required.

15.2 If you are not satisfied with zd22com's response to a privacy complaint, you may have the right to raise your concern with the applicable data protection supervisory authority in your jurisdiction or with the regulatory body overseeing zd22com's international gaming licence.

This Privacy Policy was last reviewed on 1 January 2026 and applies to all personal data processed by zd22com from that date. Previous versions of the Policy are available on request.