999zs Privacy Policy — How We Handle Your Personal Data

About This Policy

This Privacy Policy sets out how 999zs collects, processes, stores, shares, and protects personal data relating to individuals who visit the 999zs website at 999zs.app, register a member account, deposit funds, place wagers, or otherwise interact with any feature of the 999zs platform — including Pakistani members accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan.

This policy is written in plain, accessible English and is intended to give you a complete and honest picture of our data practices. It should be read alongside the 999zs Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering an account on 999zs or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood the practices described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the platform and contact support to arrange account closure.

Data Controller Identity

For the purposes of applicable data protection law, the data controller responsible for your personal information is the entity operating the 999zs platform under its international gaming licence. As the data controller, 999zs determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to how 999zs handles your personal data, you may contact the 999zs Data Privacy team through our 24/7 live chat support or by writing to:

Support Email: [email protected]

Data We Collect

999zs collects the following categories of personal data in connection with your membership and use of the platform:

999zs does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and responsible gaming purposes. We do not collect biometric data other than liveness check images required by our KYC provider, and we do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health conditions outside of responsible gaming self-assessments.

How We Collect Your Data

999zs collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering your account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or communicating with 999zs through any channel.
• Automated Collection: Data collected automatically as you use the platform, including IP address, device identifiers, browser fingerprint, session logs, and gameplay data captured by our platform infrastructure and analytics systems.
• Payment Processors: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when processing your deposits and withdrawals, including transaction reference numbers and payment status.
• KYC Providers: Identity verification data returned by our third-party KYC service provider following document and liveness checks conducted as part of the account verification process.
• Fraud & AML Systems: Risk signals and behavioural data generated by our automated anti-money laundering and fraud detection systems as required under our international gaming licence compliance obligations.
• Cookies & Tracking Technologies: Data collected via first-party cookies, session cookies, and analytics pixels as described in Section 8 of this policy.

Legal Basis for Processing

999zs processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual Necessity: Processing required to open your account, accept your deposits, process your bets and withdrawals, and deliver the gaming services you have contracted for when accepting the 999zs Terms & Conditions.
• Legal Obligation: Processing required to comply with our obligations under our international gaming licence, including KYC identity verification, anti-money laundering (AML) transaction monitoring, responsible gaming assessments, and regulatory reporting requirements.
• Legitimate Interests: Processing carried out in the legitimate interests of 999zs where those interests are not overridden by your rights and interests, including fraud prevention, platform security, improving our services, and managing our business relationships with payment and technology partners.
• Consent: Where we rely on your consent for specific processing activities — such as sending you marketing communications about 999zs promotions — we will request your consent separately and clearly. You may withdraw consent at any time by contacting support, without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

999zs uses the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your 999zs member account, authenticating your identity when you log in, and managing your PKR Wallet balance.
• Transaction Processing: Processing your deposits via JazzCash, EasyPaisa, or bank transfer, settling winning bets and withdrawals, and maintaining accurate financial records of all PKR transactions on your account.
• KYC & Compliance: Verifying your identity and age (21+) as required by our international gaming licence, conducting AML transaction screening, and fulfilling all regulatory reporting obligations.
• Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling, administering deposit limits, cooling-off periods, and self-exclusion requests, and providing appropriate interventions where required.
• Platform Security & Fraud Prevention: Detecting and preventing fraud, multi-accounting, money laundering, bonus abuse, and other prohibited conduct as defined in the 999zs Terms & Conditions.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of communications for quality assurance and regulatory purposes.
• Platform Improvement: Analysing aggregated usage data to understand how members interact with the 999zs platform, improve existing features, and develop new products and services.
• Marketing Communications: Sending you promotional offers, bonus notifications, and updates about new games or features on 999zs — only where you have provided consent or where permitted under applicable law. You may opt out at any time.

Sharing Your Data

999zs shares your personal data only with the categories of third parties listed below, and strictly only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data required to process your deposits and withdrawals securely. These providers are bound by their own data protection obligations and applicable Pakistani financial regulations.
• KYC & Identity Verification Providers: Our third-party KYC partner receives your identity documents and liveness check data solely for the purpose of verifying your identity and age as required by our gaming licence. KYC providers are contractually prohibited from using your data for any other purpose.
• Game Technology Providers: Certified international game studios and RNG providers receive anonymised session data necessary to deliver casino games, live dealer tables, and slot titles on the 999zs platform.
• Regulatory & Law Enforcement Authorities: 999zs is obligated under its international gaming licence to share data with licensing regulators, financial intelligence units, and law enforcement agencies where required by a valid legal instrument or court order.
• Fraud & AML Technology Partners: Automated risk management and AML screening systems operated by trusted technology partners process transactional and behavioural data to identify suspicious activity. These partners operate under strict data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by 999zs may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom 999zs shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with 999zs's written instructions. 999zs does not permit any third party to use your data for their own independent purposes.

