Privacy Policy

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "zp999", "we", "us", "our" — the operator of the zp999 platform at zp999.pro and all associated sub-domains.
• "Player", "you", "your" — any individual who visits the zp999 platform, registers an account, or otherwise provides personal data to zp999.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers, and behavioural data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer verification procedures, including identity documentation and proof of age.
• "Platform" — the zp999 website, mobile browser interface, and all services accessible thereon.
• "Third Party" — any entity other than you and zp999, including payment processors, game providers, and regulatory bodies.

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by zp999 in connection with the operation of the zp999 platform, including data collected from:

• Visitors who browse the zp999 website without registering an account.
• Individuals who initiate but do not complete the zp999 account registration process.
• Registered account holders using the Platform for gaming, betting, or any other purpose.
• Individuals who contact zp999 support via live chat or email.

This Policy should be read alongside the zp999 Terms & Conditions, which govern the contractual relationship between you and zp999. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

3 Data We Collect

zp999 collects Personal Data in the following categories. The specific data collected depends on how you interact with the Platform:

zp999 does not knowingly collect sensitive personal data beyond what is necessary for identity verification (such as CNIC details). We do not collect biometric data, health data, religious affiliation, or political views.

4 How We Use Your Data

zp999 uses the Personal Data described above for the following purposes:

• Account Administration: Creating, maintaining, and managing your zp999 account, including processing your registration, verifying your identity, and maintaining accurate account records.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, processing withdrawal requests, and maintaining transaction records.
• Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming licence conditions, including reporting obligations to regulatory bodies where required by law.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other prohibited conduct as described in the zp999 Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, administering player-requested responsible gaming tools such as deposit limits and self-exclusion, and fulfilling our duty of care obligations.
• Customer Support: Responding to your enquiries, complaints, and support requests via live chat and email, and maintaining records of support interactions.
• Platform Improvement: Analysing aggregated and anonymised behavioural data to improve game offerings, platform performance, and user experience. This analysis does not involve selling data to third parties.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw your marketing consent at any time via account settings or by contacting support.
• Legal Proceedings: Establishing, exercising, or defending legal claims in any jurisdiction where zp999 operates.

5 Legal Basis for Processing

zp999 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and zp999 — principally, operating your account, processing payments in PKR, and providing access to games and sportsbook markets.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML regulations, KYC requirements, tax reporting, and gaming licence conditions.
• Legitimate Interests: Processing carried out for zp999's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, and improving the player experience. We conduct a balancing assessment before relying on this basis.
• Consent: Processing based on your freely given, informed, and specific consent — principally the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

zp999 does not sell your Personal Data. We may share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other approved payment processor receive the financial data necessary to execute deposit and withdrawal transactions. These providers process your data under their own privacy policies and are subject to applicable financial sector regulations.
• Game and Platform Providers: Third-party game software providers (including live dealer studios and slot developers) may receive anonymised session and game-play data necessary to deliver their games on the zp999 platform. These providers are contractually bound to use such data only for the stated purpose.
• Identity Verification Services: KYC verification may be assisted by specialist third-party identity verification providers who process documentary evidence (such as CNIC scans) on our behalf, subject to strict confidentiality obligations.
• Regulatory and Law Enforcement Authorities: zp999 may disclose Personal Data to regulators, law enforcement bodies, or courts where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, zp999 will notify affected players before making such disclosures.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by zp999 may access Personal Data on a strictly confidential, need-to-know basis in connection with the services they provide to us.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of zp999's business, Personal Data held by zp999 may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy with respect to such data. Affected players will be notified of any such transfer.

7 Cookies & Tracking Technologies

zp999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow us to understand how it is used. The following categories of cookies are employed:

• Strictly Necessary Cookies: Essential for the Platform to operate — including session management, authentication, and security functions. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your experience across sessions.
• Analytical Cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance and is not linked to identifiable individuals.
• Fraud Detection Cookies: Assist in identifying and preventing fraudulent account activity, including detecting multiple account registrations from the same device.

zp999 does not use third-party advertising cookies or tracking pixels that would allow external advertisers to profile your browsing behaviour across websites.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the Platform. Blocking other categories will not prevent access but may reduce the quality of your experience.

