z999k Privacy Policy — How We Protect Your Personal Data

z999k operates the online gaming and betting platform accessible at z999k.ws. For the purposes of this Privacy Policy, z999k is the data controller — meaning we determine the purposes for which and the manner in which your personal data is processed. If you have any questions about how your data is handled, you can contact our dedicated privacy team at any time via the details in Section 15.

z999k is a platform built specifically for Pakistani players. Our payment infrastructure, customer support team and technical operations are oriented around serving users in Pakistan. We process data in accordance with applicable data protection principles and the specific obligations that arise from operating a regulated online gaming service.

z999k collects only the personal data that is genuinely necessary to provide our services, verify your identity, process your transactions and comply with our legal obligations. We do not collect data we do not need.

The categories of personal data we collect are set out in the table below:

z999k does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information or biometric data except where specifically required by law or with your explicit consent.

z999k collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit a verification document, contact our support team, fill in your account profile, set responsible gaming limits or participate in a promotion.
• Automatically during platform use — our servers log technical data (IP address, device identifiers, session information) every time you connect to z999k. This data is collected to maintain platform security and to detect unusual activity.
• Through payment processors — when you make a deposit or request a withdrawal, our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard processors) return confirmation data to z999k. This confirmation data is limited to what is necessary to reconcile your account — full card numbers or wallet credentials are never transmitted to or stored by z999k.
• Through cookies and tracking technologies — see Section 8 for a detailed explanation of how z999k uses cookies.
• From identity verification partners — where verification of your CNIC or other documents is required, z999k may use a specialist third-party identity verification service. These services return only a verified/not-verified result and a risk score — the document data itself is not retained by z999k beyond the verification window.

z999k uses personal data for clearly defined purposes. We do not use your data for purposes that go beyond what is set out here without giving you prior notice and, where required, obtaining your consent.

• To create and manage your account — identity data and contact data are used to set up your z999k account, verify that you meet eligibility requirements and keep your account secure.
• To process deposits and withdrawals — financial data and transaction data are used to process your PKR transactions through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment channels.
• To provide betting and gaming services — transaction and usage data are used to display your bet history, track your game progress, calculate and pay out winnings and manage your bonus balance.
• To comply with anti-money laundering (AML) obligations — identity, financial and transaction data are used to screen accounts against AML risk thresholds and report suspicious transactions where required.
• To support responsible gaming — usage and transaction data are used to monitor for patterns of behaviour consistent with problem gambling and to enforce the deposit limits, session limits and self-exclusion settings you have configured.
• To provide customer support — communications data is used to respond to your queries, resolve complaints and improve our support processes.
• To maintain platform security — technical data is used to detect and prevent fraud, hacking, account sharing and other security threats.
• To send marketing communications — where you have opted in, contact data is used to send you information about relevant z999k promotions, new game launches and special offers. You can opt out at any time — see Section 12.
• To improve the platform — anonymised and aggregated usage data is used to understand how players interact with z999k and to prioritise product improvements.

z999k processes your personal data on one or more of the following legal bases depending on the purpose:

• Contract performance — processing that is necessary to deliver the services you have agreed to when creating your z999k account, including account management, payments and game provision.
• Legal obligation — processing required to comply with AML regulations, responsible gaming obligations, age verification requirements and any other applicable legal duty.
• Legitimate interest — processing for the purposes of fraud prevention, platform security, improving the product and direct marketing to existing customers where you have not opted out. z999k conducts a legitimate interest assessment for each such use case.
• Consent — processing for the purpose of sending promotional marketing communications to new users or by channels where consent is required. You may withdraw this consent at any time.

z999k does not sell your personal data to third parties. Ever. We share data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banks and card network processors receive the minimum data required to process your deposit or withdrawal.
• Identity verification partners — third-party KYC services receive document images for the purpose of verifying your identity. These providers are contractually required to delete the document data after verification is complete.
• Game providers — where you play a game provided by a licensed third-party game studio (e.g., a live casino feed), that provider may receive your player identifier and game session data for the purpose of delivering and reconciling the game. They do not receive your full identity or financial data.
• Technology and hosting providers — cloud infrastructure, cybersecurity and analytics services that support the technical operation of z999k receive anonymised or pseudonymised data under strict data processing agreements.
• Regulatory and law enforcement authorities — z999k will disclose personal data to government authorities, law enforcement agencies or regulators where required to do so by law or in response to a valid legal process.

Your financial security is a top priority at z999k. When you deposit or withdraw via Easypaisa or JazzCash, the transaction is processed entirely within the respective payment provider's secure infrastructure. z999k receives only a confirmation reference and transaction amount — your mobile wallet PIN, OTP or account credentials are never transmitted to or stored by z999k at any point.

