Privacy Policy

999zs ("we", "us", "our", "the Operator") is committed to protecting the privacy and personal data of every individual who accesses, registers for or uses the 999zs platform at 999zs.cam, including all associated services, tools and features offered under the 999zs brand (collectively, the "Platform").

This Privacy Policy ("Policy") describes what personal data we collect, why we collect it, how we use it, how long we retain it, with whom we share it, and what rights you have in relation to your data. It applies to all users of the Platform regardless of location, device type or method of access.

By using the Platform, registering an account or placing a bet, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle your data, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform, and our Responsible Gambling page, which describes the player protection tools available to you.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

The Data Controller responsible for your Personal Data collected through the 999zs Platform is the Operator of the 999zs brand. The Operator's full legal name, registration details and licensing jurisdiction are available on request by contacting our support team via the live chat feature on the Platform.

For data protection enquiries, requests to exercise your rights or any concerns relating to this Policy, the primary point of contact is the 999zs support team. Contact details are set out in Section 16 of this Policy.

We collect and process several categories of Personal Data in the course of operating the Platform and providing our Services. The categories we may collect include the following:

4.1 Identity Data

Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., CNIC or passport number) and copies of identification documents submitted as part of the KYC verification process.

4.2 Contact Data

Email address, telephone or mobile number, and residential address including city and country. For Pakistani users, this may include city references such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar.

4.3 Financial Data

Payment method details including the type of payment method used for deposits and withdrawals, transaction identifiers, PKR (Pakistani Rupee) amounts and bank or e-wallet references. Note that references to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for transaction context only and do not constitute endorsement by those institutions.

4.4 Account & Activity Data

Username, account registration date, login history, betting and gaming activity, wager amounts, game history, bonus usage, session durations and account preference settings.

4.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, referring URL, time zone settings and other technical identifiers collected automatically when you access the Platform.

4.6 Communications Data

Records of any correspondence between you and the 999zs support team, including live chat transcripts, email communications and any documentation submitted in relation to account queries, disputes or complaints.

4.7 KYC / AML Compliance Data

Where required by applicable regulations or the Operator's internal compliance procedures, we may collect source-of-funds documentation, enhanced due diligence records and any other documentation necessary to satisfy AML obligations.

We use the Personal Data we collect for the following purposes:

Where applicable data protection legislation requires us to identify a legal basis for Processing your Personal Data, we rely on one or more of the following:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions — for example, operating your account, processing transactions and delivering the Services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, AML and responsible gambling requirements under the Operator's licensing jurisdiction.
• Legitimate Interests: Processing is necessary for the Operator's legitimate business interests, including fraud detection, platform security, abuse prevention and improving Service quality, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required, we will seek your explicit consent before Processing your data — for example, for marketing communications. You may withdraw consent at any time without affecting the lawfulness of Processing based on consent before withdrawal.

We do not sell or rent your Personal Data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Technology & Service Providers

Third-party vendors who provide services essential to Platform operations — including game technology suppliers, payment processing infrastructure, KYC and identity verification services, cloud hosting providers, and customer support platform providers. These parties act as Data Processors and are contractually bound to process your data only under our instructions and in accordance with this Policy.

7.2 Regulatory & Legal Authorities

Where required by applicable law, court order, regulatory directive or the rules of the Operator's licensing jurisdiction, we may disclose your Personal Data to competent authorities. This includes disclosure in connection with fraud investigations, AML reporting and law enforcement requests.

7.3 Responsible Gambling Organisations

In limited circumstances — for example, where a self-exclusion request involves cross-operator exclusion registers — we may share limited identifying information with registered responsible gambling schemes as required by the applicable licensing regime.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, your Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection obligations being maintained.

The 999zs Platform operates under an international licensing framework. Your Personal Data may be transferred to and processed in countries outside the country in which you reside, including countries outside Pakistan. Some of these jurisdictions may have different data protection standards from your home country.

Where Personal Data is transferred internationally, the Operator takes steps to ensure that appropriate safeguards are in place — such as contractual data processing agreements incorporating applicable standard contractual clauses — to protect your data in accordance with the principles of this Policy.

By using the Platform, you acknowledge and accept that your Personal Data may be transferred and processed outside Pakistan in the manner described above.

We retain Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, accounting and reporting obligations. The specific retention period applied to different categories of data depends on the nature of the data and the applicable legal requirements.

