zy999 Privacy Policy —
How We Collect, Use &
Protect Your Personal Data

1 Introduction

zy999 is an online casino and sports betting platform serving players across Pakistan. We are deeply committed to protecting the privacy and personal data of every player who trusts us with their information. This Privacy Policy has been written to be clear and transparent — not buried in legal jargon — so that you as a Pakistani player can understand exactly how your data is handled from the moment you visit zy999.games to the moment you request account closure.

This Policy applies to all personal data processed by zy999 in connection with your use of the platform, including data collected during account registration, identity verification (KYC), deposit and withdrawal transactions, gameplay activity, bonus participation, customer support interactions, and general platform usage. It applies whether you access zy999 via a desktop browser, a mobile browser, or any other interface.

zy999 aligns its data protection practices with internationally recognised privacy standards. While Pakistan's Personal Data Protection Bill continues to develop, zy999 voluntarily applies the core principles of GDPR-aligned data protection as our operational standard — meaning your data is treated with the rigour expected under leading global privacy frameworks.

2 Who We Are

For the purposes of this Privacy Policy, the data controller responsible for your personal information is zy999, the operator of the online gaming platform accessible at zy999.games. zy999 is the entity that determines the purposes and means by which your personal data is processed in connection with your account and your use of the platform's services.

If you have any questions about this Policy or about how zy999 handles your personal data, you can contact our Data Protection team at any time using the contact details provided in Section 15 of this document.

3 Personal Data We Collect

zy999 collects different categories of personal data depending on the nature of your interaction with the platform. The following table summarises the main categories of data collected and their purpose:

4 How We Collect Your Data

zy999 collects your personal data through the following channels:

4.1 Direct Collection

Data you actively provide to zy999 when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support query, or updating your account settings. This includes all information you type into forms, upload as documents, or communicate to us via live chat or email.

4.2 Automated Collection

Technical and usage data that is automatically collected when you access the zy999 platform. This includes your IP address, device identifiers, browser information, session timestamps, and navigation patterns. This data is collected using server logs, cookies, and similar technologies as described in Section 8.

4.3 Third-Party Sources

In limited circumstances, zy999 may receive data about you from authorised third-party sources. This includes identity verification data from KYC service providers, fraud prevention signals from risk assessment partners, and payment confirmation data from your nominated Pakistani payment provider (such as Easypaisa, JazzCash, or your bank). Any such data is received in accordance with the third party's own privacy policy and applicable law.

5 How We Use Your Personal Data

zy999 uses your personal data for the following purposes:

• Account management: Creating and maintaining your zy999 account, authenticating your identity at login, and managing your account preferences and settings.
• KYC and age verification: Verifying that you are aged 18 or above and confirming your identity as required for responsible gaming and regulatory compliance purposes.
• Payment processing: Processing PKR deposits from your chosen Pakistani payment method and processing withdrawal requests to your verified bank account or mobile wallet.
• Gameplay and platform delivery: Delivering the games, sportsbook, and other platform features to you, recording your gameplay activity, and maintaining accurate account balance records.
• Bonus and promotion administration: Managing your eligibility for and participation in zy999 bonus offers and promotional campaigns.
• Customer support: Responding to your queries, resolving complaints, and providing assistance with your zy999 account.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and offering appropriate responsible gaming interventions where warranted.
• Legal and regulatory compliance: Meeting zy999's obligations under applicable law, including anti-money laundering requirements and responses to lawful requests from relevant authorities.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of the zy999 platform for Pakistani players.
• Marketing communications (with your consent): Sending you information about zy999 promotions, new games, and platform updates where you have opted in to receive such communications.

6 Legal Basis for Processing

zy999 processes your personal data only where there is a valid legal basis for doing so. The primary legal bases on which zy999 relies are:

• Performance of a contract: Processing that is necessary to provide you with the zy999 platform services you have signed up for, including account management, payment processing, and gameplay delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC and anti-money laundering obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the platform where these interests are not overridden by your privacy rights.
• Consent: Processing for optional activities such as marketing communications, where zy999 has obtained your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or contacting support.

