zs999i Privacy Policy — How We Handle Your Personal Data

This Privacy Policy describes how zs999i ("Platform," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("Player," "User," "you") who register for and use the zs999i online betting and casino platform at zs999i.net. It applies to all products and services offered on the Platform, including sports betting (PSL, ICC cricket, Asia Cup), live casino games, slots, virtual sports, jackpot products (including Piggy Gold), and all Account management, payment, and support interactions.

By registering a zs999i Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with zs999i's Terms & Conditions and Responsible Gaming Policy.

01 Introduction & Scope

zs999i is committed to protecting the privacy and personal data of all users who interact with the Platform, with particular care for Pakistani players whose data is processed in the context of online betting and casino activity. This Privacy Policy has been prepared in accordance with the data protection obligations applicable under zs999i's international gaming licence and in alignment with internationally recognised data protection principles including those reflected in the General Data Protection Regulation (GDPR) framework and Pakistan's applicable data protection guidelines.

This Policy applies to all personal data processed by zs999i regardless of whether it is collected through the website zs999i.net, mobile browsers, any mobile application associated with the Platform, email or live chat communications, telephone interactions, or any other channel through which you interact with zs999i.

02 Data Controller

zs999i acts as the Data Controller in respect of the personal data it collects from Players. As Data Controller, zs999i determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection obligations.

If you have any questions about how your data is managed, wish to exercise a data right, or wish to raise a complaint about data processing, you may contact zs999i's Data Protection team via live chat on the Platform or by writing to: [email protected] (plain text — this address is not a clickable link). Please include "Data Privacy" in the subject line of your communication.

03 Personal Data We Collect

The following categories of personal data are collected and processed by zs999i. The specific data points collected depend on how you interact with the Platform and at which stage of your Account lifecycle the data is gathered.

04 How We Collect Your Data

zs999i collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering your Account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your Account settings.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, browser information, cookies, and session activity logs.
• Payment Provider Data: Transactional confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and blockchain networks (for USDT TRC20) when you initiate a deposit or withdrawal.
• Game Providers: Game session data (wagers, outcomes, session duration) transmitted from certified third-party game studios for game history, audit, and responsible gaming monitoring purposes.
• Identity Verification Services: Where third-party KYC verification services are used, identity confirmation signals (not raw document data) may be transmitted from those services to zs999i.
• Communications: Any personal information you include in live chat messages, emails, or support tickets addressed to zs999i.

05 Legal Basis for Processing

zs999i processes your personal data on the following legal grounds, each of which applies to one or more of the processing activities described in this Policy:

• Contractual Necessity: Processing required to perform the contract between you and zs999i — including Account creation, game access, deposit and withdrawal processing, and bet settlement.
• Legal Obligation: Processing required to comply with zs999i's obligations under its gaming licence — including KYC, age verification, anti-money laundering (AML) checks, and record retention requirements.
• Legitimate Interests: Processing where zs999i has a legitimate business interest that does not override your rights — including fraud detection, Platform security, abuse prevention, and responsible gaming monitoring.
• Consent: Processing for purposes where you have given specific consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06 How We Use Your Personal Data

zs999i uses the personal data it collects for the following specific purposes:

• Creating, verifying, and maintaining your zs999i Account.
• Verifying your identity and age (21+ requirement) as part of KYC obligations under our gaming licence.
• Processing deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20).
• Providing access to all Platform products including cricket betting (PSL, World Cup, international matches), live casino, slots, virtual sports, and jackpot games.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• Monitoring betting and gaming behaviour for responsible gaming purposes, including identifying signs of problem gambling and applying appropriate safeguards.
• Personalising your Platform experience — including game recommendations, relevant bonus offers, and interface language preferences.
• Providing customer support via live chat and email in English and Urdu.
• Sending transactional communications — including deposit confirmations, withdrawal notifications, Account security alerts, and KYC status updates.
• Sending marketing communications where you have consented to receive them (see Section 12).
• Complying with audit, regulatory, and reporting obligations imposed by zs999i's gaming licence authority.

07 Data Sharing & Disclosure

zs999i does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators receive the transactional data necessary to process your deposit or withdrawal.
• KYC & Identity Verification Providers: Third-party identity verification services used to validate CNIC documents and confirm age eligibility. These providers operate under strict data processing agreements with zs999i.
• Game Studios & Content Providers: Certified third-party game studios (including providers of live casino, slots, and virtual sports) receive session data required to deliver game functionality and provide auditable game logs.
• Regulatory & Licensing Authorities: zs999i's gaming licence authority may require access to certain Account and transaction records for audit, compliance, and regulatory oversight purposes. Disclosure is made only as legally required.
• Law Enforcement: zs999i may disclose personal data to law enforcement or government authorities where required by valid legal process, court order, or statutory obligation — including AML reporting obligations.
• Fraud Prevention Services: Shared signals (not full personal records) may be exchanged with industry-recognised fraud prevention consortia to prevent account takeover and payment fraud.
• Professional Advisers: Legal counsel, auditors, and insurers may access relevant data under strict confidentiality obligations where required for professional service delivery.

