zy999 Privacy Policy

zy999 is Pakistan's premier online casino and sports betting platform, accessible at zy999.bet. zy999 is committed to protecting the privacy and personal data of every player who registers, deposits, places a bet, or simply browses the Platform — whether they are connecting from Karachi, Lahore, Islamabad, Faisalabad, Peshawar, or anywhere else across Pakistan.

This Privacy Policy describes how zy999 collects, uses, stores, shares, and protects your personal information in connection with your use of the zy999 Platform. It also explains the rights you hold over your personal data and the channels through which you may exercise those rights.

This Policy should be read together with the zy999 Terms and Conditions and the zy999 Responsible Gaming Policy, both of which are incorporated by reference. Defined terms used in this Policy carry the same meaning as in the zy999 Terms and Conditions unless otherwise specified here.

For the purposes of applicable data protection law, zy999 acts as the data controller in respect of the personal data it collects from players through the zy999 Platform. As data controller, zy999 is responsible for determining the purposes and means by which your personal data is processed.

zy999 operates under an international gaming licence. Specific licensing and corporate registration details are available upon written request submitted via the zy999 support channels listed in Section 14 of this Policy.

zy999 collects the following categories of personal data from players:

zy999 does not collect or process any special categories of personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless specifically required by applicable regulatory or legal obligations and only with your explicit consent where such consent is required by law.

zy999 collects personal data through the following primary channels:

• Direct Provision: Data you provide directly when registering your zy999 account, completing KYC verification, depositing or withdrawing funds via JazzCash, EasyPaisa, or linked banking services, contacting zy999 support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the zy999 Platform, including through cookies, server logs, and session tracking technologies described in Section 9.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, financial crime screening databases, and payment processors as part of zy999's anti-money laundering and player protection obligations.

zy999 does not purchase personal data from data brokers or obtain personal data from social media platforms without your explicit consent.

zy999 processes your personal data only where a lawful basis exists. The table below sets out each processing purpose, the data categories involved, and the applicable legal basis:

zy999 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum financial data necessary to process PKR deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Third-party identity verification services receive your Identity Data for the purpose of age verification (21+), CNIC validation, and sanctions screening as required by zy999's licensing obligations.
• Fraud & AML Screening Services: Financial crime databases and screening tools receive transaction-level data to detect and prevent money laundering, fraud, and related offences.
• Platform Technology Providers: Software providers whose games or systems operate within the zy999 Platform may receive anonymised or pseudonymised usage data for game analytics and performance monitoring purposes.
• Regulatory & Law Enforcement Authorities: zy999 will disclose personal data to competent regulatory or law enforcement bodies where required to do so by applicable law, court order, or zy999's international gaming licence conditions.
• Professional Advisors: zy999's legal, audit, and compliance advisors may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third-party data processors engaged by zy999 are subject to written data processing agreements that require them to: (a) process data only on zy999's documented instructions; (b) implement appropriate technical and organisational security measures; and (c) assist zy999 in responding to player rights requests.

As an internationally licensed gaming platform, zy999 may process or store your personal data on servers located outside Pakistan. Where data is transferred internationally, zy999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards employed by zy999 for international transfers include:

• Data processing agreements incorporating internationally recognised standard contractual clauses.
• Transfer only to jurisdictions or organisations that zy999 has assessed as providing an adequate level of data protection.
• Technical controls including encryption in transit and at rest, irrespective of the jurisdiction in which data is stored.

zy999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The table below sets out zy999's standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

zy999 uses cookies and similar tracking technologies on the zy999 Platform. A cookie is a small text file placed on your device when you visit a website. zy999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable session management, login state, and fraud prevention. They cannot be disabled without affecting the usability of zy999 features. No consent is required for these cookies.
• Analytics Cookies: Used to understand how players interact with the zy999 Platform, including which pages are visited, how long sessions last, and where players exit. Data collected is aggregated and anonymised. Requires opt-in consent.
• Functionality Cookies: Remember your preferences — such as language settings and responsible gaming limits — to personalise your zy999 experience. Requires opt-in consent.
• Responsible Gaming Cookies: Track session duration and wagering totals locally to enable real-time responsible gaming alerts. These are classified as strictly necessary given zy999's licensing obligations.

zy999 does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies without your explicit consent. You may manage your cookie preferences at any time via the zy999 cookie preference centre, accessible from the footer of every zy999 page. Withdrawing consent for non-essential cookies will not affect your ability to play or transact on zy999.

zy999 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Security measures in place include:

• TLS 1.3 encryption for all data in transit between your device and zy999 infrastructure.
• AES-256 encryption for sensitive data fields stored at rest, including identity documents and payment references.
• Role-based access controls ensuring that zy999 staff can only access personal data to the extent required by their specific job function.
• Automated anomaly detection and real-time monitoring of all access to player data systems.
• Regular third-party penetration testing of the zy999 Platform and supporting infrastructure.
• Strict vendor due diligence for all third-party processors who handle player data on zy999's behalf.

Despite these measures, no system is completely immune to security risks. In the event of a data breach that poses a risk to your rights and freedoms, zy999 will notify affected players and relevant authorities in accordance with applicable law without undue delay.

As a zy999 player, you hold the following rights over your personal data. To exercise any of these rights, please contact zy999 via live chat or at the email address in Section 14. zy999 will respond to all verified requests within 30 calendar days:

• Right of Access: You may request a copy of the personal data zy999 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request that zy999 correct any inaccurate or incomplete personal data held in your account profile.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to zy999's legal retention obligations (see Section 8).
• Right to Restriction: You may request that zy999 restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that zy999 provide your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to Object: You may object to processing based on zy999's legitimate interests or for direct marketing purposes at any time. zy999 will cease such processing unless compelling legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The zy999 Platform is strictly intended for adults aged 21 years and over in accordance with zy999's international licensing standards. zy999 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

As part of the zy999 registration process, all players are required to confirm their date of birth and submit valid identity documentation for KYC verification. Where zy999 has reasonable grounds to believe that a player is under the age of 21, the relevant account will be suspended pending verification, and any funds deposited by an underage player will be returned in accordance with zy999's Terms and Conditions.

If you believe that a minor has registered an account on zy999 or that personal data relating to a minor has been submitted to zy999 without appropriate consent, please contact zy999 support immediately via live chat or the email address listed in Section 14. zy999 will investigate and take appropriate action, including deletion of any personal data found to relate to an individual under the minimum age requirement.

zy999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, zy999's data processing practices, or the features and services offered on the zy999 Platform. The "Last Updated" date at the top of this Policy will be revised each time a substantive change is made.

Where a change to this Policy materially affects the way zy999 processes your personal data, zy999 will notify registered players by email or via an in-platform notification prior to the change taking effect. For non-material changes — such as corrections to typographical errors or clarifications that do not alter the substance of any section — zy999 may update the Policy without advance notice.

Your continued use of the zy999 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Policy, you should cease using the zy999 Platform and may request account closure via the zy999 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zy999 handles your personal data, please contact the zy999 Data Privacy team through any of the following channels:

• Live Chat: Available 24/7 directly from the zy999 Platform — the fastest way to reach the support team for privacy-related queries.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username to assist zy999 in locating your records.

zy999 aims to acknowledge all privacy-related correspondence within 3 business days and to provide a substantive response within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, zy999 may extend this period by a further 30 days and will notify you accordingly.