zd555 Privacy Policy — How We Protect Your Personal Data

1. Personal Data We Collect

zd555 collects personal data across three broad categories. Understanding each category helps you see exactly what information we hold and why it is necessary for us to hold it.

1.1 Registration and Identity Data

When you create a zd555 account, we collect the information you provide during the registration form: your full legal name as it appears on your CNIC, your date of birth, your Pakistani mobile number, your email address and the residential address you provide. If you proceed to KYC verification for withdrawals, we additionally collect a copy of your CNIC or passport and a proof-of-address document.

1.2 Financial and Transaction Data

To process your deposits and withdrawals, zd555 collects transaction records including deposit amounts, timestamps, the payment method used, your Easypaisa or JazzCash mobile number, bank account details provided for IBFT transfers, and card details for Visa/Mastercard transactions. Card data is handled exclusively through PCI-DSS compliant payment processors — zd555 itself does not store full card numbers on its servers.

1.3 Platform Usage Data

When you use the zd555 platform, we automatically collect technical and behavioural data including: your IP address, device type and operating system, browser type and version, session duration, pages and games visited, betting history across all products (casino games, PSL sportsbook, fishing games), login timestamps and logout events, and in-app navigation patterns. This data is used for platform security, fraud prevention, responsible gaming monitoring and product improvement.

2. How We Collect Your Data

2.1 Directly from You

The majority of data zd555 holds about you is information you provide directly: during account registration, when completing KYC verification, when making deposits or requesting withdrawals, when contacting our support team and when participating in promotions or surveys. We never collect more information than is necessary for the specific purpose at the point of collection.

2.2 Automatically Through Platform Use

When you visit zd555.ws or use the mobile platform, certain data is collected automatically through cookies, server logs and standard web analytics tools. This includes your IP address, the pages you visit, the duration of your sessions and the actions you take within the platform. This collection happens whether or not you are logged into a registered account.

2.3 From Payment Providers

When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay or IBFT, those payment providers confirm transaction details — including confirmation of your registered mobile number or account — back to zd555 for verification and fraud prevention purposes. zd555 does not receive your full payment credentials from these providers — only confirmation of the transaction.

2.4 From Fraud Prevention Services

zd555 uses third-party fraud detection services that may cross-reference your registration data against databases of known fraudulent actors. This process does not involve sharing your full data externally — it involves encrypted identifiers being checked against aggregated risk databases in real time at the point of registration and at withdrawal request.

3. Why We Use Your Personal Data

zd555 processes your personal data for the following specific purposes:

• Account management: Creating and maintaining your registered zd555 account, verifying your identity and age at registration and at KYC verification stage.
• Payment processing: Facilitating deposits and processing withdrawal requests in PKR through your chosen Pakistani payment method.
• Fraud prevention and security: Detecting and preventing unauthorised account access, payment fraud, multi-accounting and other abusive behaviour that would harm you or other players.
• Responsible gaming compliance: Monitoring your account activity for patterns associated with problem gambling, applying deposit limits and self-exclusion settings you activate, and proactively reaching out where concerning patterns are identified.
• Customer support: Responding to your enquiries, resolving disputes and maintaining records of communication for audit purposes.
• Legal compliance: Meeting our obligations under anti-money laundering requirements, reporting suspicious financial activity to relevant authorities and responding to lawful data requests from law enforcement.
• Platform improvement: Analysing aggregated usage data to identify areas where the zd555 platform can be improved, games can be optimised and the player experience can be enhanced — always using aggregated and anonymised data rather than individual player profiles.
• Marketing communications: Sending you promotional communications about bonuses, new games and special events at zd555 — only where you have given consent to receive these, and with a clear unsubscribe option in every communication.

4. Legal Basis for Processing

zd555 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and zd555 — account registration, payment processing, game operation and customer support.
• Legal obligation: Processing required to comply with applicable law — including KYC verification, anti-money laundering checks and reporting obligations to relevant authorities.
• Legitimate interests: Processing necessary for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring and product improvement using aggregated data.
• Consent: Where we process your data for purposes beyond the above — specifically, marketing communications and optional analytics — we do so only on the basis of your explicit consent, which you can withdraw at any time.

5. Data Sharing — Who Sees Your Information

zd555 does not sell your personal data. We share it only in the specific, limited circumstances described below:

5.1 Payment Processors

To process your deposits and withdrawals, zd555 shares necessary financial data with the payment providers you select — Easypaisa, JazzCash, NayaPay, SadaPay, bank partners for IBFT or card payment processors. These providers process your payment data under their own privacy policies and are contractually bound to use your data only for completing the transaction.

5.2 Game Software Providers

Games at zd555 are provided by third-party software providers including JILI, Fachai, Pragmatic Play and others. These providers receive anonymised session data — game round IDs, bet amounts and outcomes — to operate the games. They do not receive your name, contact details or payment information. Game providers are contractually prohibited from using session data for any purpose other than operating the game and maintaining the RNG certification audit trail.

5.3 Fraud Prevention and Security Partners

We share limited data — typically encrypted identifiers rather than full personal details — with specialist fraud prevention and identity verification services. These services help us detect multi-accounting, payment fraud and suspicious activity that could harm our player community.

5.4 Law Enforcement and Regulatory Bodies

Where legally required — including under anti-money laundering obligations — zd555 will share relevant data with law enforcement agencies and regulatory bodies. We will not notify you of such sharing where doing so would compromise an investigation, but we will always require valid legal process before complying with any such request.