08 Cookies & Tracking Technologies

zs999i uses cookies and similar tracking technologies to operate, improve, and secure the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Required for Platform operation — including session management, login state maintenance, and security tokens. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, recently played games, and deposit method selection to provide a personalised experience.
• Analytical Cookies: Collect aggregated data on how players navigate the Platform — including page views, session duration, and feature usage — to help improve Platform design and performance.
• Security Cookies: Used for device fingerprinting and anomaly detection to identify potentially fraudulent or unauthorised login attempts and protect your Account.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain functional cookies may affect your Platform experience. Strictly necessary and security cookies cannot be disabled as they are essential to Platform operation and Account security.

09 Data Retention

zs999i retains personal data for the periods specified below, after which data is securely deleted or anonymised unless a longer retention period is required by law or regulatory obligation:

• Account & Identity Data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, as required by anti-money laundering regulations applicable under zs999i's gaming licence.
• Financial & Transaction Records: Retained for a minimum of 5 years following each transaction, or longer if required by applicable AML and gaming licence obligations.
• KYC Documents: Retained for 5 years following Account closure. Originals are stored encrypted; access is restricted to authorised compliance personnel.
• Game & Bet History: Retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Support & Communications Data: Live chat and email records retained for up to 3 years to support complaint resolution and quality assurance.
• Technical & Log Data: IP logs and session data retained for up to 12 months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of your consent and for 3 years following withdrawal of consent, for regulatory evidence purposes.

10 Data Security Measures

zs999i implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and zs999i's servers.
• Bcrypt hashing for all stored passwords — your actual password is never stored in readable form.
• AES-256 encryption for all sensitive personal data and KYC documents stored at rest on zs999i's servers.
• Role-based access controls ensuring that personal data is only accessible to zs999i personnel with a legitimate business need.
• Multi-factor authentication for all staff accessing systems that hold player personal data.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Automated anomaly detection monitoring for unusual access patterns, login behaviour, and financial transactions.
• Incident response procedures that require notification of affected players within 72 hours of discovery of a significant data breach.

11 Your Data Rights

As a zs999i player, you have the following rights in relation to your personal data. To exercise any of these rights, contact zs999i support via live chat or at [email protected] with "Data Rights Request" in the subject.

12 Marketing Communications

zs999i may send you marketing communications about bonuses, promotions, new games, PSL betting offers, and Platform news via email, SMS, or in-platform notifications, where you have provided your consent to receive such communications.

• Marketing consent is obtained separately during Account registration or subsequently via your Account notification settings.
• You may withdraw marketing consent at any time by updating your notification preferences in your Account settings, or by clicking the unsubscribe link in any marketing email, or by contacting support.
• Withdrawal of marketing consent does not affect transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and Account security alerts — which are sent based on contractual necessity.
• zs999i does not engage in third-party marketing list sharing. Your contact details are not sold or licensed to any external marketing entity.

13 Minors & Age Verification

The zs999i Platform is strictly for individuals aged 21 years and above. zs999i does not knowingly collect personal data from individuals under 21. As part of the KYC verification process, all players are required to demonstrate their age using a valid Pakistani CNIC before withdrawal privileges are granted.

If zs999i discovers or is notified that an Account has been created by an individual under the age of 21, the Account will be immediately suspended, all personal data collected will be deleted (subject to any statutory retention obligations), and any deposited funds will be returned to the payment source minus any winnings, which will be voided. The matter may be escalated to relevant authorities as required by zs999i's gaming licence obligations.

14 International Data Transfers

As an internationally licensed gaming platform, zs999i may process and store personal data on servers located outside Pakistan. Where personal data is transferred to countries that do not have equivalent data protection laws, zs999i ensures that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) or equivalent contractual mechanisms with the receiving entity.
• Transfers only to jurisdictions with adequacy decisions or to entities that have implemented certified binding corporate rules.
• Contractual obligations on receiving parties to implement security standards no less protective than those described in this Privacy Policy.

Your personal data is never transferred to third-party commercial entities in other countries for purposes other than those disclosed in this Privacy Policy.

15 Amendments to This Privacy Policy

zs999i reserves the right to update this Privacy Policy at any time. Where changes are material — particularly those that affect how your data is used or your data rights — zs999i will notify you via your registered email address or via an in-platform notification at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. The current version and effective date are always displayed at the top of this page. We recommend reviewing this Policy periodically.

16 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about zs999i's data processing practices, please contact us through the following channels. All email addresses are provided as plain text and are not clickable links.

• Live Chat: Available 24/7 on the Platform in English and Urdu. Fastest channel for data rights enquiries.
• Email: [email protected] — include "Data Privacy" in the subject line. Allow up to 5 business days for a response to data rights requests.

zs999i will acknowledge all data rights requests within 5 business days and aim to provide a substantive response or resolution within 30 calendar days. Where a request is complex or high-volume, the response period may be extended by a further 60 days with notification to you of the extension and the reason.