ZD999 Privacy Policy – How We Protect Pakistani Players' Data

ZD999 (referred to in this document as "ZD999", "we", "our" or "us") operates the online casino and sports betting platform accessible at zd999.ws. We are the data controller responsible for the personal information that Pakistani players provide when registering, depositing, playing and interacting with the platform.

This Privacy Policy applies to all personal data collected through zd999.ws, whether submitted via the registration form, entered during the deposit process, provided to customer support or collected automatically during your use of the platform. By creating a ZD999 account, you confirm that you have read and understood this policy and that you consent to the processing of your personal data as described here.

If you have questions about how ZD999 handles your data, contact the privacy team directly at support@zd999.ws with "Privacy" in the subject line.

ZD999 collects the minimum personal data necessary to provide you with a functioning, secure and compliant account. The categories of data we collect are as follows:

ZD999 collects personal data through the following channels:

• Direct submission: Information you enter into the registration form, deposit screens, withdrawal requests, support chat conversations and any forms you complete on zd999.ws.
• Automated collection: Technical data such as your IP address, browser type, device information and session logs are collected automatically when you visit zd999.ws, regardless of whether you are logged in.
• Payment processors: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card networks, those providers share transaction confirmation data with ZD999 to enable us to credit your account or verify a withdrawal.
• Identity verification partners: Where ZD999 uses a third-party identity verification service to process CNIC checks, that partner may collect and process your document data on our behalf under a strict data processing agreement.
• Cookies and similar technologies: As described in Section 10, ZD999 uses cookies and analytics tools to collect information about how you use the platform.

ZD999 uses your personal data for the following purposes:

• Account creation and management: To set up and maintain your ZD999 account, verify your identity at registration and authenticate your login sessions.
• Processing deposits and withdrawals: To credit deposits to your PKR wallet, process withdrawal requests to your Easypaisa, JazzCash or bank account, and maintain accurate financial records.
• Game and betting services: To enable you to place bets, play casino games and access all ZD999 platform features, and to calculate and credit any winnings or VIP cashback correctly.
• Customer support: To identify your account, access relevant transaction and gaming history, and resolve queries or disputes efficiently.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, money laundering and other fraudulent or illegal activity involving the ZD999 platform.
• Regulatory compliance: To meet applicable anti-money laundering (AML) and know-your-customer (KYC) obligations, including verifying player identity and maintaining required records.
• Responsible gaming: To monitor gaming behaviour, apply deposit limits or self-exclusion tools where requested, and to identify players who may need responsible gaming support.
• Platform improvement: To analyse aggregate, anonymised usage patterns to improve the ZD999 platform, fix bugs and develop new features.
• Marketing communications: To send promotional emails or notifications about ZD999 offers, new games and VIP rewards — but only where you have explicitly opted in. See Section 13.

ZD999 processes your personal data on the following legal bases:

• Contract performance: The majority of data processing — account management, payments, gaming services — is necessary to deliver the services you have signed up for.
• Legal obligation: Identity verification, KYC and AML processes are required by applicable regulations. ZD999 is legally obligated to maintain records of certain transactions.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and platform analytics are conducted on the basis of ZD999's legitimate operational interests, where those interests are not overridden by your privacy rights.
• Consent: Marketing communications are only sent where you have given explicit consent. You can withdraw consent at any time.

ZD999 does not sell your personal data to third parties. We share data only in the following limited circumstances:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer networks and card processors receive the transaction data necessary to complete your deposit or withdrawal. They are independently responsible for their own data practices.
• Game providers: Certified game studios such as Pragmatic Play and NetEnt receive session and wagering data necessary to run the games you play and to calculate outcomes. They do not receive your identity documents or contact information.
• Identity verification partners: Where required for KYC, CNIC and document data is shared with authorised verification partners under strict contractual data processing terms.
• Analytics providers: Anonymised, aggregated usage data may be shared with analytics platforms to support platform improvement. Individual player data is not identifiable in these reports.
• Law enforcement and regulators: ZD999 will disclose personal data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law or in connection with a legitimate legal process.
• Business transfers: In the event of a merger, acquisition or sale of ZD999, player data may be transferred to the acquiring entity under the same privacy obligations as this policy.

