ZT22 Privacy Policy

Welcome to the ZT22 Privacy Policy. ZT22 ("we", "us", "our", "the Platform") is an online gaming and sports betting platform. This Privacy Policy describes how ZT22 collects, uses, stores, shares and protects personal data relating to users ("you", "your") who access or register on the ZT22 platform at zt22.cam.

ZT22 is committed to handling personal data responsibly and transparently. We recognise that privacy is a fundamental concern for our players — particularly those accessing the platform from Pakistan, where digital privacy awareness is growing rapidly alongside mobile internet adoption. This policy is written in plain English so that every user can clearly understand their rights and our obligations.

ZT22 does not claim to operate under the jurisdiction of, or in compliance with, Pakistani data protection law specifically. However, ZT22 applies internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation and data subject rights — as a baseline standard for all users, including Pakistani players.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, either directly (e.g., name, email address) or indirectly (e.g., device ID combined with behavioural data).
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, alteration and deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this policy, ZT22 acts as Data Controller in respect of user data collected via zt22.cam.
• "Data Processor" — A third party that processes personal data on behalf of ZT22 under contractual obligations, such as payment service providers, KYC verification vendors and hosting infrastructure providers.
• "KYC" — Know Your Customer — the identity and age verification process applied to all registered ZT22 users.
• "Cookies" — Small text files placed on a user's device by the Platform to store session information, preferences and behavioural data.
• "Account" — A registered user account on the ZT22 platform enabling access to real-money gaming and betting services.

ZT22 collects only the personal data necessary to operate the platform, verify user identity, process transactions, prevent fraud and meet applicable compliance obligations. The categories of data we collect are set out below.

ZT22 collects personal data through the following channels:

• Registration and account management: Data you provide directly when creating or updating your ZT22 Account, including name, contact details, date of birth and payment method information.
• KYC verification: Identity and address documents submitted through the platform's verification process, which may be handled by a contracted third-party verification provider on ZT22's behalf.
• Deposits and withdrawals: Transaction records and payment method details captured when you deposit or withdraw funds through the cashier.
• Platform usage: Automatically generated data as you browse and use the platform, collected via server logs, session tracking and first-party cookies.
• Customer support interactions: Data shared when you contact ZT22 via live chat, email or any other support channel, including the content of your communications.
• Responsible gambling tools: Information you provide when setting deposit limits, session time controls, loss limits or self-exclusion preferences.
• Third-party sources: Where permitted, ZT22 may receive supplementary data from fraud prevention agencies, identity verification databases or publicly accessible sources to verify the accuracy of the information you have provided.

ZT22 processes personal data only where a valid legal basis exists. The primary legal bases under which ZT22 processes user data are as follows:

• Contractual necessity: Processing required to provide the services you have requested — including account creation, identity verification, payment processing and game delivery — is necessary for the performance of the contract between ZT22 and you as a registered user.
• Legal obligation: ZT22 is subject to obligations under the licensing framework applicable to its operations, including anti-money laundering (AML) requirements, KYC/CDD (Customer Due Diligence) obligations and record-keeping requirements. Processing for these purposes is mandatory and cannot be refused without affecting your ability to hold a ZT22 Account.
• Legitimate interests: ZT22 processes certain data — including fraud detection, platform security monitoring and aggregate analytics — on the basis of its legitimate interest in operating a secure, fair and sustainable gaming platform, provided those interests are not overridden by your privacy rights.
• Consent: Where ZT22 relies on your consent as a legal basis (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Withdrawal of consent will not affect your access to core platform services.

ZT22 uses the personal data it holds for the following specific purposes:

• Account provision and management: Creating, maintaining and securing your ZT22 Account, verifying your identity and age, and ensuring accurate account records.
• Gaming and betting services: Processing your bets and game interactions, recording outcomes, managing your account balance and applying applicable bonus terms.
• Payment processing: Facilitating deposits and withdrawals via the payment methods available in the cashier, verifying payment method ownership and preventing payment fraud.
• Compliance and legal obligations: Meeting AML screening requirements, responding to lawful requests from regulatory authorities, maintaining mandatory records and conducting periodic account reviews.
• Fraud prevention and security: Detecting and preventing cheating, collusion, multi-accounting, bonus abuse, money laundering and other prohibited activities on the Platform.
• Responsible gambling: Monitoring gaming behaviour patterns for indicators of problem gambling, facilitating the operation of self-exclusion and player-protection tools, and responding to player-protection requests.
• Customer support: Responding to your queries, complaints and support requests through all available support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the platform's design, performance and game offerings.
• Marketing communications (with consent): Sending promotional offers, new game announcements and personalised bonuses where you have opted in to receive such communications. You may opt out at any time.

