ZS 999 Privacy Policy — How We Protect Your Data

This Privacy Policy describes how zs 999 — operating at zs999.life — collects, stores, uses and protects the personal information of players registered on our platform. When you create an account at zs 999, deposit funds, play games or contact our support team, you share information with us. This policy explains exactly what that information is and what we do with it.

ZS 999 is committed to handling your data responsibly and transparently. We operate primarily for Pakistani players, and we understand that trust in how your personal and financial information is managed is foundational to your experience with zs 999. This policy is written in plain language because we want you to actually understand it, not just tick a box.

If you have questions about anything in this Privacy Policy, you can reach us at support@zs999.life at any time. Our support team handles data queries in both Urdu and English 24/7.

ZS 999 collects only the personal data that is necessary to operate your account, process your transactions and provide a safe gaming environment. We do not collect data speculatively or beyond what is needed. The categories of data we collect are as follows:

• Identity data: Your full name, date of birth and CNIC number, collected during registration and identity verification to confirm your age and eligibility to play at zs 999.
• Contact data: Your Pakistani mobile number and email address, used to manage your account, send transaction notifications and respond to support queries.
• Financial data: Payment method identifiers — such as your Easypaisa or JazzCash account number, or the last four digits of a registered bank card — used to process deposits and withdrawals in PKR.
• Gaming activity data: Your bet history, game sessions, deposit and withdrawal history, bonus usage and win/loss records on zs 999, used to operate your account and comply with anti-money laundering obligations.
• Technical data: Your IP address, device type, browser version, operating system and session duration, collected automatically when you access zs 999 to support security monitoring and platform optimisation.
• Communications data: Records of support conversations, emails or live chat messages you send to zs 999, retained for quality assurance and dispute resolution purposes.
• Verification documents: Copies of identity documents you submit during the KYC (Know Your Customer) process, stored securely and used only for account verification.

ZS 999 does not collect sensitive personal data such as biometric identifiers, health records or religious affiliation. We collect the minimum data required to operate a safe, compliant gaming platform for Pakistani players.

Every piece of data collected by zs 999 is used for a specific, legitimate purpose. We do not use your data in ways that are inconsistent with the reason it was originally collected. The primary purposes for which zs 999 uses your personal information are outlined below.

• Account management: Your name, mobile number and date of birth are used to create, maintain and verify your zs 999 account. This is the core operational use of your identity data.
• Payment processing: Financial data is used exclusively to process deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and bank cards. We share only the minimum necessary payment data with our payment processing partners.
• Fraud prevention and AML compliance: Gaming activity data and technical data are analysed to detect suspicious patterns, prevent fraud, identify potential money laundering activity and protect the integrity of the zs 999 platform and its players.
• Responsible gaming: ZS 999 monitors gaming activity patterns to identify players who may be exhibiting signs of problem gambling. This is done to fulfil our responsible gaming commitments and, where necessary, to reach out to players proactively.
• Customer support: Communications data is used to respond to your queries, resolve disputes and improve the quality of our support service at zs 999.
• Platform improvement: Aggregated, anonymised technical data is used to understand how players interact with zs 999, identify performance issues and prioritise development improvements. Individual player behaviour is not used for this purpose in an identifiable form.
• Legal compliance: ZS 999 may use or disclose your data where required by applicable law, court order or regulatory demand.

ZS 999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your identity, contact and financial data is necessary to fulfil the contract between you and zs 999 — without this data, we cannot operate your account, process your PKR deposits or pay your winnings.
• Legitimate interests: We process technical data and gaming activity data on the basis of our legitimate interests in fraud prevention, platform security, anti-collusion monitoring in poker and responsible gaming oversight.
• Legal obligation: ZS 999 processes identity and financial data where required to comply with anti-money laundering obligations, including KYC verification and transaction monitoring.
• Consent: Where zs 999 sends optional communications — such as promotional updates or bonus notifications — we do so only on the basis of your explicit consent, which you can withdraw at any time from your account settings.

ZS 999 does not sell your personal data. We share your information only with specific categories of trusted third parties where it is necessary to operate the platform, and only to the minimum extent required. The third parties with whom zs 999 may share data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive only the transaction data necessary to process your PKR deposits and withdrawals. They do not receive your gaming activity or full identity records.
• Identity verification providers: During the KYC process, your identity documents may be processed by a third-party verification service operating under strict data protection and confidentiality obligations.
• Game software providers: Technical session data may be shared with our game providers to facilitate gameplay and resolve technical disputes. No personally identifiable information beyond a session token is shared.
• Regulatory and law enforcement authorities: ZS 999 will disclose data to government or regulatory bodies where compelled to do so by applicable law or valid legal process.

