zh999 Privacy Policy

This Privacy Policy ("Policy") describes how zh999 ("zh999", "we", "our", or "us") collects, uses, stores, shares, and protects personal information about individuals ("you", "your", or "player") who access or use the zh999 online casino and sports betting platform, including the website at zh999.bet, all associated mobile interfaces, games, payment services, customer support channels, and promotional programmes (collectively, the "zh999 Platform").

zh999 is committed to protecting the privacy and personal data of every player on the platform. This Policy has been prepared in accordance with internationally recognised data protection principles and reflects zh999's obligations under applicable gaming and data protection regulations.

By registering an account on zh999, making a deposit, placing a wager, or otherwise accessing the zh999 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the zh999 Platform.

This Policy should be read alongside the zh999 Terms & Conditions, which form the primary agreement governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

zh999 collects personal data from you directly when you interact with the platform, and in some cases automatically through your use of the platform's technical infrastructure. The categories of personal data collected by zh999 are set out below.

2.1 Registration & Identity Data

When you create a zh999 account, we collect:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the minimum age requirement of 18 years).
• Email address and mobile phone number for account communication and authentication.
• Residential address including city, province, and postal code.
• Username and hashed account password.
• Preferred language and currency (Pakistani Rupees / PKR).

2.2 KYC Verification Data

In compliance with anti-money laundering (AML) and Know Your Customer (KYC) obligations, zh999 collects:

• Scanned copies or photographs of government-issued identity documents, including Pakistani CNIC (Computerised National Identity Card) and passport.
• Proof of address documents, such as recent utility bills or bank statements issued in Pakistan.
• Proof of payment method ownership, such as screenshots of your JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account showing your name and account number.
• Selfie photographs or video verification as part of biometric identity checks where applicable.

2.3 Transaction & Payment Data

• Deposit and withdrawal amounts, dates, and payment method references.
• Payment method identifiers (e.g., JazzCash mobile number, EasyPaisa account reference, bank account last four digits).
• Transaction history and account balance records.

2.4 Gaming & Betting Activity Data

• Games played, wagers placed, bet amounts, outcomes, and session durations.
• PSL and cricket betting markets accessed, odds accepted, and bet settlement records.
• Responsible gaming tool settings, including deposit limits, loss limits, and self-exclusion elections.

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP at the time of login.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and platform navigation patterns.
• Cookies and similar tracking technologies as described in Section 6 of this Policy.

2.6 Communications Data

• Records of live chat conversations with zh999 customer support agents.
• Emails and support tickets submitted to zh999.
• Responses to surveys, promotions, or feedback requests.

zh999 uses personal data collected from players for the following specific and documented purposes:

zh999 processes personal data only where there is a valid legal basis to do so. The legal grounds on which zh999 relies to process your personal data are as follows:

• Contractual necessity: Processing required to create and maintain your zh999 account, execute deposits and withdrawals, and deliver gaming and betting services that you have contracted for by accepting the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable AML regulations, KYC obligations, gaming licence conditions, financial record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of zh999's legitimate business interests, including fraud detection, platform security monitoring, responsible gaming programme management, and platform analytics — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing for purposes where zh999 has obtained your prior explicit consent, including the sending of marketing communications and the use of non-essential analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zh999 does not sell, rent, or trade your personal data to any third party. Personal data is shared externally only where strictly necessary and in accordance with the purposes described in this Policy. The categories of third parties with whom zh999 may share your personal data are set out below:

• KYC and Identity Verification Providers: zh999 uses trusted third-party identity verification services to process CNIC, passport, and biometric data as part of the mandatory KYC process. These providers are contractually bound to process your data only for the purposes of identity verification on zh999's behalf.
• Payment Processors: Transaction data is shared with payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to the extent necessary to process your deposits and withdrawals. These processors operate under their own applicable privacy obligations and financial regulations.
• Gaming Content Providers: Game studios and software providers whose games are hosted on the zh999 platform may receive anonymised session and activity data for RNG certification, game performance monitoring, and technical support purposes only.
• Regulatory and Law Enforcement Authorities: zh999 is obligated to share personal data with relevant regulatory bodies, financial intelligence units, and law enforcement authorities where required by law, court order, or in connection with AML investigations.
• IT Infrastructure and Cloud Providers: zh999 uses third-party cloud infrastructure providers to host and operate the platform. These providers act as data processors under zh999's instruction and are bound by strict data security and confidentiality obligations.
• Fraud Prevention Services: zh999 shares relevant technical and transaction data with specialist fraud prevention services to identify and block fraudulent activity, multi-accounting, and financial crime on the platform.

zh999 uses cookies and similar tracking technologies on the zh999 Platform. Cookies are small text files placed on your device when you visit zh999.bet. They help zh999 recognise your device, maintain your session, and improve the quality of your gaming experience.

