zd55 Privacy Policy

Who We Are

This Privacy Policy is issued by zd55 ("zd55", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at zd55.vip. zd55 is a licensed and regulated gaming operator providing cricket betting, live casino games, slot games, and PKR-denominated payment services to eligible players in Pakistan.

For the purposes of applicable data protection law, zd55 acts as the Data Controller in respect of the personal information collected from registered players and website visitors. As Data Controller, we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Personal Data We Collect

zd55 collects personal data through several channels: directly from you when you register an account or interact with our platform; automatically through technical systems as you use the site; and in limited circumstances from trusted third-party verification and payment partners. The following table summarises the categories of personal data we collect and the primary source of each category.

How We Use Your Personal Data

zd55 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes incompatible with those disclosed at the time of collection. The following list sets out the primary purposes for which your personal data is used on the zd55 platform:

• Account Creation and Management: To register your zd55 account, verify your identity, maintain your player profile, and enable access to our gaming and betting products in PKR.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our licensing obligations. CNIC data is used exclusively for verification and AML screening purposes.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other approved payment channels. Financial data is shared with payment processors only to the extent necessary to complete transactions.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory frameworks. This includes transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, enforce self-exclusion and deposit limit tools, and deliver welfare interventions where necessary. This processing is conducted in your direct interest and is a condition of our gaming licence.
• Customer Support: To respond to your queries, complaints, and account issues via live chat, email, and our support ticketing system. Communications data is retained to maintain quality assurance records.
• Platform Security and Fraud Prevention: To detect and prevent cheating, bonus abuse, multi-accounting, chargebacks, and other fraudulent or prohibited conduct as described in the zd55 Terms and Conditions.
• Marketing and Promotions: To send you information about PSL cricket betting offers, casino bonuses, and new slot game releases — but only where you have given your explicit consent to receive such communications. See Section 12 for full details.
• Analytics and Platform Improvement: To analyse aggregated, anonymised usage data to understand how players navigate zd55, identify technical issues, and improve the overall user experience.

Legal Basis for Processing

Every instance of personal data processing at zd55 is grounded in one of the following recognised legal bases. We rely on the most appropriate basis for each specific processing activity rather than applying a blanket justification:

• Contractual Necessity: Processing required to provide you with the services you have signed up for — including account management, game access, and payment processing — is carried out because it is necessary to perform the contract between you and zd55.
• Legal Obligation: Processing required to comply with AML regulations, CTF obligations, gaming licence conditions, tax reporting requirements, and regulatory record-keeping mandates is carried out because the law requires it.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of zd55's legitimate business interests, balanced against your privacy rights. We have conducted legitimate interests assessments for each such activity.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose not covered by the above bases is carried out only where you have given freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

zd55 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other approved payment processors receive transactional data necessary to process your PKR deposits and withdrawals. These providers act as independent data controllers under their own privacy policies in respect of payment data.
• KYC and Identity Verification Partners: Regulated identity verification service providers receive your CNIC or passport data to perform automated age and identity checks as required by our licensing conditions. All such partners are contractually bound to process this data only for the stated verification purpose.
• Gaming Technology Providers: Third-party game studios and live casino providers whose games are accessible on zd55 may receive anonymised session data necessary to deliver their games. These providers do not receive personally identifiable information beyond what is operationally essential.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, zd55 will disclose personal data to competent authorities. This includes financial intelligence units, gaming regulators, and law enforcement agencies investigating suspected financial crime.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by zd55 may have access to personal data on a confidential, need-to-know basis in connection with the delivery of their professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of zd55's assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller before the transfer takes effect.

International Data Transfers

As a globally-operated gaming platform serving Pakistani players, zd55 may store or process personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection to that available in Pakistan, zd55 implements appropriate safeguards to ensure your data remains protected, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into data processing agreements with all international sub-processors.
• Transfers to jurisdictions recognised as providing an adequate level of data protection by the applicable regulatory framework.
• Binding corporate rules where transfers occur within a group of companies subject to group-wide data protection governance policies.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our privacy team at the details provided in Section 14.

Data Retention

zd55 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention guidelines apply across our main data categories:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where data cannot be immediately deleted due to backup cycle constraints, it will be quarantined from active processing until deletion is completed.

Cookies & Tracking Technologies

zd55 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data. The following categories of cookies are used on zd55.vip:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your login session, remember your PKR account currency setting, and enable core security features. They cannot be disabled without breaking the platform. No consent is required for strictly necessary cookies.
• Functional Cookies: Remember your preferences such as language settings, notification choices, and preferred sports betting markets (e.g. PSL cricket). These improve your experience but are not essential. Consent is required.
• Analytics Cookies: Collect anonymised data about how you navigate zd55 — which pages you visit, how long you spend on each section, and which games you access most frequently. This data is used in aggregate form to improve the platform. Consent is required.
• Responsible Gaming Cookies: Store session information relevant to your responsible gaming settings, such as session time alerts and reality check frequency. These are treated as functionally necessary for player protection and are active for all players.