As a general guide:

• Account and transaction data is typically retained for a minimum of five (5) years following account closure, in accordance with standard AML and financial record-keeping requirements.
• KYC verification documents are retained for the period required by the applicable licensing jurisdiction and AML regulations, which is typically five (5) years or longer.
• Communication records (support chat, emails) are retained for a period sufficient to resolve any outstanding disputes and comply with applicable legal obligations.
• Technical and usage data is typically retained for a shorter period, determined by the Operator's platform analytics and security monitoring requirements.

When Personal Data is no longer required, we take reasonable steps to ensure its secure deletion or anonymisation. Where complete deletion is not immediately possible — for example, due to backup storage cycles — the data is isolated and protected from further active processing until deletion is possible.

The 999zs Platform uses cookies and similar tracking technologies to maintain session integrity, improve Platform performance and, where applicable, support analytics. The table below describes the categories of cookies we use:

Essential cookies are necessary for the Platform to function and cannot be disabled. Functional and analytics cookies can be managed or disabled through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform and your overall user experience.

To manage cookie preferences, refer to the Help or Settings section of the browser you use to access the Platform. Common browsers available on devices used in Pakistan — including Chrome, Firefox, Samsung Internet and Safari on iOS — all provide cookie management options.

Depending on the data protection laws applicable in the Operator's licensing jurisdiction and, where relevant, in your location, you may have some or all of the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact the 999zs support team via live chat on the Platform or using the contact details in Section 16. We may need to verify your identity before processing your request. We will aim to respond within thirty (30) days, though complex requests may require additional time.

The 999zs Platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect or process Personal Data from individuals below the applicable minimum age.

Age verification is a mandatory component of our KYC process. Where we discover or have reasonable grounds to suspect that an account holder does not meet the minimum age requirement, we will immediately suspend the account, conduct a full review, and take appropriate action including account closure and — if required — reporting to relevant authorities.

The Operator implements appropriate technical and organisational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• TLS Encryption: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS) protocols. Look for the padlock symbol in your browser's address bar when accessing 999zs.
• Access Controls: Internal access to Personal Data is restricted on a need-to-know basis. Staff who access Personal Data are subject to confidentiality obligations.
• Secure Storage: Personal Data is stored in access-controlled systems. Sensitive documents submitted for KYC are stored securely and are not accessible to general operational staff without authorisation.
• Monitoring: The Platform employs fraud detection and anomalous behaviour monitoring tools to identify and respond to potential security incidents.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, we will notify relevant authorities and, where required, affected users in accordance with applicable legal requirements.

While we take reasonable steps to protect your data, no internet transmission or electronic storage system is entirely secure. You are responsible for keeping your account credentials confidential and for using secure networks when accessing the Platform.

The Platform may integrate with or make reference to third-party services and providers — including game technology suppliers, data analytics providers, payment infrastructure services and KYC verification platforms. These third parties operate under their own privacy policies, which are separate from and not governed by this Policy.

References to payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear on this Platform as contextual references only. They do not imply that those institutions have a data processing relationship with 999zs, endorse the Platform or support gambling transactions.

The Platform may also use third-party analytics tools that collect technical and usage data in aggregated or anonymised form. These tools help us understand Platform performance and improve the user experience for players across Pakistan. We do not use such tools to build individual marketing profiles without consent.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or the Services we offer. Where material changes are made, we will provide reasonable notice — for example, by displaying a notification upon your next login or by publishing a revised Policy with an updated effective date.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement and acceptance of the revised Policy. We encourage you to review this Policy periodically. The version number and effective date at the top of this document will indicate whether the Policy has been updated since your last review.

If you have any concerns about changes to this Policy, please contact us using the details in Section 16 before continuing to use the Platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the 999zs support team through the following channels:

• Live Chat: Available 24/7 directly on the Platform. This is the fastest way to reach us for data-related queries.
• Email: [email protected] — displayed as plain text only; this is not a clickable link.
• Subject Line: For data rights requests, please include "Data Rights Request" in the subject of your email for faster routing.
• Languages: Support is provided in English. Urdu assistance is available on request for users in Pakistan.

We aim to respond to all privacy-related requests within thirty (30) days of receipt. For complex requests, or where identity verification is required, we will inform you of the expected timeframe.

Our team serves players across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and is committed to handling all data requests with care, professionalism and respect for your rights.