Section 01
Who We Are
zs999a ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at zs999a.org. We are the data controller responsible for the personal information collected from users who register, deposit, play, or otherwise interact with the zs999a platform.
Our platform is designed for adult players in Pakistan — from Karachi and Lahore to Faisalabad and Islamabad — who wish to engage with licensed online casino games, live sports betting markets including PSL cricket, slot games, fishing games, rummy, and related entertainment products. All players must be 21 years of age or older.
This Privacy Policy applies to all personal data collected via the zs999a website, mobile-optimised platform, live chat support system, email correspondence, and any other touchpoint through which you interact with zs999a. By registering an account, you confirm that you have read and understood this policy in full.
If you have any questions about how zs999a processes your personal data, you may contact our Data Protection team at any time via live chat or by writing to [email protected] (plain text — not a clickable link).
Section 02
Data We Collect
zs999a collects only the personal data that is necessary and proportionate for the specific purposes described in this policy. The categories of data we collect from Pakistani players include:
| Category |
Examples |
When Collected |
| Identity Data |
Full legal name, date of birth, CNIC number, nationality, photograph |
Registration & KYC verification |
| Contact Data |
Email address, mobile number (for EasyPaisa / JazzCash), city of residence |
Registration |
| Financial Data |
Deposit / withdrawal amounts, payment method type, mobile wallet numbers, bank account identifiers |
Transactions |
| Gaming Activity Data |
Bets placed, games played, session durations, win/loss records, PSL betting history |
During platform use |
| Technical Data |
IP address, device type, operating system, browser type, connection timestamps |
Automatically on access |
| Communications Data |
Live chat transcripts, support emails, feedback submissions |
Support interactions |
| Responsible Gaming Data |
Deposit limit settings, cooling-off activations, self-exclusion requests |
When tools are used |
We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health records, or political opinions unless this is strictly required for a specific regulatory compliance obligation and you have provided explicit consent.
Section 03
How We Collect Data
zs999a collects your personal data through several channels, all of which are described below:
- Direct input: Information you provide when completing the registration form, submitting KYC documents, filling in a withdrawal request, or contacting our support team via live chat or email.
- Automated technical collection: When you access zs999a.org, our servers automatically record technical data including your IP address, device identifiers, browser configuration, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies described in Section 9.
- Payment provider data: When you initiate a deposit or withdrawal via EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, or any other supported payment channel, the relevant payment provider shares transaction confirmation data with us to allow us to credit your account and verify the source of funds.
- Third-party identity verification: For KYC purposes, we may use a third-party identity verification service to confirm the authenticity of the CNIC or other document you submit. This service processes your image data on our behalf under a strict data processing agreement.
- Gaming platform providers: Game providers whose content is hosted on zs999a may share session data, bet records, and RTP outcomes with us for auditing, dispute resolution, and responsible gaming monitoring purposes.
zs999a does not purchase personal data lists from brokers, data aggregators, or any other commercial data sources. Every piece of personal data we hold relates to a direct interaction you have initiated with the platform.
Section 04
Why We Use Your Data
We use your personal data for clearly defined, legitimate purposes. Below is a full list of the purposes for which zs999a processes personal data collected from players:
- Account management: Creating and maintaining your zs999a account, authenticating your identity at login, and managing your account preferences and settings.
- KYC and age verification: Verifying that you are at least 21 years of age and that your identity documents are genuine, in compliance with international gaming licence requirements.
- Payment processing: Processing PKR deposits and withdrawals via EasyPaisa, JazzCash, and other supported payment methods. Matching transaction records with your account balance to ensure accurate crediting and debiting.
- Game delivery and bet settlement: Delivering the games and betting markets you request, recording the outcomes of your sessions, and settling your bets correctly including PSL and international cricket markets.
- Fraud prevention and AML compliance: Monitoring transactions and gaming activity for indicators of fraud, money laundering, collusion, or bonus abuse. Filing suspicious activity reports where required by our international gaming licence obligations.
- Responsible gaming: Monitoring your gaming activity to identify potential problem gambling patterns. Applying deposit limits, session reminders, and self-exclusion restrictions that you have activated in your account settings.
- Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
- Legal and regulatory compliance: Retaining records of transactions and gaming activity as required by applicable gaming licence record-keeping obligations. Responding to lawful requests from regulatory authorities.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, security, and user experience of the zs999a platform.
- Communications: Sending you service-related notifications, security alerts, and — where you have explicitly opted in — promotional communications about bonuses and new games.
Section 05
Legal Basis for Processing
zs999a processes personal data only where a valid legal basis exists. The legal bases we rely on for each category of processing are as follows:
- Contractual necessity: Processing your account data, payment data, and gaming activity data is necessary to perform the contract between you and zs999a — i.e., to provide the gaming and betting services you have registered for.
- Legal obligation: KYC/AML data processing and long-term transaction record retention are required by our international gaming licence obligations. We cannot waive these requirements even at your request.
- Legitimate interests: Fraud detection, security monitoring, and platform analytics are processed on the basis of zs999a's legitimate interest in maintaining a secure, fair, and financially sound platform for all players.
- Consent: Sending you promotional communications, placing non-essential cookies, or processing any data category not covered by the above bases is done only with your explicit consent, which you may withdraw at any time by contacting support or adjusting your account settings.
You may withdraw consent for promotional communications at any time by updating your notification preferences in your zs999a account settings or by contacting our support team. Withdrawing consent for promotional communications does not affect the lawfulness of any processing carried out before withdrawal.
Section 06
Data Sharing & Third Parties
zs999a does not sell, rent, or trade your personal data to any third party for that party's own commercial marketing purposes. We share personal data only in the specific, limited circumstances described below:
- Payment processors: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, and USDT/crypto channel operators receive the minimum transaction data necessary to process your deposits and withdrawals. Each processor operates under its own applicable data protection framework.
- Game and platform technology providers: Third-party game studios and platform infrastructure providers may process technical and gaming activity data solely to deliver the services they provide to zs999a. All providers are bound by contractual data processing agreements that prohibit independent use of your data.
- Identity verification providers: CNIC images and supporting KYC documents are processed by our third-party verification partner solely for the purpose of confirming your identity. Verified documents are not retained by the provider beyond the period necessary to complete verification.
- Regulatory and law enforcement authorities: Where required by our international gaming licence or applicable law, we may disclose account and transaction records to licensing authorities, financial intelligence units, or law enforcement agencies. Such disclosures are made without prior notice to the affected player where legally required.
- Corporate transactions: In the event of a merger, acquisition, or asset sale involving zs999a, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being maintained.
Important: zs999a will never share your personal data — including your CNIC number, mobile wallet number, or bank account details — with any advertising network, data broker, or social media platform. If you receive unsolicited contact from any third party claiming to represent zs999a, please report it to our support team immediately.
Section 07
Data Retention
zs999a retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable regulatory obligations. The following retention periods apply:
| Data Category |
Retention Period |
Basis |
| Account & identity data |
Duration of account + 5 years post-closure |
Gaming licence requirement |
| KYC documents (CNIC, etc.) |
5 years from submission or account closure |
AML regulatory obligation |
| Transaction records |
5 years from transaction date |
Gaming licence & AML requirement |
| Gaming activity logs |
5 years from session date |
Dispute resolution & audit |
| Support communications |
2 years from last interaction |
Legitimate interest |
| Technical / server logs |
90 days |
Security monitoring |
| Marketing consent records |
Until consent withdrawn + 1 year |
Consent compliance |
| Self-exclusion records |
Minimum 6 years from activation |
Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.
Section 08
Your Data Rights
As a registered player on zs999a, you hold the following rights in relation to your personal data. These rights are subject to applicable exceptions, particularly where processing is required for legal compliance or fraud prevention purposes:
- Right of Access: You may request a copy of the personal data zs999a holds about you at any time. We will provide this within 30 days of a verified request, free of charge.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Basic account details such as email address and contact number can be updated directly from your account settings.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Note that transaction records and KYC data are subject to mandatory minimum retention periods under our gaming licence and cannot be deleted on request during those periods.
- Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
- Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format, applicable to data processed on the basis of your consent or contract performance.
- Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent — such as receiving promotional communications — you may withdraw consent at any time with immediate effect for future processing.
To exercise any of the above rights, contact the zs999a Data Protection team via live chat (available 24/7) or by emailing
[email protected] (plain text — not a clickable link). We will respond within 30 calendar days. Complex requests may be extended by a further 60 days with notification. We may require identity verification before processing any data rights request.
Section 09
Cookies & Tracking
zs999a uses cookies and similar tracking technologies on its platform. These technologies help us deliver a functional, personalised, and secure experience for all players.
The categories of cookies we use are:
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing platform functionality.
- Functional cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations. These improve your experience but are not essential.
- Analytics cookies: Collect anonymised data about how players navigate the platform — which games are most played, which pages generate support queries, and where users encounter errors. This data helps us improve zs999a for Pakistani players. We use only first-party analytics and do not share this data with advertising networks.
- Security cookies: Detect and mitigate suspicious activity, bot traffic, and potential account takeover attempts. These are essential to maintaining platform integrity.
zs999a does not use third-party advertising cookies or behavioural profiling cookies. We do not participate in cross-site tracking or retargeting networks.
You may manage your cookie preferences at any time via your browser settings. Blocking strictly necessary cookies will prevent you from logging in or using the platform. Blocking functional and analytics cookies will not prevent access but may reduce the quality of your experience on zs999a.
Section 10
Security Measures
Protecting your personal data is a core operational priority at zs999a. We implement a layered security architecture that includes both technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your data.
Our security measures include:
- TLS encryption for all data in transit between your device and zs999a servers, ensuring your login credentials, payment data, and personal information cannot be intercepted.
- AES-256 encryption for sensitive personal and financial data stored at rest in our database infrastructure.
- Strict role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data, and only to the extent required for their specific function.
- Multi-factor authentication options for player accounts, with mandatory 2FA for high-value withdrawal requests.
- Continuous automated monitoring for anomalous login activity, including detection of credential stuffing, brute force attempts, and account sharing.
- Regular independent security audits and penetration testing of the zs999a platform infrastructure.
- Formal incident response procedures ensuring that in the event of a confirmed data breach, affected players are notified without undue delay and relevant authorities are informed in accordance with applicable obligations.
Despite our robust security programme, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring your own device security. zs999a will never ask for your password via any channel.
Section 11
Children & Minors
STRICTLY 21+ ONLY. The zs999a platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. If we discover or have reasonable grounds to believe that personal data has been collected from a person under 21 years of age, we will immediately and permanently close the associated account, forfeit any balance held therein, and securely delete the minor's personal data to the extent permitted by our AML record-keeping obligations.
Parents and guardians who believe that a minor in their care has registered a zs999a account should contact our support team immediately via live chat or email. We will treat all such reports as high-priority and take immediate action upon receipt of sufficient identifying information.
zs999a employs CNIC-based age verification as part of the mandatory KYC process. Accounts that cannot be age-verified as 21+ are blocked from accessing any paid gaming features until verification is successfully completed. We also support the use of parental control software as an additional layer of protection in households with underage individuals.
Section 12
Policy Updates & Contact
zs999a reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our gaming licence requirements, platform features, or data processing practices. Material updates will be communicated to registered players via the email address on file or via a prominent notice displayed upon login.
The "Last Updated" date at the top of this policy reflects the most recent revision. We encourage you to review this page periodically. Your continued use of the zs999a platform following notification of any material change constitutes acceptance of the revised Privacy Policy.
For all data protection enquiries, requests to exercise your data rights, or privacy-related complaints, please contact us through any of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week directly on the zs999a platform. This is the fastest route for urgent privacy matters.
- Email: [email protected] — displayed as plain text; not a clickable link. Please include "Privacy Request" in the subject line along with your registered account email address.
If you are not satisfied with zs999a's response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority under our international gaming licence. Details of the applicable supervisory authority are available upon request from our support team.