Privacy Policy — z999.bet

1.1  This Privacy Policy ("Policy") describes how z999.bet ("z999", "we", "us", "our") collects, uses, stores, and shares personal information about individuals ("you", "Player", "User") who register an account with, or otherwise interact with, the z999 platform at z999.bet.

1.2  This Policy applies to all personal data collected through the z999 website, any associated mobile interface, customer support channels, and all payment processing touchpoints connected to your z999 account.

1.3  By registering an account on z999.bet, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside the z999 Terms & Conditions, which are incorporated by reference.

1.4  If you do not agree with this Policy, you must not register an account or continue using the z999 platform. You may request account closure at any time by contacting [email protected].

2.1  For the purposes of this Policy, z999.bet is the data controller responsible for personal data collected through the platform. z999 operates under an international gaming license and is subject to the data protection obligations associated with that license.

2.2  All data protection enquiries, subject access requests, and requests to exercise your rights under this Policy should be directed to the z999 Data Protection contact at [email protected], clearly marked as a "Data Protection Request" in the subject line of your communication.

2.3  z999 takes its data controller responsibilities seriously. We have designated internal compliance personnel responsible for overseeing adherence to this Policy and applicable data protection regulations.

3.1  z999 collects the following categories of personal data:

3.2  z999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where health-related information is voluntarily provided by a Player in the context of a responsible gaming self-exclusion or support request, in which case it is processed solely for the purpose of providing that support.

4.1  z999 collects personal data through the following means:

• Direct collection — information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or submitting a complaint;
• Automated collection — technical and usage data collected automatically when you interact with the z999 platform, including via cookies and similar tracking technologies (see Section 8);
• Third-party providers — identity verification data returned by KYC service providers; transaction confirmation data returned by payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; fraud and risk scoring data from our compliance partners;
• Publicly available sources — in limited circumstances, z999 may verify information you have provided against publicly available records as part of its AML and fraud prevention obligations.

4.2  You are not obligated to provide personal data to z999. However, certain data — particularly identity, contact, and financial data — is mandatory for account registration and the processing of deposits and withdrawals. Failure to provide this data will prevent z999 from opening or maintaining an account for you.

5.1  z999 uses your personal data for the following purposes:

• Account management — creating, maintaining, and administering your z999 account, including processing login requests and account updates;
• Identity and age verification — verifying that you meet the 21+ age requirement and that the identity information you have provided is accurate and complete;
• Payment processing — facilitating PKR deposits and withdrawals via your registered payment method; reconciling transactions; and maintaining accurate financial records;
• Regulatory compliance — meeting the obligations imposed by z999's international gaming license, including anti-money laundering (AML) checks, suspicious transaction reporting, and record-keeping requirements;
• Responsible gaming — monitoring gameplay patterns for indicators of problem gambling behaviour; administering deposit limits, cool-off periods, and self-exclusion requests; contacting players where a responsible gaming concern has been identified;
• Platform security and fraud prevention — detecting and preventing unauthorised account access, bonus abuse, collusion, and other prohibited conduct as defined in the z999 Terms & Conditions;
• Customer support — responding to support queries, complaints, and dispute resolution requests;
• Platform improvement — analysing anonymised usage data to improve the performance, stability, and content offering of the z999 platform;
• Marketing communications — sending promotional offers and platform updates to your registered email address or mobile number, where you have opted in to receive such communications. You may opt out at any time.

5.2  z999 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, without providing you with the opportunity to request human review of that decision.

6.1  z999 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and z999, including account creation, deposit processing, bet settlement, and withdrawal processing;
• Legal obligation — processing required to comply with the obligations imposed by z999's international gaming license, including KYC, AML, age verification, and regulatory reporting;
• Legitimate interests — processing necessary for z999's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and platform improvement, where those interests are not overridden by your privacy rights;
• Consent — processing for marketing communications and non-essential cookies, which is based on your opt-in consent and may be withdrawn at any time without affecting the lawfulness of prior processing.

7.1  z999 may share your personal data with the following categories of third parties:

• KYC and identity verification providers — third-party services used to verify your identity, age, and the authenticity of documents submitted during the account verification process;
• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment provider used to process your PKR deposits and withdrawals. These providers receive only the transaction data required to process your specific payment;
• Regulatory and law enforcement authorities — z999 may be required by its gaming license authority, a court order, or applicable law to disclose personal data to relevant regulatory or law enforcement bodies. z999 will comply with such requirements to the extent mandated by law;
• Fraud prevention and AML partners — third-party risk and compliance services used to assist z999 in detecting and preventing fraud, money laundering, and other prohibited conduct;
• Technology and infrastructure providers — service providers who assist in the operation of the z999 platform, including cloud hosting, data storage, and cybersecurity services, under strict data processing agreements that prohibit use of your data for any purpose other than delivering the relevant service to z999;
• Game content providers — in limited cases, aggregated, non-personally identifiable gameplay data may be shared with licensed game developers to support fairness auditing and game performance monitoring.

