Privacy Policy

1 Introduction

This Privacy Policy (hereinafter "Policy") is issued by ZB999 (hereinafter "ZB999", "We", "Us" or "the Operator"), the operator of the online betting and casino platform accessible at https://zb999.cam (the "Platform" or "Website").

This Policy describes the types of personal data ZB999 collects from users ("You", "Player" or "User") of the Platform, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you in relation to your personal data.

By registering an account on or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein, to the extent that consent is the applicable legal basis for processing. This Policy forms an integral part of ZB999's Terms & Conditions.

ZB999 is committed to handling personal data responsibly, in accordance with the data-protection obligations of its operating license jurisdiction. ZB999 does not operate under Pakistani data-protection authority supervision and makes no representation that this Policy satisfies Pakistani law. Pakistani players are advised to review applicable local law and to proceed on the basis of their own informed judgment.

2 Definitions

For the purposes of this Policy, the following definitions apply:

3 Data Controller

ZB999 is the data controller for personal data collected through the Platform. ZB999 operates under an international licensing framework. Specific legal entity details, registered address and licensing information are available in the Platform's legal disclosure section.

ZB999 is not registered with, supervised by or subject to the authority of the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority, or any Pakistani data-protection or financial-regulation body. References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are used solely as familiar payment references for Pakistani players and do not imply that these institutions are data processors, partners, endorsers or affiliates of ZB999.

For data-related queries, contact ZB999 via the details in Section 17.

4 Data We Collect

ZB999 collects personal data in the following categories, depending on your level of interaction with the Platform:

4.1 Registration & Identity Data

• Full legal name
• Date of birth
• Gender (where required)
• Residential address (city, province, postal code, country)
• Email address
• Mobile telephone number
• Username and encrypted password
• Language preference

4.2 KYC / Verification Data

• Copy of government-issued identity document (e.g., Pakistani CNIC, passport)
• Proof of residential address (e.g., utility bill, bank statement)
• Selfie or liveness-check image (where required)
• Payment method verification (e.g., screenshot of mobile wallet account showing name and number)

4.3 Financial Transaction Data

• Deposit history (amount, method, timestamp, reference)
• Withdrawal requests and processing records
• Bonus claims, wagering activity and balance history
• PKR account balance and transaction logs

4.4 Betting & Gaming Activity Data

• Sports bets placed, market, odds, stake and outcome
• Casino game sessions — game type, stakes, wins and losses
• Accumulator and parlay records
• Session duration and frequency

4.5 Technical & Device Data

• IP address and geolocation (country/city level)
• Device type, operating system and browser
• Session cookies and identifiers
• Pages visited, click paths and time on Platform

4.6 Communications Data

• Customer support chat transcripts
• Email correspondence
• Complaint records and formal correspondence
• Marketing preference and opt-in/opt-out history

5 How We Collect Data

ZB999 collects personal data through the following means:

• Direct provision: Data you enter during account registration, KYC submission, deposit/withdrawal requests, support queries and promotional opt-ins.
• Automated collection: Technical and device data collected automatically via cookies, server logs, analytics tools and fraud-detection scripts as you use the Platform.
• Third-party sources: Identity verification providers and KYC/AML compliance platforms may confirm or supplement identity data. Payment processors transmit transactional confirmation data. Fraud-screening services may cross-reference your data with watchlists.
• Publicly available information: Where permitted, ZB999 may verify account information against publicly available sources for fraud-prevention purposes.

6 Lawful Bases for Processing

ZB999 processes personal data only where a lawful basis exists. The applicable lawful bases are as follows:

7 How We Use Your Data

ZB999 uses personal data collected from you for the following specific purposes:

• Account administration: To create, manage, verify and maintain your ZB999 player account.
• Transaction processing: To accept deposits, process withdrawal requests and maintain accurate PKR account records.
• Identity and age verification: To confirm that you meet the minimum age requirement (18+, or higher as required) and to satisfy KYC and AML compliance obligations.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, multiple-account abuse, money laundering and unauthorised access.
• Responsible gambling: To monitor betting and deposit patterns and, where indicators of problem gambling are detected, to intervene in accordance with our Responsible Gambling policy.
• Customer support: To handle your queries, complaints and account requests through live chat and email.
• Platform improvement: To analyse aggregate usage patterns for the purpose of improving Platform performance, navigation and product offering.
• Marketing communications: To send promotional offers, bonus notifications and Platform updates where you have opted in. You may opt out at any time.
• Legal compliance: To fulfil obligations under applicable data-protection, AML and licensing law, and to respond to lawful authority requests.

8 Data Sharing & Disclosure

ZB999 does not sell, rent or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances:

8.1 Technology and Service Partners

ZB999 shares limited personal data with technology partners who process data on our behalf as data processors, including: KYC and AML verification providers; payment processing platforms; game-studio integration partners; fraud-detection and cybersecurity services; customer-support software providers; and platform analytics tools. All such processors are contractually bound to process data only on ZB999's instructions and to maintain appropriate security standards.

