zh999 Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by zh999 (hereinafter "zh999", "the Platform", "the Company", "We", "Us", "Our") and applies to all personal data collected and processed in connection with your registration, use of, and interaction with the zh999 online betting and gaming platform accessible at zh999.biz and any associated mobile applications, sub-domains, or supplementary services.

zh999 is Pakistan's premier online sports betting and casino platform, purpose-built for Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. Our platform processes personal data as a necessary and regulated element of operating a licensed online gaming service. We are committed to processing your data responsibly, transparently, and in accordance with applicable international data protection standards.

By registering for a zh999 account, accessing the platform, or using any zh999 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, you must not use the zh999 platform.

zh999, operating under international gaming licensing standards, acts as the data controller in respect of all personal data collected and processed through the zh999 platform. As data controller, zh999 determines the purposes for which, and the means by which, your personal data is processed.

zh999 operates under a licensing framework that imposes independent obligations on the Company in respect of data handling, anti-money laundering (AML) record-keeping, and responsible gaming monitoring. These regulatory obligations exist in parallel with and in addition to the rights afforded to you under this Policy.

For all data protection enquiries, requests, or complaints, players may contact zh999 via the channels set out in Section 16 of this Policy. zh999 will respond to all data-related requests within the timeframes specified in this Policy.

zh999 collects personal data across several categories, each serving a defined purpose in the operation of the platform and fulfilment of our regulatory obligations:

zh999 collects personal data through the following mechanisms:

• Direct Collection: Information you provide when registering a zh999 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating your account profile.
• Automated Technical Collection: Information collected automatically when you access zh999.biz — including your IP address, device identifiers, browser data, session logs, and interaction data — gathered through standard web server logs, cookies, and similar tracking technologies described in Section 9.
• Gaming Platform Activity: Data generated by your use of the zh999 sportsbook, casino, and slot sections — including all bets placed, games played, session lengths, and account balance movements.
• Payment Processor Data: Transaction confirmation and reference data provided to zh999 by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other payment processors when you conduct deposit or withdrawal transactions.
• Third-Party Game Providers: Session and gameplay data transmitted from zh999's third-party game providers (live casino studios, slot software developers) in respect of games played through the zh999 platform.
• Identity Verification Partners: Results from electronic identity verification checks conducted to satisfy KYC/AML obligations, where zh999 uses a third-party identity verification service.

zh999 uses the personal data we collect for the following specific and stated purposes. Each purpose is tied to at least one legal basis described in Section 6:

• Platform Operation: To provide, maintain, and improve all zh999 platform services, including cricket betting, live casino, slot games, and the sportsbook — and to process your deposits, withdrawals, and account transactions in PKR.
• Identity Verification and KYC: To verify your identity, confirm you meet the 21+ age requirement, and fulfil zh999's anti-money laundering and Know Your Customer obligations under our licensing framework.
• Account Security: To authenticate your zh999 logins, detect unauthorised account access, manage two-factor authentication (2FA) delivery to your Pakistani mobile number, and investigate suspicious account activity.
• Regulatory Compliance: To comply with zh999's obligations under applicable gaming regulations, anti-money laundering laws, and licensing requirements — including the maintenance of required records for specified periods.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, enforce the limits and restrictions you set, facilitate self-exclusion requests, and comply with responsible gaming obligations under our license.
• Customer Support: To provide timely and effective support responses, resolve disputes, investigate complaints, and maintain records of your support interactions with the zh999 team.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account compromise, and any other form of platform misuse.
• Personalisation: To tailor your zh999 experience based on your preferences, betting history, and game activity — including presenting relevant promotions and suggested markets where this is permitted.
• Marketing Communications: To send you promotional communications about zh999 offers, PSL bonuses, new game launches, and platform updates — where you have provided consent or where this is otherwise permitted.
• Analytics and Improvement: To analyse aggregate platform usage patterns, identify technical issues, and improve the zh999 product experience for all Pakistani players.

zh999 processes personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between zh999 and you as a registered player — including account management, payment processing, bet settlement, and customer support delivery.
• Legal Obligation: Processing required to comply with legal and regulatory obligations applicable to zh999 as a licensed gaming operator — including KYC/AML record-keeping, responsible gaming monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out for zh999's legitimate interests in platform security, fraud prevention, service improvement, and responsible business operation — where these interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your specific, informed consent — including the sending of marketing communications where required by applicable law. You may withdraw consent at any time by contacting zh999 support.

