zx999 Privacy Policy

1. Who We Are — The Data Controller

For the purposes of this Privacy Policy, zx999 (referred to as "we," "us," or "the Company") is the data controller responsible for the personal information of players who use the zx999 online casino and sports betting platform accessible at zx999.bio and all associated subdomains, applications, and services.

zx999 operates under an international gaming license and is subject to the data protection and privacy obligations imposed by that licensing framework. Our Data Protection Officer can be reached via our general support contact at [email protected].

This Privacy Policy applies to all registered players and visitors regardless of their location within Pakistan — whether you are accessing zx999 from Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Quetta, or anywhere else in the country.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All personal data collected through the zx999 website at zx999.bio and any associated mobile platform;
• Personal data collected when you register a zx999 account, complete KYC verification, make deposits or withdrawals, place bets, or interact with any part of the zx999 service;
• Personal data collected through communications with our customer support team, including live chat, email correspondence, and any written complaints;
• Technical and behavioural data collected automatically when you browse the zx999 platform, including via cookies and session tracking technologies.

This Policy does not apply to third-party websites, payment providers, or gaming studios that may be linked to or integrated within the zx999 platform. Those parties operate under their own privacy policies, which we encourage you to review independently.

3. Personal Data We Collect

zx999 collects personal data from you in the following categories. We collect only what is necessary for the specific purpose stated.

zx999 does not collect sensitive personal data beyond what is necessary for KYC compliance under our gaming license obligations. We do not collect biometric data, medical information, or religious affiliation data.

4. How zx999 Uses Your Personal Data

The personal data we hold about you is used for the following specific purposes:

• Account creation and management: To register your zx999 account, verify your identity and age via CNIC, maintain your account settings and PKR wallet, and manage your login credentials.
• Transaction processing: To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK; to maintain accurate financial records; and to investigate and resolve payment queries.
• Gaming Activity management: To record and settle bets; to calculate and credit winnings; to apply bonus terms and wagering requirements; and to maintain complete gaming history records as required by our license.
• Fraud prevention and security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, money laundering, and other activities that breach our Terms and Conditions or applicable law.
• Legal and regulatory compliance: To comply with our international gaming license KYC obligations; to respond to lawful requests from regulatory authorities; and to maintain records for the periods required by our license.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and improve the quality of our support service.
• Platform improvement: To analyse aggregate, anonymised usage data to identify areas for platform improvement; to test new features; and to optimise the zx999 experience for Pakistani mobile users.
• Responsible gaming: To monitor gaming behaviour for indicators of potential problem gambling and to implement and enforce responsible gaming tools such as deposit limits, session limits, and self-exclusion where requested or required.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent for marketing communications or where we have a legitimate interest in doing so as an existing customer. You may withdraw this consent at any time.

5. Legal Basis for Processing Your Data

zx999 processes your personal data on the following legal grounds, each of which applies to specific categories of processing activity:

• Performance of a contract: Processing necessary to fulfil the zx999 Terms and Conditions that you agreed to upon registration — including account management, transaction processing, and gaming activity recording.
• Legal obligation: Processing required to comply with our international gaming license obligations, including KYC identity verification, age verification, AML transaction monitoring, and regulatory record-keeping requirements.
• Legitimate interests: Processing in the legitimate interests of zx999 that do not override your fundamental rights — including fraud prevention, platform security, and aggregate analytics for platform improvement.
• Consent: Processing for which you have given explicit, freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Third-Party Recipients

zx999 does not sell your personal data. We share your data with third parties only in the following defined circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the transaction data necessary to process your PKR deposits and withdrawals. Each processor operates under its own privacy policy and is subject to Pakistani financial regulatory requirements.
• KYC and identity verification providers: Third-party identity verification services used to confirm your CNIC data and age against official records, as required by our gaming license.
• Gaming content providers: Studios such as Evolution Gaming, Pragmatic Play, and others receive session data necessary to deliver their games within the zx999 platform. These providers do not receive your identity or financial data.
• Regulatory and licensing authorities: Our gaming licensing authority may request access to player data or transaction records as part of regulatory oversight. We are required to comply with such requests under our license obligations.
• Law enforcement agencies: Where zx999 receives a lawful, documented request from Pakistani or international law enforcement in connection with fraud, money laundering, or criminal investigations, we will provide the minimum data necessary to comply.
• Fraud prevention networks: zx999 participates in industry-standard fraud prevention networks that allow sharing of data relating to confirmed fraudulent accounts with other licensed operators, for the purpose of protecting the integrity of online gaming across the industry.

All third parties with whom zx999 shares personal data are required to process that data in accordance with applicable privacy laws and are bound by contractual obligations of confidentiality. zx999 does not transfer data to third parties for their own marketing purposes.

