⬡ Data Protection & Privacy

za22 Privacy Policy

This Privacy Policy explains what personal data za22 collects, why we collect it, how we use and protect it, and the rights you hold in relation to your information. We are committed to handling your data with care, transparency and respect.

Last Updated: 1 January 2026
Privacy at a Glance

Our Core Privacy Commitments

These cards summarise za22's approach to your privacy. They do not replace reading the full policy below, but they give you a clear top-level picture.

No Data Selling

za22 does not sell, rent or otherwise commercially transfer your personal data to third parties for their own marketing purposes. Your information is used only as described in this policy.

SSL Encryption

All data transmitted between your device and za22's servers is protected by SSL/TLS encryption. Every page of the platform operates over HTTPS. Your login credentials and payment details travel securely.

Your Rights, Respected

You have the right to access, correct, restrict and — where applicable — request deletion of your personal data. Exercising these rights is straightforward and can be initiated by contacting our support team.

Defined Retention Periods

We do not keep your data indefinitely. Retention periods are tied to the purpose for which data was collected and to legal obligations, including KYC/AML record-keeping requirements.

Cookie Transparency

We use essential, analytics and preference cookies. You are informed about how cookies function on za22, and where technically feasible, you can manage non-essential cookie preferences.

Marketing Opt-Out

If you have consented to marketing communications, you can withdraw that consent at any time through your account preferences or by contacting support. We will honour opt-out requests promptly.

Section 01

Introduction

This Privacy Policy ("Policy") is issued by za22 ("we", "us", "our") and applies to all personal data collected through the za22 website at https://za22.cam and any associated services, features or applications (collectively, the "Platform"). It describes how za22 collects, stores, uses, discloses and protects the personal data of individuals who access or use the Platform ("User", "you", "your").

za22 recognises that privacy is a fundamental right. We are committed to processing personal data lawfully, transparently and for specific, legitimate purposes only. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions. In the event of any conflict between this Policy and the Terms, the Terms shall prevail in relation to your use of the Platform, except where this Policy specifically addresses a data protection matter.

Note for Pakistani Users: za22 is an English-language platform serving Pakistani users. We do not represent that our data processing practices are certified or approved by any Pakistani regulatory authority, including the National Database and Registration Authority (NADRA), the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan. This Policy does not constitute legal advice. Users in Pakistan who have specific data protection concerns are encouraged to seek independent legal guidance.
Section 02

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, CNIC number, IP address and financial details.
"Processing" Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction, whether automated or manual.
"Data Controller" za22, which determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor" A third party that processes Personal Data on behalf of za22 and under za22's instructions, such as payment service providers and KYC verification services.
"Consent" A freely given, specific, informed and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.
"KYC Data" Identity verification documents and information collected as part of the Know Your Customer process, including CNIC, passport, selfie or liveness check data.
"Cookies" Small text files placed on your device by the Platform to enable functionality, session management, analytics and preference storage.
Section 03

Data We Collect

za22 collects Personal Data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third parties such as KYC verification providers. The categories of data we may collect are as follows:

Data Category Examples Collected When
Identity Data Full name, date of birth, CNIC or passport number, nationality Registration; KYC verification
Contact Data Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) Registration; support interactions
Financial Data Deposit and withdrawal history, payment method type, transaction amounts in PKR Transactions; cashier use
Technical Data IP address, device type, browser, operating system, session duration Automatically on Platform access
Usage Data Pages viewed, games played, betting markets accessed, frequency and duration of sessions Automatically during Platform use
KYC Documents CNIC scan or photograph, passport image, proof of address, liveness check data Identity verification flow
Communication Data Support chat logs, email correspondence, feedback submissions Customer support interactions
Marketing Preferences Consent status for promotional communications, opted-in channels Registration; preference settings
Payment Provider Reference: When you interact with payment methods in the cashier, references to services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made for contextual familiarity only. za22 does not receive or store your full payment provider credentials. Financial transaction data processed by third-party payment providers is subject to those providers' own privacy policies in addition to this Policy.
Section 04

Lawful Basis for Processing

za22 processes your Personal Data only where a valid lawful basis exists. The primary lawful bases we rely on are:

