At zz999, your privacy is not an afterthought — it is built into the architecture of how we operate. This Privacy Policy explains what personal data we collect from Pakistani players, why we collect it, how we use and protect it, and what rights you have over your own information. We encourage you to read this document in full before registering on the platform.
zz999 is committed to handling the personal data of our players — the majority of whom are English-speaking Pakistani users — with the highest degree of care, transparency, and respect. We understand that when you share your identity documents, payment details, and gaming activity with us, you are extending a significant degree of trust. We do not take that lightly.
This Privacy Policy sets out the categories of personal data we process, the lawful bases on which we rely to do so, the circumstances under which we may share your data with third parties, the technical and organisational measures we employ to keep your data safe, and the rights you hold as a data subject. It is designed to be read alongside our Terms & Conditions and Responsible Gaming policy.
zz999 acts as the data controller for personal data collected through the platform. We process this data in accordance with the requirements of our international gaming licence and applicable data protection frameworks. If you have any questions about how your data is handled, please contact us at support@zz999.lat before registering.
zz999 collects personal data that falls into the following categories. We only collect information that is strictly necessary for the stated purpose — we do not gather data speculatively or beyond what is required to deliver our services safely and in compliance with our regulatory obligations.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number, scanned identity documents | Mandatory (KYC) |
| Contact Data | Email address, mobile phone number, city/province of residence (e.g. Karachi, Lahore, Islamabad) | Mandatory |
| Financial Data | JazzCash / EasyPaisa account references, HBL / UBL / Meezan bank account details, Visa card information (tokenised), transaction history in PKR | Mandatory |
| Gaming Activity Data | Game session logs, wager amounts and outcomes, betting history, bonus usage, win/loss records | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatic |
| Communication Data | Live chat transcripts, support email correspondence, feedback submissions | When contacted |
| Preference Data | Responsible gaming limit settings, communication preferences, language and currency settings | Optional |
zz999 collects personal data through the following means:
zz999 processes personal data only where we have a lawful basis to do so. The table below maps each processing activity to its stated purpose and corresponding legal basis.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account creation & maintenance | To operate your player account and provide gaming services | Contract performance |
| KYC & age verification | To comply with regulatory requirements and prevent underage gambling | Legal obligation |
| Payment processing | To process deposits and withdrawals in PKR via local payment methods | Contract performance |
| Fraud & AML screening | To detect and prevent money laundering, fraud, and prohibited conduct | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | To identify at-risk behaviour and apply self-exclusion or limit tools | Legal obligation / Legitimate interest |
| Marketing communications | To send promotions, bonus offers, and platform updates where consented | Consent |
| Platform analytics & improvement | To understand how players use the platform and improve the user experience | Legitimate interest |
| Customer support | To resolve queries, complaints, and disputes raised by players | Contract performance / Legitimate interest |
zz999 does not sell, rent, or trade your personal data to third parties for commercial purposes. We will never sell your data to advertisers or data brokers. However, we do share data with carefully selected third parties where doing so is necessary for the operation of the platform or required by law. The categories of recipients are as follows:
All third parties with whom zz999 shares personal data are contractually required to process that data only for the specified purpose, in accordance with applicable data protection standards, and with appropriate technical and organisational safeguards in place.
zz999 uses cookies and similar tracking technologies to operate core platform functions, remember your session and preferences, and collect aggregated analytics data. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. zz999 does not use third-party advertising cookies or behavioural profiling technologies for external ad targeting.
zz999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by our regulatory obligations. The following general retention periods apply:
Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing regulatory investigation, data will be retained for the duration of that requirement and deleted promptly upon its conclusion.
zz999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
As a data subject, you have the following rights with respect to your personal data held by zz999. To exercise any of these rights, please contact us at support@zz999.lat. We will respond to all verifiable requests within a reasonable timeframe and no later than thirty (30) days of receipt.
zz999 recognises and upholds the following data subject rights for all registered players.
