z999k Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how z999k ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "User", "Player") who access or register on the z999k website at z999k.pro. This Policy applies to all services provided through the Platform, including casino games, sports betting, live dealer tables, customer support interactions, and marketing communications.

z999k primarily serves players based in Pakistan and processes personal data in accordance with applicable international data protection principles and online gaming regulatory requirements. Where specific local data protection legislation applies to your use of the Platform, we honour those requirements to the extent they are consistent with our operational obligations.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and z999k. By accepting the Terms & Conditions, you also confirm your acceptance of this Privacy Policy.

2 Data Controller

For the purposes of this Privacy Policy, z999k operates as the data controller in respect of all personal data collected through the Platform. As data controller, z999k determines the purposes for which your personal data is processed and the means by which such processing takes place.

All data-related enquiries, requests, and complaints should be directed to our dedicated privacy team using the contact details set out in Section 14 of this Policy. We will acknowledge receipt of all privacy-related communications within five (5) business days and provide a substantive response within the timeframes specified in Section 10.

3 Personal Data We Collect

z999k collects personal data through multiple channels, including directly from you during registration and account management, automatically through your use of the Platform, and from third-party verification and payment service providers. The categories of data we collect are set out below.

3.1 Registration & Identity Data

When you create a z999k account, we collect your full legal name, date of birth, residential address in Pakistan, email address, and Pakistani mobile number. This information is required to establish your account and verify your identity in accordance with our Know Your Customer (KYC) obligations.

3.2 Identity Verification Documents

To comply with anti-money-laundering (AML) and age verification requirements, z999k may request copies of government-issued identity documents such as your Computerised National Identity Card (CNIC), passport, or driving licence, together with proof of residential address and, where relevant, proof of ownership of the payment method you use.

3.3 Financial & Transaction Data

We collect details of all deposits, withdrawals, and in-Platform transactions associated with your z999k account. This includes payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full bank account numbers or complete mobile wallet credentials on our servers; these are handled by our certified payment processors.

3.4 Gaming & Betting Activity Data

z999k records your gaming history across all Platform products, including cricket betting markets, slot games, live casino tables, and other gaming categories. This data includes bet amounts, game outcomes, session durations, and win/loss records. This information is used for account management, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data

When you access z999k, our systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and Platform optimisation.

3.6 Communications Data

If you contact z999k customer support — whether by email, live chat, or any other channel — we retain records of those communications, including the content of your messages and our responses. This allows us to maintain accurate support histories and improve service quality.

4 How We Use Your Personal Data

z999k uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your z999k account, processing deposits and withdrawals, and providing access to all Platform services.
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the 21-year minimum age requirement before allowing access to gaming services.
• Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and online gaming regulatory frameworks, including the retention and reporting of transaction records as required.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify players who may be exhibiting signs of problem gambling, and enabling the delivery of responsible gaming tools such as deposit limits, self-exclusion, and session time alerts.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance with account-related matters.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with z999k and to improve the quality, performance, and range of our services.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to players who have opted in to receive such communications. See Section 12 for details on opting out.
• Legal Proceedings: Using and disclosing personal data where necessary to establish, exercise, or defend legal claims involving z999k.

5 Legal Basis for Processing

z999k processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions, such as operating your account, processing transactions, and providing access to games and betting markets.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of z999k's legitimate business interests — such as fraud prevention, security monitoring, and Platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third-Party Disclosure

6.1 Payment Service Providers

To process deposits and withdrawals, z999k shares necessary transaction data with certified payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners. These providers receive only the minimum data required to execute the transaction and are contractually obligated to protect it.

6.2 Identity Verification Partners

z999k uses third-party KYC and age verification service providers to validate identity documents and confirm that players meet the 21+ age requirement. These providers process identity data on our behalf and are bound by strict confidentiality and data protection obligations.

6.3 Regulatory & Law Enforcement Authorities

z999k may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by applicable law, a court order, or a lawful request from a competent authority. z999k will, where legally permitted, notify affected users of such disclosures.

6.4 Fraud Prevention Agencies

To protect the integrity of the Platform and its players, z999k may share data with fraud prevention agencies and industry-wide responsible gaming databases where required or permitted by applicable law.