8 Data Security

zp999 implements a layered approach to data security, combining technical controls, operational procedures, and staff training. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and zp999 servers is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Personal Data and financial records stored on zp999 infrastructure are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted to zp999 personnel and contractors who require it to perform their job functions. Access is governed by role-based permissions and logged for audit purposes.
• Security Monitoring: zp999 systems are monitored continuously for intrusion attempts, unusual access patterns, and other security anomalies. Automated alerts escalate detected threats for immediate investigation.
• Incident Response: zp999 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, zp999 will notify affected players and relevant authorities in accordance with applicable obligations.

While zp999 employs robust security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying zp999 immediately if you suspect unauthorised access to your account.

9 Data Retention

zp999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of the account's active status plus a post-closure period required by our gaming licence and AML obligations (typically five to seven years following account closure).
• Transaction and Financial Records: Retained for a minimum of five years following the relevant transaction date, as required by applicable anti-money-laundering record-keeping standards.
• KYC and Identity Documents: Retained for the duration of the account relationship and for a minimum of five years following account closure, to comply with regulatory requirements.
• Support Communications: Retained for three years from the date of the last interaction, unless related to an unresolved dispute or legal matter, in which case records are retained until the matter is fully resolved.
• Technical and Behavioural Data: Retained in identifiable form for up to two years, after which data is anonymised or deleted. Anonymised analytical data may be retained indefinitely.
• Marketing Preferences: Retained until you withdraw your marketing consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to backup system architecture, data is quarantined from active use and deleted at the next scheduled purge cycle.

10 Your Rights

As a zp999 player, you hold the following rights in respect of your Personal Data. To exercise any right, please contact our support team via live chat or email at [email protected]:

11 Children's Privacy

The zp999 platform is strictly restricted to persons aged 21 years or older. zp999 does not knowingly collect Personal Data from individuals under the age of 21. Registration by minors is prohibited under the zp999 Terms & Conditions, and any account discovered to be held by a person under 21 will be immediately closed.

If you have reason to believe that a minor has registered an account with zp999 or provided Personal Data to zp999 without authorisation, please contact our support team immediately at [email protected]. zp999 will investigate the matter promptly and delete any Personal Data confirmed to relate to a minor, subject to any legal retention obligations that may apply.

12 International Data Transfers

zp999 operates under an international gaming licence and may process or store Personal Data on infrastructure located outside Pakistan. Where Personal Data is transferred to jurisdictions that do not provide a level of data protection equivalent to internationally recognised standards, zp999 implements appropriate safeguards to protect your data, including:

• Contractual data protection clauses binding the recipient to obligations equivalent to those set out in this Privacy Policy.
• Selecting third-party providers who are certified under recognised international data protection frameworks.
• Conducting due diligence on the data protection practices of all third-party processors before engaging their services.

By using the zp999 platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan in accordance with the safeguards described above.

13 Amendments to This Policy

zp999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes to this Policy will be communicated to registered players via the email address associated with their account and/or via an in-platform notification, at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will be revised whenever the Policy is amended. We recommend reviewing this Policy periodically. Continued use of the zp999 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept an amendment, you should close your account and cease using the Platform before the amendment takes effect.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way zp999 handles your Personal Data, please contact our dedicated support team through the following channels:

• Live Chat: Available 24/7 directly on the zp999 platform. Peak staffing hours are 09:00–01:00 PKT for the fastest response.
• Email: [email protected]

zp999 commits to acknowledging all privacy-related complaints within 3 business days and providing a substantive response within 21 days of receipt. Where a complaint is complex or requires investigation, we will keep you informed of progress throughout the process.

If you are not satisfied with zp999's response to your privacy complaint, you may have the right to escalate your complaint to the data protection authority or gaming regulator applicable in your jurisdiction, or to the dispute resolution body prescribed under our international gaming licence.