zx999 Privacy Policy

01 Who We Are

zx999 is an internationally licensed online gaming and sports betting platform. When this Privacy Policy refers to "zx999", "we", "us", or "our", it refers to the operating entity behind the zx999 platform accessible at zx999.biz and all related subdomains and mobile applications.

zx999 acts as the data controller in respect of the personal data collected from players who register accounts and use the platform's services. As data controller, zx999 is responsible for determining the purposes for which personal data is processed and the manner in which that processing is carried out.

02 Data We Collect

zx999 collects personal data across several categories. The table below summarises the types of data we process and the context in which they are collected:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health information is voluntarily disclosed in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.

03 How We Collect Your Data

zx999 collects personal data through the following means:

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are under no obligation to provide this information, but failure to provide data required for KYC or legal compliance may prevent us from opening or maintaining your account.

3.2 Automated Collection

When you access the zx999 platform — whether via desktop browser or mobile device — we automatically collect certain technical data including your IP address, device identifiers, browser characteristics, and interaction logs. This collection is performed through server logs, cookies, and similar tracking technologies described in Section 7 of this policy.

3.3 Third-Party Sources

We may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification providers who confirm the authenticity of documents you submit during KYC.
• Payment processors (such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay) who confirm transaction status and flag potential fraud.
• Anti-money laundering (AML) screening services that check player identities against sanctions lists and politically exposed persons (PEP) databases.
• Fraud detection and risk management services that provide behavioural scoring to protect the platform and its players.

04 Legal Basis for Processing

zx999 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, processing transactions, and settling bets — is carried out on the basis that it is necessary for the performance of the contract between you and zx999.
• Legal Obligation: Certain processing activities — including KYC verification, AML screening, and the maintenance of gambling records — are required by the licensing and regulatory obligations applicable to zx999's operating licence. This processing is carried out to comply with a legal obligation.
• Legitimate Interests: zx999 processes some personal data on the basis of our legitimate interests as a business, including fraud prevention, platform security, and the improvement of our services. We always balance these interests against your rights and will not rely on this basis where our interests are overridden by your rights and freedoms.
• Consent: Where we send you marketing communications by email or SMS, or deploy non-essential cookies, we will first obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 How We Use Your Data

The personal data collected by zx999 is used for the following purposes:

• Opening, maintaining, and closing your zx999 player account.
• Processing deposits and withdrawals via your registered payment methods.
• Verifying your identity and age as required by our licensing obligations (KYC).
• Detecting, investigating, and preventing fraud, money laundering, and other illicit activity.
• Settling bets, resolving disputes, and maintaining accurate transaction records.
• Providing customer support and responding to your queries and complaints.
• Administering bonuses, promotions, and loyalty programmes.
• Enforcing responsible gaming measures, including self-exclusion requests and deposit limit settings.
• Complying with legal, regulatory, and licensing obligations applicable to zx999.
• Sending you transactional communications (account confirmations, deposit receipts, withdrawal notifications).
• Sending you marketing communications about zx999 promotions and offers, where you have consented to receive these.
• Analysing platform usage data in aggregated, anonymised form to improve our services and user experience.

06 Sharing Your Data

zx999 does not sell your personal data. We share it only in the following circumstances and only to the extent necessary:

6.1 Service Providers

We engage third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors, identity verification providers, cloud hosting providers, customer support platforms, and AML screening services. All such providers are contractually obligated to process data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory and Legal Disclosures

zx999 may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zx999's business, personal data held about players may form part of the transferred assets. In such circumstances, we will notify affected players before their data is transferred and becomes subject to a different privacy policy.

6.4 Consent-Based Sharing

We will share your personal data with any third party not described above only where you have given your explicit, informed consent for us to do so.

07 Cookies & Tracking Technologies

zx999 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us recognise you across sessions and improve your experience. The categories of cookies we use are as follows:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair core platform functionality. For analytics and marketing cookies, you may withdraw consent at any time through the cookie settings panel available on the platform.

08 Data Retention

zx999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years after account closure, in line with anti-money laundering regulatory requirements.
• Transaction and Betting Records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulation and licensing obligations.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship. Copies of identity documents are stored in encrypted form.
• Support Communications: Retained for 3 years from the date of the last communication, unless the matter is subject to ongoing legal proceedings.
• Technical and Log Data: Retained for up to 13 months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of the consent and for 3 years thereafter as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

09 Data Security

zx999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and the zx999 platform.
• AES-256 encryption for personal data stored in our databases.
• Role-based access controls ensuring that only authorised personnel can access player data, and only to the extent required by their job function.
• Multi-factor authentication requirements for internal systems that hold personal data.
• Regular penetration testing and security audits conducted by independent third parties.
• Documented data breach response procedures, including notification timelines consistent with applicable regulatory requirements.

10 Your Rights

As a data subject, you hold the following rights in respect of your personal data held by zx999. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days and will not charge a fee for handling your request in ordinary circumstances.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or supplemented without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of data is contested.
• Right to Data Portability: You may request that personal data you have provided to us be transferred to you, or to another controller, in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors & Age Verification

The zx999 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data relating to individuals below this age. Age verification is a mandatory component of our account registration and KYC process.

If a minor is found to have registered an account on zx999, the account will be closed immediately, all associated data will be deleted in accordance with applicable law, any funds held in the account will be returned to the depositing payment method, and all bets placed from the account will be voided.

12 International Data Transfers

zx999 operates as an internationally licensed platform and may transfer personal data to service providers and infrastructure located outside of Pakistan. Where personal data is transferred to countries that do not provide an equivalent level of data protection, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognised data protection authorities, incorporated into our agreements with service providers.
• Binding corporate rules where applicable to intra-group transfers.
• Transfers to jurisdictions that have been determined to provide an adequate level of data protection by a recognised authority.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting [email protected].

13 Changes to This Privacy Policy

zx999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or the way we use your personal data — we will provide advance notice to registered players via email or prominent in-platform notification, no less than 14 days before the revised policy takes effect.

Minor or non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the policy) may be made without prior notice, and the effective date at the top of this document will be updated accordingly. We encourage you to review this Privacy Policy periodically. Continued use of the zx999 platform following a policy update constitutes your acceptance of the revised terms.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the zx999 data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the site widget
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We ask that you allow us the opportunity to address your concern directly before escalating to a supervisory authority, as we are committed to resolving privacy matters fairly and transparently.