Types of Cookies Used by zh999:

• Strictly Necessary Cookies: These cookies are essential for the zh999 Platform to function. They maintain your login session, remember your preferred language and currency (PKR), and ensure the security of your account. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Performance and Analytics Cookies: zh999 uses analytics cookies to understand how players interact with the platform — which games are most popular, where players spend the most time, and which pages generate the most engagement. This data is aggregated and anonymised and is used solely to improve the zh999 experience.
• Functional Cookies: These cookies remember your preferences and personalisation settings on zh999, such as your preferred display language, your most recently played games, and your responsible gaming tool configurations.
• Targeting and Marketing Cookies: With your consent, zh999 may use cookies to identify your interests and display relevant zh999 promotional content, including PSL cricket betting offers and slot bonuses, within the platform. These cookies are never used to serve advertising on third-party websites.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the zh999 Platform and may prevent you from accessing your account or completing transactions.

zh999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by zh999:

Upon expiry of the applicable retention period, zh999 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

zh999 implements a comprehensive suite of technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the zh999 Platform is encrypted using industry-standard 256-bit SSL/TLS encryption. The padlock icon in your browser confirms that your connection to zh999.bet is secure.
• Encrypted Data Storage: Personal data and payment records stored on zh999 servers are encrypted at rest using AES-256 encryption. KYC documents are stored in isolated encrypted vaults with strict access controls.
• Access Controls: Access to personal data within zh999's systems is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and regularly audited.
• Two-Factor Authentication (2FA): zh999 offers and strongly recommends two-factor authentication on all player accounts to prevent unauthorised access even in the event of password compromise.
• Intrusion Detection and Monitoring: zh999's platform infrastructure is monitored 24/7 by automated security systems that detect and respond to anomalous access patterns, login attempts, and suspicious activity in real time.
• Penetration Testing: zh999 commissions regular third-party penetration testing and security reviews of its platform infrastructure to identify and remediate vulnerabilities proactively.

Despite these measures, no internet-based system can be guaranteed to be completely immune from security incidents. In the event of a personal data breach that is likely to result in risk to your rights or freedoms, zh999 will notify affected players and relevant regulatory authorities in accordance with applicable incident response obligations.

zh999 respects and upholds your rights in relation to your personal data. The following rights are available to all zh999 players in connection with their personal data:

• Right of Access: You have the right to request a copy of the personal data that zh999 holds about you. zh999 will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data held by zh999 about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as address updates) can be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that zh999 may be unable to fulfil erasure requests where retention is required by applicable regulatory obligations — such as AML record-keeping requirements.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that zh999 restrict the processing of your personal data — for example, while a rectification request is being investigated.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where zh999 relies on legitimate interests as its legal basis, including profiling for responsible gaming purposes. zh999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to zh999 by email at [email protected] with the subject line "Data Rights Request." zh999 will acknowledge your request within 5 business days and provide a full response within 30 calendar days. zh999 reserves the right to verify your identity before processing any data rights request.

The zh999 Platform is strictly intended for adults aged 18 years and older. zh999 does not knowingly collect, process, or retain personal data from any individual under the age of 18. Age verification is a mandatory step in the zh999 account registration and KYC process, and zh999 employs additional automated checks to detect and prevent underage access.

If zh999 becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all funds will be returned via the original payment method, and all associated personal data will be securely deleted in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered an account on zh999 without your knowledge or consent, please contact zh999 immediately at [email protected] so that the matter can be investigated and resolved without delay.

zh999 operates as an international online casino and sports betting platform. As a result, personal data collected from Pakistani players may be transferred to, stored, and processed in countries outside of Pakistan, including countries where zh999's cloud infrastructure, KYC providers, and game content providers are located.

zh999 takes all reasonable steps to ensure that any international transfer of personal data is carried out with appropriate safeguards in place to protect your data to a standard at least equivalent to the protections described in this Policy. These safeguards may include:

• Transferring personal data only to countries or organisations that maintain adequate data protection standards as recognised by international frameworks.
• Entering into data processing agreements with all third-party processors that include binding data protection obligations and, where appropriate, standard contractual clauses.
• Conducting due diligence on all third-party processors before onboarding, and reviewing their data protection practices on a periodic basis.

By using the zh999 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

zh999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or the way in which zh999 operates and processes personal data. The most current version of this Policy will always be available at zh999.bet/privacy-policy.

Where zh999 makes a material change to this Policy — meaning a change that significantly affects your rights or the way in which zh999 processes your personal data — zh999 will provide advance notice by email to your registered address and/or by a prominent notice within the zh999 Platform at least 14 days before the change takes effect.

Your continued use of the zh999 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any updates to this Policy, you must stop using the zh999 Platform and may request account closure by contacting zh999 support.

The version date at the top of this Policy indicates when it was last reviewed and updated. Previous versions of this Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way zh999 processes your personal data, please contact zh999's Data Protection team using the details below. All privacy-related communications are handled in strict confidence.

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Response Time: zh999 aims to acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 calendar days.
• Support: For urgent account security concerns, zh999 customer support is available via live chat on the platform 24 hours a day, 7 days a week, including on Pakistani public holidays and during major events such as PSL season and Eid.

zh999 takes all privacy concerns seriously. If you are not satisfied with zh999's response to a privacy complaint, you have the right to escalate the matter to the relevant regulatory authority in your jurisdiction.