zc999 Privacy Policy

This Privacy Policy is issued by zc999 ("we", "us", "the Platform"), the operator of the online gaming and sports betting platform accessible at zc999.club. zc999 acts as the data controller in respect of personal data collected from registered users and visitors of the platform in accordance with the data practices described herein.

The platform is designed for and primarily accessed by players in Pakistan. However, this Privacy Policy applies globally to all users of zc999.club regardless of their location. Where local data protection laws impose additional obligations, zc999 will endeavour to comply with those requirements to the extent practicable.

Questions, requests, or complaints regarding this Privacy Policy or zc999's data practices should be directed to the support team via the contact details provided in Section 13 of this document.

zc999 collects personal data from users through the following means: directly from the user during registration and account management; automatically through the user's interaction with the platform; and from payment processors in connection with deposit and withdrawal transactions.

Registration and Account Data:

• Full name as provided during registration
• Date of birth (for age verification purposes)
• Pakistani mobile number registered to the account
• Account username chosen by the user
• Hashed account password (never stored in plain text)

Identity Verification Data (where requested):

• Government-issued identification document details (e.g., CNIC number)
• Any additional documentation provided to satisfy KYC or age verification requirements

Transaction and Financial Data:

• Deposit amounts, withdrawal amounts, and transaction timestamps in PKR
• JazzCash or Easypaisa account reference numbers associated with transactions
• Bank account identifiers provided for bank transfer transactions (HBL, UBL, Meezan Bank, Bank Alfalah)

Technical and Usage Data:

• IP address and approximate geographic location at time of login
• Device type, browser type, and operating system
• Session timestamps, login history, and platform navigation patterns
• Betting history, game session data, and wagering records

zc999 uses personal data collected from users for the following purposes:

• Account creation and management: Processing your registration, maintaining your account, and enabling you to log in to the zc999 platform securely.
• Identity and age verification: Confirming that you meet the 18+ age requirement and verifying your identity in compliance with anti-fraud and anti-money laundering obligations.
• Payment processing: Executing PKR deposits and withdrawals via JazzCash, Easypaisa, and supported bank channels, and maintaining accurate transaction records.
• Platform operation and improvement: Delivering gaming services, personalising your experience, diagnosing technical issues, and improving platform performance based on aggregate usage patterns.
• Responsible gaming compliance: Monitoring account activity to identify patterns associated with problem gambling, enforcing player-set limits, and processing self-exclusion requests.
• Security and fraud prevention: Detecting and investigating suspected fraud, account compromise, bot activity, or other prohibited conduct as defined in the Terms and Conditions.
• Customer support: Responding to queries, resolving disputes, and processing account requests submitted via live chat or email.
• Legal and regulatory compliance: Maintaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities.

zc999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services described in the Terms and Conditions, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override the fundamental rights of users.
• Consent: Where zc999 seeks to send promotional or marketing communications, consent will be obtained separately. Users may withdraw marketing consent at any time by contacting support.

zc999 does not sell, rent, or trade personal data to third-party advertisers, marketing agencies, or data brokers under any circumstances. Personal data is shared with third parties only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, and banking partners receive the minimum transaction data necessary to process deposits and withdrawals. These processors operate under their own privacy frameworks and security certifications.
• Game technology providers: Licensed game studios (including those providing live casino, slot, and fishing game content) may receive anonymised session data for game delivery purposes. These providers do not receive full user identity data.
• Identity verification services: Where third-party KYC verification is employed, only the specific data required for verification is transmitted, under contractual data processing agreements.
• Regulatory and law enforcement authorities: zc999 will disclose personal data to competent authorities where required by law or valid legal process. zc999 will not voluntarily share data with authorities beyond the scope of such legal obligations.
• Platform infrastructure providers: Hosting, cloud, and security infrastructure providers may process data on zc999's behalf under data processing agreements that restrict use to platform operation purposes only.

All financial transactions on the zc999 platform are conducted in Pakistani Rupees. zc999 does not store full payment credentials — such as complete JazzCash mobile wallet credentials, Easypaisa PINs, or full bank account login details — on its own servers. Payment data flows through certified, secure payment gateways operated by the respective payment providers.

