zh999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how zh999 ("zh999", "we", "us", "our") collects, uses, discloses, stores, and protects personal data in connection with the operation of the online gaming platform accessible at zh999.club. It applies to all persons who register an account, visit the website, use any zh999 service, or communicate with the zh999 support team.

zh999 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that Players in Pakistan entrust us with sensitive information — including identity documentation submitted for KYC purposes and financial account details linked to JazzCash, Easypaisa, and banking transactions — and we take that responsibility seriously.

By registering an account on zh999 or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you should not use the zh999 platform.

2. Data Controller

2.1 zh999 operates as the data controller in respect of personal data collected from registered Players and website visitors. As data controller, zh999 determines the purposes and means of processing personal data collected via zh999.club and associated services.

2.2 Contact details for all data protection enquiries, access requests, and complaints are provided at Section 16 of this Policy.

3. Categories of Personal Data We Collect

3.1 zh999 collects personal data across the following categories:

3.2 zh999 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health information, or political opinions) except where voluntarily disclosed by a Player in the context of a responsible gaming request or support communication, in which case such data is processed solely for the purpose for which it was disclosed.

4. How We Collect Personal Data

4.1 zh999 collects personal data through the following channels:

• Direct Registration: Information submitted by you when creating a zh999 account, including name, email address, date of birth, and mobile number;
• KYC Submission: Identity and address verification documents submitted in response to zh999's KYC requirements;
• Cashier Transactions: Payment method details provided when making deposits or requesting withdrawals;
• Platform Use: Automatically collected data generated by your interactions with the zh999 website and games, including session logs, click-stream data, and device information;
• Customer Support: Information you provide when contacting zh999's support team via live chat or email;
• Cookies and Tracking Technologies: As described in Section 11 of this Policy.

5. Purposes of Data Processing

5.1 zh999 processes personal data for the following purposes:

• To create and maintain your zh999 account and verify your identity;
• To process deposits, withdrawals, and related payment transactions in PKR via JazzCash, Easypaisa, and bank channels;
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations;
• To deliver and improve the zh999 platform, including personalising your game lobby experience;
• To administer bonuses, promotions, and loyalty programmes in accordance with applicable terms;
• To monitor platform activity for fraud prevention, security incidents, and prohibited conduct as defined in the zh999 Terms and Conditions;
• To provide customer support and respond to enquiries and complaints;
• To operate responsible gaming tools including deposit limits, session timers, and self-exclusion functionality;
• To send account-related transactional communications and, where you have consented, promotional communications about zh999 offers;
• To comply with legal and regulatory obligations applicable to zh999's operations.

6. Legal Bases for Processing

6.1 zh999 processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between zh999 and the Player, including account creation, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and data retention requirements;
• Legitimate Interests: Processing carried out to pursue zh999's legitimate interests in fraud prevention, platform security, and platform improvement, where such interests are not overridden by the Player's rights;
• Consent: Processing of data for marketing communications and certain cookie placements, where explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Third-Party Disclosure

7.1 zh999 does not sell, rent, or trade personal data to third parties. Personal data may be disclosed to the following categories of third parties where strictly necessary:

• Payment Service Providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processing services, to facilitate deposits and withdrawals;
• KYC and Identity Verification Services: Third-party providers engaged to verify identity documents submitted by Players;
• Game Studio Partners: Certified studios whose games are hosted on zh999 may receive anonymised session data for RTP audit and technical support purposes;
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, zh999 may disclose personal data to relevant authorities;
• Technology Service Providers: Hosting, security, analytics, and support platform vendors engaged by zh999 under strict data processing agreements.

7.2 All third parties engaged by zh999 to process personal data on its behalf are required to do so under contractual data processing terms that restrict use of the data to the specified purpose and impose appropriate security obligations.

8. International Data Transfers

8.1 The zh999 platform is operated on server infrastructure that may be located outside of Pakistan. Where personal data is transferred to countries that do not have equivalent data protection laws to those applicable in Pakistan, zh999 ensures that appropriate safeguards are in place, including contractual data transfer agreements with receiving parties.

8.2 Transfers to payment processors based outside Pakistan (for example, for USDT cryptocurrency transactions) are made solely to the extent necessary to complete the requested financial transaction and in accordance with the payment processor's own privacy obligations.