Your Data Protection Rights

As a zd55 player and data subject, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations where overriding legal obligations apply — for example, we cannot delete KYC records that we are legally required to retain for AML compliance purposes.

• Right of Access: You may request a copy of all personal data zd55 holds about you, along with information about how it is processed, who it is shared with, and how long it is retained.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For identity data changes, supporting documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. Where you object to marketing, we will stop sending promotional communications immediately.
• Rights Related to Automated Decision-Making: Where zd55 uses automated processes to make decisions with significant effects on you — such as automated responsible gaming interventions or account risk scoring — you have the right to request human review of those decisions.

To exercise any of the above rights, please submit a written Data Subject Request to [email protected] with the subject line "Data Subject Request". We will respond within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

Children, Minors & Age Restrictions

zd55 operates an absolute minimum age requirement of 21 years. Our platform is not directed at, nor do we knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the zd55 registration and KYC process.

If zd55 becomes aware that personal data has been collected from a person under the age of 21, we will take the following immediate steps:

• Suspend the relevant account immediately pending investigation.
• Void all bets placed and gaming activity conducted by the underage account holder.
• Return deposited funds to the original payment method where operationally feasible.
• Permanently delete all personal data associated with the underage account, to the extent not required to be retained by applicable law.

Security Measures

zd55 implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and zd55 servers is protected by TLS 1.3 encryption. This applies to login sessions, deposit flows via JazzCash and EasyPaisa, and all API communications.
• Encryption at Rest: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel via role-based access controls.
• Two-Factor Authentication: zd55 supports and encourages two-factor authentication (2FA) on all player accounts. Enabling 2FA on your zd55 account significantly reduces the risk of unauthorised access even if your password is compromised.
• Penetration Testing: Our platform infrastructure undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Staff Training and Access Controls: Internal access to player data is restricted on a strict need-to-know basis. All staff with access to personal data receive regular data protection and security awareness training.
• Incident Response: zd55 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

Marketing Communications

zd55 sends promotional communications — including PSL cricket betting offers, casino bonus alerts, new slot game announcements, and JazzCash deposit promotions — only to players who have explicitly opted in to receive such messages. We use the following channels for marketing communications:

• Email: Promotional emails are sent to your registered email address only where you have consented during registration or subsequently updated your notification preferences to opt in.
• SMS: Promotional SMS messages are sent to your registered Pakistani mobile number only where you have provided explicit SMS marketing consent. Standard network rates apply.
• On-Platform Notifications: In-platform banners and pop-ups promoting bonuses and special events are displayed to all logged-in players as part of the standard platform experience. These are considered service communications and do not require separate marketing consent.

You may withdraw your consent to marketing communications at any time by:

• Logging in to your zd55 account and navigating to Account Settings > Notifications to update your preferences.
• Clicking the unsubscribe link included in every promotional email sent by zd55.
• Replying STOP to any promotional SMS message received from zd55.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your ability to receive essential service communications, such as account verification emails, deposit confirmations, withdrawal notifications, and security alerts. These transactional messages are sent on the basis of contractual necessity and cannot be individually disabled.

Changes to This Privacy Policy

zd55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational procedures. When material changes are made, we will notify you by one or more of the following methods:

• In-Platform Notice: A prominent notice will be displayed on the zd55 platform upon your next login, summarising the key changes and directing you to the updated policy.
• Email Notification: Where changes are significant, registered players will receive an email notification to their registered address at least 14 days before the updated policy takes effect.
• Policy Version History: The "Last Updated" date at the top of this page will be revised each time the policy is amended. We recommend reviewing this page periodically to stay informed of any changes.

Your continued use of the zd55 platform following the effective date of any policy update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any material changes, you have the right to close your account and request deletion of your personal data in accordance with Section 9 of this policy, subject to our legal retention obligations.

Contact Us & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way zd55 handles your personal data, please contact our dedicated privacy team using the details below. We are committed to resolving all privacy enquiries promptly, fairly, and transparently.

If you are not satisfied with our response to your privacy complaint, or if you believe that zd55 is processing your personal data in a manner that is not compliant with applicable data protection law, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. zd55 will cooperate fully with any regulatory investigation.

We take every privacy complaint seriously. Our goal is to be a platform that Pakistani players trust completely — not just with their money, but with their personal information. If something about our data practices does not feel right to you, please do not hesitate to reach out. We would rather hear your concern directly and address it than have you feel your privacy has been compromised.