6.5 No Commercial Data Sales

7 Cookies & Tracking Technologies

z999k uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you between sessions, remember your preferences, and analyse how the Platform is used.

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as maintaining your logged-in session, remembering your language preferences, and ensuring that the Platform displays correctly on your device. These cookies cannot be disabled without significantly impairing Platform functionality.

7.2 Analytics Cookies

z999k uses analytics tools to collect aggregated, anonymised data about how players navigate and interact with the Platform. This information helps us identify pages that perform well, spot technical issues, and make informed decisions about Platform development. Analytics data does not identify you personally.

7.3 Security & Fraud Detection Cookies

Certain cookies are used to support our security and fraud detection systems, including detecting unusual login patterns, identifying multiple accounts originating from the same device, and flagging suspicious transaction behaviour.

7.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some z999k Platform features. Refer to your browser's help documentation for guidance on cookie management.

8 Data Retention

z999k retains personal data for no longer than is necessary for the purposes described in this Policy, subject to any longer retention periods required by applicable law or regulation. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account's active life plus a period of five (5) years following account closure, to comply with AML record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with AML/CTF regulatory requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years from the date of the transaction.
• Customer Support Records: Support communications are retained for three (3) years from the date of the interaction unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Records of your marketing opt-in or opt-out are retained for the duration of your account plus three (3) years to demonstrate compliance with consent requirements.
• Technical & Device Logs: Server access logs and device data are retained for up to twelve (12) months unless flagged for security investigation, in which case the relevant data may be retained for longer.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9 Data Security

z999k implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and z999k servers is encrypted using 256-bit SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on access-controlled servers with firewall protection, intrusion detection systems, and regular security patching.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. z999k employees are trained in data protection best practices and are bound by confidentiality obligations.
• Two-Factor Authentication: z999k supports two-factor authentication for player accounts to provide an additional layer of login security.
• Regular Security Audits: z999k conducts periodic security assessments of its infrastructure and data handling processes to identify and remediate vulnerabilities.

10 Your Data Protection Rights

As a z999k player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 14. z999k will respond to all verified requests within thirty (30) calendar days unless the complexity of the request requires an extension, in which case you will be notified.

• Right of Access: You may request a copy of the personal data z999k holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you may request that z999k delete your personal data. This right is not absolute — z999k may need to retain data to comply with legal obligations or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You may request that z999k restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that z999k provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where z999k relies on legitimate interests as the legal basis, and you believe your rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children & Minors

z999k is strictly an adult platform. Access to all services is limited to individuals who are 21 years of age or older. z999k does not knowingly collect or process personal data relating to persons under the age of 21.

If z999k becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the originating payment method after deducting any winnings derived from play conducted during the period of underage access.

12 Marketing Communications

12.1 Opt-In Marketing

z999k sends promotional emails, SMS notifications, and in-Platform messages about bonuses, new game releases, PSL and cricket betting promotions, and other z999k offers only to players who have opted in to receive such communications. Consent is requested during the registration process and can be updated at any time from within your account settings.

12.2 Opting Out

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your z999k account settings;
• Clicking the unsubscribe link included in any z999k marketing email; or
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications does not affect the delivery of transactional messages related to your account, such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts.

12.3 No Third-Party Marketing

z999k does not share your contact details with third parties for the purpose of those third parties sending you their own marketing communications.

13 Changes to This Privacy Policy

z999k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players by posting a prominent notice on the z999k homepage or by sending a notification to your registered email address, with reasonable advance notice before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised each time it is amended. Your continued use of z999k following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how z999k is protecting your information.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a privacy-related complaint, please contact the z999k privacy team:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Privacy Rights Request"
• Response Time: We acknowledge all privacy communications within five (5) business days and provide a substantive response within thirty (30) calendar days.
• Support Hours: Our support team is available 24 hours a day, 7 days a week.

If you are not satisfied with how z999k has handled your privacy complaint after going through our internal resolution process, you have the right to escalate the matter to the relevant supervisory authority or regulatory body applicable in your jurisdiction.