zk22 Privacy Policy

1. Introduction

zk22 ("we", "us", "our", "the Platform") operates the online gaming website accessible at https://zk22.vip and all associated services available to registered players. This Privacy Policy describes how zk22 collects, uses, stores, shares and protects the personal data of individuals ("you", "your", "the Player") who interact with the platform in any capacity — including browsing the website, registering an account, making deposits or withdrawals, and participating in any game or promotional activity.

This Privacy Policy forms part of the broader legal framework governing your use of the zk22 platform, alongside the Terms & Conditions and the Responsible Gaming Policy. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions or concerns about how your personal data is handled, our dedicated support team is available 24/7 via live chat on the platform, or by email at [email protected].

2. Personal Data We Collect

zk22 collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the platform, and in limited circumstances from third-party service providers. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the mandatory minimum age of 21 years).
• Residential address, city and country of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad).
• Email address and mobile phone number.
• CNIC (Computerised National Identity Card) number and a copy of the document, collected as part of mandatory KYC verification before any withdrawal is processed.
• Username and encrypted password.

2.2 Financial Data

• Payment method details including JazzCash mobile number, EasyPaisa account reference, HBL, UBL or Meezan Bank account details used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates and payment method used, denominated in PKR.
• Source of funds documentation where required for regulatory compliance or large transaction review.

2.3 Gaming Activity Data

• Game history across all product verticals — casino games, live dealer tables, slot titles and cricket sportsbook markets.
• Wager amounts, game outcomes, session durations and responsible gaming tool settings.
• Bonus and promotion participation history.

2.4 Technical & Device Data

• IP address, browser type and version, operating system, device type and screen resolution.
• Unique device identifiers and session tokens.
• Referral URL and on-site navigation path data.
• Login timestamps and geographic location data derived from IP address.

2.5 Communications Data

• Records of your correspondence with the zk22 support team via live chat or email, including the content of messages and any attachments submitted.
• Survey responses and feedback submissions where voluntarily provided.

3. Legal Basis for Processing

zk22 processes your personal data only where a lawful basis exists for doing so. The following table sets out the primary processing activities, the data categories involved and the legal basis relied upon for each:

4. How We Use Your Personal Data

Beyond the specific purposes identified in the legal basis table above, zk22 uses the personal data it collects for the following operational and compliance purposes:

• Account Operations: Creating and maintaining your player account, authenticating your identity on login, enabling deposit and withdrawal functionality, and providing access to all gaming products on the platform.
• KYC and Age Verification: Verifying that you meet the mandatory minimum age requirement of 21 years and confirming your identity in accordance with anti-money-laundering (AML) regulatory requirements before processing any withdrawal.
• Payment Processing: Facilitating PKR deposits and withdrawals via your nominated payment method (JazzCash, EasyPaisa, HBL, UBL or Meezan Bank), reconciling transactions and managing refunds where applicable.
• Fraud Prevention and Platform Integrity: Detecting and preventing fraudulent account activity, bonus abuse, money laundering, multi-accounting and other prohibited conduct identified in the zk22 Terms & Conditions.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing player-requested deposit limits and self-exclusions, and fulfilling our obligations under responsible gaming standards.
• Service Improvement: Analysing aggregated, anonymised platform usage data to improve game performance, identify technical issues and enhance the overall player experience.
• Legal and Regulatory Compliance: Meeting all reporting and record-keeping obligations imposed by the terms of our international gaming licence and applicable law.
• Marketing (with consent only): Sending promotional emails, SMS messages or in-platform notifications about bonuses, new game launches and special offers relevant to Pakistani players — only where you have explicitly opted in to receive such communications.

zk22 will not use your personal data for any purpose incompatible with those for which it was originally collected without first obtaining your explicit consent or establishing a separate lawful basis.

5. Data Sharing and Third-Party Disclosure

zk22 does not sell, rent or trade your personal data to third parties for their independent commercial purposes. We share your personal data only in the following limited circumstances and only to the extent necessary for each specific purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL and Meezan Bank receive the minimum data necessary to process your deposit or withdrawal transaction in PKR. Each provider is contractually bound to process your data only for the purpose of completing the relevant transaction.
• KYC Verification Partners: zk22 may use contracted third-party identity verification services to cross-check the CNIC and documentation you provide during KYC. These partners process data solely on our instructions and may not use it for their own purposes.
• Game Software Providers: Third-party game studios whose titles are integrated into the zk22 platform (such as providers of cricket betting markets, live dealer studios and slot games) may receive anonymised session data necessary for game functionality. They do not receive your personally identifiable information unless specifically required for a licensed game feature.
• Licensing and Regulatory Authorities: zk22 is required to report certain player activity data to the authority that issues and oversees our international gaming licence, including in response to lawful investigations or audits.
• Law Enforcement and Legal Process: Where required by a valid court order, regulatory demand or other legally binding obligation, zk22 will disclose personal data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.
• Platform Technology Partners: Hosting providers, platform infrastructure services and cybersecurity vendors who process data on zk22's behalf under strict data processing agreements that prohibit any independent use of your data.

