Privacy Policy

This Privacy Policy ("Policy") describes how ZC999 ("we", "us", "our", "Platform") collects, uses, stores, shares and protects personal data relating to users ("you", "your") of the ZC999 website at zc999.cam and all associated services.

ZC999 is an English-language online gaming information and services platform designed for Pakistani users. We take data privacy seriously. This Policy has been prepared to give you a clear, honest account of our data practices — not to obscure them behind legal language. We have used plain, structured English throughout so that users across Pakistan, whether based in Karachi, Lahore, Islamabad, Rawalpindi or elsewhere, can readily understand how their information is handled.

By registering an Account, accessing the platform or otherwise using our services, you acknowledge that you have read and understood this Policy. Where processing your data requires your consent, we will ask for it explicitly. Where you provide personal data on behalf of another individual, you confirm that you have authority to do so and that the individual has been made aware of this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Together these documents form the full agreement governing your relationship with ZC999.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including name, email address, date of birth, device identifiers and financial transaction data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion or destruction.
• "Data Controller" means ZC999, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of ZC999 under a contractual data-processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.
• "Cookie" means a small data file placed on your device by the Platform for the purposes described in Section 8.
• "KYC Data" means identity and age verification documents and associated personal information collected to satisfy Know Your Customer obligations under the applicable licence.
• "Special Category Data" means sensitive personal data including health information, which ZC999 may process in limited circumstances in connection with responsible gambling tools such as self-exclusion.

ZC999 collects the following categories of Personal Data. We collect only what is necessary for the purposes described in this Policy.

We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the applicable licence jurisdiction. If we become aware that an underage individual has provided Personal Data, that data will be deleted and the Account closed promptly.

ZC999 collects Personal Data through the following channels:

• [4.1]Direct interactions: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support or updating your account profile.
• [4.2]Automated technologies: Technical and Usage Data collected automatically as you navigate the platform, through cookies, server logs and similar tracking technologies as described in Section 8.
• [4.3]Third-party sources: Identity verification data received from KYC/AML service providers; fraud-risk signals received from payment processors; device-reputation data from security service providers. In each case, data is received only under contractual data-processing agreements.
• [4.4]Support communications: Records of live chat conversations, email correspondence and any documentation you provide when raising a query or dispute with the support team.

ZC999 processes your Personal Data on one or more of the following legal bases, depending on the purpose of processing:

• [5.1]Contractual necessity: Processing required to perform the agreement between you and ZC999 — including operating your Account, processing deposits and withdrawals in PKR, settling Wagers and providing customer support.
• [5.2]Legal obligation: Processing required to comply with applicable licensing conditions, anti-money laundering (AML) regulations, age verification requirements and other legal or regulatory obligations imposed on ZC999.
• [5.3]Legitimate interests: Processing carried out for ZC999's legitimate business interests, such as fraud prevention, platform security, responsible gambling monitoring and service improvement — provided those interests are not overridden by your rights and interests.
• [5.4]Consent: Processing of Personal Data for marketing communications, non-essential cookies or other purposes where we have asked for and received your explicit agreement. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ZC999 uses the Personal Data we collect for the following purposes:

• [6.1]Account management: Creating, maintaining and securing your Account; processing login requests; managing password resets and account settings.
• [6.2]Transaction processing: Facilitating deposits and withdrawals, maintaining accurate PKR account balances, reconciling payment records and addressing disputed transactions.
• [6.3]Identity and age verification: Verifying that you meet the minimum age requirement and that the identity information provided at registration is accurate, in accordance with our KYC obligations.
• [6.4]Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, collusion, unauthorised account access and other prohibited conduct described in our Terms & Conditions.
• [6.5]Responsible gambling: Monitoring usage patterns to identify potential indicators of problem gambling; applying deposit, loss and time limits; processing self-exclusion requests; and complying with responsible gambling obligations under our licence.
• [6.6]Customer support: Responding to queries, resolving disputes and maintaining records of support interactions for quality-assurance and compliance purposes.
• [6.7]Marketing communications: Sending promotional offers, bonus notifications and platform updates where you have opted in to receive such communications. Marketing emails relating to cricket betting, PSL markets, casino promotions or seasonal offers will be sent only to users who have given explicit consent.
• [6.8]Platform improvement: Analysing anonymised usage data and aggregated behavioural patterns to improve the platform's features, performance and user experience.
• [6.9]Legal and regulatory compliance: Meeting our obligations under the applicable gaming licence, responding to lawful requests from regulatory or law-enforcement authorities, and maintaining records as required by applicable law.

ZC999 does not sell, rent or trade your Personal Data to any third party for their own marketing or commercial purposes. We share your data only in the following circumstances and only to the extent necessary:

• [7.1]Service providers (Data Processors): We engage carefully selected third-party service providers to support platform operations — including payment processors, KYC/identity-verification providers, fraud-prevention services, cloud hosting and IT security partners. Each provider operates under a data-processing agreement that restricts use of your data to the specified service.
• [7.2]Regulatory and law-enforcement authorities: Where required by a valid legal obligation, court order or request from a licensing authority or law-enforcement body, ZC999 may disclose Personal Data. We will, where legally permitted, notify you of such a request before complying.
• [7.3]Responsible gambling bodies: In circumstances where a self-exclusion request must be registered across multiple operators or a shared exclusion register, relevant data may be shared with the applicable responsible gambling authority or operator group as required by the licence conditions.
• [7.4]Business transfers: In the event of a merger, acquisition or sale of ZC999 or its assets, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring entity will be bound by this Policy or an equivalent standard.
• [7.5]Payment references — Pakistani context: Where transaction processing involves domestic payment services familiar to Pakistani users, such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah, only the minimum transaction data necessary is passed to the relevant payment service provider. ZC999 does not share broader account or behavioural data with these providers, and their inclusion here is not an endorsement or affiliation.

ZC999 uses cookies and similar tracking technologies to enable core platform functionality, maintain session security and collect anonymised analytics data. The following cookie categories are in use:

You can manage your cookie preferences at any time through the cookie settings panel accessible in the platform footer. Please note that disabling strictly necessary cookies will impair or prevent use of the platform. Most web browsers also provide controls to manage cookies at the browser level.

ZC999 retains your Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory or licensing obligations. The following general retention principles apply:

• [9.1]Active accounts: Personal Data associated with an active Account is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• [9.2]KYC documentation: Identity and age verification documents are retained for the period required by the applicable licence — typically five years from the date of verification or account closure, whichever is later.
• [9.3]Transaction records: Financial transaction records, including PKR deposit and withdrawal history, are retained for a minimum of five years to satisfy AML, audit and dispute resolution requirements.
• [9.4]Marketing data: If you withdraw consent for marketing communications, your preference data will be updated within 10 business days and you will no longer receive promotional messages. Suppression records may be retained to ensure that withdrawn consent is honoured going forward.
• [9.5]Self-exclusion records: Records relating to self-exclusion requests are retained for the full duration of the exclusion period and for a defined period thereafter, as required by responsible gambling compliance obligations.
• [9.6]Dormant account data: Where an account has been inactive for 12 consecutive months, account data is flagged for review. You will be notified before any deletion action is taken on dormant account records.

ZC999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, misuse, alteration or destruction. These measures include:

• [10.1] SSL/TLS encryption for all data transmitted between your device and ZC999 servers.
• [10.2] Encryption at rest for sensitive personal and financial data stored on ZC999 infrastructure.
• [10.3] Strict access controls ensuring that Personal Data is accessible only to authorised personnel who require it for legitimate operational purposes.
• [10.4] Regular security assessments, vulnerability scanning and penetration testing carried out on the platform infrastructure.
• [10.5] Incident response procedures that include notification protocols where a data breach is identified that poses a risk to your rights and interests.

While ZC999 takes all reasonable steps to protect your data, no internet-based system is entirely immune to security risk. You are responsible for maintaining the security of your Account credentials and for notifying us immediately of any suspected unauthorised access to your Account.

Subject to the applicable legal framework and licence conditions, you have the following rights in relation to the Personal Data ZC999 holds about you:

• [11.1]Right of access: You may request a copy of the Personal Data ZC999 holds about you and information about how it is processed.
• [11.2]Right to rectification: You may request correction of inaccurate or incomplete Personal Data. For certain data fields, you can update information directly through your account profile.
• [11.3]Right to erasure: In certain circumstances, you may request deletion of your Personal Data. This right is subject to limitations where retention is required by legal, regulatory or licensing obligations.
• [11.4]Right to restrict processing: You may request that ZC999 restrict processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• [11.5]Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• [11.6]Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. You may also opt out of marketing communications at any time through your account settings.
• [11.7]Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the ZC999 support team using the contact details in Section 14. We will respond to verified requests within 30 days. We may need to verify your identity before processing a rights request.

The ZC999 platform does not include links to external third-party websites as a general rule. Where any reference to a third-party service or resource appears on the platform for informational purposes, ZC999 is not responsible for the privacy practices or content of those third parties. This Policy applies solely to Personal Data collected and processed by ZC999 through the zc999.cam domain and associated services.

ZC999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements or the services we offer. Where a material change is made, we will provide reasonable notice through the platform or by email to the address registered on your Account. The updated Policy will display a revised "Last Updated" date at the top of this page.

Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the platform and may request Account closure by contacting the support team.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a concern about how your Personal Data has been handled, please contact the ZC999 support team through one of the following channels:

• Live Chat: Available on the platform 24 hours a day, 7 days a week. Support is provided in English, with Urdu assistance available on request.
• Email: [email protected] (plain text — not a clickable link)

When submitting a privacy-related query or rights request, please include your registered username and a clear description of your request. We aim to acknowledge all queries within 24 hours and to resolve them within 30 calendar days. Where a request is complex or involves a high volume of data, we may require up to an additional 60 days, in which case we will notify you accordingly.