Privacy Policy — zt999 Online Casino

Welcome to the zt999 Privacy Policy. zt999 (zt999.bio) is Pakistan's premier online casino and sports betting platform, offering live casino games, cricket and PSL betting, slot games, fishing games, and a range of other entertainment products to registered players across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan.

This Privacy Policy describes in plain legal English how zt999 collects, processes, stores, and protects the personal data of all users who access or register on the zt999 platform. It also explains the rights you hold as a data subject and how to exercise them.

By registering an account on zt999, depositing funds via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT TRC20, or simply browsing the zt999 website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must cease using the zt999 platform immediately.

For the purposes of applicable data protection law, zt999 acts as the data controller in respect of personal data collected from players who use the zt999 platform. As data controller, zt999 determines the purposes and means by which personal data is processed.

zt999 operates under an international online gaming licence. The platform is accessible globally, including to English-speaking players in Pakistan, and all data processing activities are conducted in compliance with our licensing authority's data protection requirements as well as internationally recognised privacy frameworks.

All data-related enquiries, access requests, and complaints should be directed to our dedicated privacy team at [email protected].

zt999 collects and processes various categories of personal data depending on the nature of your interaction with the platform. The categories of data we collect are described below:

3.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (used to verify you are 21 years of age or older)
• Gender (optional, for personalisation purposes)
• Nationality and country of residence
• Username chosen at registration

3.2 Contact Data

• Email address (primary communication channel)
• Mobile phone number (for OTP verification and account security)
• Residential address in Pakistan (Karachi, Lahore, Islamabad, Faisalabad, or other cities)

3.3 KYC & Verification Documents

• Scanned or photographed copy of your CNIC, passport, or other government-issued photo ID
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months)
• Proof of payment method ownership (JazzCash or EasyPaisa account confirmation, or bank statement)
• Source of funds documentation where required for high-value transactions

3.4 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used
• PKR wallet balance and transaction history
• USDT TRC20 wallet addresses used for cryptocurrency transactions
• Bonus history, wagering activity, and promotion redemption records

3.5 Gaming & Betting Activity Data

• Game session logs including games played, stakes, wins, and losses
• Sports betting history including PSL, international cricket, UFC, and other markets
• Session duration, login and logout timestamps
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)

3.6 Technical & Device Data

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser type
• Unique device identifiers
• Referring URLs and navigation paths within the zt999 website

3.7 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the zt999 support or compliance team
• Records of complaints and dispute resolution communications

zt999 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically: Through cookies, server logs, and analytics tools as you browse and interact with the zt999 website and game lobby.
• From payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 processing partners may share transaction confirmation data with zt999 to verify deposits and process withdrawals.
• From identity verification services: zt999 may use licensed third-party KYC providers to verify the authenticity of identity documents submitted during the verification process.
• From fraud prevention partners: Industry-standard fraud detection systems may flag unusual account activity and share relevant signals with zt999's compliance team.

zt999 processes personal data only where a lawful basis exists under applicable data protection law. The table below summarises our primary processing activities, their purposes, and the legal basis relied upon:

Where zt999 relies on consent as the legal basis for processing — such as for marketing communications — you may withdraw that consent at any time by contacting [email protected] or by updating your notification preferences in your zt999 account settings.

zt999 may share your personal data with the following categories of recipients only to the extent necessary for the operation of the platform and compliance with legal obligations:

• Licensed Game Providers: Game studios and live casino operators whose products are hosted on zt999 receive only the minimum session data required to operate individual game rounds. No full player profiles are shared.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive transaction details necessary to complete deposits and withdrawals.
• KYC & Identity Verification Partners: Licensed identity verification providers receive document images and personal details submitted during KYC for the sole purpose of document authentication.
• Fraud Prevention & AML Services: Industry-standard anti-money laundering and fraud screening tools may process transaction patterns and account data to flag suspicious activity.
• Regulatory & Licensing Authorities: zt999 may be legally required to disclose player data to its licensing authority or competent regulatory bodies in response to a lawful request.
• Law Enforcement: Where required by applicable law or court order, zt999 will disclose personal data to law enforcement or government agencies.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by zt999 may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

All third parties with whom zt999 shares personal data are required to process that data in accordance with applicable privacy laws and under contractual data processing agreements that bind them to the same level of data protection required of zt999.

zt999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Key retention periods are as follows:

• Active Account Data: Retained for the lifetime of your zt999 account plus five years following permanent account closure, in compliance with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission or from account closure, whichever is later.
• Transaction Records: All financial transaction records including PKR deposits, withdrawals, and bonus transactions are retained for a minimum of five years.
• Game Session Logs: Retained for a minimum of two years for dispute resolution purposes, and up to five years where flagged for investigation.
• Support Communications: Live chat transcripts and email records are retained for two years following the resolution of the relevant support interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications or for a maximum of three years from last engagement, whichever comes first.

