zc999 Privacy Policy

zc999 ("we", "us", "our", "the Company", "the Platform") operates the online casino and sports betting platform accessible at zc999.pro. In delivering our services to players across Karachi, Lah ore, Islamabad, Faisalabad, and beyond, we necessarily collect, process, and store certain personal information about you.

This Privacy Policy has been prepared to clearly explain what data we collect, the purposes for which it is used, how long we keep it, and the rights you have as a data subject. The Policy applies to all zc999 registered users, visitors to the zc999.pro website, and anyone who contacts our support team.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions that interact with how we handle your personal data. In the event of any conflict between this Policy and those documents, this Privacy Policy shall govern with respect to data protection matters.

Data Controller: zc999 acts as the data controller for all personal information collected through the Platform. Any questions regarding this role may be directed to our support team using the contact details in Section 13 of this Policy.

zc999 collects personal data at several points during your interaction with the Platform. The categories of data we collect are described below:

2.1 Data You Provide Directly. The majority of personal data we hold is information you voluntarily provide during registration, identity verification, or when contacting our support team. You are not obligated to provide this data, but without it we cannot create or maintain your zc999 account.

2.2 Data Collected Automatically. When you visit zc999.pro, our servers automatically log certain technical information such as your IP address, browser type, referring URL, and the pages you access. This data is collected primarily for security monitoring, fraud prevention, and platform optimisation purposes.

2.3 Data from Third Parties. zc999 may receive limited personal data from third-party identity verification providers and payment processors (such as EasyPaisa and JazzCash) in the course of completing KYC checks and processing transactions. Such data is handled with the same level of care as data you provide directly.

zc999 uses your personal data only for legitimate, specified purposes. We do not process your data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which we use your data are:

• Account creation and management: Setting up and maintaining your zc999 player account, including verifying your identity and age in compliance with the 21+ requirement;
• Service delivery: Processing deposits and withdrawals via EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank; crediting game winnings; applying bonuses and promotional rewards;
• Regulatory compliance: Fulfilling our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, cheating, bonus abuse, and other prohibited conduct on the Platform;
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance;
• Responsible gaming monitoring: Analysing gaming behaviour patterns to identify potential problem gambling indicators and to apply responsible gaming interventions where appropriate;
• Marketing communications: Sending you promotional offers, bonuses, and platform updates — but only where you have provided explicit consent or where we have a legitimate interest to do so;
• Platform improvement: Using aggregated, anonymised analytics to understand how the Platform is used and to improve its performance, design, and game offering.

Every instance of personal data processing carried out by zc999 is grounded in one or more of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and zc999 — for example, processing your deposit so that your account balance is credited correctly;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML, KYC, and responsible gaming regulations under our international gaming licence;
• Legitimate interests: Processing necessary for zc999's legitimate business interests — such as fraud prevention, platform security, and internal analytics — provided those interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting our support team.

5.1 We Do Not Sell Your Data. zc999 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. This is an absolute commitment.

5.2 Service Providers. We share limited personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards. Categories of such providers include:

• Payment processors (EasyPaisa, JazzCash, HBL, UBL, Meezan Bank) — for transaction processing;
• Identity verification providers — for KYC document checks;
• Cloud infrastructure and hosting providers — for secure data storage;
• Customer support platform providers — for live chat and ticketing systems;
• Fraud detection and analytics providers — for platform security.

5.3 Regulatory and Law Enforcement Disclosure. zc999 may disclose personal data to competent authorities, gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and in accordance with applicable legal obligations.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the zc999 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via registered email prior to any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

6.1 Payment Data Handling. Financial data related to your deposits and withdrawals is among the most sensitive information zc999 processes. All payment data is transmitted over TLS-encrypted connections and stored in encrypted form on segregated servers that are not accessible from the public internet.

6.2 EasyPaisa & JazzCash Transactions. When you initiate a deposit or withdrawal via EasyPaisa or JazzCash, the transaction is processed directly through those providers' secure APIs. zc999 receives a transaction confirmation and reference number. We do not store your EasyPaisa MPIN, JazzCash PIN, or any full payment credential that could be used to access your mobile wallet independently.

6.3 Bank Transfer Data. For HBL, UBL, and Meezan Bank transfers, zc999 retains the transaction reference, amount, and account name solely for reconciliation, KYC, and AML compliance purposes. Bank account numbers are masked in our internal records after the compliance review period.

6.4 Transaction Records. Regulatory requirements oblige zc999 to retain financial transaction records for a minimum period as specified in Section 8 of this Policy. These records may be accessed by regulatory authorities in the context of an AML investigation.

7.1 What Are Cookies. Cookies are small text files placed on your device by the zc999 website. They allow the Platform to recognise your browser, remember your preferences, maintain your login session, and gather analytical data about how the site is used.

7.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core Platform functionality;
• Performance & Analytics Cookies: Collect anonymised information about how visitors use the Platform — which pages are visited most, where users navigate from, and how long sessions last. This data helps us improve the Platform;
• Functional Cookies: Remember your preferences such as language settings and game display options to provide a more personalised experience;
• Marketing Cookies: Used to deliver relevant promotional content on the Platform. These are only set with your explicit consent.

7.3 Managing Cookies. You can control non-essential cookies through your browser settings. Disabling performance or functional cookies may affect your experience on the Platform but will not prevent you from accessing core gaming and betting features. Instructions for managing cookies are available in the help section of all major browsers.

zc999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data set contains no information that could be used to identify you and may be retained indefinitely for aggregate analytics purposes.

9.1 Technical Safeguards. zc999 employs industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Intrusion detection and prevention systems monitoring platform traffic in real time;
• Regular third-party penetration testing of our infrastructure.

9.2 Organisational Safeguards. Access to personal data within zc999 is strictly limited to staff members who require it to perform their specific job functions. All staff with access to personal data receive regular data protection training. Access rights are reviewed periodically and revoked immediately upon change of role or departure.

9.3 Data Breach Response. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, zc999 will notify affected users via their registered email address without undue delay, and in any event within 72 hours of becoming aware of the breach where required by applicable law.

As a data subject, you have the following rights in respect of the personal data zc999 holds about you. You may exercise any of these rights by contacting our support team using the details in Section 13:

zc999 will respond to all rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further two months, in which case we will notify you of the extension within the initial 30-day period. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where we are required to retain data to comply with a legal obligation such as AML record-keeping requirements.

The zc999 Platform is strictly intended for individuals who are 21 years of age or older. zc999 does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is a mandatory step in the registration process, and zc999 reserves the right to request additional proof of age documentation at any time.

If zc999 becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by our legal obligations, and return any deposited funds via the original payment method following a compliance review.

If you are a parent or guardian and believe that your child has registered on the zc999 Platform, please contact us immediately at [email protected] so that we can take prompt action.

zc999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new type of third-party data sharing — we will provide at least fourteen (14) days' prior notice via registered email before the revised Policy takes effect.

Minor clarificatory changes that do not affect your rights or our data processing practices may be made without advance notice, though the "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how zc999 protects your personal information.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data zc999 holds about you, please contact our Data Protection team using the details below. All contact information is provided as plain text only.

For concerns specifically about responsible gaming data, including self-exclusion records or gaming behaviour data, please refer to our Responsible Gaming page for dedicated contact information and self-help tools.

For general account and support enquiries not related to data protection, please use the live chat function available directly within the zc999 Platform after logging in at zc999 Login.