At zexapk, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains precisely what personal information we collect from Members registered in Pakistan and worldwide, why we collect it, how it is stored and protected, and what rights you have over your own data. We recommend reading this document alongside our Terms & Conditions.
Our Core Privacy Commitments
Before getting into the legal detail, here are the six privacy principles that shape how zexapk approaches your personal data at every level of our platform — from registration in Karachi to a live baccarat session in Lahore.
zexapk does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data serves one purpose: enabling you to use zexapk services safely and securely. That is the beginning and end of it.
All personal data transmitted between your device and zexapk servers is protected using TLS 1.3 encryption. Sensitive data at rest — including CNIC details, payment information, and account credentials — is encrypted using AES-256 standards, the same technology trusted by international banks.
zexapk only collects the personal data that is genuinely required to provide our services, meet our legal obligations, and keep your account secure. We do not collect personal data speculatively or for purposes beyond those described in this Privacy Policy.
Access to Member personal data within zexapk is restricted on a strict need-to-know basis. Only authorised personnel in compliance, finance, and customer support functions may access your data, and all such access is logged and audited.
zexapk provides every Member with meaningful rights over their personal data — including the right to access, correct, port, restrict, and in certain circumstances delete the information we hold about them. These rights are described in full in Section 9 of this policy.
In the unlikely event of a data breach that affects your personal information, zexapk will notify affected Members promptly via their registered email address and will take immediate steps to contain and remediate the breach in line with our security incident response policy.
This Privacy Policy applies to the zexapk platform, accessible at zexapk.net, and any associated mobile applications or digital services operated under the zexapk brand. For the purposes of this document, "zexapk," "we," "us," and "our" refer to the operator of the zexapk platform and its authorised representatives acting as the data controller in respect of your personal information.
zexapk operates as Pakistan's premier online casino and sports betting platform, offering PKR-denominated gaming services including PSL cricket betting, live baccarat, slot games, dice games, and the Insect Master game series. Our services are strictly available to individuals aged 21 years and above.
As the data controller, zexapk determines the purposes and means by which your personal data is processed. If you have any questions about how we handle your information, please refer to Section 14 for contact details.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the zexapk platform.
zexapk collects personal data in several categories, depending on how you interact with the platform. Below is a comprehensive breakdown of the types of information we may hold about you as a registered Member.
Note on Sensitive Data: CNIC scans and identity documents are classified as sensitive personal data within zexapk's internal data classification framework. They are stored in an isolated, access-controlled environment, encrypted at rest, and are never shared beyond zexapk's compliance and KYC verification teams except as required by applicable law.
zexapk collects your personal data through the following mechanisms:
The majority of personal data we hold is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are always informed at the point of collection what data is required and why.
When you use the zexapk platform — whether on web browser or mobile — our servers and analytics systems automatically collect technical and behavioural data. This includes IP address logging, session data, device identification, and game interaction records. This collection is necessary for platform security, fraud prevention, and service improvement.
zexapk may receive personal data from third-party service providers in limited, specific circumstances — for example, receiving confirmation of identity from a KYC verification partner, receiving transaction status updates from JazzCash or EasyPaisa, or receiving fraud risk scores from a security service provider. In all cases, such providers are contractually bound to handle your data in accordance with applicable data protection standards.
zexapk uses cookies and similar tracking technologies as described in Section 7 of this Privacy Policy. These may collect data about your browsing behaviour on the zexapk platform to support session management, preference retention, and analytics.
zexapk processes your personal data only for legitimate, defined purposes. The table below sets out each purpose alongside the data categories typically used:
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Identity, Contact, Device |
| KYC identity verification and AML compliance | Identity, Financial, KYC Documents |
| Processing deposits and withdrawals | Financial, Transaction |
| Delivering gaming services and settling bets | Identity, Gameplay, Transaction |
| Fraud detection and security monitoring | Technical, Device, Behavioural, Financial |
| Responsible gaming programme administration | Identity, Gameplay, Behavioural |
| Customer support and dispute resolution | Identity, Transaction, Support Correspondence |
| Promotional communications (where consented) | Contact, Gameplay Preferences |
| Platform analytics and service improvement | Technical, Behavioural (aggregated/anonymised) |
| Legal and regulatory compliance and reporting | All categories as required by applicable law |
zexapk does not use personal data for automated decision-making that produces legal or similarly significant effects on Members, except where this is a necessary component of our fraud detection and responsible gaming systems. In such cases, you have the right to request human review of any automated decision as described in Section 9.
zexapk processes your personal data on the following legal grounds, in accordance with applicable international data protection frameworks:
zexapk does not sell your personal data. We share it only in the following limited circumstances and only with parties who are contractually required to protect it:
zexapk engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include:
zexapk will disclose personal data to government agencies, regulators, law enforcement bodies, or courts when required to do so by applicable law, regulation, legal process, or lawful request. zexapk will, where permitted by law, notify affected Members of such disclosures.
