Privacy Policy — ze999 Platform

This Privacy Policy ("Policy") describes how ze999 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("User", "you", "your") who access or use the ze999 platform available at ze999.cam and any associated applications or digital services.

ze999 is an English-language online gaming platform built for users in Pakistan and other permitted jurisdictions. We are committed to handling all personal data in a responsible, transparent, and lawful manner. This Policy is intended to be read in conjunction with our Terms & Conditions.

By registering an account on ze999, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein, to the extent that consent is the applicable legal basis for such processing.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means ze999 in its capacity as the entity determining the purposes and means of processing Personal Data.
• "Data Processor" means any third party processing Personal Data on behalf of ze999 and under its documented instructions.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer compliance process.
• "Cookies" means small data files placed on your device by ze999 to support platform functionality, analytics, and session management.
• "Sensitive Data" means any special category of Personal Data, such as health information or data revealing racial or ethnic origin, the processing of which requires a heightened legal basis.

ze999 collects Personal Data across several categories depending on the nature of your interaction with the platform. The types of data we may collect include:

ze999 does not intentionally collect Sensitive Data. If Sensitive Data is incidentally provided (for example, a medical reference in a support communication), it will be processed only to the extent strictly necessary to respond to your enquiry and will not be retained beyond that purpose.

ze999 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or submit any form on the platform.
• Automatically: Through cookies, log files, and similar tracking technologies when you access and navigate the ze999 platform on any device.
• From payment providers: Transaction confirmations and payment status updates received from payment processing partners. This may include references to familiar Pakistani payment rails such as mobile wallet transaction identifiers associated with Easypaisa or JazzCash, bank transfer references for HBL, UBL, Meezan Bank or Bank Alfalah accounts, or Raast instant payment confirmations. None of these payment providers share data with ze999 beyond transaction-level confirmation required to process your deposit or withdrawal.
• From KYC and identity verification services: Where third-party identity verification services are used to cross-check documents you submit.
• From fraud prevention and AML screening services: Automated checks run against industry watchlists and sanctions databases as required by the operator's compliance obligations.

ze999 processes your Personal Data for the following specific purposes:

ze999 processes Personal Data only where it has a valid legal basis to do so. The applicable legal bases for each category of processing are as follows:

• Contractual necessity: Processing required to enter into or fulfil the Terms & Conditions between ze999 and the User, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable KYC, AML, sanctions screening, and licensing obligations imposed on the operator.
• Legitimate interests: Processing necessary for ze999's legitimate interests in fraud prevention, platform security, abuse detection, and analytics — where those interests are not overridden by the User's fundamental rights.
• Consent: For optional processing activities such as marketing communications and non-essential cookies, where your explicit consent is obtained beforehand and may be withdrawn at any time.

ze999 does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited circumstances:

• Payment processors and payment technology partners: To enable deposits and withdrawals. Only the minimum necessary transaction data is shared. Payment-provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are referenced as familiar local payment rails only; none of them are data-sharing partners of ze999 in the commercial sense.
• KYC and identity verification providers: To verify identity documents and conduct AML screening as required by the operator's licence obligations.
• Technology and hosting providers: Cloud infrastructure, database hosting, and platform security providers who process data on ze999's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where ze999 is required by law, court order, or licensing authority instruction to disclose information about a User's account or activity.
• Fraud prevention networks: Industry fraud intelligence services to which flagged accounts or transactions may be reported to protect the platform and other users.
• Affiliated operators: Where ze999 is part of a group of related platforms, limited account data may be shared within the group for security, KYC de-duplication, and self-exclusion enforcement purposes only.

ze999 uses cookies and similar tracking technologies to support the operation, security, and improvement of the platform. The types of cookies used are:

• Essential / Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and preferences that you have set. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised information about how Users navigate and interact with the platform. This data informs platform improvements. These cookies do not identify you individually.
• Functional Cookies: Used to remember preferences such as language settings, game lobby filters, or notification preferences to improve your experience across sessions.

ze999 does not deploy advertising or cross-site tracking cookies. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent some areas of the platform from functioning correctly.

ze999 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by the operator's applicable regulatory and licensing obligations. The following indicative retention periods apply:

• Account data and KYC documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as typically required for AML compliance purposes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by standard financial record-keeping obligations.
• Support communications: Retained for up to three (3) years from the date of the final communication, for dispute resolution and quality assurance purposes.
• Usage and analytics data: Aggregated and anonymised data may be retained indefinitely for platform improvement purposes. Individually identifiable usage records are retained for up to two (2) years.
• Marketing consent records: Retained for the duration of the marketing relationship, plus a period sufficient to demonstrate compliance with consent obligations.

On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible in the short term (for example, in backup archives), the data will be isolated and protected from further active processing until deletion can be completed.

ze999 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and ze999 servers.
• Encryption of sensitive data fields at rest, including KYC document storage and financial data.
• Role-based access controls ensuring that only authorised personnel access Personal Data for defined operational purposes.
• Regular security assessments and vulnerability monitoring of platform infrastructure.
• Two-factor authentication options for User accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, contain, and report data security breaches in accordance with applicable obligations.

While ze999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely secure. Users are encouraged to use strong, unique passwords for their accounts and to report any suspected security incidents to [email protected] immediately.

Subject to the applicable legal basis for processing and any overriding legal obligations, you have the following rights in relation to your Personal Data held by ze999:

To exercise any of the above rights, please contact ze999 at [email protected]. We will acknowledge your request promptly and respond within a reasonable timeframe consistent with applicable data protection obligations. Requests may require identity verification before we can process them.

ze999 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the operator's applicable licensing jurisdiction. The platform is not intended for and must not be used by minors.

Age verification is conducted as part of the KYC process. If ze999 becomes aware that a User under the minimum age has registered an account or provided Personal Data, that account will be immediately suspended, all related data will be deleted, and any deposits will be returned to the payment source without processing any wagers or winnings.

If you believe that a minor has accessed ze999 and provided Personal Data, please contact us immediately at [email protected] so that we can take appropriate action.

ze999's platform infrastructure and third-party service providers may be located in jurisdictions outside of Pakistan. By using ze999, you acknowledge that your Personal Data may be transferred to, stored, and processed in countries that may have different data protection standards from those applicable in your home jurisdiction.

Where Personal Data is transferred internationally, ze999 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual data protection obligations with third-party processors and, where applicable, reliance on adequacy determinations or standard contractual clauses under the data protection laws of the operator's licensing jurisdiction.

The ze999 platform may reference third-party services in an informational context, including familiar Pakistani payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah. These references are provided as contextual information only and do not constitute endorsements of, partnerships with, or integrations into those third-party services for gambling purposes.

ze999 is not responsible for the privacy practices, data handling, or terms of service of any third-party entity referenced on the platform or accessed through any payment gateway used in connection with ze999. Users are encouraged to review the privacy policies of any payment providers they use.

ze999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, platform operations, or data processing practices. The "Last Updated" date at the top of this document will be revised accordingly.

Where changes are material, ze999 will endeavour to notify active Users through an in-platform notice or email communication. Your continued use of ze999 following any such notification constitutes your acknowledgement of the updated Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure and data deletion.

We encourage all Users to review this page periodically to stay informed about how ze999 protects and manages your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your data subject rights, please contact ze999 using the following details:

For data subject rights requests, please include your account email address and a brief description of your request. We may require identity verification before processing your request to protect against unauthorised access to your data.