zh999 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. zh999 shares your personal data only in the following circumstances:

• Regulatory and Licensing Authorities: zh999 may share data with our gaming licensing authority, financial regulators, or other relevant authorities where legally required — including in connection with AML/CTF investigations, regulatory audits, and license compliance reviews.
• Payment Processing Partners: Data necessary to process your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT transactions is shared with the relevant payment service providers to the minimum extent necessary to complete the transaction.
• Game Content Providers: zh999's third-party casino and slot game providers receive technical session data necessary to operate live dealer games and slot titles accessed through the zh999 platform. These providers are contractually bound to use this data only for platform operation purposes.
• Identity Verification Services: Where zh999 uses a third-party KYC/identity verification partner, your identity documents and verification results are shared with that partner for the sole purpose of completing KYC checks required by our licensing obligations.
• IT and Infrastructure Service Providers: zh999 uses third-party cloud hosting, database, and security service providers that may process your data as data processors on zh999's behalf under contractual data processing agreements.
• Fraud Prevention and Law Enforcement: zh999 may disclose personal data to fraud prevention agencies, law enforcement authorities, or courts where required by law, where we have a reasonable belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or where required by a valid legal order.
• Business Transactions: In the event of a merger, acquisition, or sale of zh999's business or assets, player data may be transferred to the acquiring entity, subject to that entity's commitment to maintain this Policy's protections.

The zh999 platform serves Pakistani players and is operated under an international gaming license. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan — including the jurisdiction in which zh999 holds its gaming license and the locations of zh999's cloud infrastructure, game provider studios, and payment partners.

Where your personal data is transferred internationally, zh999 takes appropriate measures to ensure that such transfers are conducted securely and in a manner that maintains equivalent levels of data protection. These measures may include contractual safeguards with recipient entities, ensuring recipients operate under equivalent data protection standards, or relying on recognised adequacy frameworks where applicable.

If you require specific information about the safeguards in place for any particular international transfer of your personal data, please contact zh999 via the channels set out in Section 16.

zh999 uses cookies and similar tracking technologies on the zh999.biz website and platform. Cookies are small text files placed on your device when you access a website. They serve a variety of functions essential to platform operation and performance:

• Essential Cookies: Required for the zh999 platform to function. These include session authentication cookies that keep you logged into your zh999 account during your session. These cookies cannot be disabled without rendering the platform non-functional.
• Security Cookies: Used to detect and prevent fraudulent logins, session hijacking, and CSRF attacks on your zh999 account. These are part of the platform's security infrastructure.
• Performance and Analytics Cookies: Used to collect aggregate, anonymised data about how Pakistani players interact with the zh999 platform — which sections are most used, where technical issues arise, and how load times can be improved. This data does not identify individual players.
• Preference Cookies: Store your platform preferences, such as language settings and responsible gaming tool configurations, so you do not need to re-enter them on each visit to zh999.
• Marketing Cookies: Where you have consented, these cookies allow zh999 to present you with relevant promotional content based on your gaming activity and preferences. You may opt out of marketing cookies at any time via your account settings or by contacting support.

You may configure your browser or device settings to refuse all or certain types of cookies. Please note that disabling essential or security cookies will affect the functionality of your zh999 account and may prevent you from accessing the platform. For non-essential cookies, your consent is sought before placement.

zh999 implements a layered, enterprise-grade security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data exchanged between your device and the zh999 platform is encrypted using 256-bit TLS/SSL. This applies to your zh999 login, all transactions, and all communications with zh999 support.
• Encryption at Rest: Sensitive data fields — including financial data, identity document references, and password hashes — are encrypted at rest in zh999's database infrastructure.
• Access Controls: Access to zh999 player data is restricted on a strict need-to-know basis. zh999 team members are granted the minimum level of data access required for their specific function. All access is logged and audited.
• Two-Factor Authentication: zh999 offers 2FA for player accounts via OTP sent to your registered Pakistani mobile number. zh999 also uses internal 2FA for staff access to systems containing player data.
• Regular Security Reviews: zh999 conducts periodic internal security reviews and third-party penetration testing to identify and remediate vulnerabilities in the platform's security posture.
• Incident Response: zh999 maintains a data breach incident response procedure. In the event of a security incident affecting your personal data, zh999 will notify affected players and relevant authorities in accordance with applicable obligations.