Transaction records — including deposit amounts, withdrawal amounts, timestamps, and payment method references — are retained by zc999 for the period required by applicable financial record-keeping obligations. These records may be accessed by the user via their account transaction history panel at any time during the active account lifecycle.

The zc999 platform uses cookies and similar local storage technologies for the following purposes:

• Essential session cookies: Required to maintain your authenticated login session while navigating the platform. Without these, you would be logged out each time you navigate between pages. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Aggregate, anonymised data on how users navigate the platform, which pages are visited most frequently, and where errors occur. This data is used to improve platform performance and user experience.
• Preference cookies: Store your platform display preferences, such as chosen game categories or notification settings, so that your experience is consistent across sessions.

You can manage cookie preferences through your browser settings. Blocking essential session cookies will prevent you from logging in to your zc999 account. Blocking performance or preference cookies will not affect your ability to access the platform but may result in a less personalised experience.

zc999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention guidelines apply:

• Active account data: Retained for the duration of the active account relationship, plus any additional legally mandated period following account closure.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with standard financial record-keeping obligations.
• Identity verification documents: Retained for the legally required period following account closure, which may vary by applicable jurisdiction.
• Self-exclusion records: Where a player has permanently self-excluded from zc999, certain identifying information is retained to ensure the exclusion cannot be circumvented by re-registration.
• Support and communication records: Retained for a reasonable period to facilitate follow-up support and dispute resolution.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised.

Subject to applicable law and any overriding legal obligations, registered users of zc999 have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data zc999 holds about you, along with information about how it is processed.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data held in your zc999 account.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal retention obligation applies.
• Right to restrict processing: You may request that zc999 limit processing of your personal data in certain circumstances, such as while the accuracy of the data is under dispute.
• Right to data portability: Where technically feasible and legally applicable, you may request a structured copy of your personal data in a machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the zc999 support team via live chat or at the email address listed in Section 13. zc999 will endeavour to respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days with notice to the user.

zc999 implements a range of technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• All data in transit between user devices and zc999 servers is protected by HTTPS/TLS encryption.
• Account passwords are stored using strong one-way hashing algorithms. Plain-text passwords are never stored or transmitted.
• Two-factor authentication (OTP via SMS to the registered Pakistani mobile number) is available to all account holders and strongly recommended.
• Login attempts are subject to rate limiting and automated lockout policies to prevent brute-force credential attacks.
• Access to personal data within zc999's internal systems is restricted on a need-to-know basis, with audit logging of access events.
• Regular security assessments and infrastructure monitoring are conducted to identify and remediate vulnerabilities.

No security system is completely impenetrable. In the event of a data breach that is likely to result in significant risk to affected users, zc999 will notify affected users and relevant authorities in accordance with applicable legal obligations.

The zc999 platform is strictly restricted to individuals aged 18 years and above. zc999 does not knowingly collect personal data from any person under the age of 18. Age confirmation is required at registration, and zc999 reserves the right to request documentary proof of age at any time.

If zc999 becomes aware that personal data has been collected from a person under the age of 18, the account will be immediately closed, any collected data will be deleted, and any deposited funds will be returned to the originating payment method where feasible. If you believe a minor has registered an account on the zc999 platform, please contact the support team immediately.

zc999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data practices, legal requirements, or platform features. The revised policy will be published on this page with an updated effective date. Where changes are material, zc999 will endeavour to provide advance notice to registered users via their registered contact details.

Continued use of the zc999 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should discontinue use of the platform and contact support to close your account and request data deletion where applicable.

For all privacy-related queries, data rights requests, or to report a suspected data breach or misuse of your personal data, please contact the zc999 data privacy team through the following channels:

• Live Chat: Available 24/7 via your account dashboard. This is the fastest channel for account-related privacy requests. The support team operates on Pakistan Standard Time (PKT, UTC+5).
• Email: [email protected] — Please include "Privacy Request" in the subject line and provide your account username to expedite your request. This email address is displayed as plain text and is not a clickable link.

zc999 aims to acknowledge all privacy-related requests within 3 business days and to resolve them within 30 calendar days, subject to the complexity of the request and any applicable legal constraints.