When you pay by Visa or Mastercard, your card details are entered directly into a PCI DSS-compliant payment gateway. z999k stores only the card type (Visa or Mastercard) and the last four digits of the card number for display purposes in your transaction history. The full card number, CVV and expiry date are never stored on z999k servers.

For bank transfers via IBFT, z999k stores the bank name and account number provided by you for the purpose of processing your withdrawal. This information is retained for the duration required by AML record-keeping obligations and then deleted.

z999k uses cookies and similar tracking technologies to make the platform work properly, keep your session active and understand how players use the site so we can improve it. Here is a clear breakdown of the cookies we use:

• Strictly necessary cookies — these are required for the platform to function. They keep you logged in between pages, remember your currency preference and maintain your bet slip. These cookies cannot be disabled without breaking the platform.
• Analytics cookies — these collect anonymised data about how players navigate z999k — which pages they visit, how long they spend and where they exit. This data is used in aggregate form to improve the platform. No personally identifiable information is contained in these cookies.
• Preference cookies — these remember your settings such as language preference, odds format and notification preferences so you do not have to reconfigure them every visit.
• Marketing cookies — these are used where you have consented to receive personalised promotional communications. They help z999k understand which promotions are relevant to your interests. These cookies can be declined via your account preferences without affecting your ability to use the platform.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling cookies beyond strictly necessary ones may affect the functionality of certain z999k features.

z999k retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account data — retained for the duration of your active z999k account plus 5 years after account closure. This retention period satisfies AML record-keeping requirements.
• Transaction data — retained for 7 years from the date of each transaction in accordance with financial record-keeping obligations.
• Identity verification documents — retained for 5 years following account closure or the last transaction, after which they are securely deleted.
• Customer support communications — retained for 3 years from the date of the communication, to allow for complaint escalation and dispute resolution.
• Marketing data — retained until you withdraw consent or opt out of marketing communications, at which point it is deleted within 30 days.
• Technical log data — retained for 12 months for security monitoring purposes and then automatically purged.

When a retention period expires, z999k deletes the relevant data securely. Where deletion is not technically feasible (e.g., in backup archives), the data is isolated and protected until deletion becomes possible.

z999k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and z999k servers.
• Encryption at rest for all databases containing personal data.
• Two-factor authentication (2FA) available on all z999k accounts and mandatory for all staff with data access.
• Role-based access controls ensuring that staff members can only access the data necessary for their specific function.
• Real-time intrusion detection and 24/7 security monitoring of all platform infrastructure.
• Regular penetration testing conducted by independent cybersecurity specialists.
• Strict supplier vetting — all third-party data processors are assessed for security standards before engagement.

Despite these measures, no online platform can guarantee absolute security. If you discover or suspect a security breach affecting your z999k account, contact our support team immediately via live chat or at support@z999k.ws. In the event of a data breach that poses a risk to your rights, z999k will notify affected users promptly.

As a z999k player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our privacy team at support@z999k.ws or via live chat. We will respond within 30 days:

z999k may send you promotional communications about new games, cricket betting markets, PSL promotions, bonus offers and platform updates. We will only do this where you have opted in to marketing communications during registration or subsequently through your account settings.

You can opt out of marketing communications at any time by updating your preferences in your z999k account settings, clicking the unsubscribe link in any marketing email, or contacting our support team directly. Opting out does not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications and account security alerts — these are sent regardless of marketing preferences because they are necessary for account management.

z999k does not share your contact details with third-party marketers. Any promotional communication you receive will be from z999k directly, about z999k services.

z999k is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the z999k registration process, and accounts are subject to age checks at any point if there is any reason to believe the holder may be underage.

If z999k becomes aware that personal data has been collected from a person under 18 years of age, that data will be deleted immediately, the account will be closed and any funds remaining in the account will be returned to the deposit source. If you believe that z999k may have inadvertently collected data from a minor, please contact our privacy team immediately at support@z999k.ws.

z999k may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or platform features. When we make material changes, we will notify you via email or a prominent notice on the z999k platform at least 7 days before the changes take effect.

The date of the most recent update is always displayed at the top of this page. We recommend reviewing this policy periodically. Your continued use of z999k after the effective date of any change constitutes acceptance of the updated policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the way z999k handles your personal data, please contact our privacy team using any of the following methods:

• Email — support@z999k.ws — privacy queries responded to within 5 business days.
• Live Chat — available 24/7 within your logged-in z999k account. First response time under 3 minutes for VIP members, under 10 minutes for all other accounts.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.