zd999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1.1 Purpose. This Privacy Policy describes how zd999 ("zd999," "we," "us," "our") collects, processes, stores, shares, and protects personal information provided by individuals ("you," "Player," "User") who access, register on, or use the zd999 online casino and sports betting platform at zd999.biz.

1.2 Scope of Application. This policy applies to all personal data processed in connection with: registration and account creation; identity and age verification (KYC); financial transactions including PKR deposits via JazzCash and EasyPaisa; gameplay and betting activity; customer support interactions; marketing communications (where consented); and general website browsing of zd999.biz.

1.3 Pakistani Player Context. zd999 serves a predominantly Pakistani player base across cities including Karachi, Lahore, Faisalabad, Islamabad, and Rawalpindi. The personal data collected by zd999 — including CNIC identity documents, Pakistani mobile numbers, and JazzCash/EasyPaisa account details — is handled with particular care given the sensitivity of financial and identity information in the Pakistani context. zd999 does not share Pakistani player data with any Pakistani government body except where compelled by applicable legal obligation.

1.4 Related Documents. This Privacy Policy should be read alongside the zd999 Terms & Conditions and the Responsible Gaming Policy, all of which together constitute the complete framework governing the Player's relationship with zd999.

2.1 Identity of the Controller. The data controller responsible for the personal data collected through zd999.biz is the entity operating zd999 under its applicable international online gaming licence. zd999 operates under international online gaming licensing standards and maintains its registered operational infrastructure accordingly.

2.2 Data Protection Contact. For all matters relating to personal data held by zd999, including data subject access requests, corrections, deletion requests, and privacy complaints, players may contact zd999's data protection team at: [email protected]. Please include "Privacy / Data Request" in the subject line to ensure correct routing.

2.3 Processor Relationships. Certain data processing activities are conducted by third-party processors acting on zd999's instruction under formal Data Processing Agreements. These processors — including payment processors, KYC verification services, and platform analytics providers — are contractually bound to process data only as directed by zd999 and to maintain equivalent data security standards.

3.1 Categories of Data. The following table sets out the categories of personal data collected by zd999, the circumstances of collection, and the primary purpose for each category:

3.2 Special Category Data. zd999 does not intentionally collect special category personal data (such as health, racial, or religious data) from players. Where players voluntarily disclose such information — for example, during a responsible gaming consultation — it is treated with heightened protection and used solely for the stated support purpose.

3.3 Third-Party Data Sources. zd999 may supplement player-provided data with information from identity verification bureaus and fraud prevention databases for the purposes of KYC compliance and AML screening. Such supplementary data is handled in accordance with this policy.

4.1 Primary Purposes. zd999 uses collected personal data for the following primary operational purposes:

• Account Creation & Management: Processing your registration, maintaining your account profile, enabling login authentication, and managing account settings.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in compliance with international gaming licensing and anti-money laundering obligations.
• Payment Processing: Executing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency — and maintaining accurate financial records.
• Platform Service Delivery: Providing access to casino games, live dealer tables, sports betting markets, and all other platform features associated with your zd999 account.
• Fraud Detection & Security: Identifying, investigating, and preventing fraudulent account activity, payment fraud, multi-accounting, and other security threats.
• Regulatory Compliance: Meeting obligations under international gaming licensing requirements, including AML reporting, responsible gaming tool implementation, and record-keeping obligations.
• Customer Support: Responding to account queries, resolving disputes, processing complaints, and providing responsible gaming assistance.
• Responsible Gaming: Monitoring play patterns for indicators of problem gambling, enforcing player-set limits, and facilitating cooling-off and self-exclusion requests.

4.2 Marketing Communications. With your explicit consent at registration or through account preferences, zd999 may send you information about promotions, bonuses, and new features. You may withdraw marketing consent at any time by adjusting your communication preferences in account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect zd999's ability to send essential transactional communications (e.g., deposit confirmations, security alerts).