9. Data Retention

9.1 zh999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and KYC Records: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• Support Communications: Retained for three (3) years from the date of the communication;
• Marketing Consent Records: Retained until consent is withdrawn, and for one (1) year thereafter as evidence of the consent;
• Technical/Log Data: Retained for up to twelve (12) months from collection.

9.2 Upon expiry of the applicable retention period, zh999 will securely delete or anonymise personal data in accordance with its data disposal procedures.

10. Security Measures

10.1 zh999 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between the Player's browser and zh999 servers;
• Encryption at rest for all personal data stored on zh999 servers;
• Access controls and role-based permissions restricting internal access to personal data on a need-to-know basis;
• Audit logging of all access events involving identity and financial data;
• Two-Factor Authentication (2FA) available to all Players for account login security;
• Regular security assessments and penetration testing of platform infrastructure.

10.2 Notwithstanding the above, no internet transmission or data storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to Player rights, zh999 will notify affected Players and relevant authorities as required by applicable law.

11. Cookies & Tracking Technologies

11.1 zh999 uses cookies and similar technologies (including local storage and session identifiers) to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function, including session management and login authentication. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Store your preferences, such as language settings and lobby filters, to personalise your zh999 experience;
• Analytics Cookies: Collect anonymised data about how Players interact with the platform to help zh999 identify performance issues and improve the user experience. zh999 uses privacy-respecting analytics tools that do not share data with third-party advertising networks.

11.2 You may manage cookie settings through your browser. Blocking all cookies may prevent certain features of the zh999 platform from functioning correctly. zh999 does not deploy third-party advertising cookies.

12. Your Data Rights

12.1 Subject to applicable law and any overriding legal obligations, zh999 Players hold the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data zh999 holds about you;
• Right of Rectification: You may request correction of inaccurate or incomplete personal data;
• Right of Erasure: You may request deletion of your personal data, subject to zh999's legal retention obligations (e.g. KYC and transaction records must be retained for regulatory purposes);
• Right to Restrict Processing: You may request that zh999 limit its processing of your personal data in certain circumstances;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, and to the processing of your data for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12.2 To exercise any of the above rights, please contact zh999 support at the email address in Section 16. zh999 will respond to all rights requests within 30 days. Identity verification may be required before a request is processed.

13. Children's Privacy

13.1 zh999 is strictly an 18+ platform. zh999 does not knowingly collect personal data from persons under 18 years of age. Age verification is conducted at the registration stage and as part of the KYC process.

13.2 If zh999 discovers that personal data has been collected from a person under 18, all data associated with that individual will be permanently deleted and the account will be suspended immediately. If you believe a person under 18 has created a zh999 account, please contact support immediately at the details in Section 16.

14. Responsible Gaming & Data

14.1 Where a Player uses zh999's responsible gaming tools — including deposit limits, loss limits, session reminders, or self-exclusion — the settings and activation records associated with those tools are treated as sensitive personal data. Access to this data is restricted to zh999 staff with a direct operational need, and it is never used for marketing profiling purposes.

14.2 Self-exclusion records are retained for the duration of the exclusion period and for five years thereafter, to ensure that exclusion decisions are honoured and cannot be inadvertently circumvented. Players who have self-excluded will not receive promotional communications from zh999 during the exclusion period.

14.3 zh999 may use aggregated, anonymised gaming activity data to identify behavioural patterns associated with problem gambling and proactively engage with Players who may benefit from responsible gaming support. This is carried out in the interests of Player welfare and does not involve the sharing of individual identifiable data with third parties.

For more information about responsible gaming tools and support resources, please visit our Responsible Gaming page.

15. Changes to This Privacy Policy

15.1 zh999 may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. The "Last Updated" date at the top of this Policy will be revised accordingly.

15.2 Where changes are material, zh999 will notify registered Players by email and/or by a prominent notice on the platform. Continued use of zh999 following notification of a material change constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and request account closure.

16. Contact Us

For all data protection enquiries, rights requests, complaints, or questions about this Privacy Policy, please contact the zh999 data protection team:

Email: [email protected]  (plain text only — not a clickable link)

Subject line: Privacy / Data Request – [Your Registered Email]

Response time: within 5 business days for standard enquiries; within 30 days for formal data rights requests.