cz666 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by cz666 ("we", "us", "our", or "the Platform") and applies to all personal data processed in connection with your use of the cz666 online gaming and sports betting platform accessible at cz666.bio, including all related mobile experiences, customer support interactions, and account management activities.

cz666 is committed to protecting the personal data of all registered users, including the many Pakistani players who access the Platform from cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. We process your personal data responsibly, lawfully, and in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, and accuracy.

By registering a cz666 account or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read, understood, and agree to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should cease using the cz666 Platform and may close your account by contacting our support team.

2 Data Controller

For the purposes of this Privacy Policy, cz666 (operating through cz666.bio) is the data controller responsible for the personal data of users on the Platform. As data controller, cz666 determines the purposes and means by which personal data is processed and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

All queries, requests, and complaints relating to data protection and the processing of personal data by cz666 should be directed to the cz666 Data Privacy team via the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

cz666 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (for age verification — 21+ requirement enforcement)
• Pakistani mobile number (primary account identifier)
• Email address
• Residential address (city, district, province, Pakistan or other country)
• CNIC number (for Pakistani players undergoing full KYC verification)
• Username and encrypted password

3.2 Identity Verification (KYC) Documents

• Copy of valid CNIC (Computerised National Identity Card) — front and back
• Passport copy (where CNIC is not available or where required for enhanced verification)
• Proof of address documents (utility bill, bank statement dated within 3 months)
• Payment method verification (screenshot or statement confirming ownership of JazzCash, EasyPaisa, bank account, or card used for deposits)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amount, date, method, status)
• Payment method details (masked card numbers, JazzCash/EasyPaisa account numbers, bank account references)
• PKR wallet balance history
• Bonus and promotional credit allocation and wagering history

3.4 Gaming & Betting Activity Data

• Game session records (game title, duration, stakes, outcomes)
• Sports betting records (event, market, odds, stake, settlement)
• Responsible gaming settings and self-imposed limit history
• Session timing and frequency data used for responsible gaming monitoring

3.5 Technical & Device Data

• IP address at time of login and during active sessions
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 11)
• Geolocation data (country and city level — not precise GPS coordinates)

3.6 Communications Data

• Records of live chat, email, and other support interactions with cz666 customer service
• Complaint and dispute correspondence
• Feedback and survey responses where voluntarily provided

4 How We Collect Your Data

cz666 collects personal data through the following channels and mechanisms:

• Direct provision by you: When you register a cz666 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically during Platform use: Technical data including IP address, device information, and gameplay logs are collected automatically when you access and use the cz666 Platform.
• Third-party KYC providers: cz666 uses reputable third-party identity verification services to cross-check identity documents. These services may return verification results and risk flags to cz666.
• Payment processors: When you make a deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB Bank, Visa/Mastercard, or USDT, transaction confirmation data is transmitted to cz666 by the payment processor.
• Cookies and tracking technologies: Session cookies and persistent cookies collect data about your browsing behaviour on the cz666 Platform as detailed in Section 11.
• AML and fraud screening services: cz666 may receive risk-scoring data about users from third-party financial crime screening providers as part of its AML compliance obligations.

5 How cz666 Uses Your Personal Data

The following table summarises the primary purposes for which cz666 processes your personal data:

6 Legal Basis for Processing

cz666 processes your personal data on the following legal bases:

6.1 Performance of Contract

Processing your personal data is necessary to provide you with the cz666 gaming and betting services you have registered for. Without processing identity, financial, and activity data, cz666 cannot operate your account, process your deposits and withdrawals, or deliver the gaming products you access.

6.2 Legal Obligation

cz666 is required by applicable international gaming regulations, AML requirements, and KYC standards to collect and process certain categories of personal data, including identity documents and financial transaction records. This processing is non-optional — failure to provide the required information may result in account restrictions.

6.3 Legitimate Interest

cz666 processes certain personal data on the basis of its legitimate business interests, including but not limited to: preventing fraud and account abuse, securing the Platform against unauthorised access, improving Platform functionality and user experience, and conducting responsible gaming monitoring to protect users from gambling-related harm. Where legitimate interest is relied upon, cz666 has assessed that its interest does not override users' fundamental rights and freedoms.

6.4 Consent

Where cz666 processes personal data based on your consent — for example, sending you promotional communications about new games, PSL betting promotions, or bonus offers — you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. You may manage your communication preferences through your cz666 account settings.

7 Data Sharing & Third Parties

cz666 does not sell your personal data to any third party. cz666 shares personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB Bank, Visa/Mastercard processing networks, and USDT infrastructure providers receive the minimum data necessary to process your transactions. Each provider is bound by their own data protection obligations.
• KYC and identity verification providers: Specialist third-party identity verification services receive document scans and identity data for the sole purpose of completing regulatory verification checks. These providers operate under strict data processing agreements with cz666.
• AML and fraud screening providers: cz666 uses financial crime risk screening services that may receive transaction pattern data to generate risk assessments. These services assist cz666 in fulfilling its anti-money laundering compliance obligations.
• Game content providers and live studio operators: For live dealer games and certain slot titles, game data may be processed by third-party game studios who provide the software and streaming infrastructure. These studios process game outcome and session data as technical necessities of service delivery.
• Regulatory and law enforcement authorities: cz666 will disclose personal data to government bodies, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory instruction.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by cz666 may access personal data on a confidential basis to the extent necessary for the professional service being delivered.

8 Data Retention

cz666 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy AML, KYC, and gaming regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with anti-money laundering record-keeping obligations applicable to gaming operators.
• KYC documents: Retained for a minimum of 5 years from the date of account closure or the last transaction, whichever is later.
• Gaming and betting activity logs: Retained for a minimum of 3 years following account closure for dispute resolution, responsible gaming review, and regulatory audit purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction, to enable cz666 to respond to any subsequent queries or complaints.
• Technical and device data (session logs): Retained for 12 months, unless a specific investigation or dispute requires longer retention.
• Promotional and marketing consent records: Retained for the duration of consent and for 12 months thereafter as evidence of consent management.