4.3 Platform Analytics. zd999 uses aggregated and anonymised usage data to analyse player behaviour patterns, improve platform design, optimise game recommendations, and enhance the overall user experience. Analytical data is not used for decision-making affecting individual player accounts.

5.1 Contractual Necessity. The majority of data processing at zd999 is necessary for the performance of the contract between you and zd999 — specifically, the provision of the online casino and sports betting services you have signed up to use. This includes account management, payment processing, and game service delivery.

5.2 Legal Obligation. Certain data processing activities are required by law or regulatory obligation — including KYC identity verification, AML transaction monitoring, age verification enforcement, and regulatory reporting obligations arising from zd999's licensing requirements.

5.3 Legitimate Interests. zd999 processes certain data on the basis of legitimate interests — including fraud detection, platform security, responsible gaming monitoring, and aggregate platform analytics — where these interests are not overridden by your privacy rights.

5.4 Consent. Where processing is based on consent — principally marketing communications and non-essential cookies — you retain the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.1 Categories of Recipients. zd999 shares personal data only with the following categories of third parties, each operating under contractual data protection obligations or applicable legal requirement:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment rails — who receive the minimum data necessary to process your specific transactions.
• Identity Verification Providers: Licensed KYC and AML service providers who assist zd999 in verifying player identity and screening transaction patterns against regulatory databases.
• Game Content Providers: Licensed casino game studios that power the games in the zd999 lobby may receive session-level data (game ID, stake, outcome) for game integrity and technical support purposes.
• Cloud Infrastructure Providers: zd999 uses enterprise-grade cloud hosting infrastructure. Infrastructure providers access data solely for technical hosting purposes and are subject to data processing agreements.
• Regulatory & Legal Authorities: zd999 will disclose personal data to licensing authorities, law enforcement, or financial intelligence authorities where required by applicable law or regulatory obligation. zd999 will not voluntarily disclose player data to authorities beyond legal requirements.

6.2 No Sale of Data. zd999 does not sell, rent, broker, or otherwise commercially exploit player personal data to any third party for advertising, profiling, or any purpose unrelated to the direct delivery of zd999's services.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of zd999's assets, player data may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy arising from it, with an opportunity to close their account if they do not consent to the transfer.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website to remember information about your visit. zd999 uses cookies and similar client-side storage technologies (local storage, session storage) for specific, defined purposes on the zd999 platform.

7.2 Types of Cookies Used by zd999.

• Strictly Necessary Cookies: Required for core platform functionality — including maintaining your login session, storing your account preferences, and enabling secure payment flows. These cookies cannot be disabled without breaking core platform features.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players use zd999 — which games are most popular, where navigation flows break down, and how platform performance can be improved. No individual player is identifiable from analytics data.
• Fraud Detection Cookies: zd999 uses device fingerprinting and session monitoring cookies as part of its fraud detection and responsible gaming monitoring systems. These are a legitimate interest use and cannot be disabled for active account holders.

7.3 What zd999 Does NOT Do With Cookies. zd999 does not place third-party advertising, retargeting, or affiliate tracking cookies on the platform. We do not share cookie data with advertising networks. We do not use cookies to build player profiles for sale to third parties.

7.4 Cookie Management. You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use zd999. Most modern mobile browsers (Chrome on Android, Safari on iOS) allow granular cookie management — refer to your browser's help documentation for instructions.

8.1 Retention Principles. zd999 retains personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation.

8.2 Account Data. Personal data associated with your zd999 account is retained for the duration of your account tenure. Following account closure — whether voluntary or by zd999 — account and identity data is retained for a minimum of five (5) years to comply with anti-money laundering record-keeping obligations and to enable investigation of any disputes arising after closure.

8.3 Financial Records. Transaction records — including all PKR deposit and withdrawal records, bonus claim records, and wagering history — are retained for a minimum of seven (7) years following the relevant transaction date, consistent with financial record-keeping standards applicable to licensed gaming operators.

