za999 Privacy
Policy

1. Who We Are

za999 is an online casino and sports betting platform operating at za999.one and serving players primarily across Pakistan, including Karachi, Lahore, Faisalabad, and Islamabad. References to "za999", "we", "us", or "our" in this Privacy Policy refer to the operator entity responsible for the Platform and for the processing of personal data described herein.

za999 operates under an international gaming licence and is committed to meeting the data protection obligations applicable under that regulatory framework. This Privacy Policy is designed to meet internationally recognised standards of transparency and fair processing, including principles consistent with the General Data Protection Regulation (GDPR) where applicable.

For all privacy-related enquiries, our Data Protection contact can be reached at [email protected]. All formal data subject requests will be acknowledged within 48 hours and fully processed within 30 calendar days.

2. Data We Collect

za999 collects personal data through several channels, including direct registration, payment processing, platform usage, and customer support interactions. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as per CNIC or passport;
• Date of birth (for age verification — players must be 21 or older);
• Residential address (city, province, postal code);
• Email address;
• Pakistani mobile number linked to your account and/or payment wallet.

2.2 KYC Verification Data

• Scanned copy or photograph of CNIC (Computerised National Identity Card) or valid passport;
• Proof of address documentation (utility bill, bank statement, or equivalent);
• Proof of payment method ownership where applicable.

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers (e.g. last four digits of a linked HBL or UBL account, or JazzCash/EasyPaisa registered number);
• Transaction reference numbers and payment processor confirmation codes;
• Account balance history for audit and compliance purposes.

2.4 Technical & Usage Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Session duration, pages visited, and game history;
• Clickstream data and navigation patterns used to improve platform usability.

2.5 Communications Data

• Records of live chat, email, and support ticket interactions;
• Feedback, complaints, and survey responses submitted through the Platform;
• Promotional preference settings and marketing consent records.

3. How We Use Your Data

za999 processes personal data for clearly defined and legitimate purposes. We do not use your data in any manner that is incompatible with the purposes for which it was originally collected. The primary purposes are:

4. Legal Basis for Processing

Every data processing activity conducted by za999 is grounded in one or more of the following recognised legal bases:

• Contractual necessity: Processing required to fulfil the Player Account agreement — including account management, payments, and KYC — is necessary for the performance of our contract with you;
• Legal obligation: Processing required to comply with applicable anti-money-laundering, age verification, and gaming regulatory requirements;
• Legitimate interests: Processing for fraud detection, platform security, and service analytics where such interests are not overridden by your privacy rights;
• Consent: Processing for optional marketing communications and non-essential cookies, which requires your explicit opt-in and may be withdrawn at any time.

5. Data Sharing & Disclosure

za999 does not sell, rent, or otherwise commercially distribute your personal data to third parties. Personal data is shared only in the following strictly limited circumstances:

5.1 Payment Processors

Transaction data is shared with authorised payment service providers — including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy frameworks and applicable Pakistani financial regulations.

5.2 KYC and Identity Verification Providers

Where automated identity verification is used, your CNIC or passport data may be processed by a third-party KYC verification partner operating under a data processing agreement with za999. Such partners may not use your data for any purpose beyond identity verification.

5.3 Gaming Software Providers

Game round data and limited account identifiers may be shared with licensed game software providers to enable gameplay, resolve disputes, and ensure RNG audit compliance. No full identity data is shared with game providers.

5.4 Regulatory and Law Enforcement Authorities

za999 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be documented and, where legally permissible, you will be notified.

6. Cookies & Tracking Technologies

za999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that help us remember your session, preferences, and usage patterns.

The categories of cookies used on the za999 Platform are as follows:

• Essential Cookies: Required for the Platform to function, including session management and login authentication. These cannot be disabled without breaking core functionality;
• Performance Cookies: Used to measure page load times, error rates, and overall platform performance. Data is anonymised and aggregated;
• Functional Cookies: Used to remember your language preference, display settings, and responsible gaming tool configurations;
• Analytics Cookies: Used to understand how players navigate the Platform so we can improve the experience. These are only set with your consent;
• Marketing Cookies: Used to serve relevant promotional content to returning visitors. These are strictly opt-in and may be disabled at any time via your cookie preferences panel.