ZT22 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We share personal data only where necessary, under contractual data protection obligations, and with the following categories of recipient:

• KYC and identity verification providers: Third-party services contracted to verify the identity, age and address of registered users as part of ZT22's compliance obligations. These providers act as data processors under binding contractual terms.
• Payment service providers: Financial institutions and payment technology providers involved in processing your deposits and withdrawals. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as familiar Pakistani payment references only — their mention does not imply any endorsement, partnership or affiliation with ZT22.
• Game software providers: Third-party game studios and live casino platform providers who supply the gaming content available on ZT22. Certain technical data may be shared with these providers to enable game delivery and outcome verification.
• Fraud prevention and AML screening services: Specialist third-party providers used to screen accounts and transactions against financial crime databases and watchlists.
• Hosting and cloud infrastructure providers: Providers of the server infrastructure, database services and content delivery networks on which the ZT22 platform operates.
• Legal and regulatory authorities: ZT22 will disclose personal data to competent authorities where required to do so by law, court order or binding regulatory direction — including in relation to the licensing jurisdiction applicable to ZT22's operations.

ZT22 uses cookies and similar tracking technologies to operate the platform effectively, maintain your logged-in session, remember your preferences and analyse platform usage. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These enable session management, authentication and security features. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, display options and responsible gambling tool configurations, so that these do not need to be re-entered on each visit.
• Analytics cookies: Collect anonymised data about how users navigate and interact with the platform. This data helps ZT22 identify usability issues and improve the overall user experience. No personally identifying information is included in analytics reports.
• Performance cookies: Monitor platform response times and the performance of specific features to help ZT22 maintain a fast, stable experience across devices — including the mobile-first interface preferred by Pakistani players.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the ZT22 platform. ZT22 does not use third-party advertising or tracking cookies that transmit your data to external ad networks.

ZT22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable compliance and legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your ZT22 Account and updated as necessary throughout the account lifecycle.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of each transaction or gaming session, in accordance with standard AML record-keeping requirements applicable in ZT22's licensing jurisdiction.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the business relationship, as required under applicable anti-money laundering frameworks.
• Support communications: Retained for up to three (3) years from the date of the interaction unless a longer retention period is required by an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is not practicable for technical reasons, data will be restricted from active use pending deletion at the earliest feasible opportunity.

ZT22 implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration and destruction. Our technical and organisational security measures include:

• Encryption: All data transmitted between your device and the ZT22 platform is protected by TLS (Transport Layer Security) encryption. Sensitive data stored in ZT22's databases — including payment method records and identity documents — is encrypted at rest.
• Access controls: Access to personal data within ZT22's systems is restricted on a strictly need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular access privilege reviews.
• Intrusion detection: ZT22 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Secure infrastructure: Platform infrastructure is hosted with reputable cloud providers that maintain industry-recognised security certifications.
• Incident response: ZT22 maintains a data breach response plan. In the event of a security incident affecting personal data, ZT22 will take immediate containment action and notify affected users and relevant authorities in accordance with applicable obligations.

ZT22 respects your rights over your personal data. The following rights apply to all ZT22 users, subject to applicable legal limitations and ZT22's legitimate compliance obligations:

To exercise any of the above rights, contact ZT22's data team at [email protected] with a clear description of your request. ZT22 will respond within a reasonable timeframe — typically within 30 days — and may request identity verification before processing a data rights request to protect against unauthorised access to another user's data.

ZT22 is strictly an adults-only platform. No individual under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction — may register or use the ZT22 platform. ZT22 applies mandatory age verification as part of the KYC process for all registered users.

ZT22 does not knowingly collect personal data from individuals under the applicable minimum age. If ZT22 becomes aware that personal data has been submitted by, or on behalf of, a minor, that Account will be closed immediately, any balance will be handled in accordance with applicable policies, and all associated personal data will be deleted as promptly as technically feasible.

If you are a parent or guardian and believe that a minor may have registered or used a ZT22 Account, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

As an internationally operated platform, ZT22 may transfer personal data across international borders — for example, when data is processed by third-party service providers whose infrastructure is located outside Pakistan. Where such transfers occur, ZT22 takes appropriate measures to ensure that your personal data remains protected to a standard consistent with this Privacy Policy.

Such measures may include reliance on contractual protections with the receiving party, such as standard data processing agreements that impose equivalent data protection obligations on the recipient, or transfer to jurisdictions that maintain adequate data protection frameworks as recognised by ZT22's licensing authority.

By registering an Account and using the ZT22 platform, you acknowledge that your personal data may be transferred to, stored in and processed in countries outside Pakistan. ZT22 will at all times handle such transfers with appropriate safeguards in place.

ZT22 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to the platform's data processing activities, changes in applicable legal or regulatory requirements, or improvements to how ZT22 communicates its privacy practices.

When material changes are made to this Privacy Policy, ZT22 will notify registered users via the email address associated with their Account or through a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this policy will be revised accordingly.

Your continued use of the ZT22 platform following notification of a material policy change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of the platform and may request Account closure by contacting our support team.

If you have any questions, concerns or requests relating to this Privacy Policy or ZT22's data processing practices, please contact the ZT22 support and data team using the details below. All privacy-related enquiries are handled in English, with Urdu assistance available on request.

• Email (plain text — not a link): [email protected]
• Support hours: 24 hours a day, 7 days a week
• Response time: Privacy and data rights requests will receive a substantive response within 30 days
• Languages: English (primary) · Urdu available on request

ZT22 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response to a privacy concern, you may have the right to escalate the matter to the relevant supervisory authority in ZT22's licensing jurisdiction, details of which can be provided upon request.