Privacy Policy – ZR999 Pakistan Online Gaming Platform

ZR999 (operating at zr999.ws) is an online gaming platform serving Pakistani members. When this Privacy Policy refers to "ZR999", "we", "us", or "our", it means the operator of the zr999.ws platform.

ZR999 acts as the data controller for the personal information you provide when you register an account, make deposits or withdrawals, participate in games, interact with our support team, or otherwise use the platform. As data controller, we are responsible for determining how and why your data is processed.

For any privacy-related queries, you can contact our data team at support@zr999.ws. We will respond to all data-related requests within five business days.

ZR999 collects personal data from two sources: information you provide to us directly, and information we collect automatically when you use the platform.

Data you provide directly:

Data collected automatically:

• Device information: device type, operating system, browser type and version.
• Connection data: IP address, approximate geographic location derived from IP.
• Usage data: pages visited, features used, session duration, game history, bet amounts, and timestamps.
• Cookie and tracking data: as described in Section 7 below.

ZR999 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your ZR999 member account, including authentication and account security.
• Service delivery: To process deposits and withdrawals, credit bonuses, calculate VIP points and cashback, and provide access to games and features on the platform.
• Identity verification: To verify that you meet our age and eligibility requirements and to comply with our obligations to prevent fraud and financial crime.
• Customer support: To respond to your queries, resolve complaints, and maintain records of your support interactions for quality assurance.
• Responsible gaming: To identify members who may be showing signs of problem gambling behaviour and to administer any self-exclusion, cooling-off, or deposit limit requests you make.
• Platform improvement: To analyse usage patterns, understand how members interact with the platform, and inform decisions about new features and improvements.
• Marketing: To send promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications.
• Legal compliance: To meet our obligations under applicable regulations, including anti-money laundering requirements, and to respond to lawful requests from regulatory or law enforcement authorities.

We do not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without providing you with an opportunity to contest those decisions.

Every data processing activity at ZR999 rests on one of the following legal bases:

• Contract performance: Processing necessary to fulfil the agreement between you and ZR999 when you create an account and use the platform — including payment processing, game delivery, and VIP programme administration.
• Legal obligation: Processing required to comply with applicable legal requirements, such as age verification, anti-money laundering checks, and retention of financial records.
• Legitimate interests: Processing in pursuit of ZR999's legitimate business interests where those interests are not overridden by your rights — including platform security, fraud prevention, and improving our services based on aggregate usage data.
• Consent: Processing for purposes where we have obtained your explicit consent, including sending marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

ZR999 shares your personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our card processing partner receive the transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• Identity verification providers: A third-party KYC service may process copies of identity documents you submit, solely for the purpose of verifying your identity and age. This data is not retained by the KYC provider beyond the verification process.
• Game content providers: Live casino and game content is delivered by certified third-party studios. These providers receive a pseudonymous session identifier necessary to deliver the game stream; they do not receive your full name, payment details, or contact information.
• IT and infrastructure providers: Cloud hosting, security, and platform infrastructure providers may process data as part of operating the ZR999 platform. All such providers are subject to contractual data processing obligations.
• Regulatory and law enforcement authorities: ZR999 will share data with regulatory bodies, law enforcement, or courts when required to do so by a lawful order or regulation. We will not share more data than is required by the specific request.

Financial data is among the most sensitive information we handle, and ZR999 applies the strictest controls to it.

When you make a deposit via Easypaisa or JazzCash, the transaction is processed directly between you and the payment provider via their secure gateway. ZR999 receives a transaction confirmation and reference number — we do not store your mobile banking PIN, OTP codes, or full mobile wallet credentials.

For bank transfers (IBFT) and card payments, transaction data is handled by our payment processing partners under PCI-DSS standards. ZR999 stores only a tokenised reference to your payment method, not your full card number or bank account details.

Know Your Customer (KYC) verification may be required before your first withdrawal or when your account activity triggers a compliance review. KYC documents submitted to ZR999 are:

• Reviewed by authorised compliance staff only.
• Stored in encrypted form in a secured, access-restricted environment.
• Retained for the duration required by our regulatory obligations (typically five years from account closure).
• Never shared with any party other than our regulated KYC verification provider and, where legally required, regulatory authorities.

ZR999 uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device that helps the platform function correctly and improve your experience.