8.4 Support Records. Customer support communications are retained for three (3) years from the date of the interaction unless the subject matter of the communication is linked to a dispute, investigation, or legal proceeding, in which case records are retained until final resolution plus two (2) years.

8.5 Post-Retention Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data derived from player activity may be retained indefinitely for statistical and analytical purposes.

9.1 Summary of Rights. Subject to applicable law and licensing obligations, zd999 account holders hold the following rights in respect of personal data held by zd999. Requests to exercise any of these rights should be submitted to [email protected] with subject line "Data Rights Request":

10.1 Age Restriction. The zd999 platform is strictly restricted to individuals who are 21 years of age or older. zd999 does not knowingly collect personal data from any person under the age of 21. Registration by individuals under 21 is prohibited, and any such registration constitutes a material breach of the zd999 Terms & Conditions.

10.2 Discovery of Underage Data. If zd999 discovers or is notified that personal data has been collected from a person under the age of 21, zd999 will: immediately close the associated account; securely delete all personal data associated with that account (subject to any AML retention obligations); and refund any deposits made to the underage account.

10.3 Parental Controls. zd999 encourages parents and guardians in Pakistan to use available parental control software to prevent minors from accessing online gaming platforms. If you believe a minor in your care has accessed or registered on zd999, please contact [email protected] immediately. zd999 will investigate and act upon receipt of credible notification.

11.1 Cross-Border Processing. As an internationally operated online gaming platform, zd999 may process or store personal data in jurisdictions outside Pakistan. This occurs primarily through the use of cloud infrastructure providers and international game content providers. Where such transfers occur, zd999 implements appropriate safeguards — including contractual clauses and binding processing agreements — to ensure that transferred data receives protection equivalent to that applied within Pakistan's data protection expectations.

11.2 Jurisdictional Context. The core operational data processing for zd999 accounts — including payment processing integrations with JazzCash and EasyPaisa — is conducted within infrastructure designed for the South Asian market. Pakistani mobile number data and PKR financial data is treated as sensitive throughout its lifecycle and is not processed in jurisdictions with materially weaker data protection standards without contractual safeguards.

12.1 Technical Safeguards. zd999 implements the following technical measures to protect player personal data against unauthorised access, alteration, disclosure, or destruction:

• AES-256 encryption for all personally identifiable data stored at rest
• TLS 1.3 protocol for all data transmitted between player devices and zd999 servers
• Strict access controls — zd999 staff access to player data is granted on a need-to-know basis only, with comprehensive audit logging of all access events
• Multi-factor authentication required for all zd999 administrative system access
• Regular independent penetration testing and security audits of the zd999 platform and data infrastructure
• Intrusion detection and anomaly monitoring systems operating continuously across zd999's infrastructure

12.2 Breach Response. In the event of a data security breach that is reasonably likely to result in risk to player rights or interests, zd999 will notify affected players as expeditiously as possible and will report the breach to applicable regulatory authorities within the timeframes required by relevant regulations.

12.3 Player Responsibility. While zd999 implements comprehensive technical security measures, players bear responsibility for securing their own account credentials. The use of a strong, unique password, enabling two-factor authentication, and not sharing login details are within the player's control. zd999 is not responsible for data exposure arising from a player's failure to secure their own credentials.

13.1 Right to Amend. zd999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory guidance, or platform capabilities. The effective date of the current version is displayed at the top of this document and in the page header.

13.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how player data is collected, used, or shared — zd999 will provide advance notice to registered account holders via email or in-platform notification before the changes take effect. Non-material updates (such as clarifying language changes) will take effect immediately upon publication.

13.3 Continued Use. Continued use of the zd999 platform following notification of material Privacy Policy changes constitutes acceptance of the revised terms. Players who do not accept material changes should close their zd999 account before the changes take effect. Residual data retention obligations described in Section 8 remain in force after account closure regardless of policy version.

For any queries, concerns, or formal requests relating to this Privacy Policy or your personal data held by zd999, please use the following contact channels. zd999 is committed to responding to all privacy-related communications in a timely manner.