zs999d Privacy Policy —
Your Data, Your Rights, Our Responsibility

§ 01 Who We Are

This Privacy Policy is issued by zs999d, the operator of the online sports betting and casino platform accessible at https://zs999d.net (the "Platform"). References to "zs999d", "we", "us", or "our" throughout this document refer to the Platform operator and its authorised data processing affiliates.

zs999d is the data controller in respect of personal data collected from players accessing the Platform. Our designated data protection contact can be reached via the support channel described in Section 16 of this Policy.

§ 02 Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by zs999d in connection with:

• Account registration and management on the Platform
• Identity verification (KYC) procedures
• Deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other accepted payment methods
• Participation in sports betting, live casino, slot games, arcade games, and all other products on the Platform
• Use of customer support services, including chat, email, and telephone support
• Marketing and promotional communications where you have consented to receive them
• Responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods

This Policy does not apply to third-party websites or services that may be linked to or from the Platform. zs999d accepts no responsibility for the privacy practices of any third-party services.

§ 03 Personal Data We Collect

zs999d collects the following categories of personal data. The specific data points collected depend on the nature of your interaction with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC photograph for identity verification), or health data, except where specifically required by responsible gaming obligations and only with your explicit consent.

§ 04 How We Collect Your Data

zs999d collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, initiating deposits or withdrawals, contacting support, or filling in any form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies (see Section 8).
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other payment service providers to verify deposit and withdrawal activity.
• Identity verification providers: Where third-party KYC services are used to verify identity documents, those providers may return structured verification results to zs999d. We do not receive raw biometric data from these providers.
• Responsible gaming partners: Where you are registered with a responsible gaming self-exclusion scheme and that scheme notifies operators, zs999d may receive a notification to close or restrict your account accordingly.

§ 05 Legal Basis for Processing

zs999d processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, bet settlement, payment processing, and customer support. Without this processing, we cannot operate your account.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, tax reporting, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for the legitimate business interests of zs999d, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, including marketing communications and optional analytics participation. You may withdraw consent at any time by contacting support or adjusting your account preferences without affecting the lawfulness of processing carried out before withdrawal.

§ 06 How We Use Your Personal Data

zs999d uses personal data collected from Pakistani players for the following purposes:

• Creating and maintaining your zs999d Account, including authentication and access management
• Processing deposits from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other accepted payment methods, and settling withdrawal requests in PKR
• Verifying your identity and age (21+) in accordance with KYC requirements
• Settling bets, resolving disputes, and maintaining accurate gameplay records
• Detecting and preventing fraud, money laundering, account sharing, and other prohibited activities
• Monitoring gameplay patterns to identify problem gambling behaviour and triggering responsible gaming interventions where appropriate
• Providing customer support, investigating complaints, and maintaining communication records
• Sending transactional notifications — including deposit confirmations, withdrawal updates, and security alerts — which are non-optional operational communications
• Sending marketing communications and promotional offers, where you have provided consent (see Section 14)
• Complying with legal and regulatory obligations, including AML reporting and responses to lawful regulatory requests
• Improving the Platform, resolving technical issues, and analysing usage patterns to enhance the player experience

§ 07 Data Sharing & Disclosure

zs999d does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other payment processors receive transaction data necessary to execute and verify deposits and withdrawals.
• Identity verification providers: Third-party KYC verification services receive identity document data solely for the purpose of completing legally required verification checks.
• Technology and infrastructure providers: Hosting providers, cybersecurity services, and platform software partners who process data on our behalf under binding data processing agreements that require equivalent data protection standards to our own.
• Responsible gaming services: Where a responsible gaming self-exclusion scheme or regulatory body requests information relevant to a player welfare matter, we may share the minimum data necessary to comply.
• Regulatory and legal authorities: zs999d will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or other binding legal process. We will notify affected players where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of the Platform operator, player data may be transferred as part of that transaction. Players will be notified before any such transfer results in a material change to data handling practices.

§ 08 Cookies & Tracking Technologies

The zs999d Platform uses cookies and similar tracking technologies to operate, secure, and improve the player experience. The following cookie categories are used:

• Essential cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and remembered username to improve your experience across sessions.
• Analytics cookies: First-party analytics used to understand how players navigate the Platform, identify technical errors, and measure feature adoption. No third-party advertising analytics are deployed on zs999d.
• Fraud prevention cookies: Device fingerprinting and behavioural analytics used to detect automated access, account takeover attempts, and coordinated fraud patterns.

