Privacy Policy – How zk999 Collects, Uses and Protects Your Data

1 Who We Are and How to Contact Us

zk999 ("we", "us", "our") operates the online casino and sportsbook platform accessible at zk999.asia. We act as the data controller in respect of personal data collected from registered players and website visitors.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection team:

• Email: [email protected] — subject line: "Privacy — Data Request"
• Live Chat: Available 24/7 on the zk999 website

2 What Personal Data We Collect

Depending on how you interact with zk999, we may collect the following categories of personal data:

2.1 Registration Data

• Full legal name
• Date of birth
• Email address
• Mobile telephone number (Pakistani format where applicable)
• Country of residence
• Username and encrypted password

2.2 Identity Verification Data

• Copy of government-issued identity document (e.g. CNIC, passport, driver's licence)
• Proof of address documentation
• Source of funds documentation where required for AML compliance

2.3 Financial Data

• JazzCash or Easypaisa mobile wallet identifiers
• Bank account details (account title, IBAN) where applicable
• Transaction history: deposits, withdrawals, and bet settlements
• Cryptocurrency wallet addresses where USDT TRC20 is used

2.4 Gaming Activity Data

• Game session records (game type, stake, result, duration)
• Sports betting market selections, odds accepted, and settlement outcomes
• Responsible gaming tool settings (deposit limits, self-exclusion records)

2.5 Technical Data

• IP address and approximate geolocation
• Browser type and version
• Device type and operating system
• Session timestamps and page interaction logs
• Cookie identifiers

2.6 Communications Data

• Live chat transcripts
• Email correspondence with support
• Any documentation submitted during dispute or complaint resolution

3 How We Collect Your Data

We collect personal data through the following means:

• Directly from you: during account registration, identity verification, deposit/withdrawal transactions, support interactions, and completion of responsible gaming questionnaires.
• Automatically: through cookies, server logs, and analytics tools when you browse or interact with the zk999 platform.
• From third parties: payment processors (e.g. JazzCash, Easypaisa, HBL) may provide confirmation of transaction status; identity verification providers may confirm document authenticity; fraud detection services may flag suspicious patterns.

4 Why We Process Your Data (Legal Bases)

zk999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — account management, payment processing, game settlement, and customer support.
• Legal obligation: Processing required by our licensing conditions, anti-money-laundering regulations, and know-your-customer (KYC) requirements. This includes identity verification and transaction monitoring.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics — where these interests are not overridden by your rights.
• Consent: Where we send marketing communications or deploy non-essential cookies. You may withdraw consent at any time.

5 How We Use Your Personal Data

Your personal data is used for the following purposes:

• Creating and maintaining your zk999 Account
• Verifying your identity and age (18+ compliance)
• Processing deposits and withdrawals via your chosen payment method
• Settling sports bets and casino game outcomes
• Detecting and preventing fraud, money laundering, and collusion
• Monitoring gaming behaviour for responsible gaming indicators and providing appropriate tools or interventions
• Responding to support queries and resolving disputes
• Sending transactional communications (deposit confirmations, withdrawal receipts, security alerts)
• Sending promotional communications where you have provided consent or where permitted under applicable law
• Complying with regulatory reporting obligations under zk999's gaming licence
• Improving platform performance and user experience through aggregated, anonymised analytics

6 Cookies and Tracking Technologies

zk999 uses cookies and similar technologies on the platform. The following categories of cookies are deployed:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference, and ensure security tokens operate correctly. These cannot be disabled without preventing use of the platform.
• Analytics cookies: Used to understand aggregate user behaviour — which pages are visited most, how long sessions last, and where users encounter problems. Data is anonymised before analysis. You may opt out of analytics cookies via the cookie preferences panel.
• Functional cookies: Remember user preferences such as display settings or preferred deposit method to improve convenience. These are optional.

zk999 does not deploy third-party advertising or retargeting cookies. No player data is shared with advertising networks for the purpose of serving targeted advertisements on third-party websites.

7 Sharing Your Data with Third Parties

zk999 does not sell your personal data. We share data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, Skrill, Neteller, and USDT TRC20 network operators receive transaction data necessary to complete deposits and withdrawals.
• Identity verification providers: Third-party KYC services receive document copies and personal details to confirm identity and age as required by our licence.
• Fraud prevention services: Risk management tools receive technical data (IP address, device fingerprint) to detect suspicious patterns and protect the platform and its players.
• Regulatory authorities: zk999's licensing authority and, where required by law, law enforcement agencies may receive data in response to lawful requests.
• Game software providers: Third-party game studios receive the minimum data necessary to operate their game titles (typically session tokens and stake amounts) but do not receive your personal identity information.

All third-party processors engaged by zk999 are contractually bound to process data only for the purposes for which it was shared and to maintain appropriate security standards.

8 International Data Transfers

zk999 operates internationally and may transfer your personal data to servers or processors located outside Pakistan. Where data is transferred internationally, zk999 ensures that appropriate safeguards are in place — such as contractual data protection clauses equivalent to international standards — to protect your data to a standard consistent with this Privacy Policy.

9 Data Retention

9.1 Active accounts: Personal data is retained for the duration of your Account's active status and for a minimum of five (5) years following Account closure, to satisfy anti-money-laundering record-keeping requirements imposed by our gaming licence.

9.2 Identity documents: KYC documents are retained for a minimum of five years from the date of submission or Account closure, whichever is later.

9.3 Gaming session records: Individual bet and game session records are retained for a minimum of five years and may be retained for longer where required by regulatory obligation or where they are relevant to an ongoing dispute.

9.4 Support communications: Live chat and email records are retained for three years from the date of the communication.

9.5 After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical analysis.

10 Your Rights as a Data Subject

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to data portability: You may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact zk999 support at [email protected] with the subject line "Privacy — Data Request". We will respond within thirty (30) days. We may need to verify your identity before processing your request.

11 Security Measures

zk999 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers
• Encrypted storage of passwords using industry-standard hashing algorithms
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of platform infrastructure
• OTP-based verification for sensitive account actions (password reset, withdrawal initiation)
• Monitoring and alerting systems for anomalous account activity

While we take all reasonable precautions, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a high risk to you, zk999 will notify affected players without undue delay.

12 Children's Privacy

zk999 is strictly for persons aged 18 years and above. We do not knowingly collect personal data from individuals under 18. If we become aware that an Account has been registered by a person under 18, we will immediately suspend the Account, void any gaming activity, and delete or anonymise the associated personal data. If you believe a person under 18 has registered an Account on zk999, please notify us at [email protected] immediately.

13 Changes to This Policy

zk999 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players by email and post a prominent notice on the platform before the updated policy takes effect. The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of zk999 following the effective date of any update constitutes acceptance of the revised policy.