1. Who We Are
ZD22 ("we", "us", "our") is the operator of zd22.cash, an online casino and gaming platform serving players in Pakistan. When this Privacy Policy refers to "zd22", it means the company and team responsible for operating the platform and for all decisions about how your personal data is collected, stored, and processed.
We are the data controller for all personal information collected through zd22.cash. This Privacy Policy applies to all registered players, to visitors who browse zd22.cash without an account, and to anyone who contacts our support team. It covers the zd22 website, mobile site, and any applications provided under the zd22 brand.
If you have questions about how zd22 handles your data, or if you want to exercise any of your privacy rights, you can contact us at any time at [email protected].
By registering an account on zd22 and using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you disagree with how we handle your data, please do not register or continue using the platform.
2. What Personal Data We Collect
zd22 collects only the personal data that is necessary to operate the platform, verify player identity, process payments, and comply with applicable legal obligations. We do not collect data for its own sake. Below is a breakdown of what we collect and why.
| Category | Examples | Why We Need It |
|---|---|---|
| Registration Data | Full name, date of birth, email address, mobile number | Creating and managing your zd22 account; age verification |
| Identity Verification | CNIC number, CNIC copy or other government-issued ID, selfie or photo | Know Your Customer (KYC) compliance; preventing fraud and underage play |
| Financial Data | Mobile wallet number (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details, card details (last 4 digits, expiry) | Processing deposits and withdrawals in PKR |
| Transaction History | Deposit amounts, withdrawal requests, game activity records, bonus usage | Account management; fraud detection; regulatory compliance |
| Technical Data | IP address, device type, browser, operating system, session duration, pages visited | Platform security; fraud prevention; improving user experience |
| Communications | Support emails, live chat transcripts, feedback submissions | Resolving player queries; quality assurance |
| Marketing Preferences | Opt-in or opt-out status for promotional emails and notifications | Sending promotional communications only where consent is given |
3. How We Collect Your Data
zd22 collects your personal data through several channels:
- Directly from you — when you register an account, complete identity verification, make a deposit, contact support, or participate in a promotion.
- Automatically — as you use the platform, our systems log technical data including your IP address, device information, and browsing behaviour through cookies and similar tracking technologies (see Section 8).
- From payment processors — when you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the relevant provider shares transaction confirmation data with zd22 to verify payment status.
- From identity verification services — if we use a third-party KYC service to assist with identity verification, that service may provide us with verification status and supporting data.
4. How and Why We Use Your Data
zd22 uses your personal data only for the purposes described in this section. We do not use your data for anything beyond what is set out here without your explicit consent.
We use your registration and identity data to create and manage your zd22 account, process your deposits and withdrawals in PKR, track your game history, apply bonuses, and respond to your support requests. Without this data, we cannot provide the service.
zd22 is obligated to verify the identity of players for the purposes of preventing underage gambling, detecting and preventing fraud, and complying with applicable anti-money-laundering requirements. We use your identity documents and registration data to fulfil these obligations. Verification may be triggered at registration, before your first withdrawal, or at any point where we have reason to review your account.
We analyse technical data including IP addresses, device fingerprints, and behavioural patterns to detect and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct. This analysis is an essential part of keeping the platform safe for all players on zd22.
zd22 uses your game activity and transaction history to monitor for patterns that may indicate problem gambling. If we detect behaviour consistent with problem gambling, we may proactively contact you with information about responsible gaming tools. This is done in good faith and in accordance with our commitment to player wellbeing, not for commercial purposes.
If you have opted in to receive marketing communications, zd22 may send you information about promotions, bonuses, new games, and platform updates via email or in-platform notification. You can opt out of marketing communications at any time by contacting [email protected] or through the preferences section of your account.
Aggregated and anonymised data derived from player activity — including page performance metrics, game load times, and navigation patterns — is used by the zd22 team to identify and fix bugs, improve the mobile experience, and develop new features. This data does not identify individual players.
5. Legal Basis for Processing
Every use of your personal data by zd22 is grounded in one of the following legal bases:
- Contract performance — processing necessary to fulfil our obligations to you as a registered player, including running your account, processing transactions, and providing the games and services you have signed up for.
- Legal obligation — processing required to comply with applicable laws and regulations, including age verification, anti-money-laundering checks, and regulatory reporting.
- Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests do not override your privacy rights.
- Consent — processing for marketing communications and non-essential cookies, where your specific consent has been obtained and can be withdrawn at any time.
6. Sharing Your Data With Third Parties
zd22 does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. However, there are specific circumstances in which we share data with carefully selected partners to operate the platform:
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and bank or card processors receive the transaction data necessary to complete your deposits and withdrawals.