You can manage non-essential cookie preferences via your browser settings. Note that disabling functional cookies may affect certain personalisation features on the Platform. Essential and fraud-prevention cookies cannot be disabled while using the Platform.

§ 09 Data Retention

zs999d retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in accordance with AML regulatory retention requirements.
• Financial and transaction data: Retained for 7 years from the date of each transaction to satisfy tax reporting, AML, and regulatory audit obligations.
• Gameplay data: Retained for 5 years from the date of the relevant session or bet, for use in dispute resolution and responsible gaming monitoring.
• Support communications: Retained for 3 years from the date of each interaction to support complaint review and staff quality assurance.
• Marketing consent records: Retained for 3 years from the date consent was recorded or withdrawn, as evidence of your marketing preferences history.

§ 10 Data Security

zs999d implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our technical and organisational security measures include:

• TLS 1.3 encryption for all data in transit between your device and zs999d servers
• AES-256 encryption for personal data and financial records stored at rest
• Role-based access controls that limit internal employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for all internal administrative access to production systems
• Automated intrusion detection systems and 24/7 security monitoring
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Secure, access-logged disposal of physical KYC documents

In the event of a personal data breach that poses a risk to your rights and freedoms, zs999d will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable breach notification obligations. We will include details of what data was affected, the likely consequences, and the steps we have taken to address the breach.

§ 11 Your Privacy Rights

As a zs999d player, you have the following rights in respect of your personal data. These rights may be exercised by submitting a written request to our support team (see Section 16):

• Right of access: You may request a copy of all personal data zs999d holds about you, including the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. Some data (such as your registered CNIC number) may require re-verification before correction can be applied.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Data subject to mandatory regulatory retention periods cannot be deleted early.
• Right to restrict processing: You may request that zs999d restrict active processing of your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: You may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to object: You may object to processing of your personal data where it is based on legitimate interests, including profiling for responsible gaming purposes. We will assess whether our legitimate interests override your objection on a case-by-case basis.
• Right to withdraw consent: Where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case you will be notified.

§ 12 Children & Minors

The zs999d Platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If you have reason to believe that a person under the age of 21 has registered an account on zs999d or is accessing the Platform, please contact our support team immediately. Upon confirmation, the Account will be suspended, all associated data will be reviewed, and any Funds deposited by or on behalf of the minor will be returned to the original payment source following investigation.

§ 13 International Data Transfers

As an internationally operated platform, zs999d may transfer personal data to servers and service providers located outside Pakistan. Where such transfers occur, we ensure that equivalent data protection safeguards are in place through one or more of the following mechanisms:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with all third-party data processors
• Data processing addenda with cloud and infrastructure providers that commit to internationally recognised security and privacy standards
• Transfer to jurisdictions that maintain an adequate level of personal data protection equivalent to or exceeding the standards applied by zs999d under this Policy

You may request details of the specific safeguards applied to international transfers of your data by submitting a written request to our support team.

§ 14 Marketing Communications

zs999d may send you promotional offers, bonus notifications, and platform news by SMS, email, or in-Platform messaging, subject to the following conditions:

• You will only receive marketing communications if you have expressly opted in to receive them, either during registration or via your Account preferences.
• You may opt out of marketing communications at any time by updating your preferences in your zs999d Account settings or by contacting support.
• Opting out of marketing communications does not affect the delivery of transactional notifications — such as deposit confirmations, withdrawal updates, and security alerts — which are operational communications not subject to marketing opt-out.
• zs999d does not send unsolicited bulk marketing communications (spam). If you receive a communication purporting to be from zs999d that you did not consent to, please report it to our support team immediately as it may indicate an attempted phishing or impersonation attack.

§ 15 Changes to This Privacy Policy

zs999d reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The version number and effective date at the top of this document will always reflect the currently operative version.

Where an amendment is material — meaning it meaningfully affects your rights or how your data is processed — zs999d will provide at least 14 days' prior notice by means of a prominent notice on the Platform and, where practicable, by direct communication to your registered contact details.

Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with a proposed change, you must cease using the Platform and request Account closure before the amendment takes effect.

§ 16 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by zs999d, please contact our Data Protection Team through the Platform's support channel. All privacy requests are handled by a dedicated team and are treated with confidentiality.

Data protection support contact: [email protected] — please include "Privacy Request" in your subject line and your registered username to allow us to locate your Account efficiently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to our licensing regulator's player protection division, details of which are available upon written request to our support team.