In the event that zexapk undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data handling practices that result from it.
zexapk will never share your personal data with third-party advertisers, data brokers, or marketing platforms. Any promotional communications from zexapk are sent directly by zexapk and do not involve sharing your contact details with outside parties.
The zexapk platform uses cookies and similar technologies to ensure core functionality, improve your experience, and maintain platform security. The following categories of cookies are in use:
zexapk does not use advertising or targeting cookies. No third-party advertising networks have access to cookie data collected on the zexapk platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.
zexapk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and contact data | Duration of membership + 5 years post-closure | AML / regulatory obligation |
| KYC verification documents | Duration of membership + 5 years post-closure | AML / regulatory obligation |
| Financial transaction records | Duration of membership + 7 years post-closure | Financial reporting obligation |
| Gameplay and betting history | Duration of membership + 3 years post-closure | Dispute resolution / legitimate interest |
| Customer support correspondence | 3 years from last interaction | Dispute resolution / legitimate interest |
| Technical and device logs | 12 months rolling | Security / fraud prevention |
| Marketing consent records | Until consent withdrawn + 2 years | Consent / legal accountability |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with zexapk's data disposal procedures. Anonymised or aggregated data derived from your information may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
zexapk recognises and respects your rights in relation to the personal data we hold about you. The following rights are available to all registered Members. To exercise any of these rights, please contact our support team as described in Section 14.
You may request a copy of all personal data zexapk holds about you, along with information about how it is processed.
You may request correction of any inaccurate or incomplete personal data we hold. Some corrections require updated KYC documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
You may request that we pause processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
You may request your personal data in a structured, machine-readable format for transfer to another service, where technically feasible.
You may object to processing based on legitimate interests. You may also withdraw marketing consent at any time with immediate effect.
You may request human review of any decision made about you solely by automated means where it has a significant effect on your account.
You have the right to lodge a complaint with the applicable data protection supervisory authority if you believe your rights have been violated.
zexapk will respond to all data rights requests within 30 days of receipt. In complex cases, this may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. We will never charge a fee for processing a data rights request unless it is manifestly unfounded or excessive.
The zexapk platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process includes mandatory date-of-birth verification, and our KYC process includes CNIC document verification to confirm age eligibility.
If zexapk discovers that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately and permanently closed, all balances will be withheld, and all personal data associated with that account will be deleted as promptly as permitted by applicable law. The matter may be referred to relevant child protection or law enforcement authorities. If you believe a minor has registered on zexapk, please contact us immediately via the details in Section 14.
zexapk implements technical controls at multiple points in the registration and verification flow to prevent underage access. These include date-of-birth validation at registration, CNIC number cross-referencing during KYC, and ongoing behavioural monitoring that may flag accounts exhibiting patterns inconsistent with adult play.
zexapk employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:
While zexapk takes every reasonable measure to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying zexapk immediately if you suspect any unauthorised access to your account.
zexapk's primary data processing infrastructure is hosted on servers located in jurisdictions that maintain recognised data protection standards. In the course of providing our services, some personal data may be transferred to and processed by service providers located outside Pakistan — for example, cloud infrastructure providers, KYC verification partners, or fraud detection services.
Where personal data is transferred internationally, zexapk ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required by applicable data protection law. These safeguards may include:
You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting us as described in Section 14.
zexapk reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or regulatory guidance. The "Last Updated" date at the top of this page and within the updated badge above the policy body will reflect when the most recent revision was made.
For material changes — those that significantly affect how we process your personal data or your rights as a data subject — zexapk will notify all active Members via email to their registered address and via a prominent notice displayed on the platform for a minimum of 14 days prior to the change taking effect. For non-material clarifications or editorial updates, the revised policy will take effect immediately upon publication.
We recommend bookmarking this page and reviewing it periodically. Your continued use of the zexapk platform following any update to this Privacy Policy constitutes your acknowledgement of the revised terms. If you have any questions about a specific change, please contact our support team before continuing to use the platform.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how zexapk has handled your personal information, please contact our Data Protection team using the details below:
When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so that we can identify your account and respond promptly. We may need to verify your identity before processing certain requests — this is a security measure to prevent unauthorised access to your data.
If you are not satisfied with zexapk's response to your privacy concern, you have the right to escalate the matter to the applicable data protection supervisory authority in your jurisdiction. zexapk takes all privacy complaints seriously and commits to engaging constructively with any regulatory enquiry.
For issues related to responsible gaming, account self-exclusion, or gambling harm, please visit our dedicated Responsible Gaming page. For general account queries, our support team is available via the platform's live chat function.
Ready to Play Responsibly?
Your data is protected. Your experience is premium. From PSL cricket betting to live baccarat, zexapk delivers a secure, PKR-friendly gaming environment for players aged 21 and above across Pakistan.