  • Contractual Necessity: Processing is necessary to provide the services you have requested, including managing your Account, processing deposits and withdrawals, and enabling gameplay. Without this processing, we cannot deliver the Platform's core functions.
  • Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML requirements, age verification obligations, fraud prevention and record-keeping mandates under the laws of the jurisdiction in which za22 operates.
  • Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, responsible gambling monitoring and analytics used to improve the Service.
  • Consent: Where we rely on consent — primarily for marketing communications — we will collect your consent explicitly and record it. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Section 05

How We Use Your Data

za22 uses Personal Data collected through the Platform for the following purposes. Data is never used for purposes incompatible with those stated below without your prior knowledge and, where required, your consent.

5.1 — Account Management & Service Delivery

To create, maintain and manage your Account; to process transactions; to verify your identity and age; to enforce applicable platform limits and restrictions; and to provide customer support services. This processing is essential to the provision of the Service and cannot be opted out of while you maintain an active Account.

5.2 — Security, Fraud Prevention & AML

To detect, investigate and prevent fraudulent activity, account misuse, money laundering and other prohibited conduct. This includes monitoring transaction patterns, cross-referencing identity data and deploying automated risk-scoring tools. Where suspicious activity is identified, za22 reserves the right to report relevant information to competent authorities.

5.3 — Responsible Gambling Monitoring

To identify patterns of play that may indicate problem gambling behaviour and, where appropriate, to trigger responsible gambling interventions such as contact from the support team, imposition of limits or temporary account restrictions. This processing is conducted in the interests of player welfare.

5.4 — Platform Improvement & Analytics

To analyse aggregate usage patterns for the purpose of improving the Platform's performance, interface design and content relevance. Analytics data is used in aggregated or pseudonymised form wherever possible.

5.5 — Marketing Communications

To send you promotional content, bonus offers and platform updates where you have provided consent for such communications. You may withdraw marketing consent at any time through account settings or by contacting support. Withdrawal of marketing consent does not affect your Account access.

5.6 — Legal Compliance & Dispute Resolution

To comply with legal obligations including court orders, regulatory requests and applicable law; and to establish, exercise or defend legal claims arising from or related to your use of the Platform.

Section 06

Data Sharing & Disclosure

za22 does not sell or rent your Personal Data to third parties. We may share your data only in the limited circumstances described below:

  • Service Providers (Data Processors): We engage third-party service providers — including payment processing partners, KYC/AML verification services, cloud infrastructure providers and analytics platforms — who process data on our behalf under contractual data processing agreements. These processors are bound by confidentiality obligations and may only use your data as instructed by za22.
  • Legal and Regulatory Authorities: Where required by applicable law, court order or regulatory mandate, za22 may disclose Personal Data to competent governmental or law enforcement authorities. We will endeavour to notify you of such disclosures where legally permitted to do so.
  • Fraud Prevention and Security Networks: We may share limited identity and transaction data with fraud prevention services and industry databases used to detect and prevent financial crime. This is conducted in accordance with our AML obligations.
  • Business Transfers: In the event of a merger, acquisition or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy obligations as set out in this Policy.

In all cases of data sharing, za22 applies appropriate contractual and technical safeguards to protect your data during transfer and processing.

Section 07

Data Retention

za22 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

  • Active Account Data: Retained for the duration of your Account and for a defined period after Account closure, as required to fulfil outstanding legal obligations.
  • KYC and Identity Documents: Retained for the minimum period required by applicable AML regulations in the operator's jurisdiction, typically five years from the date of Account closure or last transaction.
  • Transaction Records: Financial transaction data is retained for the period required by applicable accounting, tax and AML regulations.
  • Communication Records: Support correspondence is retained for a reasonable period to enable dispute resolution and service quality review.
  • Marketing Data: Retained until you withdraw consent or for as long as your Account remains active, whichever is earlier.
  • Technical and Usage Data: Aggregated analytics data may be retained indefinitely in de-identified form. Individually identifiable technical data is subject to shorter retention periods aligned with its collection purpose.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data management procedures.

