Privacy Policy — zb999

1. Who We Are & Scope of This Policy

This Privacy Policy applies to zb999 and all services accessible via https://zb999.pro, including the online casino, sports betting platform (cricket, football, PSL, and other events), live dealer games, instant crash games, and associated mobile applications (collectively, the "Services").

zb999 operates as an internationally licensed gaming platform providing services predominantly to players based in Pakistan. References to "we", "us", and "our" throughout this document refer to the zb999 entity responsible for your data. References to "you" and "your" refer to any individual who accesses, registers for, or uses the Services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Services immediately.

2. Information We Collect

zb999 collects information in three broad categories — information you provide directly, information generated automatically when you use the Services, and information received from third parties for verification purposes.

2.1 Information You Provide Directly

• Full legal name, date of birth (you must be 21 years or older to use zb999), and gender
• Pakistani CNIC number or valid government-issued identification for KYC verification
• Email address and mobile phone number (Pakistani numbers are preferred for SMS 2FA)
• Residential address, city (e.g., Karachi, Lahore, Islamabad, Faisalabad, Peshawar)
• Payment method details — JazzCash wallet number, EasyPaisa account, HBL/UBL/Meezan Bank account information
• Username and password (stored as a salted, one-way hash; never in plain text)
• Communications you send to our support team via live chat or email
• Responsible Gaming preferences, including self-exclusion requests and deposit limit elections

2.2 Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, features used, time spent in-session, and click-stream data
• Game history: rounds played, wagers, outcomes, and session durations
• Transaction records: deposit amounts, withdrawal requests, bonus claims, and betting activity in PKR
• Device identifiers (for fraud prevention and responsible gaming monitoring)
• Log files and error reports generated during Service use

2.3 Information from Third Parties

• Identity verification results from KYC service providers
• Transaction status updates from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank)
• Fraud risk signals from anti-money-laundering (AML) screening databases
• Age-verification confirmation where applicable

3. How We Use Your Information

zb999 uses the information it collects for the following purposes, each of which is necessary for the safe, fair, and lawful operation of the Services:

• Account creation and management: to register your account, verify your identity, and maintain your player profile
• Service delivery: to process deposits and withdrawals, settle bets, award bonuses, and maintain game records
• Regulatory compliance: to fulfil Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable international gaming compliance standards
• Fraud prevention and security: to detect unauthorised access, suspicious transaction patterns, and multi-accounting abuse
• Responsible Gaming: to monitor betting patterns and intervene proactively if problem gambling indicators are detected; to honour self-exclusion and limit-setting requests
• Customer support: to respond to queries, disputes, and complaints via live chat and email
• Communications: to send transactional notifications (deposit confirmation, withdrawal status, password reset) and, with your consent, promotional emails about zb999 offers such as Eid bonuses and PSL season promotions
• Analytics and improvement: to understand aggregate usage patterns and improve platform performance, game selection, and user experience
• Legal obligations: to respond to lawful requests from regulators, law enforcement, or courts of competent jurisdiction

4. Legal Basis for Processing

zb999 processes personal data under the following legal bases as recognised by international data protection standards:

• Contract performance — processing necessary to provide the Services you have registered for, including account management, game delivery, and payment processing
• Legal obligation — processing required for KYC, AML, age verification, and regulatory reporting obligations imposed by the international gaming compliance framework under which zb999 operates
• Legitimate interests — fraud prevention, security monitoring, responsible gaming oversight, and aggregate analytics where these do not override your fundamental rights
• Consent — marketing communications and non-essential cookies, which you may withdraw at any time without affecting the lawfulness of prior processing

5. Data Sharing & Third Parties

zb999 does not sell, rent, or trade your personal information to third-party marketing companies, data brokers, or advertisers under any circumstances. We share data only in the limited circumstances described below:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transaction data necessary to execute deposits and withdrawals. These processors operate under their own privacy policies and applicable Pakistani financial regulations.
• KYC / identity verification providers: Identity document data and selfie verification images are shared with our accredited KYC partner solely for identity confirmation. This data is not retained by the KYC provider beyond the verification window.
• AML screening services: Name, date of birth, and nationality are screened against international sanctions lists and PEP (Politically Exposed Persons) databases as required under our compliance obligations.
• IT infrastructure providers: Hosting, content delivery, and database service providers who process data on our behalf under strict data processing agreements and are contractually prohibited from using your data for any purpose other than service provision.
• Regulatory and law enforcement authorities: Where zb999 is required by a valid legal order, court subpoena, or regulatory directive to disclose information, we will comply. We will notify you of such a request to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity. You will be notified of any such change and given a reasonable opportunity to close your account.