zh999 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for as long as required by applicable regulatory and legal retention obligations. The following general retention principles apply:

• Active Accounts: For the duration of your active zh999 registration, all account and gaming data is retained to enable platform operation, support delivery, and regulatory compliance.
• Closed Accounts (Standard Closure): Following voluntary account closure, zh999 retains transaction records, KYC documentation, gaming history, and relevant communication records for a minimum period required by our licensing framework's AML record-keeping obligations — typically a period of years from the date of the last transaction.
• Self-Excluded Accounts: Where an account is closed via self-exclusion, zh999 retains the minimum data necessary to enforce the self-exclusion, process any outstanding balance return, and prevent re-registration during the exclusion period.
• Fraud and Compliance Cases: Where an account has been closed due to fraud, AML concerns, or regulatory investigation, zh999 may retain all relevant data for a longer period as required by the applicable investigation, regulatory obligation, or legal proceedings.
• Marketing Data: If you withdraw consent to marketing communications, your contact data is removed from marketing distribution lists promptly. A suppression record may be retained to ensure you are not re-added to marketing lists without renewed consent.

Upon expiry of the applicable retention period, zh999 will securely delete or anonymise your personal data in accordance with our data retention and destruction procedures.

As a zh999 player, you hold the following rights in respect of your personal data held by zh999. zh999 will respond to valid rights requests within 30 calendar days of receipt, or within such other timeframe as may be required by applicable law:

To exercise any of the above rights, please contact zh999 via live chat or email at [email protected] (see Section 16). zh999 may request that you verify your identity before processing any rights request, to ensure that personal data is not disclosed or altered based on a fraudulent request. Rights requests are processed free of charge.

zh999 strictly prohibits the registration or use of the platform by individuals under the age of 21. This is an absolute age restriction that applies without exception to all platform sections, all products, and all jurisdictions served by zh999.

zh999 does not knowingly collect, use, or retain any personal data from individuals under the age of 21. Age verification (via CNIC or equivalent documentation) is a mandatory part of the KYC process for all zh999 accounts. Where zh999 becomes aware that personal data has been collected from an individual who is under 21, zh999 will immediately suspend the relevant account, delete the associated data to the extent permitted by regulatory obligations, and withhold any funds from withdrawal pending a regulatory review.

zh999 supports parent and guardian efforts to prevent underage access to gambling platforms. We recommend the use of parental control tools and monitoring software where shared devices are used by household members of varying ages.

The zh999 platform integrates with third-party services including game content providers, payment processors, identity verification partners, and cloud infrastructure providers. Where these third parties process personal data on zh999's behalf, they do so as data processors under binding contractual agreements that require them to maintain standards of data protection equivalent to those set out in this Policy.

zh999 is not responsible for the privacy practices of third-party websites, services, or applications that are not operated by zh999. Where the zh999 platform includes links to third-party websites — such as international gaming regulator websites or responsible gaming support organisations — those websites are governed by their own privacy policies. zh999 encourages you to review the privacy policy of any third-party website you visit via a link from the zh999 platform.

zh999's third-party game providers may collect certain technical session data directly from your device for the purpose of operating their games. This data collection is governed by the game provider's own data processing terms, which zh999 reviews as part of its vendor due diligence process before onboarding any game content provider.

zh999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. When material changes are made to this Policy — meaning changes that significantly affect how your data is processed or the rights available to you — zh999 will provide reasonable advance notice through the platform notification system and/or email to your registered address.

The effective date at the top of this Policy indicates when the current version came into force. The most current version of this Policy is always available at zh999.biz/privacy-policy. Your continued use of the zh999 platform following the effective date of any revised Policy constitutes your acceptance of the revised terms.

zh999 maintains an archive of previous versions of this Privacy Policy. If you wish to review a prior version of this Policy, please contact zh999 support with the relevant date range and we will provide the applicable archived version.

For all privacy-related queries, data subject rights requests, or complaints regarding the processing of your personal data by zh999, please contact us through the following channels:

If you remain dissatisfied with zh999's response to a privacy complaint after following the process above, you may escalate your complaint to the relevant data protection authority or gaming regulatory body under zh999's licensing jurisdiction. zh999 will cooperate fully with any such regulatory investigation.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior privacy notices published by zh999. The current version is the binding version and is available at all times at zh999.biz/privacy-policy.