Section 08

Cookies & Tracking Technologies

za22 uses cookies and similar tracking technologies to enable Platform functionality, improve user experience and analyse usage patterns. The following types of cookies are deployed on the Platform:

By continuing to use the Platform, you consent to our use of essential cookies. For non-essential cookies, your consent is sought where technically possible through Platform settings. Most browsers also allow you to manage cookie settings independently — refer to your browser's help documentation for guidance.

Section 09

Your Data Rights

Subject to applicable law and any overriding legal obligations that may restrict the exercise of certain rights, you hold the following rights in relation to your Personal Data processed by za22:

Right of Access

Request a copy of the Personal Data za22 holds about you, including information on how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held about you without undue delay.

Right to Erasure

Request deletion of your Personal Data where it is no longer necessary, where consent is withdrawn, or where processing was unlawful — subject to retention obligations.

Right to Restriction

Request that processing of your data be restricted in certain circumstances, such as while the accuracy of data is being contested.

Right to Portability

Receive your Personal Data in a structured, commonly used, machine-readable format and transmit it to another data controller where technically feasible.

Right to Object

Object to processing carried out on the basis of legitimate interests, including profiling, and to processing for direct marketing purposes at any time.

How to Exercise Your Rights: To exercise any of the rights listed above, please contact za22's support team using the email address provided in Section 13. Requests will be responded to within a reasonable timeframe. We may request proof of identity before processing a data rights request to protect against unauthorised access.
Section 10

Security Measures

za22 implements technical and organisational security measures appropriate to the risk level associated with processing your Personal Data. These measures include:

  • Encryption in Transit: All data transmitted between your browser and za22's infrastructure is encrypted using SSL/TLS protocols. The Platform enforces HTTPS on every page.
  • Encryption at Rest: Sensitive data fields — including KYC documentation and financial records — are encrypted at rest using industry-standard encryption algorithms.
  • Access Controls: Access to Personal Data within za22's systems is restricted to authorised personnel on a need-to-know basis, protected by role-based access controls and multi-factor authentication where applicable.
  • Regular Security Reviews: za22 conducts periodic internal security assessments of its data processing infrastructure to identify and remediate vulnerabilities.
  • Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, za22 will take prompt remediation action and, where required by applicable law, notify affected individuals and competent authorities.

While za22 employs robust security practices, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that your own device is adequately protected against malware and unauthorised access.

Section 11

Processing of Data Relating to Minors

The za22 Platform is strictly intended for adults aged 18 and above, or the higher minimum age required by the applicable operator or license jurisdiction. za22 does not knowingly collect Personal Data from individuals below this age threshold.

Where za22 becomes aware that Personal Data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. Age verification is a condition of account maintenance and KYC procedures include age confirmation checks.

If you are a parent or guardian and believe that your child has registered on za22, please contact us immediately using the details in Section 13.

Section 12

Amendments to This Policy

za22 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Account holders by email or through a prominent Platform notice.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how your Personal Data is being processed.

Section 13

Contact Us

For all privacy-related enquiries, data rights requests, or to report a concern regarding the processing of your Personal Data, please contact the za22 data team using the following details:

Email (non-clickable, plain text only):
[email protected]

Please include "Privacy Request" in the subject line of your message. Support is available in English; Urdu-language assistance is available on request. We aim to acknowledge all formal data rights requests within a reasonable timeframe and resolve them in accordance with our obligations under applicable data protection law. We may request proof of identity before processing your request to safeguard against unauthorised access to account data.

Your Privacy, Our Responsibility

If you have questions about how your data is handled, or if you'd like to exercise a data right, our support team is ready to help. You can also explore our other policy documents for a complete picture.

Return to Homepage Terms & Conditions
Related Documents

Other Policies You Should Know

Terms & Conditions

The full legal agreement governing your use of za22, including account eligibility, bonuses, prohibited conduct and our limitation of liability.

Responsible Gambling

Self-exclusion tools, deposit and loss limits, session reminders and guidance for maintaining healthy gambling habits on za22.

FAQ

Answers to common questions about accounts, payments, KYC, bonuses and platform use — all written in plain English for Pakistani users.