ZC999 Privacy Policy — Your Data, Your Rights, Our Obligations

This Privacy Policy describes how ZC999 — operating at zc999.ws — collects, uses, stores and protects the personal information of players and visitors. When we say "ZC999," "we," "us" or "our," we mean the platform and its operators. When we say "you" or "the player," we mean any person who registers an account, deposits funds, places a bet, browses ZC999 or contacts our support team.

ZC999 is built specifically for the Pakistani market. The personal data we handle belongs predominantly to Pakistani residents, and we handle it with that context in mind — including the types of payment data generated when using Easypaisa, JazzCash, NayaPay, SadaPay and Pakistani bank accounts. This Policy explains what we do with that data clearly and honestly, without hiding anything in impenetrable legal language.

By creating a ZC999 account and using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described here. If you do not agree, you should not use ZC999. This Policy works alongside our Terms and Conditions and Responsible Gaming guidelines, which are incorporated here by reference.

ZC999 collects personal data in three main ways: information you provide directly when registering and using the platform, information generated automatically by your use of ZC999, and information received from third-party payment and verification services when you transact on the platform.

Information You Provide Directly

• Registration data: Your full name, Pakistani mobile number, email address, date of birth and chosen password when creating a ZC999 account.
• Identity verification data (KYC): If requested — typically before a first significant withdrawal — a copy of your CNIC (Computerised National Identity Card) or equivalent government-issued ID document, and possibly a selfie for live verification matching.
• Payment information: The mobile wallet numbers or bank account details you provide when depositing or withdrawing PKR on ZC999. We do not store wallet PINs or full card numbers — these are handled by the respective payment processors.
• Support communications: The content of any messages, chat logs or emails you exchange with ZC999 customer support, including the nature of any queries or complaints raised.
• Responsible gaming preferences: Any deposit limits, cool-off requests or self-exclusion instructions you submit through ZC999's account settings.

Information Collected Automatically

• Technical data: Your IP address, browser type and version, operating system, device model and screen resolution when you access ZC999.
• Session data: Pages visited, time spent on each page, links clicked, search queries within the platform and the sequence of your navigation through ZC999.
• Game activity data: All bets placed, game rounds participated in, outcomes, stake amounts, cashout times (in crash games like Aviator) and session durations across all ZC999 gaming products.
• Transaction logs: A complete record of every deposit and withdrawal processed on your ZC999 account, including timestamps, amounts, payment methods used and transaction reference numbers.

Data from Third Parties

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and card processing networks send ZC999 transaction confirmation data including transaction IDs, amounts, timestamps and sender identifiers necessary to reconcile your account balance.
• Identity verification services: Where ZC999 uses a third-party KYC provider to verify your CNIC, that provider will return a verification status and may share the data used for the check with ZC999 for compliance record-keeping.
• Fraud detection services: ZC999 may use fraud detection partners who cross-reference submitted data against known fraud patterns or sanction lists.

ZC999 does not collect data for the sake of collecting it. Every category of data listed above is collected for a specific, defined purpose. Here is what each piece of information is actually used for:

• Providing the service: Your registration and payment data are necessary to operate your account, process deposits and withdrawals in PKR, verify your identity and give you access to ZC999's games and features. Without this data, the platform simply cannot function for you as a user.
• Security and fraud prevention: IP addresses, device data, session logs and transaction histories are analysed by ZC999's automated monitoring systems to detect fraud, account takeover attempts, multi-accounting, collusion and money laundering activity. This protects you and all other ZC999 players.
• Legal and regulatory compliance: ZC999 is required to retain certain transaction and identity records for defined periods to comply with applicable anti-money laundering (AML) obligations and to respond to requests from lawful authorities. We do not collect more than legally necessary for this purpose.
• Improving the platform: Aggregated and anonymised session and game activity data helps ZC999 understand which features work well, which areas cause player confusion and what improvements would have the most positive impact on the player experience.
• Customer support: Support agents access your account history, transaction logs and previous support interactions to resolve queries efficiently without requiring you to repeat information across multiple interactions.
• Responsible gaming: ZC999 analyses game activity patterns to identify signs of problem gambling behaviours — such as escalating stakes following losses, extremely long uninterrupted sessions or sudden dramatic increases in deposit frequency. This analysis informs how our responsible gaming team interacts with flagged accounts.
• Communications: Your email address and mobile number are used to send transaction confirmations, security alerts, password reset requests and, where you have opted in, information about ZC999 promotions. You can opt out of marketing communications at any time from your account settings.