7.2  All third parties with whom z999 shares personal data are required to implement appropriate security measures and to process that data only for the specific purposes for which it was shared, in accordance with written data processing agreements.

8.1  z999 uses cookies and similar tracking technologies on its platform to support the following functions:

• Essential cookies — strictly necessary for the platform to function, including session management, authentication state, and security tokens. These cookies cannot be disabled without disrupting core platform functionality;
• Functional cookies — used to remember your preferences such as language settings, display options, and last-visited game categories, so that your session is consistent across visits;
• Analytics cookies — used to collect anonymised data about how players navigate and interact with the z999 platform, helping us identify areas for improvement. These cookies do not identify you individually;
• Marketing cookies — used to deliver promotional content relevant to your interests and to measure the effectiveness of z999's marketing campaigns. These cookies are only set with your prior consent.

8.2  You can manage your cookie preferences via the cookie settings panel on the z999 platform. Please note that disabling non-essential cookies will not affect your ability to place bets, manage your account, or process transactions.

8.3  z999 does not use cookies to collect personally identifiable information beyond what is necessary for the purposes listed above. No cookie data is sold to or shared with third-party advertisers.

9.1  z999 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to any longer retention period required by law or regulatory obligation.

9.2  The following general retention periods apply:

• Account and identity data — retained for the duration of the active account relationship and for a minimum of five years following account closure, in compliance with AML regulatory requirements;
• Transaction and financial data — retained for a minimum of five years from the date of the relevant transaction, in accordance with applicable financial record-keeping obligations;
• KYC documents — retained for the period required by z999's gaming license authority, typically five years from the date of document submission or account closure, whichever is later;
• Support and communications data — retained for up to three years from the date of the last interaction, except where a complaint or dispute is outstanding, in which case records are retained until full resolution;
• Technical and usage data — retained in aggregated or anonymised form for platform analytics; individually identifiable technical logs are retained for up to 12 months;
• Marketing preferences and consent records — retained for the duration of your account and for up to two years following account closure.

9.3  Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, in accordance with z999's data disposal procedures.

10.1  z999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of personal data in transit using TLS and at rest using AES-256 or equivalent standards;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security vulnerability assessments and penetration testing of platform infrastructure;
• Multi-factor authentication requirements for internal administrative access to systems containing player data;
• Incident response procedures enabling rapid detection, containment, and notification in the event of a data security incident.

10.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, z999 will notify you without undue delay via the email address registered to your account, and will notify the relevant supervisory authority as required by applicable law.

10.3  Whilst z999 takes extensive precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying z999 immediately at [email protected] if you suspect any unauthorised use of your account.

11.1  Subject to applicable law and z999's regulatory obligations, you have the following rights in relation to your personal data held by z999:

11.2  To exercise any of the rights above, submit a written request to [email protected] with the subject line "Data Rights Request", including your registered account username and a description of the right you wish to exercise. z999 will acknowledge your request within 5 business days and respond in full within 30 days.

11.3  z999 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case z999 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

11.4  Please note that certain rights may be subject to limitations where z999 is required to retain or continue processing data to fulfil its legal or regulatory obligations. Where this is the case, z999 will explain the limitation at the time of responding to your request.

12.1  z999 employs age verification technology at the point of registration and additional checks at withdrawal to confirm that all Account holders meet the 21+ age requirement. Where z999 has reason to believe that an Account is held by a person under the age of 21, the Account will be immediately suspended pending verification, and any associated Balance will be held until the matter is resolved.

12.2  If z999 discovers that it has inadvertently collected personal data from a minor, that data will be deleted without delay and the associated Account permanently closed. Any deposits made to such an Account will be returned to the originating payment method.

12.3  Parents and guardians who believe that a minor may have registered an account on z999.bet are encouraged to contact [email protected] immediately. z999 will investigate all such reports as a matter of priority.

13.1  As an internationally licensed gaming platform, z999 may process or store personal data in jurisdictions outside Pakistan. Where personal data is transferred to a third country, z999 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all relevant service providers.

13.2  z999 does not transfer personal data to countries or territories that do not provide an adequate level of protection for personal data, unless appropriate safeguards are in place and such transfer is permitted under applicable law.

13.3  For further information about the specific safeguards applied to international data transfers from your account, please contact [email protected].

14.1  z999 reserves the right to update or amend this Privacy Policy at any time. Material changes — that is, changes that affect the nature of the data collected, the purposes for which it is used, or your rights — will be communicated to registered players via the email address associated with their account, with a minimum of 14 days' advance notice before the change takes effect.

14.2  The current version of this Privacy Policy, along with the "Last Reviewed" date displayed at the top of the page, is always accessible at z999.bet/privacy-policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14.3  Your continued use of the z999 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and contact z999 to close your account.

15.1  For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by z999, please contact us using the details below:

15.2  When submitting a data-related request, please include your registered account username, the nature of your request, and any relevant account or transaction references. This helps z999 verify your identity and respond to your request as efficiently as possible.

15.3  If you are not satisfied with z999's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the dispute resolution body designated by z999's gaming license authority.