Data Collection Scope
Same minimal-collection principle applies on every page — only what your account operation requires.
At zc7777, your personal data belongs to you — we collect only what we need to run your account, process withdrawals via JazzCash, Easypaisa, SadaPay or Raast, and...
When you open an account on zc7777, we record your name, contact address, and the payment method you chose — JazzCash wallet ID, Easypaisa mobile number, SadaPay tag, or Raast linked account — solely to process deposits and withdrawals and to verify identity as required under applicable rules for supported regions. We log device type, IP address, and session timestamps to detect
unauthorised access attempts and maintain service continuity. We do not collect data beyond what your account activity generates, and we do not sell, rent, or trade your records to advertising networks. Data is held on encrypted servers and access is restricted to staff whose role requires it. Where local law permits, you may request a copy of your stored data or ask
us to delete records not required for active account operation.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
We built this privacy framework around the specific account flows and payment rails that Pakistani account holders use — not a copy-paste template. Each trust signal below reflects a concrete practice we...
Your account credentials and linked payment details — whether JazzCash, Easypaisa, SadaPay or Raast — are encrypted in transit using TLS and at rest using AES-256. No plain-text records of payment IDs are held in application logs.
We collect only the fields your account and payout flow require. We do not build advertising profiles, do not track browsing outside zc7777, and do not share your data with marketing partners under any arrangement.
Internal access to your personal records is role-gated and logged. A support agent can see your account status but cannot view full payment credentials; only our compliance team can access full KYC records and only when required.
This policy is reviewed quarterly by our operations and legal team. When a change affects how we use your data, we send a notification to your registered contact before the change takes effect — not after.
We keep transactional records for the period required under applicable rules in supported regions, then delete or anonymise them. You can request early deletion of non-essential records through the account portal at any time.
In the event of a confirmed data incident affecting your account, we will notify you at your registered contact address within 48 hours of detection and provide a clear account of what was affected and what steps we have taken.
Our privacy commitments are consistent whether you are reading this page, our cookie notice, or the account-security section. The table below shows how key privacy principles carry through every policy-related page on...
Same minimal-collection principle applies on every page — only what your account operation requires.
JazzCash, Easypaisa, SadaPay and Raast credentials are treated identically across all policy documents.
Your right to access, correct, and delete records is stated in the same terms on every relevant page.
Retention schedules referenced in this policy match the timelines listed in our account-closure terms.
The no-sale commitment stated here is echoed without exception in our cookie and tracking policy.
The 48-hour notification window is consistent with the timeline in our security-incident policy page.
Quarterly review cadence is the same across this privacy policy and our terms of service document.
We structured this privacy policy so that the sections most relevant to your account — data collection, payment handling, and your rights — are easy to find and...