7 Sharing Your Personal Data

zy999 does not sell your personal data to third parties. zy999 may share your data with the following categories of recipient only where strictly necessary:

7.1 Service Providers

Carefully selected third-party service providers who assist zy999 in operating the platform. This includes KYC verification providers, payment processing partners (such as Easypaisa, JazzCash, and partnered banks), cloud hosting providers, fraud prevention systems, and customer support platform operators. All such providers are bound by data processing agreements that require them to protect your data and use it only for the specified purpose.

7.2 Game and Content Providers

Third-party game providers whose titles appear on the zy999 platform may receive your player session data (such as a pseudonymous player identifier, stake amounts, and game outcome data) for the purpose of delivering the game and recording results. These providers do not receive your name, contact details, or payment information.

7.3 Legal and Regulatory Authorities

zy999 may disclose your personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in response to a lawful formal request. zy999 will challenge any request it believes to be disproportionate or unlawful.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of zy999's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your data will remain subject to the terms of this Privacy Policy unless you are notified of changes.

8 Cookies & Tracking Technologies

zy999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file stored on your device when you visit a website. zy999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how players navigate and use the zy999 platform — for example, which pages are most visited and where errors occur. This data is used solely to improve the platform and is not linked to your individual identity.
• Functional Cookies: Remember your preferences and settings (such as your preferred language or display settings) to provide a personalised platform experience.
• Analytics Cookies: Help zy999 understand aggregate player behaviour to improve game recommendations and platform design. All analytics data is processed at an aggregated, anonymised level.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the zy999 platform. zy999 does not use third-party advertising cookies or cross-site tracking technologies.

9 Data Security

zy999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and zy999's servers.
• AES-256 encryption for sensitive data at rest, including payment information and identity documents.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with full audit logging of all access events.
• Multi-factor authentication for internal staff access to systems holding personal data.
• Regular penetration testing and vulnerability assessments by independent security specialists.
• Incident response procedures ensuring that any personal data breach is assessed, contained, and — where required — reported promptly.

10 Data Retention

zy999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active zy999 account and for a minimum of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction.
• Gameplay records: Individual game session data is retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Marketing preferences and communications: Retained for three (3) years from the date of your last interaction with zy999 marketing, unless you request earlier deletion.
• Technical and usage data: Typically retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted.

Where there is no overriding legal obligation requiring continued retention, zy999 will securely delete or irreversibly anonymise your personal data when the applicable retention period expires.

11 Your Privacy Rights

As a player on the zy999 platform, you have the following rights in relation to your personal data. zy999 is committed to honouring these rights promptly and without unnecessary barriers:

• Right of Access: You have the right to request a copy of the personal data zy999 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure: You have the right to request deletion of your personal data where there is no overriding legal obligation requiring zy999 to retain it. Note that certain data (such as transaction records) must be retained for legal compliance reasons even after account closure.
• Right to Restriction: You have the right to request that zy999 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to zy999 in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, although zy999 may be able to demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of these rights, please contact zy999's support team using the details in Section 15. zy999 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension within the initial thirty-day period.

12 Children's Privacy — 18+ Only

The zy999 platform is strictly intended for adults aged 18 and above. zy999 does not knowingly collect personal data from individuals under the age of 18. If zy999 becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account.

13 International Data Transfers

zy999 primarily processes your personal data on servers located within controlled data centre environments. In some cases, personal data may be transferred to or accessed from locations outside Pakistan — for example, where zy999 uses cloud infrastructure providers or third-party service providers with operations in multiple countries.

Where such international transfers occur, zy999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. These safeguards may include standard contractual clauses, data processing agreements with privacy obligations, or transfers to jurisdictions with recognised adequate levels of data protection.

14 Updates to This Privacy Policy

zy999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, zy999 will provide notice to registered players via email to the address registered on your account, or via a prominent notice on the zy999 platform, prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised with each update.

Your continued use of the zy999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any update, you may request account closure in accordance with the Terms & Conditions. We encourage you to review this Policy periodically to stay informed about how zy999 protects your data.

15 Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the zy999 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the zy999 platform — the fastest way to reach our team for urgent privacy queries.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered username and a clear description of your request. Responses are provided within 30 days.

zy999 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you have the right to escalate the matter to a relevant data protection supervisory authority. zy999 will cooperate fully with any such authority in the resolution of complaints.