6. Payment Data & Financial Security

Financial data deserves special attention given the sensitivity of payment information. Here is specifically how zd555 handles the payment data of Pakistani players:

• zd555 does not store full card numbers, CVV codes or mobile wallet PINs on its servers. Card transactions are processed by PCI-DSS Level 1 certified payment processors who return only a transaction token to zd555.
• Your Easypaisa or JazzCash mobile number is stored in encrypted form and used only for transaction verification and withdrawal processing — it is never shared with marketing partners.
• Bank account details provided for IBFT withdrawals are stored in encrypted form and deleted after the withdrawal is confirmed complete, unless you have saved them as a preferred withdrawal method.
• Transaction histories showing deposits, withdrawals, bonuses and game outcomes are retained for a minimum of five years for legal compliance and dispute resolution purposes. You can access your full transaction history through your zd555 account at any time.
• All payment data at rest is encrypted using AES-256 encryption with keys held in a separate key management system that is not accessible from the main application servers.

7. Cookies and Tracking Technologies

zd555 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device that allows the platform to recognise you across sessions. Here is what each type of cookie does at zd555:

The toggles above are illustrative — manage your actual cookie preferences through your device browser settings or the cookie preference centre in your zd555 account settings.

8. How Long We Keep Your Data

zd555 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The specific retention periods are:

• Account data (name, contact, identity): Retained for the lifetime of your account plus 5 years after permanent closure, for legal compliance and dispute resolution purposes.
• Transaction and financial records: Retained for 7 years from the date of each transaction, consistent with financial record-keeping obligations.
• KYC documents (CNIC copy, proof of address): Retained for 5 years from the date of verification or account closure — whichever is later.
• Support communications: Retained for 3 years from the date of each communication, or longer if the communication relates to an active dispute or legal matter.
• Technical and usage logs: Retained for 90 days for security monitoring purposes, after which they are anonymised or deleted unless specific events require extended retention.
• Marketing consent records: Retained for the duration of your account plus 2 years to demonstrate compliance with consent requirements.

When data reaches the end of its retention period, it is either permanently deleted or anonymised so that it can no longer be associated with you as an individual.

9. How We Secure Your Data

zd555 implements a layered security architecture designed to protect your personal data at every stage — in transit, at rest and in processing. The key security measures in place include:

• 256-bit TLS/SSL encryption on all data transmitted between your device and zd555 servers — active at all times, not just during login.
• AES-256 encryption at rest for all stored personal and financial data, with encryption keys managed in a dedicated key management system separated from the main application.
• Multi-factor authentication options for player accounts — we strongly encourage Pakistani players to enable OTP-based two-factor authentication in their account security settings.
• Role-based access controls ensuring that zd555 staff can only access the player data necessary for their specific role — support agents cannot see payment card details, and financial teams cannot see game play histories without a legitimate reason logged in the access management system.
• Regular penetration testing conducted by independent security firms to identify and remediate vulnerabilities before they can be exploited.
• 24/7 intrusion detection monitoring with automated alerting to the security team for any suspicious access patterns on player accounts or internal systems.

10. Your Privacy Rights

As a player at zd555, you have the following rights over your personal data. To exercise any of these rights, contact our support team via live chat or at support@zd555.ws — we will respond within 30 days of a valid request.

11. Children's Privacy

zd555 services are strictly for individuals aged 18 and above. We do not knowingly collect any personal data from children under the age of 18. Registration requires confirmation of age and we verify date of birth during the KYC process. If we become aware that an account has been registered by or on behalf of a person under 18, we will immediately close the account, return any real-money deposits and delete all personal data associated with that account. If you believe a minor may have accessed zd555 using your details, contact our support team immediately so we can take appropriate action and secure your account.

12. Marketing Communications

With your consent at registration — or through your account communication preferences — zd555 may send you marketing communications about bonuses, new games, PSL betting promotions, seasonal events and VIP Club updates. These may be delivered by SMS to your registered Pakistani mobile number, by email to your registered address, or through in-app notifications on the zd555 platform.

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email from zd555.
• Replying STOP to any marketing SMS from zd555.
• Updating your communication preferences in your account settings under "Notifications".
• Contacting our support team directly and requesting removal from all marketing lists.

Unsubscribing from marketing communications does not affect transactional communications — we will continue to send you account security alerts, deposit confirmations, withdrawal notifications and important platform updates regardless of your marketing preferences, because these are necessary for the safe operation of your account.

13. Third-Party Links and Services

The zd555 platform does not contain links to external websites except where necessary for payment processing. If you navigate away from zd555.ws to a third-party service — including your mobile wallet app or banking app to complete a deposit — that service's own privacy policy applies to any data you share with it. zd555 is not responsible for the privacy practices of third-party services. Game software providers whose titles appear on zd555 operate as data processors under contractual obligations to zd555 and are not independent data controllers with respect to the game session data they process on our behalf.

14. Changes to This Privacy Policy

zd555 reserves the right to update this Privacy Policy to reflect changes in how we operate, changes in applicable law or the introduction of new data processing activities. When material changes are made — particularly those that affect how we use your data or your privacy rights — we will notify registered Pakistani players by email to their registered address and by in-account notification at least 14 days before the changes take effect. Minor changes — such as clarifications of existing practices or typographical corrections — may be made without advance notice. The "Last Updated" date at the top of this page will reflect every revision. Continued use of zd555 after the effective date of any changes constitutes acceptance of the updated policy.

15. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how zd555 has handled your personal information, please contact us through any of the following channels:

• Live Chat: Available 24/7 through the zd555 platform — the fastest way to reach us for urgent data concerns.
• Email: support@zd555.ws — for formal data requests, please include "Privacy Request" in the subject line.
• In-Account: Submit a data access, rectification or deletion request directly through the Privacy section of your account settings.

We are committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.