We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function. These enable your login session, remember your preferences during a session, and protect against cross-site request forgery. You cannot opt out of these without preventing the platform from functioning.
• Functional cookies: Remember your optional preferences — such as your preferred language, remembered username (if enabled), and notification settings — across sessions.
• Analytics cookies: Collect aggregate, anonymised information about how members use the platform — which pages are visited, how long sessions last, and which features are used most. This data helps us improve ZR999. We use anonymised analytics tools that do not identify individual users.
• Responsible gaming cookies: Track session duration on-device to power the session time reminder and auto-logout features you may have activated in your account settings.

ZR999 does not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings, though disabling necessary cookies will prevent you from using the platform.

ZR999 retains your personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required by law.

• Active account data: Retained throughout the period your account is active and for five years following account closure, to meet anti-money laundering and regulatory record-keeping obligations.
• Transaction records: Financial transaction data is retained for seven years from the date of the transaction to comply with applicable financial record-keeping requirements.
• KYC documents: Retained for five years from account closure or as required by the applicable regulatory framework.
• Support communications: Chat transcripts and email correspondence are retained for two years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of your consent to receive marketing communications, and any withdrawal of that consent, are retained for five years to demonstrate compliance.
• Anonymised analytics data: Aggregate, anonymised usage data that cannot be linked to an individual member may be retained indefinitely for platform improvement purposes.

When data is no longer required under these retention schedules, it is securely deleted or anonymised so that it can no longer be attributed to you.

As a ZR999 member, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@zr999.ws:

ZR999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• All data transmitted between your device and ZR999 servers is encrypted using TLS 1.2 or higher.
• Personal data stored on ZR999 servers is encrypted at rest using AES-256 encryption.
• Access to personal data is restricted on a need-to-know basis. Employees and contractors who do not need access to your data cannot access it.
• All ZR999 staff with access to member data undergo background screening and regular data protection training.
• We use two-factor authentication on all internal administrative systems that can access member data.
• Our platform undergoes regular security audits and penetration testing by independent third-party security specialists.

Despite these measures, no internet-based platform can guarantee absolute security. If you have reason to believe that your ZR999 account has been compromised, please contact us immediately at support@zr999.ws so we can take immediate protective action.

ZR999 does not knowingly collect or process personal data from individuals under the age of 18. Our platform is strictly for adults, and we require age verification during the registration process to enforce this.

If we become aware that personal data has been collected from a person under 18 — whether through deliberate misrepresentation of age during registration or by any other means — we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on ZR999 or has accessed the platform, please contact us immediately at support@zr999.ws with details. We will investigate and take appropriate action promptly. The safety and protection of minors is a non-negotiable priority for us.

ZR999 sends the following types of communications to members:

• Transactional messages (always sent): Deposit confirmations, withdrawal notifications, account security alerts (such as new device logins), and important policy updates. These are sent regardless of marketing preferences because they relate to your account and financial activity.
• Promotional messages (opt-in only): Bonus offers, new game announcements, VIP Club tier notifications, and platform promotions. These are only sent if you have opted in during registration or via your account settings.

To opt out of promotional communications from ZR999, you can:

• Adjust your communication preferences in your account settings at any time.
• Reply STOP to any promotional SMS from ZR999.
• Click the unsubscribe link in any promotional email from ZR999.
• Contact support@zr999.ws and request removal from all marketing lists.

Opt-out requests are processed within 24 hours. After opting out, you will continue to receive transactional messages related to your account and financial transactions.

ZR999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we provide. The date of the most recent revision is shown at the top of this page.

For material changes — such as new categories of data being collected, new third parties receiving your data, or changes to your rights — we will notify active members at least 7 days in advance via SMS or email to the contact details registered on the account, and by placing a prominent notice on the platform.

For minor clarifications or corrections that do not change how your data is actually used, the policy may be updated without prior individual notice. We recommend reviewing this page periodically.

Continued use of the ZR999 platform after a revised policy takes effect constitutes your acceptance of the changes. If you do not accept a material change to this policy, you should stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact ZR999 using the following channels:

• Email: support@zr999.ws — use subject line "Privacy Policy Query" or "Data Rights Request" for the fastest routing to the right team.
• Live Chat: Available 24/7 on the ZR999 platform after logging in. Our support agents can handle general privacy questions and direct you to the compliance team for formal data rights requests.

We aim to respond to all privacy-related queries within 2 business days and to fulfil formal data rights requests within 30 days of receipt. If your request is complex or involves a large volume of data, we may extend this to 60 days with notification.

We genuinely want Pakistani members to feel confident that their data is safe with ZR999. If something in this policy is unclear or you want more detail on any aspect of how we handle your data, please do not hesitate to reach out.