All third parties who receive personal data from zb999 are bound by contractual confidentiality obligations that are at least as protective as the standards described in this Privacy Policy.

6. Cookies & Tracking Technologies

zb999 uses cookies and similar local storage technologies to operate the Services correctly and to understand how players use the platform. We use three categories of cookies:

• Strictly necessary cookies: Required for login sessions, security tokens, load balancing, and core site functionality. These cannot be disabled without breaking the Services.
• Functional cookies: Remember your language preference, currency display (PKR), and UI preferences such as game view layouts. You may disable these but some features may not work as expected.
• Analytics cookies: Aggregate, anonymised data about page views and feature usage, used exclusively for internal product improvement. No individual player is identified in analytics reports.

zb999 does not use advertising cookies, retargeting pixels, or any cookies that track your activity across third-party websites. You may manage cookie preferences through your browser settings at any time.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and our regulatory compliance obligations. Our standard retention schedule is as follows:

• Active account data: Retained for the duration of your account plus five (5) years following account closure, as required for AML and gaming compliance record-keeping.
• Transaction records: Retained for a minimum of five (5) years from the transaction date in accordance with financial compliance standards.
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the final communication in a given case.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, as evidence of compliance.
• Server log files: Automatically purged after ninety (90) days unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual.

8. Your Rights & Choices

zb999 respects your rights over your personal data. Depending on your circumstances, you may exercise the following rights by contacting us at the email address listed in Section 12:

• Right of access: Request a copy of all personal data zb999 holds about you, provided in a commonly used electronic format.
• Right to rectification: Request correction of any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: Request that we pause processing of your data while a dispute or complaint is being resolved.
• Right to data portability: Request your data in a structured, machine-readable format for transfer to another service provider.
• Right to object: Object to processing based on legitimate interests, including direct marketing. Once you opt out of marketing, we will stop sending promotional communications immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

We will acknowledge all data rights requests within 48 hours and complete them within 30 calendar days. Complex requests may take up to 60 days, in which case we will inform you of the extended timeline. There is no charge for exercising your rights. We may ask you to verify your identity before processing a request.

9. Security Measures

zb999 implements layered technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, and unlawful destruction. Key measures include:

• TLS 1.3 encryption for all data in transit between your browser and our servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Bcrypt password hashing with individually generated salts — your password is never stored in recoverable form
• Two-factor authentication (2FA) available for all player accounts via SMS or authenticator app
• Role-based access controls ensuring that only authorised personnel can access personally identifiable data, and only on a need-to-know basis
• Regular internal security audits and third-party penetration testing
• Automated anomaly detection for suspicious login attempts, unusual transaction volumes, and potential account takeover activity
• Segregated production and development environments, with anonymised data used in all testing environments

Despite these measures, no system is completely immune to security threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, zb999 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

10. Children & Age Verification

zb999 is strictly an adults-only platform. You must be 21 years of age or older to register for an account and use the Services. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step during account registration. We use third-party KYC services to confirm that all players meet the minimum age requirement before any real-money activity is permitted. If we discover that an account has been opened by a person under 21 years of age, we will immediately suspend the account, void all wagers, return any deposits (net of any withdrawals already made), and permanently delete the account data, subject to any legal retention obligations.

If you believe a minor has accessed zb999 using false information, please contact our support team immediately at the email address in Section 12 so we can investigate and act promptly.

11. Changes to This Privacy Policy

zb999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make a material change, we will:

• Update the "Last updated" date shown at the top of this page and in the version tag below the header
• Display a prominent notice on the zb999 homepage for a minimum of 14 days following the change
• Send an email notification to all registered players with a summary of the key changes

Your continued use of the Services after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must close your account prior to the effective date by contacting our support team.

12. Contact & Data Controller

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available on-site 24 hours a day, 7 days a week, in English and Urdu
• Response time: Live chat under 90 seconds  |  Email under 2 hours

We are committed to resolving all privacy-related queries promptly and transparently. If you feel your concern has not been adequately addressed, you have the right to escalate your complaint to the relevant supervisory authority under the international gaming compliance framework applicable to your jurisdiction.