zy999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how zy999 ("zy999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("User", "Player", "you") who access or use the zy999 website at zy999.app, including all casino, sports betting, and payment services provided through the Platform.

zy999 takes privacy seriously. We process personal data only as necessary to deliver our services, meet our legal and regulatory obligations (including anti-money laundering and responsible gaming obligations), and protect the security of the Platform and our players. We do not sell personal data to third parties for their own marketing purposes.

By registering an account or continuing to use zy999, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into the zy999 Terms & Conditions. If you do not agree with this Policy, you must not use the Platform.

2. Data Controller

zy999 acts as the data controller in respect of personal data collected through the Platform. As data controller, zy999 determines the purposes for which and the means by which personal data is processed. All data processing by zy999 is governed by this Policy and applicable data protection laws.

For all data protection enquiries, you may contact zy999 using the support email address displayed in the footer of this page. We aim to respond to all data-related enquiries within 30 days.

3. Data We Collect

zy999 collects personal data in several ways: directly from you when you register an account or complete KYC, automatically through your use of the Platform, and in limited cases from third-party sources for identity verification purposes. The categories of personal data we may collect include:

• Identity Data: Full legal name, date of birth, CNIC number, passport number, or driver's licence number submitted during registration or KYC verification.
• Contact Data: Email address, mobile number (including Pakistani network numbers on Jazz, Telenor, Zong, Ufone, or Warid), and correspondence address.
• Financial Data: Payment method details (JazzCash account number, Easypaisa number, bank account details for HBL, UBL, Meezan, or Bank Alfalah transfers, card details, or crypto wallet addresses), transaction history, deposit and withdrawal records.
• Account Data: Username, account preferences, responsible gaming settings, betting and gaming history, balance, and bonus records.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and session data collected automatically when you access zy999.app.
• KYC Documentation: Copies of government-issued identification documents, utility bills, bank statements, or other documents submitted to satisfy zy999's identity and verification requirements.
• Communications Data: Records of any correspondence with zy999 customer support, including emails, live chat transcripts, and support tickets.

4. How We Use Your Data

zy999 uses the personal data we collect for the following purposes:

• Account Management: To create and maintain your zy999 account, authenticate your identity at login, and administer your account settings and preferences.
• Service Delivery: To provide access to casino games, sports betting markets, and all other features of the zy999 Platform.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, verify ownership of funding sources, and maintain accurate transaction records.
• KYC & AML Compliance: To verify your identity and age before processing withdrawals, and to meet our obligations under applicable anti-money laundering regulations.
• Responsible Gaming: To monitor play patterns, enforce responsible gaming limits you have set, apply self-exclusion or cool-off periods, and proactively identify signs of problem gambling.
• Security: To detect and prevent fraud, cheating, collusion, account takeovers, and other prohibited conduct.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal Compliance: To meet obligations under applicable laws and regulatory requirements, and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse usage patterns, test new features, and improve the overall quality of the zy999 Platform.

5. Legal Bases for Processing

zy999 processes personal data on the following legal bases, depending on the purpose of processing:

• Contract Performance: Processing necessary to perform the contract between zy999 and you, including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of zy999 or third parties, including fraud prevention, Platform security, and service improvement, provided such interests are not overridden by your rights.
• Consent: Where we rely on your consent for a specific processing activity (such as optional marketing communications), you may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. KYC & Verification Data

zy999 is required to verify the identity and age of all players before processing withdrawals. KYC data — including copies of CNIC, passport, or other government-issued identification, proof of address, and proof of payment method — is handled with heightened security measures appropriate to its sensitivity.

KYC documents submitted to zy999 are stored securely and accessed only by personnel who need to review them for verification purposes. Documents are not used for any purpose beyond identity and age verification and compliance with applicable legal obligations. zy999 retains KYC documentation for the period required by applicable law, typically a minimum of five years following account closure, to meet anti-money laundering record-keeping obligations.

7. Cookies & Tracking Technologies

zy999 uses cookies and similar tracking technologies on zy999.app to support the operation of the Platform. Cookies used by zy999 fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in to your zy999 account during an active session. These cannot be disabled without impacting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby filters, to improve your experience on zy999.
• Analytics Cookies: Used to collect anonymous, aggregated data about how players use zy999, which pages are visited most frequently, and where errors occur. This data is used internally to improve the Platform and does not identify individual players.

You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect Platform functionality, including your ability to remain authenticated in your zy999 account.

8. Data Sharing

zy999 does not sell personal data. We may share personal data with third parties only in the following circumstances:

• Payment Processors: To facilitate deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, USDT TRC20, Skrill, or Neteller. These processors act as independent data controllers for their own processing activities.
• Identity Verification Providers: Third-party KYC and AML compliance providers engaged to assist with identity verification and fraud screening. These providers are bound by confidentiality obligations.
• Game Providers: Casino game content providers whose software is integrated into the zy999 Platform may receive limited technical data (such as session tokens) necessary to deliver game content.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory demand, zy999 will disclose personal data to competent authorities. zy999 will notify affected players of such disclosures where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of zy999's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

9. Data Retention

zy999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. In general:

• Account data is retained for the duration of your active zy999 account, plus a minimum of five years following account closure to meet AML record-keeping requirements.
• KYC documentation is retained for a minimum of five years following account closure.
• Transaction records are retained for a minimum of five years following the relevant transaction.
• Customer support communications are retained for a minimum of two years from the date of the last communication in a support thread.
• Technical and analytics data is retained in anonymised or aggregated form for up to 24 months.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with zy999's data retention procedures.

10. Data Security

zy999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures implemented by zy999 include SSL/TLS encryption of all data in transit between your device and zy999.app, encrypted storage of sensitive account and payment data, access controls limiting data access to authorised personnel on a need-to-know basis, and regular security assessments of Platform infrastructure.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your zy999 account credentials. If you suspect unauthorised access to your account, contact [email protected] immediately.

11. Your Rights

Subject to applicable law, you may have the following rights with respect to your personal data held by zy999:

• Right of Access: The right to request a copy of the personal data zy999 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to zy999's legal retention obligations.
• Right to Restriction: The right to request that zy999 restrict the processing of your personal data in certain circumstances.
• Right to Object: The right to object to processing of your personal data based on legitimate interests.
• Right to Data Portability: The right to receive personal data you have provided to zy999 in a structured, machine-readable format where technically feasible.

To exercise any of these rights, please contact zy999 support using the email address in the footer of this page. zy999 will respond to verifiable requests within 30 days. We may require identity verification before processing requests to ensure your data is not disclosed to an unauthorised third party.

12. Children's Privacy

zy999 is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. Any account where the registered holder is found to be under 18 will be immediately terminated, all associated data deleted (subject to legal retention requirements), and any deposited funds returned to the funding source where practicable. If you believe a person under 18 has registered a zy999 account, please contact [email protected] immediately.

13. International Data Transfers

zy999's Platform infrastructure and service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, zy999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by applicable data protection law. These safeguards may include contractual data transfer agreements with receiving entities. By using zy999, you acknowledge that your data may be transferred, stored, and processed outside of Pakistan.

14. Changes to This Policy

zy999 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to this Policy, zy999 will notify registered players via email or in-platform notification prior to the change taking effect. Your continued use of zy999 following notification of a material change constitutes your acceptance of the revised Policy. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zy999, please contact our support team. Our contact email address is displayed in the footer of every page on zy999.app. We aim to respond to all privacy-related enquiries within 30 days and will acknowledge receipt of your request promptly.