ZC999 does not sell, rent or trade your personal data. Sharing occurs only in the following specific circumstances, each of which is necessary for ZC999 to function as a platform or meet its legal obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank payment gateways and card networks receive the minimum data necessary to execute your requested transaction — typically your registered name, transaction amount, and wallet or account identifiers. These processors operate under their own privacy frameworks and are contractually required to protect your data.
• Identity verification providers: Where KYC checks are required, your ID document and associated biometric data may be shared with an accredited identity verification service for the sole purpose of verifying your identity. These providers are bound by confidentiality agreements with ZC999.
• Fraud and compliance tools: Aggregated session data and transaction patterns may be processed by anti-fraud software. No raw personal data is sold to these tool providers — they process it on ZC999's behalf under strict data processing agreements.
• Game content providers: Live casino studios and certain RNG game providers may receive session-level data (not your personal identity) necessary to load and operate the games within the ZC999 platform. These providers are licensed operators subject to regulatory oversight.
• Legal and regulatory authorities: ZC999 may be required by law or court order to disclose account and transaction data to Pakistani law enforcement, financial intelligence units or other regulatory bodies. ZC999 will disclose only what is legally required and will not volunteer additional data beyond the scope of any lawful request.

Given that ZC999 is built entirely around Pakistani Rupee transactions and local payment methods, this section is worth reading carefully. Here is exactly what ZC999 does and does not hold in relation to your payment information:

What ZC999 Stores

• Your Easypaisa or JazzCash mobile number (registered on your ZC999 account as a payment method)
• Your bank account name and IBAN/account number for IBFT withdrawals, if provided
• Transaction reference numbers, amounts, timestamps and statuses for all deposits and withdrawals
• The payment method used for each transaction (for withdrawal routing purposes)

What ZC999 Does NOT Store

• Your Easypaisa or JazzCash account PIN or password
• Full debit or credit card numbers (cards are tokenised by the payment gateway — only a masked reference is stored by ZC999)
• Card CVV numbers
• Net banking credentials for any Pakistani bank

All payment data at rest in ZC999's systems is stored with AES-256 encryption. Transaction data in transit is protected by TLS 1.3. Payment reconciliation data is retained for seven years in compliance with applicable financial record-keeping requirements. After this period, transaction data is securely deleted from ZC999's systems.

If you notice an unauthorised transaction on your ZC999 account, contact support immediately at support@zc999.ws. ZC999 will investigate, freeze any suspicious activity and liaise with the relevant payment processor to resolve the issue as quickly as possible.

ZC999 implements technical and organisational security measures proportionate to the sensitivity of the data held. The following security controls are currently in place across ZC999's infrastructure:

• Transport encryption: All communication between your browser or app and ZC999 servers uses TLS 1.3. Older, less-secure protocol versions are disabled.
• Data-at-rest encryption: Sensitive stored data — including identity documents, payment references and account credentials — is encrypted using AES-256 before being written to storage.
• Access controls: ZC999 employee access to production systems follows the principle of least privilege. Only authorised personnel with a specific operational need can access player data, and all access is logged with timestamps and user identifiers.
• Two-factor authentication: Administrative access to ZC999's backend systems requires multi-factor authentication. Players are strongly encouraged to enable OTP-based 2FA on their ZC999 accounts.
• Automated anomaly detection: ZC999's systems monitor login attempts, transaction patterns and session activity in real time. Unusual activity — such as a login from an unrecognised device or an unusually large withdrawal request — triggers an automatic hold and alert.
• Regular security assessments: ZC999 conducts periodic security reviews of its platform infrastructure and application code to identify and remediate vulnerabilities before they can be exploited.

