zs99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how zs99 ("zs99", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal data of users ("you", "your", or "Player") who access or use the zs99 platform available at https://zs99.im, including all associated pages, services, games, sports betting markets, and features (collectively, the "Platform").

zs99 is committed to handling your personal data with the utmost care, transparency, and respect. This Policy has been written in plain, accessible language so that every player — whether based in Karachi, Lahore, Faisalabad, Rawalpindi, or anywhere else across Pakistan — can clearly understand their rights and our obligations.

This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of zs99.

2 Data Controller

For the purposes of applicable data protection law, zs99 acts as the data controller in respect of the personal data collected through the Platform. As data controller, zs99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

zs99 operates under an international gaming licence and maintains data processing practices consistent with recognised international data protection standards. Questions or concerns regarding this Policy or the processing of your data may be directed to our support team via live chat or by email at [email protected].

3 Data We Collect

zs99 collects the following categories of personal data in the course of providing the Platform's services:

3.1 Identity Data

Full legal name, date of birth, gender, and a copy of a government-issued identity document such as a Pakistan National Identity Card (CNIC), passport, or driving licence, collected during registration and KYC verification.

3.2 Contact Data

Email address, mobile telephone number, and residential address. These are used to communicate with you about your account, transactions, and promotional offers you have opted in to.

3.3 Financial Data

Payment method details including JazzCash account information, EasyPaisa account information, bank account details for HBL, UBL, or Meezan Bank transfers, and cryptocurrency wallet addresses. Full payment credentials are processed by our regulated payment partners; zs99 stores only the minimum reference data necessary to reconcile transactions.

3.4 Transaction Data

A complete record of all deposits, withdrawals, bets placed, games played, bonus activations, and associated monetary values, timestamps, and outcomes. This data is retained for regulatory, AML, and dispute resolution purposes.

3.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, time zone, session duration, pages visited, and other standard server log data collected automatically when you access the Platform.

3.6 Behavioural Data

In-Platform navigation patterns, game preferences, betting frequency, session timing, and responsible gaming tool usage. This data is used to personalise your experience and to identify indicators of potential problem gambling behaviour.

3.7 Communications Data

Records of all communications between you and the zs99 support team via live chat, email, or any other channel, including the content of those communications and their timestamps.

4 How We Collect Data

zs99 collects personal data through the following means:

• Direct provision — data you submit when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies — cookies, web beacons, server logs, and similar tracking technologies that operate when you access the Platform;
• Third-party KYC providers — identity verification services that cross-reference the documents you submit against official databases to confirm authenticity;
• Payment processors — transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners;
• Fraud and AML screening tools — automated systems that analyse transaction patterns and flag unusual activity for manual review.

5 How We Use Your Data

The personal data collected by zs99 is used for the following purposes:

zs99 will never use your personal data for any purpose incompatible with those described in this Policy without first obtaining your explicit consent.

6 Legal Basis for Processing

zs99 processes your personal data on the following legal grounds:

• Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you accepted at registration, including account management, payment processing, and game delivery;
• Legal obligation — processing required to comply with applicable AML, CTF, KYC, licensing, and regulatory requirements imposed on zs99 as a licensed gaming operator;
• Legitimate interests — processing carried out for fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for optional purposes such as marketing communications and personalised promotions, which you may withdraw at any time through your account settings or by contacting support.

7 Data Sharing & Disclosure

zs99 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described and subject to appropriate data protection agreements:

7.1 Payment Processors

JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment partners receive the minimum data necessary to process your deposit and withdrawal transactions.

7.2 KYC and Identity Verification Services

Regulated identity verification providers receive copies of your identity documents to perform the checks required under our licensing obligations. These providers are bound by strict confidentiality and data protection obligations.

7.3 Fraud Prevention and AML Screening

Automated screening tools and third-party fraud prevention services may receive transaction and technical data to identify and prevent fraudulent activity, money laundering, and other financial crimes.

7.4 Regulatory and Law Enforcement Authorities

zs99 will disclose personal data to relevant governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory instruction. zs99 will, where legally permitted, notify you of such a disclosure request.

7.5 Service Providers

IT infrastructure providers, hosting services, customer support platforms, and analytics services that operate on zs99's behalf under binding data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service.

8 Data Retention

zs99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML regulatory requirements;
• Transaction data — retained for a minimum of 5 years from the date of each transaction;
• Communications data — retained for 3 years from the date of the communication, or longer if directly relevant to an ongoing dispute or regulatory matter;
• Technical and log data — typically retained for 12 months from the date of collection, unless retained longer for fraud investigation purposes;
• Marketing preferences — retained until you withdraw consent, after which they are updated in our systems within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be reconstructed or re-identified.

9 Data Security

zs99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the Platform and your device;
• Encryption at rest for all databases containing personal and financial data;
• Role-based access controls ensuring that only authorised personnel can access identifiable player data;
• Multi-factor authentication required for all administrative access to internal systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of network traffic and system logs for anomalous activity;
• Formal data breach response procedures, including notification timelines.

While zs99 takes every reasonable precaution, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your own zs99 login credentials. If you suspect your account has been compromised, contact our 24/7 live chat support immediately.

10 Cookies & Tracking Technologies

zs99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support fraud prevention systems. The following cookie categories are used:

• Strictly necessary cookies — required for the Platform to function correctly, including session management and security tokens. These cannot be disabled without breaking core functionality;
• Functional cookies — remember your language preference, display settings, and other personalisation choices to improve your experience;
• Analytical cookies — collect aggregated, anonymised data about how players navigate and use the Platform, enabling zs99 to identify areas for improvement;
• Security cookies — assist with fraud detection, rate limiting, and bot prevention to protect both the Platform and its players.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, though some personalisation features may be affected. zs99 does not use advertising or cross-site tracking cookies.

11 Your Data Rights

As a zs99 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. zs99 will respond within 30 days of receiving a valid request.

12 Minors & Age Restriction

The zs99 Platform is strictly restricted to individuals aged 21 years or older. zs99 does not knowingly collect personal data from anyone under this age. If we become aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the zs99 Platform or submitted personal data without your consent, please contact us immediately via live chat or at [email protected]. We will treat all such reports with the highest priority and act immediately.

13 Changes to This Policy

zs99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material, we will provide reasonable advance notice via the Platform or by email to the address registered on your account.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how zs99 protects your data.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zs99, please reach out through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform
• Email: [email protected]

zs99 aims to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 30 days. For urgent matters such as suspected data breaches or requests involving vulnerable individuals, our team will prioritise your case.