ZS99 Privacy Policy

1 Who We Are

ZS99 ("we", "us", "the Platform") operates the online betting and casino platform accessible at zs99.vu and through the ZS99 mobile app. We are the data controller for personal information collected through these channels.

This Privacy Policy applies to all registered players, visitors to our website, and users of the ZS99 mobile application. It covers all services offered on the platform, including sports betting on cricket, PSL, T20, and football matches, casino games, slot games, live casino, VIP membership, and all payment-related services conducted in PKR.

If you have any questions about how your data is handled, you can reach us through the contact details listed at the end of this policy.

2 Personal Data We Collect

We collect only the information we genuinely need to provide our services. The categories of personal data we may collect include:

We do not collect sensitive data categories such as political views, religious beliefs, or biometric data beyond what is required for standard identity verification.

3 How We Collect Your Data

ZS99 collects personal data through the following channels:

• Direct registration: Information you provide when creating your ZS99 account — your name, mobile number, date of birth, and initial payment details.
• Account activity: Data generated automatically as you use the platform, including bets placed, games played, login times, and deposit or withdrawal requests.
• Identity verification: Documents you submit during the KYC (Know Your Customer) process, such as a copy of your CNIC or passport.
• Payment processors: Transaction confirmation data passed back to us by JazzCash, Easypaisa, Raast, bank transfer systems, or card networks when you make a deposit or withdrawal.
• Cookies and tracking technologies: Technical data collected automatically when you browse our website or use the app. See Section 8 for full details.
• Customer support: Any information you voluntarily share when contacting our support team via live chat or email.

4 Why We Use Your Data

We use personal data to run ZS99 effectively and to provide you with a safe, personalised betting experience. Specific uses include:

• Account management: Creating, maintaining, and securing your ZS99 account.
• Transaction processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers, mobile wallets, and cards.
• Identity verification: Confirming your age and identity to meet our 18+ requirement and prevent fraud.
• Customer support: Responding to your queries, complaints, and account-related requests promptly.
• Platform personalisation: Tailoring your betting dashboard, game recommendations, and promotional offers to your preferences and activity patterns.
• Responsible gaming: Monitoring for patterns that may indicate problem gambling and applying any deposit limits, session reminders, or self-exclusions you have set.
• Security and fraud prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, and other fraudulent activity.
• Platform improvement: Analysing aggregated, anonymised usage data to improve our products, fix issues, and enhance the user experience.
• Legal obligations: Retaining records as required for financial compliance and responding to lawful requests from relevant authorities.

5 Legal Basis for Processing

ZS99 processes your personal data on the following legal grounds:

• Contract performance: Most data processing is necessary to fulfil the agreement between you and ZS99 — without it, we cannot operate your account or process transactions.
• Legitimate interests: Security monitoring, fraud detection, and platform analytics serve our legitimate interest in keeping ZS99 safe and functional for all players.
• Legal obligation: Identity verification and financial record-keeping are required to comply with applicable obligations.
• Consent: Where we send you optional promotional communications or use non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.

6 Data Sharing & Third Parties

ZS99 shares personal data only where strictly necessary to operate the platform. We work with the following categories of trusted third parties:

• Payment processors: JazzCash, Easypaisa, Raast, and bank partners receive transaction data required to process your PKR deposits and withdrawals.
• Game software providers: Casino and slot game providers receive anonymised session and game data to render games correctly and calculate outcomes. They do not receive your identity data.
• Identity verification services: If you submit KYC documents, these may be processed by a third-party verification provider operating under strict data handling agreements with ZS99.
• IT and hosting infrastructure: Our servers and cloud infrastructure providers store platform data under confidentiality agreements.
• Fraud detection tools: Automated systems may process device and behavioural data to flag suspicious activity.

All third parties with whom we share data are contractually required to process it only for the agreed purpose and to maintain appropriate security standards. ZS99 does not share your data with any party for their own marketing purposes.

In the event of a lawful request from a relevant authority — such as a court order or formal investigation — ZS99 may be required to disclose certain data. We will notify affected players where we are legally permitted to do so.

7 Payment Data & PKR Transactions

All financial transactions on ZS99 are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank account, or a card, the relevant payment provider processes the transaction on your behalf.