You have the right to request a copy of all personal data we hold about you, along with information about how it is being processed and on what legal basis. Requests are fulfilled at no charge within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Contact support with supporting documentation where applicable.
You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that regulatory retention obligations may limit full erasure in certain cases.
You can request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or pending an objection to legitimate interest processing.
Where processing is carried out by automated means on the basis of contract or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service.
You may object at any time to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes, which will be honoured immediately.
The zz999 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Our registration process includes an age declaration, and all accounts are subject to mandatory KYC verification that requires submission of a valid, government-issued identity document confirming date of birth.
Where zz999 becomes aware that personal data of an individual under the age of 21 has been collected — whether through a false age declaration at registration or any other means — we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by our regulatory obligations, and void any associated transactions. Any remaining balance will be returned to the originating payment method subject to verification.
zz999 operates under an international gaming licence and, as a result, some of the personal data we collect may be processed by our service providers in jurisdictions outside of Pakistan. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection as it would in its country of origin.
Safeguards we rely upon for international transfers include contractual clauses that impose data protection obligations on the recipient party, use of service providers that operate under internationally recognised data protection certification frameworks, and limiting the scope of data transferred to the minimum necessary for the service being provided.
If you would like further information about the specific safeguards in place for any particular international transfer of your personal data, please contact us at support@zz999.lat.
The zz999 platform may reference or link to third-party game providers, payment processors, and support tools. Each of these third parties operates under its own privacy policy and data protection practices. zz999 is not responsible for the privacy practices of third-party services and encourages players to review the privacy documentation of any third-party service they interact with.
Third-party game providers integrated into the zz999 platform are contractually required to process player data only for the purpose of delivering and auditing game outcomes and to maintain appropriate security standards. They do not receive personally identifiable information beyond what is strictly necessary for session and game integrity purposes.
zz999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulatory requirements, or operational needs. When material changes are made, we will notify registered players by sending a notification to their registered email address and/or displaying a prominent notice on the platform for a minimum of 14 days prior to the changes taking effect.
The effective date at the top of this document will be revised with each update. We encourage you to review this Privacy Policy periodically. Continued use of the zz999 platform following the effective date of any amendment constitutes your acknowledgement of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which zz999 processes your personal data, please contact our Data Protection team through the following channels:
Please mark the subject line of any email enquiry as "Privacy Request" to ensure it is routed to the appropriate team member. We aim to acknowledge all privacy-related correspondence within two (2) business days and to resolve substantive requests within thirty (30) days.
If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority under the jurisdiction applicable to your situation.
Privacy at zz999 is not just a legal checkbox — it is reflected in the technical choices we make every day to keep Pakistani players' information safe and under their control.
All data moving between your browser or device and zz999 servers is protected by TLS encryption. KYC documents and financial records stored on our systems use AES-256 encryption at rest — the same standard used by global banking institutions.
zz999 never stores raw card numbers. When you pay via Visa or process a transaction through JazzCash, EasyPaisa, or local bank transfers, payment credentials are tokenised by the payment processor — your sensitive financial data never touches our servers in plain text.
Personal data is accessible only to zz999 staff with a verified operational need. Multi-factor authentication, role-based access controls, and full audit logging are enforced across all internal systems that touch player data.
zz999 does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial gain. Your information is used exclusively to operate your account, process your transactions, and keep the platform secure and compliant.
In the unlikely event of a data breach affecting your personal information, zz999 will notify you directly without undue delay. We maintain an internal incident response plan that prioritises player communication and rapid containment of any security event.
Your data rights are real and exercisable. Access, correct, export, or request deletion of your data at any time by reaching out to our support team. Marketing communications can be withdrawn instantly. Responsible gaming data controls are always one click away in your account settings.
Your data is protected. Your identity is verified. Your funds are secure. Join Pakistan's most transparent online casino — slots, live tables, and PSL cricket betting, all in PKR for verified players aged 21 and above.