No security system is completely impenetrable. If ZC999 becomes aware of a data breach that affects your personal data, we will notify you via your registered email address within a reasonable timeframe and provide guidance on any steps you should take to protect yourself.

ZC999 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The specific retention periods are set out in the data table in Section 2. The general principles are as follows:

• Account and profile data is retained for the duration of your ZC999 account plus five years after closure, in case of disputes, chargebacks or legal claims arising from your account activity.
• Financial transaction data is retained for seven years in compliance with applicable anti-money laundering record-keeping obligations. This applies regardless of account status.
• Identity verification (KYC) documents are retained for five years following account closure or the completion of the KYC process, whichever is later.
• Technical and session data (IP logs, device data) is retained for a maximum of 12 months and then automatically deleted.
• Support communications are retained for three years from the date of the interaction.

When retention periods expire, ZC999 securely deletes or anonymises the relevant data so that it can no longer be attributed to any individual. If you request deletion of your data before the applicable retention period has expired, ZC999 will explain which data must be retained for legal reasons and delete everything that is not subject to a mandatory retention obligation.

ZC999 uses cookies and similar browser storage mechanisms to operate the platform, maintain your login session, improve performance and understand how players use the site. Here is what each type of cookie does on ZC999:

You can manage cookie preferences through your browser settings. Disabling all cookies will prevent ZC999 from functioning correctly — specifically, the essential session cookies are required to maintain your login state. Blocking only analytics and preference cookies will not affect your ability to play or transact on ZC999.

As a ZC999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact ZC999 support at support@zc999.ws with the subject line "Privacy Rights Request." We will respond within 30 days.

ZC999 does not knowingly collect personal data from individuals under the age of 18. ZC999's services are intended exclusively for adults and the platform's registration process includes age declaration requirements. If ZC999 discovers or has reasonable grounds to suspect that a registered account belongs to a minor, that account will be suspended immediately and any deposited funds returned to the original payment source after investigation.

If you are a parent or guardian and believe that a minor in your household has created a ZC999 account, please contact us immediately at support@zc999.ws with details. ZC999 will investigate and take appropriate action, including deleting any personal data associated with the account once the closure process is complete.

ZC999 does not use the personal data of any player — adult or otherwise — for the purpose of targeting advertising or marketing at individuals who have not opted in to receiving such communications.

ZC999 may update this Privacy Policy from time to time to reflect changes in how we operate, new features added to the platform, changes in applicable data protection law or feedback from our player community. When material changes are made, ZC999 will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address with a summary of what has changed.
• Display an in-platform notification for logged-in players for a period after the change takes effect.

Minor editorial changes — such as typo corrections or formatting improvements that do not affect the substance of the Policy — will be made without specific notification. Continued use of ZC999 after a Policy update constitutes your acceptance of the revised Policy. If you do not accept the changes, you should close your ZC999 account before the effective date of the update.

For any questions, concerns or requests related to this Privacy Policy or to the personal data ZC999 holds about you, please get in touch using one of the channels below:

• Email: support@zc999.ws — include "Privacy" in your subject line for faster routing. Responses within two hours during operating hours.
• Live Chat: Available 24/7 from any ZC999 page after logging in. Agents can handle straightforward privacy queries directly or escalate complex data requests to our privacy team.

Privacy Rights Requests (access, deletion, correction, portability) should be submitted via email with the subject line "Privacy Rights Request — [Your Registered Email]". ZC999 will respond within 30 days and may request identity verification before actioning any request that involves sharing or deleting account data.