ZS99 does not store full card numbers, mobile wallet PINs, or bank account credentials on our servers. We receive only transaction confirmation references and basic metadata (amount, date, method) necessary for our records.

Your payment data is handled by payment processors who maintain their own security standards. ZS99 recommends that you review the privacy policies of your chosen payment provider for full details on how they handle your financial information.

8 Cookies & Tracking Technologies

ZS99 uses cookies and similar technologies on our website and mobile app to ensure the platform works correctly and to understand how players use our services. The types of cookies we use are:

• Essential cookies: Required for the platform to function — these handle your login session, security tokens, and core navigation. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language, display settings, and last-used payment method to make your experience smoother on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used only to improve ZS99 and is never linked back to your individual account.
• Security cookies: Help us detect and prevent fraudulent activity, unusual login patterns, and automated bot behaviour.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ZS99 platform, particularly login persistence and payment flow.

The ZS99 mobile app uses equivalent device-level tracking technologies. You can manage app permissions through your device's settings menu.

9 Data Retention

ZS99 retains your personal data for as long as your account is active and for a reasonable period thereafter. The key retention periods are:

• Active account data: Retained for the full duration of your account and used to provide services, resolve disputes, and maintain betting history records.
• Identity verification documents: Retained for a minimum period following account closure to meet record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping practices.
• Support communications: Chat logs and email correspondence are retained for up to two years from the date of the interaction.
• Inactive accounts: If your account has been dormant for 12 consecutive months, we may contact you before archiving account data. Archived data is retained in a restricted state until the end of the applicable retention period.

Once the applicable retention period expires, your data is securely deleted or anonymised so it can no longer be associated with you as an individual.

10 Your Rights Over Your Data

As a ZS99 player, you have meaningful control over your personal data. The following rights are available to you:

To exercise any of these rights, contact our support team via live chat or email with your account details and the specific request. We aim to respond within a reasonable timeframe. Some requests — such as full data deletion — may take longer if financial retention obligations apply.

11 Data Security

ZS99 takes the security of your personal data seriously. We employ industry-standard technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and ZS99 servers is encrypted in transit using SSL/TLS protocols.
• Encrypted data storage: Sensitive account and identity data is stored in encrypted form on our servers.
• Access controls: Only authorised ZS99 personnel with a legitimate need can access your account data, and all such access is logged and audited.
• Two-factor authentication: ZS99 supports two-factor authentication on your account for an additional layer of login security.
• Fraud monitoring: Automated systems continuously monitor account activity for signs of unauthorised access or suspicious behaviour.
• Regular security reviews: Our platform undergoes periodic security assessments to identify and address potential vulnerabilities.

While we take every reasonable precaution, no online platform can guarantee absolute security. You are also responsible for keeping your password and account credentials secure. If you suspect your account has been compromised, contact our support team immediately through live chat or the contact details in Section 14.

12 Children's Privacy

ZS99 is strictly an 18+ platform. We do not knowingly collect, store, or process personal data relating to anyone under the age of 18. Our registration process includes age verification steps precisely to enforce this requirement.

If we become aware that a person under 18 has registered an account, that account will be closed immediately, all associated data will be deleted in accordance with our retention policy, and any deposits will be refunded to the original payment method where possible.

If you believe a minor may have accessed ZS99 using falsified information, please contact our support team immediately so we can investigate and take appropriate action.

13 Updates to This Privacy Policy

ZS99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform message.

We encourage you to review this policy periodically so you are always aware of how your data is being handled. Your continued use of ZS99 after any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may request account closure through our support team.

14 Contact Us About Privacy

If you have questions, concerns, or requests related to this Privacy Policy or the way ZS99 handles your personal data, please get in touch with us using the following channels:

• Email: [email protected] (displayed for reference only)
• Live Chat: Available 24/7 through the ZS99 website and mobile app
• FAQ: Visit our FAQ page for common privacy-related questions

We take all privacy-related enquiries seriously and aim to provide a clear, helpful response within a reasonable timeframe. For data access or deletion requests, please include your registered account mobile number or email address so we can locate your records efficiently.