You may manage your cookie preferences at any time through the cookie consent panel accessible from the footer of every page, or through your browser's built-in cookie management settings.

7. Data Retention

za999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in accordance with anti-money-laundering record-keeping requirements;
• Transaction and financial records: Retained for a minimum of 5 years following each transaction, as required by applicable financial regulations;
• KYC documentation: Retained for the duration of your Account and for 5 years post-closure. Physical document scans are deleted after verification is complete;
• Customer support communications: Retained for 3 years from the date of each interaction;
• Marketing consent records: Retained for as long as you maintain marketing preferences on your Account, plus 2 years following withdrawal of consent;
• Technical and usage data: Retained in anonymised form for up to 24 months for analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where deletion is not immediately possible (for example, due to backup schedules), data is quarantined from active processing until deletion is completed.

8. Data Security

za999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and za999 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers;
• Multi-factor authentication for all internal staff accessing Player data systems;
• Role-based access controls ensuring that staff access only the data necessary for their specific function;
• Continuous intrusion detection and monitoring across all Platform infrastructure;
• Regular independent security audits and penetration testing by certified third-party specialists;
• Incident response procedures enabling rapid containment and notification in the event of a data breach.

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, za999 will notify affected Players without undue delay and in accordance with applicable breach notification obligations.

9. International Data Transfers

As an internationally licensed gaming operator, za999 may transfer personal data to server infrastructure or service providers located outside of Pakistan. Where such transfers occur, za999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable international data protection frameworks.

Safeguards used for international data transfers include: standard contractual clauses approved by recognised data protection authorities; adequacy decisions applicable to the recipient jurisdiction; and binding corporate rules where applicable. If you would like further information about the specific safeguards applied to any particular data transfer, please contact us at [email protected].

10. Children & Minors

The za999 Platform is strictly intended for adults aged 21 years and over. za999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process, and any Account found to belong to a minor will be immediately suspended, the Account balance forfeited, and all associated data deleted in line with our child protection obligations.

11. Exercising Your Data Rights

To exercise any of the data rights described in this policy — including access, rectification, erasure, portability, or objection — please submit a written request to [email protected]. Please include your full name, registered email address, and a clear description of the right you wish to exercise.

za999 will acknowledge your request within 48 hours and respond in full within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Identity verification may be required before we process certain requests to protect against unauthorised access to your data.

All data subject requests are handled free of charge. If a request is manifestly unfounded or excessive, za999 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

12. Marketing Communications

za999 sends promotional communications — including bonus offers, tournament announcements, and PSL cricket betting notifications — only to Players who have explicitly opted in to receive such communications during registration or through their Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the Account settings panel;
• Clicking the unsubscribe link included in every marketing email;
• Contacting our support team at [email protected] with a written opt-out request.

Withdrawal of marketing consent does not affect your ability to continue using the Platform or to receive essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent as a necessary part of the Account service.

13. Third-Party Services

The za999 Platform may contain references to or integrations with third-party service providers, including payment processors, game software providers, and analytics tools. This Privacy Policy applies solely to data processing conducted by za999 as the Platform operator.

Third-party services operating within or alongside the za999 Platform are governed by their own privacy policies. za999 performs due diligence on all third-party partners to ensure they meet an acceptable data protection standard, and all third-party data processors operate under written data processing agreements with za999 that restrict their use of Player data to the purposes specified by za999.

14. Amendments to This Policy

za999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or Platform operations. When a material change is made, registered Players will be notified by email at least 14 days before the updated policy takes effect.

The updated policy will always be accessible at za999.one/privacy-policy with a revised effective date. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree with a revised policy, you should close your Account and cease using the Platform before the amendment takes effect.

15. Contact & Data Protection Enquiries

For all privacy-related queries, data subject requests, or concerns about how za999 handles your personal information, please contact our Data Protection team using the following details:

• Email: [email protected]
• Subject Line: "Privacy Enquiry — [Your Registered Name]"
• Response Time: Acknowledgement within 48 hours; full response within 30 calendar days
• Support Hours: 24/7, with English and Urdu-speaking agents available

za999 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate your concern to the relevant supervisory authority or dispute resolution body designated by our gaming regulator.