z999 Privacy Policy –
Your Data, Your Rights, Our Obligations

z999 is the operator of the online casino and sports betting Platform accessible at https://z999.bio. For the purposes of this Privacy Policy, z999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, z999 is responsible for determining the purposes and means of processing your personal information.

z999 operates under an international gaming license. As a licensed gaming operator, z999 is subject to regulatory obligations concerning the collection, verification, retention, and secure handling of player data. These obligations form part of the lawful basis on which z999 processes certain categories of your personal information — as detailed in Section 4 of this Policy.

All questions, requests, and formal complaints relating to the processing of your personal data by z999 should be directed to the z999 data team via the in-platform live chat function or through the support email address displayed in the footer of this website.

z999 collects different categories of personal data depending on how you interact with the Platform. The following table sets out the main categories of data collected, with examples and the primary purpose for which each category is processed:

z999 collects personal data through a variety of means depending on how you interact with the Platform:

• Direct provision: Data you enter yourself during registration, identity verification, support communications, or payment transactions — including your name, mobile number, and financial details.
• Automated collection: Technical and usage data collected automatically as you browse and use the z999 Platform, via server logs, cookies, and similar technologies. See Section 8 for full details on cookies.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, our payment processing partners share transaction confirmation data and, where required by AML regulations, identity confirmation data with z999.
• Identity verification providers: Where z999 uses third-party KYC services to verify your identity, those providers may return verification results, risk scores, and document validation data to z999.
• Fraud detection systems: Automated systems that analyse login patterns, transaction behaviour, and platform usage to detect suspicious activity may generate derived data about your account.

Every data processing activity conducted by z999 is founded on one of the following recognised legal bases. Where the applicable basis changes for any processing activity, z999 will update this Policy accordingly:

1. Performance of a contract: Processing necessary to create and maintain your z999 account, process your deposits and withdrawals, record your bets and game outcomes, and deliver the services you have signed up for. Without this processing, z999 cannot operate your account.
2. Legal obligation: Processing required by z999's gaming license conditions, anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and other applicable laws — including age verification and transaction monitoring requirements.
3. Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests do not override your fundamental privacy rights.
4. Consent: Processing of your data for optional marketing communications (including promotional SMS and email notifications about z999 offers) where you have given clear, explicit consent. You may withdraw marketing consent at any time without affecting your account status.

z999 uses the personal data it collects for the following specific purposes:

• To create and manage your z999 account and provide ongoing platform access.
• To verify your identity and age (21+) in accordance with gaming license requirements and AML regulations.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20.
• To record all bets, game outcomes, and transaction history associated with your account, as required by our gaming license.
• To detect and prevent fraud, multi-accounting, money laundering, and other prohibited activities.
• To monitor your gameplay patterns in connection with our responsible gaming obligations and to intervene where signs of problem gambling behaviour are identified.
• To communicate with you regarding your account, transactions, security alerts, and support requests.
• To send promotional communications about z999 offers, bonuses, and new games — only where you have provided explicit marketing consent.
• To improve the z999 Platform based on usage data, bug reports, and player feedback.
• To comply with all applicable regulatory, licensing, legal, and law enforcement obligations applicable to z999 as a licensed gaming operator.

z999 does not sell, rent, or license your personal data to any third party for commercial or advertising purposes. Full stop. This is a core z999 commitment.

z999 shares personal data only in the following limited and controlled circumstances:

• Payment processors: Your payment details are shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT network service providers solely to process your financial transactions. These providers operate under their own data protection obligations and are contractually prohibited from using your data for any purpose beyond processing your transaction.
• Identity verification (KYC) providers: Where z999 uses third-party KYC service providers to verify your identity documents, those providers receive only the data necessary for verification and are contractually bound to strict data handling obligations.
• Game providers: Technical session data (but not financial or identity data) may be shared with certified game providers — such as Pragmatic Play, Evolution Gaming, and others — to facilitate game delivery and resolve technical disputes.
• Regulatory and law enforcement authorities: z999 is legally obligated to disclose certain player data to its gaming regulator, financial intelligence units, and law enforcement agencies where required by law, court order, or regulatory direction. z999 will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of z999's business assets, player data may be transferred to the successor entity subject to equivalent data protection obligations being maintained.

z999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention schedules apply as a general guide:

• Account and identity data: Retained for the lifetime of your z999 account plus a minimum of 5 years following account closure, as required by our gaming license AML obligations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction, as required by AML and gaming regulatory obligations.
• Support communications: Retained for 2 years from the date of the last communication, unless a longer period is required for an active dispute or legal matter.
• Technical and usage data: Retained for up to 13 months in identifiable form, after which it is aggregated and anonymised for statistical analysis purposes.
• Marketing consent records: Retained for as long as your consent remains active, plus 1 year after withdrawal of consent to demonstrate compliance.

