Privacy Policy

This Privacy Policy ("Policy") is issued by ZS999G ("the Platform", "we", "us", "our") and describes how we process the personal data of individuals who register an account, visit the Platform at https://zs999g.cam or otherwise interact with our services ("you", "User", "Player").

We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy sets out what data we collect, why we collect it, how we use it, with whom we may share it and the rights available to you in relation to your personal data.

This Policy must be read alongside our Terms & Conditions and Responsible Gambling policy, both of which form part of the overall agreement governing your use of ZS999G.

The following terms carry specific meanings throughout this Policy:

• "Personal Data" Any information relating to an identified or identifiable natural person, including name, email address, phone number, CNIC number, payment details, IP address and device identifiers.
• "Processing" Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer or deletion.
• "Data Controller" The entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is ZS999G.
• "Data Processor" A third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement and the Data Controller's instructions.
• "KYC Data" Identity and address verification documents submitted by a Player as part of the Know Your Customer process, including CNIC, passport, driver's licence and utility bills.
• "Cookies" Small text files placed on your device by the Platform to enable session management, analytics, preference storage and fraud detection.
• "Consent" A freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

ZS999G collects the minimum personal data necessary to provide platform services, maintain account security, process transactions and satisfy legal and compliance obligations. The categories of data we collect are set out below.

We do not collect sensitive personal data such as biometric information, racial or ethnic origin, political opinions or health data except where strictly required by applicable KYC or AML regulations and with appropriate safeguards in place.

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support or submit any form on the Platform.
• Automatically — through cookies, server logs and tracking technologies as you navigate and interact with the Platform. This includes your IP address, device fingerprint and session activity.
• From third-party service providers — including payment processors (such as those facilitating Easypaisa, JazzCash, Raast or bank transfer transactions), identity verification providers and fraud detection services, who may share data with us to complete transactions or verify identity.
• From publicly available sources — where permitted, we may supplement your data with information from publicly accessible databases to support fraud detection and AML compliance.

ZS999G processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you accepted at registration, including account management, transaction processing and customer support.
• Legal obligation — processing required to comply with applicable AML, KYC, fraud prevention and regulatory requirements under the laws of the jurisdiction in which the operator is licensed.
• Legitimate interests — processing undertaken for purposes such as platform security, fraud detection, responsible gambling monitoring and service improvement, where our interests are not overridden by your fundamental rights and freedoms.
• Consent — where you have provided explicit consent, including for the receipt of marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.

We use the personal data we collect for the following purposes:

• To create, manage and maintain your ZS999G account and authenticate your identity at login.
• To process deposits and withdrawals in PKR and to maintain accurate transaction records.
• To carry out KYC verification and AML checks as required by responsible operation standards.
• To detect, investigate and prevent fraudulent activity, unauthorised account access and prohibited conduct as defined in the Terms & Conditions.
• To monitor your betting and gaming activity for the purpose of responsible gambling compliance, including identifying patterns that may indicate problem gambling behaviour.
• To enforce deposit limits, loss limits, self-exclusion and other responsible gambling tools you have activated.
• To provide customer support and resolve account queries, complaints and disputes.
• To send you transactional communications, including deposit confirmations, withdrawal notifications and security alerts.
• To send marketing communications about promotions and platform updates, where you have provided consent or where permitted by applicable law. You may opt out at any time.
• To improve platform performance, user experience and product features through anonymised analytics.
• To comply with applicable legal obligations, including responding to lawful requests from regulatory authorities.

ZS999G does not sell your personal data. We may share your data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors and financial service providers — to facilitate deposits, withdrawals and transaction verification. This may include data shared with providers handling Easypaisa, JazzCash, Raast or bank transfer transactions, subject to their own privacy terms.
• Identity verification and KYC providers — specialist third-party services engaged to verify the identity and age of registered Players and to conduct AML screening.
• Fraud prevention and security services — providers that assist with detecting suspicious activity, account takeover attempts and payment fraud.
• Regulatory and law enforcement authorities — where required by law, court order or regulatory directive. We will disclose data to competent authorities when legally obligated to do so.
• Self-exclusion registries — if you request self-exclusion, limited data may be shared with relevant responsible gambling registries as required by the applicable licensing framework.
• Professional advisers — including legal counsel, auditors and insurers where necessary for the conduct of our business operations, under strict confidentiality obligations.

All third-party data processors engaged by ZS999G are required to process personal data only on our instructions and to implement appropriate technical and organisational security measures.

ZS999G uses cookies and similar tracking technologies to operate the Platform effectively. The following categories of cookies may be in use:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality, including your ability to log in or access the cashier. We do not use advertising cookies or share cookie data with third-party ad networks.

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, accounting and reporting obligations. The following general retention periods apply:

• Account and registration data — retained for the duration of your account and for a minimum of five (5) years following account closure, as required by standard AML record-keeping obligations.
• KYC documentation — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction.
• Responsible gambling records — including self-exclusion history and limit settings, retained for the period of the restriction plus a minimum of five (5) years to prevent reinstatement in breach of an active exclusion.
• Support and communications records — retained for a period of three (3) years from the date of the last interaction.
• Analytics and usage data — anonymised or aggregated data may be retained indefinitely; individually identifiable usage data is retained for up to twenty-four (24) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is requested prior to the retention period expiry, we will comply to the extent not precluded by legal or regulatory obligations.

ZS999G implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest, including KYC document storage.
• Access controls and role-based permissions restricting internal access to personal data to authorised personnel only.
• Two-factor authentication options available for Player accounts to reduce the risk of unauthorised access.
• Intrusion detection systems and security monitoring to identify and respond to anomalous access patterns.
• Regular internal security reviews and vulnerability assessments.

No data transmission over the Internet or storage system can be guaranteed to be completely secure. While we take every reasonable precaution to protect your data, we cannot warrant absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

Subject to applicable law and the limitations described below, you have the following rights in relation to your personal data held by ZS999G:

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may need to verify your identity before processing the request.

ZS999G is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18 (or such higher minimum age as required by the applicable license jurisdiction). Registration is prohibited for minors, and age verification is conducted as part of the KYC process.

If we become aware that personal data has been collected from a person under the minimum required age without verifiable parental or guardian consent, we will delete that data promptly and close the associated account. If you believe that a minor may have registered an account, please contact us immediately at [email protected].

ZS999G operates a platform that may involve the transfer of personal data to servers, processors or service providers located in jurisdictions outside of Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with this Policy.

These safeguards may include contractual arrangements with data processors that require them to handle data in accordance with applicable data protection standards, or transfers to jurisdictions that provide an adequate level of data protection as recognised by relevant regulatory bodies.

By using the ZS999G Platform you acknowledge that your personal data may be processed in jurisdictions outside Pakistan that may have different data protection laws to those in your country of residence.

The ZS999G Platform does not contain links to external third-party websites. All content and functionality are contained within the Platform itself. However, certain platform services — such as payment processing and identity verification — involve the use of third-party service providers who operate under their own privacy policies and data handling practices.

ZS999G is not responsible for the privacy practices or content of any third-party service provider. We select third-party processors carefully and require them to operate under contractual data protection obligations consistent with the standards described in this Policy.

ZS999G reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation or platform operations. When material changes are made, the revised Policy will be published on this page with an updated effective date.

Where changes are significant, we will endeavour to notify registered Players via email or an in-platform notification. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

We encourage you to review this page periodically to stay informed of how we handle your personal data. The date at the top of this page indicates when the Policy was last reviewed.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please contact the ZS999G support team using the details below:

For account-specific responsible gambling requests such as self-exclusion or deposit limits, please visit our Responsible Gambling page for direct access to those tools.