Some of ZD999's service partners — including game providers and platform infrastructure providers — may be located outside Pakistan. Where your data is transferred internationally, ZD999 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data protection measures. ZD999 does not transfer data to jurisdictions that do not provide an adequate level of protection.

Payment data for Easypaisa and JazzCash transactions is processed within Pakistan by those providers' own systems. Bank transfer and card transaction data follows the processing infrastructure of the respective networks.

ZD999 takes data security seriously and has implemented technical and organisational measures appropriate to the level of risk involved in processing player data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and ZD999 servers
• Encryption of sensitive data fields at rest in ZD999 databases
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments of the ZD999 platform
• Multi-factor authentication options for player accounts
• Monitoring for suspicious login patterns, unusual transaction activity and potential account compromise

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, ZD999 will notify affected players promptly and take all reasonable steps to contain and mitigate the breach.

ZD999 retains personal data for as long as it is necessary for the purposes set out in this policy. The key retention periods that apply to ZD999 player data are as follows:

• Account data and transaction records: Retained for a minimum of 5 years after account closure, as required by applicable financial record-keeping obligations.
• KYC and identity verification documents: Retained for the period required by applicable anti-money laundering regulations, which is typically 5 years from the end of the business relationship.
• Customer support communications: Retained for 2 years from the date of the last interaction, then deleted unless the matter involves an ongoing dispute.
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical logs (IP addresses, session data): Retained for up to 12 months for security and fraud detection purposes, then anonymised or deleted.

When data is no longer required and no legal retention obligation applies, ZD999 deletes or anonymises it securely.

ZD999 uses cookies and similar technologies on zd999.ws. A cookie is a small text file stored on your device by your browser. ZD999 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — maintaining your login session, remembering your preferences and processing secure transactions. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how players use ZD999 — which pages are most visited, how long sessions last and where errors occur. This data is aggregated and anonymised. ZD999 uses a privacy-respecting analytics platform and does not share individual-level analytics data with third parties.
• Functionality cookies: Remember your choices such as language preferences, game history display settings and notification preferences.

ZD999 does not use third-party advertising or retargeting cookies. You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will affect your ability to use the ZD999 platform.

As a ZD999 player, you have the following rights over your personal data. To exercise any of these rights, contact ZD999 at support@zd999.ws with "Data Rights Request" in the subject line. ZD999 will respond within 30 days of receiving a valid request.

ZD999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If ZD999 discovers that an account has been created by a minor, the account will be immediately closed and any associated data deleted, except where retention is required for legal or regulatory purposes.

If you are a parent or guardian and believe a minor in your household has registered on ZD999, please contact support@zd999.ws immediately so the matter can be resolved promptly.

ZD999 will only send you marketing communications — emails about new promotions, VIP rewards, game launches or special offers — if you have explicitly opted in during registration or updated your preferences to opt in at a later stage.

You can opt out of ZD999 marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any ZD999 marketing email
• Updating your notification preferences in your ZD999 account settings
• Emailing support@zd999.ws with "Unsubscribe" in the subject line

Opting out of marketing will not affect transactional communications — ZD999 will still send you emails about account activity, deposit confirmations, withdrawal notifications and important policy updates, as these are required for account operation rather than promotional purposes.

Although ZD999 does not include third-party advertising, the platform may occasionally reference related services — such as responsible gaming support resources — that are hosted on external websites. ZD999 is not responsible for the privacy practices of any external site. If you follow a link to an external site, please review that site's own privacy policy before providing any personal information.

ZD999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to our data practices. The effective date at the top of this document will be updated whenever material changes are made.

Where changes are significant — for example, changes to how we share data or to your rights — ZD999 will notify registered members by email or in-platform notification before the changes take effect, where reasonably practicable. For minor editorial updates, the revised policy will simply be published on this page without separate notification.

Continued use of ZD999 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account before it takes effect by contacting support@zd999.ws.

If you have any questions, concerns or requests relating to this Privacy Policy or how ZD999 handles your personal data, please get in touch:

• Email: support@zd999.ws (use subject: "Privacy Query" or "Data Rights Request")
• Live chat: Available 24/7 from your ZD999 account dashboard — ask to be connected to the privacy team
• Response time: ZD999 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days

If you are not satisfied with ZD999's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority.