zb999 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how zb999 ("we", "us", "our", "the Company", "zb999") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the zb999 online casino and sports betting platform at zb999.bet (the "Platform"), including all associated mobile-optimised interfaces, customer support channels, and related services.

This Policy applies to all personal data we collect from players registered in Pakistan and any other jurisdiction from which access to the Platform is permitted. By registering an account on zb999, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the zb999 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and zb999.

2 Data We Collect

zb999 collects personal data from you directly (when you provide it during registration, verification, or support interactions) and automatically (through your use of the Platform). The categories of data we collect are described in the table below.

We do not intentionally collect any special categories of sensitive personal data (such as health information, biometric data, or political opinions) unless specifically required by our regulatory obligations and explicitly notified to you at the point of collection.

3 How We Use Your Data

zb999 uses the personal data it collects for the following purposes. We do not use your data in any manner that is incompatible with the purpose for which it was originally collected without first notifying you and, where required, obtaining your consent.

• Account creation and management: To register your zb999 account, maintain your player profile, and provide you with access to all Platform features.
• Identity verification (KYC): To verify your identity, age (21+), and residential address in accordance with our regulatory obligations and responsible gaming commitments.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to reconcile your account transaction history.
• Fraud prevention and anti-money laundering (AML): To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce deposit and session limits set by you, process self-exclusion requests, and comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance related to your zb999 account.
• Legal and regulatory compliance: To meet our obligations under applicable international gaming regulations, anti-money laundering laws, and data protection requirements.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the functionality and user experience of the zb999 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates, where you have given your consent to receive such communications (see Section 11).
• Security: To protect the integrity of the Platform, detect unauthorised access attempts, and maintain the security of player accounts and data.

4 Legal Basis for Processing

zb999 processes your personal data on one or more of the following legal grounds, depending on the specific purpose for which the data is being used:

• Contractual necessity: Processing is necessary to perform our contractual obligations to you as a registered player — including account management, payment processing, and game provision.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering requirements, identity verification mandates, and responsible gaming obligations imposed by our licensing authority.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, and the improvement of our products and services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for the receipt of marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Data

zb999 does not sell your personal data to third parties. We may share your data with trusted third parties only in the circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment service providers: We share necessary financial data with payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank for the purpose of processing your PKR deposits and withdrawals. These providers process your data under their own privacy policies and are bound by their own regulatory obligations.
• Identity verification providers: We may share identity documents and personal details with regulated KYC and AML verification service providers for the purpose of fulfilling our age verification and anti-money laundering obligations.
• Game software providers: Some game data may be processed by our third-party game software suppliers in order to deliver the games to you on the Platform. These providers operate under strict data processing agreements with zb999.
• Regulatory and law enforcement authorities: We are required by law to share certain data with our licensing authority, financial intelligence units, and law enforcement agencies where required by applicable regulation or court order. We will always seek to notify you of such disclosures where we are legally permitted to do so.
• Professional advisors: We may share data with legal counsel, auditors, and other professional advisors where necessary in connection with legal proceedings, compliance reviews, or business operations, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the zb999 business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments. You will be notified of any such transfer in advance.

6 Cookies & Tracking Technologies

zb999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse traffic, and improve your overall experience. A cookie is a small text file stored on your device by your browser when you visit the Platform.

The types of cookies used on the zb999 Platform include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your zb999 account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, currency display (PKR), and notification settings to personalise your experience on return visits.
• Analytics cookies: Collect anonymised or pseudonymised information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve Platform performance and navigation.
• Marketing cookies: Track visits across different sessions to allow us to show you relevant promotional offers and content within the zb999 Platform. These are only set where you have given your consent to receive marketing communications.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the zb999 Platform. Your browser's help documentation will explain how to manage cookie settings for your specific browser.

7 Data Retention

zb999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your registered account on zb999 plus a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later, as required by applicable AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, unless the communication relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus one (1) year following opt-out to maintain a record of your consent withdrawal.
• Technical and usage data: Generally retained in anonymised or aggregated form for up to two (2) years for Platform analytics purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where deletion is not technically feasible within a specific system, the data will be isolated and protected from further processing until deletion is possible.

8 Data Security

zb999 takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and zb999 servers is encrypted using TLS 1.2 or higher, preventing interception in transit.
• Password hashing: Account passwords are stored as salted cryptographic hashes. zb999 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access controls: Access to personal data within zb999 is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Infrastructure security: zb999 servers are hosted in secure, access-controlled data centre environments with physical security, redundant power, and continuous monitoring.
• Regular security audits: The Platform and its supporting infrastructure undergo periodic security assessments, penetration testing, and vulnerability scanning.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, zb999 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

While zb999 takes every reasonable precaution to protect your data, no system is completely immune from security threats. You also play an important role in keeping your account secure by using a strong, unique password, enabling two-factor authentication where available, and not sharing your login credentials with anyone.

9 Your Rights

As a registered player on zb999, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all valid requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data zb999 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Some personal details can be updated directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to our legal and regulatory retention obligations and cannot override mandatory record-keeping requirements.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10 Children & Minors

The zb999 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the zb999 registration process, and we employ additional checks to prevent underage access to the Platform.

If zb999 becomes aware that personal data has been collected from a person under the age of 21 — whether through a failure of our age verification process or through misrepresentation by the individual — we will take immediate steps to:

• Suspend and close the relevant account.
• Void and reverse any deposits, bets, or withdrawals made through the account.
• Permanently delete all personal data associated with the account to the extent permitted by law.
• Report the incident to the relevant authorities where required by applicable regulation.

If you are a parent or guardian and believe your child has registered on zb999, please contact us immediately at [email protected] and we will treat the matter as a priority. For further guidance on protecting young people from online gambling, please visit our Responsible Gaming page.

11 Marketing Communications

With your consent, zb999 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, PSL cricket betting markets, seasonal promotions, and other offers available on the Platform. We will only send marketing communications where you have actively opted in to receive them.

You can manage your marketing preferences at any time in the following ways:

• Log into your zb999 account and update your communication preferences in the account settings section.
• Click the unsubscribe link included in any marketing email you receive from zb999.
• Contact our support team at [email protected] and request removal from all marketing lists.

Please note that opting out of marketing communications does not affect the delivery of transactional and account-related communications — such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests — which are sent as a necessary part of the service.

12 Third-Party Services

The zb999 Platform may contain references to or integrations with third-party services, including game software providers, payment gateways, and analytics tools. These third parties operate under their own privacy policies, which are independent of this Policy. zb999 is not responsible for the privacy practices of third-party service providers, though we conduct due diligence to ensure that all partners we engage with maintain appropriate data protection standards.

All third-party service providers who process personal data on behalf of zb999 are required to enter into data processing agreements with us, which contractually obligate them to:

• Process personal data only on zb999's documented instructions.
• Implement appropriate technical and organisational security measures.
• Not engage sub-processors without zb999's prior authorisation.
• Assist zb999 in meeting its obligations in respect of player data rights requests.
• Delete or return personal data to zb999 upon termination of the service agreement.

13 Updates to This Policy

zb999 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes to this Policy are material — meaning they significantly affect your rights or how we use your data — we will notify registered players by email or via an in-platform notification no less than fourteen (14) days before the changes take effect. For minor or clarificatory amendments, we may update the Policy without prior notice, relying on the "Last Updated" indicator to signal that a review is appropriate.

We encourage you to review this Privacy Policy periodically. Continued use of the zb999 Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, please discontinue use of the Platform and contact support to request account closure.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which zb999 processes your personal data, please contact our Data Support Team. We take all privacy-related concerns seriously and will acknowledge your query within 48 hours and provide a substantive response within 30 days.

Data Support Email: [email protected]
Subject Line: Privacy Enquiry / Data Rights Request
Response Time: Within 30 calendar days
Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in your jurisdiction, or to the dispute resolution body designated by zb999's licensing authority.