Once the applicable retention period expires, personal data is securely and irreversibly deleted or anonymised in line with industry-standard data disposal practices.

zt999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 protocol for all data in transit between your browser and zt999 servers.
• Access Controls: Role-based access controls ensure that zt999 staff can only access personal data relevant to their specific job function. All access is logged and regularly audited.
• Two-Factor Authentication: zt999 offers and recommends 2FA on all player accounts. Internal staff systems require mandatory 2FA at all times.
• Regular Security Audits: The zt999 platform undergoes independent penetration testing and vulnerability assessments on a regular basis.
• Incident Response: zt999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

zt999 uses cookies and similar tracking technologies on the zt999.bio website to deliver a functional, personalised, and secure gaming experience. The types of cookies we use are described below:

You may manage your cookie preferences at any time through the cookie settings panel accessible in the zt999 footer. Please note that disabling certain cookies may affect the functionality of some features on the platform.

As a data subject, you hold the following rights in relation to the personal data that zt999 holds about you. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data zt999 holds about you. We will provide a structured data export within five business days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can be made directly in your account settings.
• Right to Erasure: You may request deletion of your personal data. Note that zt999 may be legally required to retain certain data (KYC documents, transaction records) for the minimum retention periods described in Section 7, which take precedence over erasure requests.
• Right to Restriction: You may request that zt999 restrict the processing of your data in certain circumstances — for example, while a dispute is being investigated.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to zt999 in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interest — including direct marketing — at any time. We will cease the relevant processing upon receipt of a valid objection.
• Right to Withdraw Consent: Where zt999 relies on your consent to process data (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

zt999 aims to respond to all data rights requests within five business days. Complex requests may take up to 30 days. We will communicate any extension in writing. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

During registration and at the KYC verification stage, zt999 verifies the date of birth of every player to confirm they are 21 years of age or older. Where zt999 has reason to believe that a registered account belongs to a minor, the account will be suspended immediately, all pending transactions will be frozen, and the matter will be escalated to our compliance team.

If a parent or guardian believes that their child under the age of 21 has registered an account on zt999, they should contact our support team immediately at [email protected]. zt999 will investigate and, where confirmed, close the account and arrange return of any funds deposited in accordance with our underage gambling policy.

zt999 encourages parents and guardians to make use of third-party parental control software to restrict access to online gambling platforms on shared or family devices.

zt999 operates as an internationally licensed gaming platform. As a result, personal data collected from Pakistani players may be transferred to and processed in jurisdictions outside of Pakistan, including the jurisdiction in which zt999 holds its operating licence and the server locations used by our technology and game provider partners.

Where personal data is transferred internationally, zt999 ensures that appropriate safeguards are in place to protect your data to the same standard required within Pakistan and in line with our licensing authority's data protection requirements. These safeguards include:

• Data processing agreements with all third-party recipients incorporating standard contractual clauses for international data transfers.
• Transfers only to jurisdictions or recipients that provide an adequate level of data protection as recognised by applicable international privacy frameworks.
• Regular review of third-party data processing arrangements to ensure ongoing compliance.

zt999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, zt999 will:

• Update the "Last Updated" date at the top of this page.
• Where changes are significant, notify active players via the email address registered to their zt999 account or via an on-screen notification upon next login.

Your continued use of the zt999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically so you remain informed about how zt999 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zt999 handles your personal data, please contact our dedicated privacy support team through any of the following channels:

zt999 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt within two business days and aim to resolve the matter fully within 30 calendar days. For complex matters, we will keep you informed of progress throughout the investigation.

If you are not satisfied with zt999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or to the complaints body designated by zt999's licensing authority. Details of the relevant supervisory authority will be provided upon request.