Cookies & Tracking Technologies

999zs uses cookies and similar tracking technologies on the 999zs.app platform to ensure the site functions correctly, to maintain your login session, and to understand how members navigate the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your 999zs account and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as your preferred language, display settings, and responsible gaming tool configurations so that these are applied automatically each time you return to 999zs.
• Analytics Cookies: Used to collect anonymised data about how members use the 999zs platform — including pages visited, features used, and session duration — to help us improve the platform over time. Analytics data is aggregated and does not identify individual members.
• Fraud Prevention Cookies: Used by our security systems to detect and prevent fraudulent activity, multi-accounting, and the use of automated betting software in violation of the 999zs Terms & Conditions.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. 999zs does not currently use third-party advertising or retargeting cookies.

Data Security

999zs implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the 999zs platform is encrypted using 256-bit TLS (Transport Layer Security). Personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 999zs is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, multi-factor authentication (MFA), and comprehensive access audit logging.
• Network Security: The 999zs platform infrastructure is protected by enterprise-grade firewalls, distributed denial-of-service (DDoS) mitigation, and continuous intrusion detection and prevention systems.
• Security Testing: 999zs conducts regular independent penetration testing and vulnerability assessments of its platform, payment processing integrations, and data storage systems.
• Incident Response: 999zs maintains a documented data breach response plan. In the event of a data breach that creates a risk to your rights and freedoms, 999zs will notify affected members promptly and take all necessary steps to contain and remediate the incident.

While 999zs maintains robust security practices, no internet transmission or digital storage system is entirely immune from risk. You are responsible for maintaining the security of your own account credentials and should notify 999zs immediately if you suspect unauthorised access to your account.

Data Retention

999zs retains personal data for no longer than is necessary to fulfil the purposes for which it was collected or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active 999zs account is retained for the duration of the membership and for a period of five (5) years following account closure, as required by our international gaming licence and anti-money laundering regulations.
• KYC & Verification Documents: Identity documents and KYC records are retained for a minimum of five (5) years from the date of verification or from the date of the last transaction on the account, in accordance with applicable AML and gaming regulatory requirements.
• Financial & Transaction Records: All deposit, withdrawal, and betting transaction records are retained for seven (7) years from the date of the transaction to satisfy financial record-keeping obligations.
• Support Communications: Live chat transcripts and support correspondence are retained for three (3) years from the date of the communication for quality assurance, dispute resolution, and regulatory purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as your account is active plus two (2) years thereafter as evidence of compliance.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with 999zs's data deletion procedures.

Your Privacy Rights

As a 999zs member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the 999zs Data Privacy team via live chat or by email at [email protected]. 999zs will respond to all valid privacy rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that 999zs holds about you, along with information about how it is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that 999zs corrects any inaccurate or incomplete personal data held on your account without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to 999zs's overriding obligations to retain data under gaming and AML regulations.
• Right to Restrict Processing: You have the right to request that 999zs restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive personal data you have provided to 999zs in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, 999zs will cease such processing immediately.
• Rights Related to Automated Decision-Making: Where 999zs makes decisions about you based solely on automated processing that produce legal or similarly significant effects, you have the right to request human review of those decisions.

Changes to This Policy & Contact Information

Policy Updates: 999zs reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal and regulatory requirements. The revised policy will be published on this page with an updated effective date. Where changes are material, 999zs will notify registered members via in-platform notification or email prior to the change taking effect. Your continued use of the 999zs platform after the effective date of any revision constitutes acknowledgement of the updated policy.

Minor Updates: Minor clarifications, formatting corrections, or updates to contact details may be made without separate notification. We recommend bookmarking this page and reviewing it periodically.

Contact the Data Privacy Team: If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how 999zs handles your personal data, please reach out through any of the following channels:

• Live Chat: Available 24/7 on the 999zs platform — the fastest way to reach us.
• Support Email: [email protected] — please allow up to 4 hours for a response.

999zs is committed to resolving all privacy concerns promptly and transparently. If you are unsatisfied with our response to a privacy complaint, you may escalate the matter to the regulatory authority responsible for overseeing the jurisdiction under which 999zs holds its international gaming licence.