- Identity verification providers — if we use a third-party KYC service, it receives the identity documents you submit for the purpose of verification only. These providers are contractually bound to use your data only for that purpose.
- Technology and hosting providers — our platform infrastructure partners may process data on our behalf as part of providing hosting, database, and security services. These providers operate under strict data processing agreements with zd22.
- Legal and regulatory authorities — we will disclose your data to law enforcement, regulatory bodies, or courts where we are legally required or compelled to do so.
Any third party that processes your data on behalf of zd22 is subject to contractual obligations that prohibit them from using your data for any purpose beyond the specific service they provide to us. We select our partners carefully and review their data security practices.
7. Payment Data and Financial Privacy
Financial privacy is a significant concern for many Pakistani players, and zd22 takes this seriously. Here is exactly how we handle payment-related data:
- Full card numbers are never stored on zd22 servers. When you use a Visa or Mastercard, only a masked version (showing the last 4 digits and expiry) is retained for reference purposes.
- Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored only as needed to process transactions and identify the payment method associated with your account.
- All payment-related communications between your device and zd22's servers are encrypted using industry-standard TLS protocols.
- We require that deposits and withdrawals use a payment method registered in your name. This requirement exists both to protect you from third-party misuse of your account and to ensure we can verify the ownership of funds.
- Transaction records — amounts, dates, payment methods used — are retained as part of your account history for as long as your account is active and for a period after closure as described in Section 9.
8. Cookies and Tracking Technologies
zd22.cash uses cookies — small data files stored on your browser or device — and similar tracking technologies to make the platform work correctly and to improve your experience. Here is how we categorise the cookies we use:
These are required for the platform to function. They manage your login session, remember your preferences within a visit, and enable security features. You cannot opt out of essential cookies without disabling the platform entirely.
These help us understand how players use zd22 — which pages are visited most, where players spend time, and which features are underused. Data is aggregated and does not identify individual players. You can opt out of analytics cookies through your browser settings.
These are only placed if you have consented to receive marketing communications. They allow us to tailor promotions to your interests based on your activity on zd22. You can withdraw consent and delete these cookies through your browser settings or account preferences.
Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu. Disabling all cookies may affect the functionality of the zd22 platform, particularly features that require you to remain logged in across page loads.
9. How Long We Keep Your Data
zd22 retains your personal data only for as long as necessary. The specific retention periods are:
- Active account data — retained for as long as your account remains open and for a minimum of five years after account closure, in line with standard financial record-keeping obligations.
- Transaction records — retained for a minimum of five years to comply with anti-money-laundering record-keeping requirements.
- Identity verification documents — retained for as long as your account is active and for at least five years post-closure.
- Support communications — retained for three years to allow us to reference prior interactions if a dispute arises.
- Marketing opt-in records — retained until you opt out, at which point preference data is updated immediately and marketing communications cease.
- Technical logs — typically retained for 90 days unless an active investigation requires longer retention.
When data is no longer required and no legal obligation mandates its retention, zd22 deletes or anonymises it securely.
10. How We Protect Your Data
Security is built into the zd22 platform at every level. The protections we have in place for your personal data include:
- All data transmitted between your device and zd22.cash is encrypted using TLS (Transport Layer Security).
- Sensitive data including passwords and payment information is stored using industry-standard encryption — it is never stored in plain readable text on our servers.
- Access to player data within the zd22 organisation is restricted to staff who genuinely need it to perform their role. All internal access is logged and audited.
- Our infrastructure is protected by firewalls, intrusion detection systems, and regular security reviews.
- We perform regular testing of our security controls and respond promptly to any identified vulnerabilities.
While zd22 implements robust security measures, no online platform can guarantee absolute protection against all possible threats. If you believe your account has been compromised, please contact [email protected] immediately so we can take action.
11. Your Privacy Rights
As a player on zd22, you have the following rights with respect to your personal data. You can exercise any of these rights by contacting us at [email protected]. We will respond within a reasonable time and at no charge in standard cases.
12. Minors and Children's Privacy
zd22 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their age, and we conduct identity verification to enforce this requirement.
If we become aware that personal data has been submitted by or on behalf of a minor, we will delete that data immediately, close the associated account, and refund any deposits made minus any withdrawals already processed. If you believe a minor has created an account on zd22, please notify us at [email protected] and we will act immediately.
13. Changes to This Privacy Policy
zd22 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, send registered players a notification via email or in-platform alert.
We encourage you to review this policy periodically so you are always aware of how your data is being handled. Your continued use of zd22 after an updated policy has been published constitutes acceptance of the revised terms. If you disagree with a change, you may close your account and request deletion of your data.
14. How to Contact Us About Privacy
For any privacy-related questions, data subject requests, or concerns about how zd22 handles your personal information, please reach out to our team. We aim to respond to all data-related queries within 72 hours.