At the end of each applicable retention period, z999 will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

The z999 Platform uses cookies and similar tracking technologies to operate correctly, improve the user experience, and monitor platform security. The following categories of cookies are used:

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the z999 Platform. Most modern mobile browsers used by Pakistani players — Chrome on Android, Safari on iOS — provide cookie management options in their privacy settings menus.

As a z999 player, you have the following rights with respect to the personal data z999 holds about you. These rights may be subject to certain conditions and limitations as prescribed by applicable law and z999's regulatory obligations:

To exercise any of the above rights, please contact z999 via the in-platform live chat or the support email displayed in the footer. z999 will respond to all verified data rights requests within 30 calendar days. Complex requests may require an additional 60-day extension, in which case z999 will notify you within the initial 30-day period.

The z999 Platform is strictly an adult service. Access is limited to individuals who are 21 years of age or older. z999 does not knowingly collect personal data from any individual under the age of 21.

If z999 becomes aware — through age verification, identity document review, or any other means — that an account holder is under 21, the account will be immediately suspended, all data associated with the underage user will be processed only to the extent required to close the account and refund any remaining balance, and all collected data will be deleted following the mandatory retention period required by AML regulations.

If you are a parent or guardian and believe that a person under 21 in your care has registered with z999, please contact z999 immediately via live chat so that the account can be reviewed and closed appropriately. z999 takes the protection of minors extremely seriously and will act on all credible reports without delay.

z999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and z999 servers — the same encryption standard used by international banks and major fintech platforms.
• Password hashing using industry-standard one-way cryptographic functions. z999 staff cannot retrieve your password. Reset requires verification through your registered Pakistani mobile number.
• Payment data tokenisation: JazzCash and EasyPaisa payment details are tokenised immediately upon receipt. Full payment credentials are never stored on z999 servers.
• Two-factor authentication (2FA) available as a voluntary but strongly recommended security measure for all z999 accounts.
• Intrusion detection systems and real-time monitoring for suspicious access patterns, including abnormal login locations, multiple failed authentication attempts, and unusual transaction behaviour.
• Access controls: Player data is accessible only to z999 staff members who have a specific operational need to access it. Access logs are maintained and audited regularly.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet platform can guarantee absolute security. z999 cannot be held liable for security breaches that result from factors outside its reasonable control, including attacks exploiting previously unknown vulnerabilities (zero-day exploits). In the event of a significant data breach affecting your personal information, z999 will notify you in accordance with its regulatory obligations.

The z999 Platform may occasionally reference or link to third-party websites — such as game provider information pages, payment method guidance, or licensed gaming regulatory bodies. These third-party sites operate independently of z999 and are not covered by this Privacy Policy.

z999 has no control over and accepts no responsibility for the privacy practices, content, or data handling of any third-party website. When you leave the z999 Platform by following a link to a third-party site, we recommend you review the privacy policy of that site before providing any personal information. z999's responsibility for your data ends at the boundary of the z999 Platform.

Where you have provided explicit consent during registration or at any subsequent point, z999 may send you marketing communications about new games, promotional bonuses, PSL cricket betting offers, and other z999 platform updates via SMS to your registered Pakistani mobile number and/or email address.

You may withdraw your marketing consent at any time without penalty and without affecting your ability to use the z999 Platform. To opt out of marketing communications from z999, you may:

• Update your notification preferences in the Account Settings section of your z999 dashboard.
• Reply "STOP" to any promotional SMS sent to your registered number.
• Contact z999 via in-platform live chat and request removal from the marketing list.

Note that transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and OTP messages — are not marketing communications and cannot be opted out of, as they are necessary for the operation of your account and the security of your funds.

z999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, z999's data processing practices, or the structure of the Platform. The most current version of this Policy is always available on this page, with the version number and effective date clearly displayed.

Where a change to this Policy materially affects your rights or the way z999 handles your personal data, z999 will provide reasonable advance notice via in-platform notification and, where technically practicable, via SMS to your registered Pakistani mobile number. For less material administrative updates, z999 may update the Policy without prior individual notification.

Your continued use of the z999 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change, you may request account closure and deletion of your data (subject to applicable legal retention obligations) by contacting z999 support.

For all privacy-related enquiries, data rights requests, complaints about data handling, or questions about this Privacy Policy, please contact z999 through one of the following channels:

• In-platform live chat: Available 24/7 from within your logged-in z999 account. This is the fastest channel for privacy enquiries and is monitored by the z999 data team around the clock.
• Support email: The z999 support email is displayed as plain text in the footer of this website. Please include "Privacy Request" in the subject line of your message and provide your registered mobile number for identity verification.

z999 is committed to responding to all privacy-related contacts within 5 business days for general enquiries and within 30 calendar days for formal data rights requests. Where additional time is required — for instance, to collate a large volume of account data for a subject access request — z999 will acknowledge receipt promptly and advise you of the expected timeline.