7. Cookies & Tracking Technologies

The zx999 platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how Pakistani players use the site. The following types of cookies are in use:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your zx999 account, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that distribute platform traffic. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as your language setting (Urdu or English), display preferences, and any deposit method shortcuts you have saved. Disabling these cookies means your preferences will not be saved between sessions.
• Analytics cookies: Used by zx999's internal analytics systems to understand aggregate player behaviour — such as which games are most popular among Pakistani players, where in the registration flow players drop off, and how mobile performance compares to desktop. Data collected is aggregated and anonymised. No personally identifiable data is sent to analytics systems.
• Marketing cookies: Used to track the effectiveness of zx999's promotional campaigns. These are only activated with your explicit consent and may be managed via your account settings or standard browser cookie controls.

8. Data Security Measures

zx999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and zx999 servers;
• Encryption at rest for all sensitive personal and financial data stored on zx999 servers;
• Segregated data architecture separating player personal data, financial data, and gaming records into distinct, access-controlled systems;
• Role-based access controls ensuring that zx999 staff members can only access the player data necessary for their specific job function;
• Regular independent security audits of our platform, payment integrations, and data storage systems;
• Intrusion detection and monitoring systems operating on a 24/7 basis to detect and respond to potential security incidents;
• Secure deletion protocols ensuring that data no longer required is irreversibly destroyed in line with our retention policy.

Despite our best efforts, no internet-connected system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zx999 will notify affected players without undue delay and will take all necessary steps to contain, investigate, and remediate the breach.

9. Data Retention Periods

zx999 retains personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our gaming license obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your zx999 account being active and in good standing.
• Post-closure account data: Following voluntary Account closure or suspension, identity and KYC documentation is retained for a minimum of five years as required under our gaming license anti-money-laundering obligations.
• Financial transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements under our license.
• Gaming records: Bet history and game play logs are retained for a minimum of three years following Account closure, for the purpose of resolving any retrospective disputes or regulatory inquiries.
• Customer support communications: Retained for two years following the close of the relevant support case.
• Marketing consent records: Retained until you withdraw your consent, plus a further three years to evidence compliance in the event of a complaint.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted, anonymised, or — where applicable — transferred to archival systems with restricted access, in compliance with our license obligations.

10. Your Data Rights

As a player whose personal data is processed by zx999, you have the following rights. To exercise any of these rights, please contact us at [email protected] with your registered email address and a description of your request. We will respond within 30 calendar days.

11. Children, Minors & the 21+ Rule

The zx999 platform is strictly intended for adults aged 21 years and above. zx999 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

CNIC-based age verification is a mandatory step during zx999 account registration. If zx999 discovers at any point that a registered account is held by a person under 21, the account will be immediately and permanently closed. Any personal data collected in connection with that account will be retained for the minimum period required under our gaming license KYC obligations and then securely deleted.

12. Marketing Communications & Your Choices

zx999 may send you marketing communications about new games, promotions, bonuses, PSL betting specials, and other offers relevant to your use of the platform. We will only do this where:

• You have explicitly opted in to receive marketing communications during registration or via your account settings; or
• You are an existing player and we are communicating about our own similar services (soft opt-in), and you have not previously opted out.

All marketing emails from zx999 include an unsubscribe link. You may also withdraw your marketing consent at any time by updating your communication preferences in your account settings, or by emailing [email protected] with "Unsubscribe" in the subject line.

Note that withdrawing marketing consent does not affect transactional communications — zx999 will continue to send you account notifications, withdrawal confirmations, security alerts, and other communications necessary for the operation of your account, regardless of your marketing preferences.

13. International Data Transfers

zx999 operates servers and uses service providers in multiple jurisdictions. This means that some personal data collected from Pakistani players may be transferred to and stored or processed in countries outside Pakistan. Where such transfers occur, zx999 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements with all third-party service providers who receive personal data, incorporating appropriate data protection clauses;
• Use of service providers who themselves operate under internationally recognised privacy and data security frameworks;
• Data minimisation at the point of transfer — sharing only the minimum personal data necessary for the specific service provided.

Your CNIC data and KYC documentation are processed and stored exclusively within secure systems subject to our gaming license jurisdiction's data protection requirements.

14. Amendments to This Privacy Policy

zx999 may update or amend this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last updated" date at the top of this page;
• Display a notification within your zx999 account dashboard for a period of at least 14 days following the change; and
• Where the changes are significant, send a notification to your registered email address summarising the key changes.

Your continued use of the zx999 platform following any amendments to this Policy constitutes your acceptance of the revised terms. If you disagree with any material change, you may request Account closure via [email protected] before the changes take effect.

15. Contact Us & How to Complain

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how zx999 has handled your personal data, please contact us as follows:

• Email (Data Enquiries): [email protected] — mark the subject line "Privacy / Data Request" for priority routing. We aim to respond to all data-related enquiries within 5 business days and to resolve them fully within 30 days.
• Live Chat: Available 24 hours a day, 7 days a week from the zx999 platform in both English and Urdu. Suitable for general privacy questions, though formal data subject requests should be submitted via email for a full written response.

If you are not satisfied with how zx999 has handled your data concern after contacting us, you have the right to escalate your complaint to the data protection supervisory authority within our licensing jurisdiction, or to the relevant consumer protection authority in Pakistan. zx999 will always cooperate fully with any regulatory investigation.