Following the expiry of the applicable retention period, personal data is either securely and irreversibly deleted or anonymised so that it can no longer be attributed to any individual user.

9 Your Data Rights

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data processed by cz666:

9.1 Right of Access

You have the right to request confirmation of whether cz666 holds personal data about you and, if so, to receive a copy of that data together with information about how it is being processed. Requests will be fulfilled within 30 days of receipt.

9.2 Right to Rectification

If personal data held by cz666 is inaccurate or incomplete, you have the right to request its correction or completion. Account profile details (name, address, contact information) can be updated directly through your cz666 account settings or via a support request.

9.3 Right to Erasure ("Right to be Forgotten")

In certain circumstances, you have the right to request that cz666 deletes your personal data. This right is not absolute — cz666 may be required to retain certain categories of data (particularly financial and KYC records) to comply with AML regulations and gaming licensing requirements, which will take precedence over erasure requests in those specific categories. Where erasure is possible, cz666 will confirm the deletion within 30 days.

9.4 Right to Restriction of Processing

You may request that cz666 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interest and the objection is under review.

9.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive the personal data you have provided to cz666 in a structured, commonly used, and machine-readable format.

9.6 Right to Object

You have the right to object to processing based on legitimate interest at any time. You also have an absolute right to object to processing of your personal data for direct marketing purposes, including profiling related to direct marketing. Upon receipt of such an objection, cz666 will cease marketing processing immediately.

9.7 Exercising Your Rights

To exercise any of the rights listed above, please contact the cz666 support team with a clear description of your request and sufficient information to verify your identity. cz666 will not charge a fee for standard rights requests. We will respond within 30 days; complex or voluminous requests may require an extension to 60 days, in which case you will be notified.

10 Security Measures

cz666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cz666 Platform, including login sessions, deposits, and account management interactions.
• AES-256 encryption at rest for sensitive data stored in cz666 databases, including identity documents and payment information.
• Two-factor authentication (2FA) available to all users to add an additional layer of protection to the cz666 login process. cz666 strongly recommends enabling 2FA on all accounts.
• Role-based access controls ensuring that cz666 employee access to personal data is restricted to authorised personnel with a genuine operational need.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities in the cz666 infrastructure.
• Intrusion detection and monitoring systems that alert the cz666 security team to anomalous access patterns or potential breaches in real time.
• Data breach response procedures that ensure cz666 can notify affected users and relevant authorities promptly in the event of a confirmed data security incident.

Notwithstanding these measures, no internet-based system can be guaranteed to be completely secure. cz666 cannot provide an absolute warranty against all security risks. You are responsible for keeping your cz666 account credentials confidential and for using a strong, unique password that you do not share with any third party.

11 Cookies & Tracking Technologies

cz666 uses cookies and similar technologies on the Platform to enable core functionality, improve user experience, and support security operations. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your authenticated state after login, security tokens, and load-balancing cookies. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings, currency display preferences, and game filter selections to personalise your cz666 experience across sessions.
• Analytics cookies: Collect anonymised data about how users navigate the cz666 Platform — which pages are visited most frequently, where users exit, and how game categories are browsed. This data is used solely to improve the Platform and is not linked to your personal identity.
• Security cookies: Used to detect and prevent fraudulent login attempts, identify sessions originating from suspicious locations or device configurations, and support the cz666 account protection systems.

cz666 does not use third-party advertising cookies or allow external advertisers to set cookies on the Platform. On your first visit to cz666, you will be presented with a cookie consent notice through which you can accept or adjust your preferences for non-essential cookies. Strictly necessary cookies cannot be refused as they are essential to Platform operation.

12 Minors & the 21+ Policy

cz666 is strictly an adult entertainment platform for users aged 21 years and above. cz666 does not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification through the KYC process is a mandatory step before full account activation on cz666.

If cz666 becomes aware or has reasonable grounds to suspect that personal data has been submitted by or on behalf of an individual under 21 years of age, cz666 will immediately suspend the associated account, delete the relevant personal data to the extent permitted by law, and report the incident to relevant authorities where required.

13 International Data Transfers

cz666 operates internationally and may store or process your personal data on servers or through service providers located outside your country of residence, including outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, cz666 implements appropriate safeguards to ensure equivalent protection is maintained.

Such safeguards may include standard contractual clauses with data processors and service providers, binding corporate rules, or reliance on recognised adequacy decisions. Where transfers are made to third-party payment processors operating within Pakistan — such as JazzCash and EasyPaisa — those transfers are governed by the data processing terms of the respective payment provider and applicable Pakistani regulatory requirements.

14 Changes to This Privacy Policy

cz666 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes to this Policy — meaning changes that significantly affect your rights or the way we use your data — will be communicated to you via your registered email address and/or through a prominent notice displayed on the cz666 Platform at least 7 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The effective date at the top of this page indicates when the current version came into force. Your continued use of the cz666 Platform after an updated Policy has been published and notified to you constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you should close your account prior to the effective date of the revision.

15 Contact Us — Data Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cz666, please contact our team using the following details:

• Platform: cz666 — cz666.bio
• Email address (plain text): [email protected]
• Support channel: 24/7 live chat available on the cz666 Platform (English and Urdu)
• Response time target: All data privacy requests acknowledged within 2 business days; fully responded to within 30 days

If you are not satisfied with our response to a data privacy complaint, you have the right to refer the matter to the relevant data protection supervisory authority in your jurisdiction. cz666 will cooperate fully with any investigation conducted by a competent regulatory authority.