6. Cookies and Tracking Technologies

The zk22 platform uses cookies and similar tracking technologies to deliver, maintain and improve the platform experience. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication, security token management and load balancing. These cookies cannot be disabled without materially impairing the platform's functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game categories and responsible gaming tool configurations so that they persist between sessions without requiring re-entry.
• Analytical Cookies: Collect anonymised data about how players navigate and interact with the platform — which games are most popular, where players encounter difficulty, and which pages receive the most traffic — enabling zk22 to continuously improve the platform.
• Security Cookies: Used to detect and respond to bot activity, suspicious login attempts and potential fraud signals in real time.

zk22 does not deploy third-party advertising cookies that track your activity across external websites for the purpose of serving targeted advertising.

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from accessing your account and using the platform. All other cookie categories can be disabled without affecting core platform access.

7. Data Retention

zk22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the full duration of your active account, and for a minimum of five (5) years following permanent account closure, in compliance with anti-money-laundering regulatory record-keeping requirements.
• KYC Documentation (CNIC copies): Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial regulatory obligations.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of the relevant activity. Where a responsible gaming concern has been flagged in relation to the account, logs may be retained for longer to support ongoing compliance monitoring.
• Customer Support Correspondence: Retained for three (3) years from the date of the last communication in a given support thread.
• Marketing Consent Records: Retained for as long as your marketing opt-in remains active, plus one (1) year following withdrawal of consent, as an audit trail of your preferences.
• Technical and Device Logs: Typically retained for a rolling period of twelve (12) months, unless a specific security or fraud investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical purposes.

8. Data Security

zk22 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• Transport Encryption: All data transmitted between your browser and the zk22 platform is encrypted using 256-bit SSL/TLS protocols. Every page on the platform is served over HTTPS — there are no unencrypted HTTP connections.
• Storage Encryption: Sensitive data fields — including CNIC numbers, financial account references and authentication credentials — are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data by zk22 staff is governed by strict role-based permissions on a need-to-know basis. Administrative access to production databases requires multi-factor authentication.
• Regular Security Audits: The platform undergoes periodic third-party penetration testing and security reviews. Identified vulnerabilities are triaged and remediated according to a formal risk-based prioritisation process.
• Incident Response: zk22 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected Players, we will notify impacted individuals and relevant authorities within the timeframes required by applicable law.

9. Your Privacy Rights

As a registered zk22 player, you have the following rights with respect to your personal data. These rights may be exercised at any time by submitting a written request to [email protected], clearly stating the right you wish to exercise and your registered account username:

• Right of Access: You may request a copy of all personal data that zk22 holds about you, together with information about how it is being used. We will provide this within thirty (30) calendar days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Identity-related corrections may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Note that AML and KYC records are subject to mandatory minimum retention periods and cannot be deleted on request within those periods.
• Right to Restriction of Processing: You may request that we pause the active processing of your data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used and machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time with immediate effect, without affecting the lawfulness of processing that occurred prior to withdrawal.

zk22 will respond to all valid privacy rights requests within thirty (30) calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

10. Children and Minors

The zk22 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21, and we do not direct any marketing, content or service at minors.

The mandatory age verification process conducted during KYC review is specifically designed to confirm that all registered Players meet the minimum age requirement before any withdrawal is processed. Where we have reasonable grounds to believe that a registered account belongs to a person under 21, the account will be suspended immediately, all balances frozen pending review, and personal data associated with the account handled in accordance with the applicable legal framework for minors' data.

11. International Data Transfers

zk22 is an internationally licensed gaming platform. In the course of operating the platform, your personal data may be transferred to, stored in or processed in countries outside Pakistan — for example, where our hosting infrastructure, third-party game providers or KYC verification partners are located.

Wherever such international transfers occur, zk22 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Pakistan. These safeguards include:

• Contractual data protection clauses incorporated into agreements with all third-party processors operating in other jurisdictions.
• Transfers only to service providers operating in jurisdictions that maintain recognised standards of data protection.
• Encryption of personal data prior to any cross-border transfer.

By using the zk22 platform, you acknowledge that your personal data may be transferred internationally as described in this section, and that zk22 will take all reasonable steps to ensure its continued protection throughout any such transfer.

12. Marketing Communications

zk22 may send you promotional communications about bonuses, new game releases, seasonal offers and platform updates — but only where you have given us explicit consent to do so. Marketing communications will be delivered via the contact channel(s) you have opted into, which may include email, SMS or in-platform notifications.

You can opt into or out of marketing communications at any time through your account notification preferences, or by replying "UNSUBSCRIBE" to any marketing SMS or email. Opt-out requests are processed within 48 hours. Withdrawing marketing consent does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications or security alerts) which are necessary for the operation of your account.

zk22 does not share your contact details with third-party advertisers for the purpose of sending you marketing communications on their behalf.

13. Changes to This Privacy Policy

zk22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements or the services we offer. When a material change is made, we will notify registered Players via email to the address on file and/or via a prominent notice displayed on the platform prior to the change taking effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Privacy Policy periodically. The current version of this Privacy Policy is always available at https://zk22.vip/privacy-policy.

Your continued use of the zk22 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you should cease using the platform and may request account closure by contacting support prior to the effective date.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how your personal data is being handled, please contact the zk22 data protection team using the details below:

When contacting us regarding a privacy or data rights matter, please include your registered account username, a clear description of your request or concern, and — for identity verification purposes — the email address associated with your account. This allows us to locate your data accurately and respond efficiently. The support email address above is provided as plain text for correspondence only and is not a clickable link.