8.2 Legal and Regulatory Disclosure

ZB999 may disclose personal data to law-enforcement agencies, regulatory authorities or licensing bodies where required to do so by law, court order or lawful authority request. Such disclosures are limited to what is strictly required by the relevant legal obligation.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of ZB999's assets, personal data held by ZB999 may be transferred to the successor entity, subject to equivalent data-protection commitments.

8.4 With Your Consent

ZB999 will not share your personal data with any other third party without your explicit prior consent, except as described in this Section.

9 Data Retention

ZB999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected and to meet applicable legal, regulatory and contractual obligations. The following indicative retention periods apply:

• Account data (active accounts): Retained for the duration of the account relationship and for a minimum period thereafter as required by the Operator's licensing obligations (typically 5 years post-account closure).
• KYC and identity documents: Retained for the minimum period required by the Operator's AML compliance obligations — generally 5 years from the date of the last transaction or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years in accordance with standard AML record-keeping requirements.
• Customer support communications: Retained for up to 3 years from the date of the last interaction, or longer if a formal complaint or legal matter is ongoing.
• Marketing consent records: Retained until consent is withdrawn plus a reasonable period to demonstrate compliance.
• Technical and analytics data: Typically anonymised or deleted within 24 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10 Cookies & Tracking Technologies

The ZB999 Platform uses cookies and similar tracking technologies to maintain session integrity, prevent fraud, gather analytics and store user preferences. The following categories of cookies are used:

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security identifiers. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember preferences such as language setting, deposit currency display and recently viewed sections. These enhance your experience but are not essential.
• Analytics Cookies: Used to collect anonymised aggregate data about how users navigate the Platform, including pages visited and session duration. This data is used solely to improve Platform performance.
• Fraud Prevention Cookies: Used by our security and fraud-detection systems to identify unusual access patterns and protect accounts from unauthorised access.

You can control non-essential cookies through your browser settings. Blocking essential cookies may prevent you from logging into your account or using core Platform features. ZB999 does not use advertising tracking cookies or share cookie data with advertising networks.

11 International Data Transfers

ZB999 operates internationally and your personal data may be processed in countries outside Pakistan and outside the European Economic Area (EEA). Where such transfers occur, ZB999 ensures that appropriate safeguards are in place to protect your data, which may include:

• Contractual provisions with data processors that impose equivalent data-protection obligations.
• Transfers to jurisdictions recognised as providing an adequate level of data protection.
• Other transfer mechanisms permitted under applicable data-protection law.

By using the Platform, you acknowledge that your personal data may be transferred to and stored in jurisdictions outside Pakistan. ZB999 does not represent that such processing meets the requirements of Pakistani law, and players are advised to consider their own position under applicable local law.

12 Your Rights

Subject to applicable law and the Operator's licensing obligations, ZB999 recognises the following rights in relation to your personal data. To exercise any right, submit a request by email to [email protected] with the subject line "Data Rights Request — [Your Username]".

13 Children's Privacy

The ZB999 Platform is strictly intended for adults aged 18 and above, or the higher minimum age required by the Operator's license jurisdiction. ZB999 does not knowingly collect personal data from persons under the applicable minimum age.

If ZB999 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

Age verification is enforced during the KYC process. All Pakistani users are required to submit a valid CNIC or passport confirming date of birth before withdrawals are processed.

14 Security Measures

ZB999 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include:

• Encryption in transit: All connections to the Platform use TLS 1.3 or higher. Personal and financial data is never transmitted over unencrypted connections.
• Encryption at rest: Sensitive personal data and financial records are stored using encryption at rest.
• Access controls: Access to personal data is restricted to ZB999 personnel and authorised processors on a need-to-know basis. Access logs are maintained.
• Intrusion detection: Network and application-level monitoring is in place to detect and respond to unauthorised access attempts.
• Vulnerability management: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities.
• Incident response: ZB999 maintains a data-breach response procedure. In the event of a breach affecting your data, you will be notified in accordance with applicable legal requirements.

While ZB999 implements commercially reasonable security measures, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying ZB999 promptly if you suspect unauthorised access to your account.

15 Third-Party Services

The ZB999 Platform integrates third-party technology services including game studios, live-dealer providers, sports-data partners and payment processors. These third-party services operate under their own privacy policies, and ZB999 is not responsible for their data-handling practices beyond the contractual obligations imposed on them as data processors.

ZB999's Platform does not contain links to external websites or applications beyond those necessary for Platform functionality. This Policy does not apply to any third-party website you may access independently.

Payment service references on this site — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar player references only. These providers are not data processors for ZB999 unless a direct payment processing relationship exists and is separately disclosed in the cashier section.

16 Changes to This Policy

ZB999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices or Platform functionality. When material changes are made, ZB999 will notify registered users via email to the address on file and/or by posting a prominent notice on the Platform.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

17 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the personal data ZB999 holds about you, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week.

• Live Chat: Available directly on the Platform. Recommended for urgent account and security queries.
• Email (General Support): [email protected]
• Data Rights Requests: Email with subject line "Data Rights Request — [Your Username]" to [email protected]
• Languages: English and Urdu are both supported by our support team.

ZB999 aims to acknowledge privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days. For formal complaints that remain unresolved, players may refer the matter to the dispute-resolution body associated with the Operator's licensing authority, where applicable.