ZS 999 uses cookies and similar browser storage technologies to operate the platform and improve the player experience. When you access zs999.life, your browser receives cookies from our servers. These fall into the following categories:

• Essential cookies: Required to keep you logged in to your zs 999 account, remember your session state and secure your connection during gameplay. These cannot be disabled without breaking the platform functionality.
• Functional cookies: Store your preferences — such as language settings, preferred game lobby view and notification preferences — so that your zs 999 experience is consistent across visits.
• Analytics cookies: Used by zs 999 in anonymised, aggregated form to understand which features players use most and to prioritise platform improvements. No individual player is identified through analytics data.
• Security cookies: Used to detect and prevent fraud, bot activity and account takeover attempts on zs 999.

ZS 999 does not use third-party advertising cookies or allow any external ad network to place tracking pixels on our platform. You can manage cookie settings through your browser, though disabling essential cookies will affect your ability to access your account.

ZS 999 applies multiple layers of technical and operational security to protect your personal and financial data. Security is not treated as a compliance box — it is an ongoing operational priority because we know that a single data breach can have serious consequences for our players and for trust in the platform.

• All data in transit between your device and zs 999 servers is encrypted using 256-bit SSL/TLS encryption — the same standard used by major banks.
• Stored data — including identity documents, payment records and gaming history — is encrypted at rest on our servers.
• Access to player data within zs 999 is restricted to staff who require it to perform their specific function. All internal access is logged and audited.
• ZS 999 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Payment data is processed through PCI-DSS compliant payment processors. ZS 999 itself does not store full card numbers.

Despite our best efforts, no internet platform can guarantee absolute security. If you believe your zs 999 account has been accessed without your authorisation, please contact support immediately and change your password.

ZS 999 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The specific retention periods we apply are as follows:

• Account data: Retained for the duration of your active account at zs 999 plus a minimum of five years after account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction, in accordance with financial compliance requirements.
• Identity verification documents: Retained for five years after the last transaction or account closure, whichever is later.
• Support communications: Retained for two years after the conversation closes, used for quality assurance and dispute reference.
• Technical and analytics data: Retained in anonymised, aggregated form indefinitely for platform improvement purposes. Personally identifiable technical logs are purged after 12 months.

After the applicable retention period ends, zs 999 will securely delete or anonymise your personal data so that it can no longer be linked back to you. If you request account closure, we will begin the deletion process for non-legally-required data within 30 days of the request.

As a player registered at zs 999, you have specific rights over your personal data. These rights can be exercised at any time by contacting us at support@zs999.life. ZS 999 will respond to all data rights requests within 30 days.

• Right of access: You can request a copy of all personal data zs 999 holds about you, including your gaming history, identity records and payment data.
• Right to correction: If any of the information zs 999 holds about you is inaccurate or incomplete, you can request that we correct it. For changes to mobile numbers or name records, identity verification may be required.
• Right to deletion: You can request that zs 999 delete your personal data. We will comply to the extent that the data is not required to be retained under legal or regulatory obligations. Data required for AML compliance cannot be deleted ahead of the applicable retention period.
• Right to restrict processing: You can ask zs 999 to restrict how we process your data in specific circumstances — for example, while we investigate a correction request.
• Right to object: You can object to processing that is based on legitimate interests. ZS 999 will review the objection and cease processing unless we can demonstrate a compelling overriding reason.
• Right to withdraw consent: Where you have given consent for optional communications, you may withdraw that consent at any time through your account settings without affecting the lawfulness of processing that occurred before withdrawal.

ZS 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Every registration on zs 999 requires a date of birth to be submitted, and accounts where the declared age falls below 18 are blocked at the point of registration.

If a parent or guardian believes that a minor has registered at zs 999 and has personal data stored on our platform, please contact us immediately at support@zs999.life. We will investigate the matter promptly and, if confirmed, delete all associated data and close the account without delay.

ZS 999 may update this Privacy Policy from time to time to reflect changes in how we collect or use data, updates to our platform features, changes in applicable legal requirements or improvements in our data protection practices.

When we make material changes to this policy, we will update the date at the top of the page and, where practically feasible, notify active players via their registered mobile number or account notification. For minor updates, the revised policy will be published on this page without individual notification.

Continuing to use zs 999 after a policy update has been published constitutes your acceptance of the revised terms. If you do not agree with the changes, you are entitled to close your account and withdraw your balance at any time.

If you have any questions about this Privacy Policy, want to exercise any of your data rights or need to report a potential data concern, please contact the zs 999 support team. We handle all privacy and data queries directly — there is no separate data protection department — and we aim to respond within one business day for data rights requests.

• Email: support@zs999.life
• Live chat: available from your logged-in zs 999 account dashboard, 24/7
• Language: we handle data queries in both English and Urdu

For concerns about responsible gaming or self-exclusion that relate to data processing, please visit the Responsible Gaming page. For general account queries unrelated to data rights, our support team is available at any hour.