Privacy Policy — How zt9999 Handles Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is issued by zt9999 ("zt9999", "we", "us", "our"), the operator of the online gaming platform accessible at zt9999.cam. This Policy applies to all personal data processed in connection with your use of the Platform — whether you are a registered account holder, a visitor browsing the Platform without an account, or a person who contacts our support team.

We are committed to processing your personal data lawfully, fairly and transparently, in accordance with the applicable data protection principles of our operating jurisdiction. This Policy describes: what personal data we collect and from which sources; the purposes for which we use it; our legal basis for each processing activity; with whom we may share it; how long we retain it; and the rights you have as a data subject.

By registering an account on zt9999, using the Platform's services or interacting with our support channels, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data, you should not register or continue to use the Platform.

2. Definitions

The following terms are used throughout this Policy with the meanings set out below:

3. Data We Collect

zt9999 collects personal data only to the extent necessary to provide the Platform's services, fulfil legal obligations and maintain appropriate security controls. We do not collect personal data speculatively or beyond what is proportionate to the stated purpose. The categories of data we collect are set out below.

Where you provide data about another person (for example, in a referral context), you represent that you have that person's consent to share their information with us for the stated purpose.

4. Legal Basis & Purposes of Processing

We process personal data only where we have a lawful basis to do so. The following table sets out the principal processing activities, the data categories involved and the applicable legal basis:

• Account Registration & Service Delivery — Identity Data, Contact Data, Financial Data.
  Legal basis: Performance of contract. Processing is necessary to create and manage your account and to deliver the services you have requested.
• Identity Verification (KYC) & Age Verification — Identity Data, Contact Data, Financial Data.
  Legal basis: Legal obligation. Verification is required to comply with licensing conditions, anti-money laundering (AML) obligations and the requirement to prevent underage gambling.
• Responsible Gambling Monitoring — Gaming Activity Data, Financial Data, Communications Data.
  Legal basis: Legal obligation and legitimate interests. We monitor gaming patterns to identify indicators of problem gambling and to comply with our responsible gambling licence obligations.
• Fraud Prevention & Security — Technical Data, Financial Data, Identity Data, Gaming Activity Data.
  Legal basis: Legitimate interests. We have a legitimate interest in protecting the Platform, our users and our business from fraudulent activity, account takeover and financial crime.
• Marketing Communications — Contact Data, Gaming Activity Data (for personalisation).
  Legal basis: Consent. Marketing communications are sent only where you have opted in. You may withdraw consent at any time via account settings or by contacting support.
• Customer Support & Dispute Resolution — Communications Data, Identity Data, Gaming Activity Data.
  Legal basis: Performance of contract and legitimate interests. Support records are maintained to resolve disputes, ensure service quality and fulfil regulatory audit requirements.
• Platform Analytics & Improvement — Technical Data, Gaming Activity Data (aggregated and anonymised where possible).
  Legal basis: Legitimate interests. Analytics data helps us understand platform usage patterns and improve performance, stability and user experience for players across Pakistan.

5. Data Processing

All personal data collected through zt9999 is processed in accordance with the principles of data minimisation, purpose limitation and storage limitation. We do not process personal data for purposes incompatible with those stated in this Policy without either obtaining fresh consent or establishing a new lawful basis.

Automated decision-making processes — such as fraud scoring, responsible gambling risk flagging and bonus eligibility assessment — may be applied to your personal data. Where a solely automated decision produces a significant effect on your account (for example, a payment hold or an account restriction), you have the right to request human review of that decision by contacting our support team.

zt9999 maintains detailed internal data processing records as required by our licensing obligations. These records document the categories of data processed, processing activities, retention periods, security measures and the identity of any data processors engaged to process data on our behalf.

6. Third-Party Sharing

zt9999 does not sell, rent or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Licensed Technology Providers: Software providers, game studios, platform infrastructure vendors and live streaming technology providers who require access to limited operational data to deliver their contracted services. All such providers operate under data processing agreements that restrict their use of your data.
• Payment Processors: When you initiate a deposit or withdrawal, transaction data is shared with the relevant payment processor or acquiring bank. For Pakistani users, this may include the intermediary systems of Easypaisa, JazzCash, Raast-enabled banks, HBL, UBL, Meezan Bank or Bank Alfalah as applicable. Data shared is limited to what is necessary to execute the transaction. These providers are named as contextual references only and do not endorse gambling.
• Identity Verification Services: Third-party KYC and AML screening providers who verify identity documents, check sanction lists and perform liveness verification. These providers process identity data as data processors acting on our instructions.
• Regulatory Authorities: Where required by our licensing obligations or by applicable law, we may disclose personal data to licensing authorities, financial intelligence units or law enforcement agencies. We will not disclose data beyond what is legally required in such circumstances.
• Fraud Prevention Networks: Industry-standard fraud prevention and responsible gambling networks may receive anonymised or pseudonymised identifiers to support cross-operator self-exclusion and fraud detection programmes.
• Professional Advisors: Legal, financial and compliance advisors who are bound by professional confidentiality obligations, solely to the extent necessary for the provision of their services to zt9999.

We require all third-party data processors to implement appropriate technical and organisational security measures and to process personal data solely for the purposes specified in their contractual arrangement with zt9999.

7. KYC & Identity Verification

Identity verification (KYC) is a mandatory component of our licensing obligations and is required to confirm the identity, age and residential details of players before processing withdrawals or when triggered by risk-based compliance procedures.

For Pakistani users, accepted identity documents include a valid CNIC (Computerised National Identity Card) or a valid Pakistani passport. Both sides of the CNIC are typically required. Additional documentation — such as a recent utility bill, bank statement or mobile wallet statement showing your name and address — may be requested for enhanced verification tiers.

• All identity documents must be submitted through the Platform's secure HTTPS verification portal. Never send identity documents by email, social media or unsecured messaging application.
• Documents must be current, undamaged and clearly legible. Alterations, obscuring of information or falsification of documents constitute a serious breach of our Terms & Conditions and may be reported to relevant authorities.
• A selfie photograph or liveness video check may be required to confirm that the document submitted belongs to the account holder presenting it.
• KYC data is processed by zt9999 and our contracted identity verification service providers. It is used solely for verification, AML screening and fraud prevention purposes — never for marketing.
• KYC documents are retained for the period required by applicable licensing and AML legislation. Requests to delete KYC data cannot be fulfilled where retention is legally mandated.

8. Cookies & Tracking Technologies

zt9999 uses cookies and similar technologies (including local storage, session storage and tracking pixels) to operate and improve the Platform. Cookies are small data files placed on your device when you access the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, language settings and display options to provide a more personalised experience. Disabling these may affect certain personalisation features.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, session duration, device type. This data helps us identify performance issues and improve the user experience.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns and to deliver relevant offers within the Platform. These are deployed only where you have consented to marketing communications.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block or delete cookies individually or by category. Please note that blocking strictly necessary cookies will prevent you from using the Platform. For detailed guidance on managing cookies in common browsers, refer to your browser's help documentation.

9. Data Retention

zt9999 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal, regulatory or contractual obligations that require longer retention. Our principal retention periods are as follows:

• Account Data (active accounts): Retained for the duration of the active account relationship and for the period required by our licensing authority following account closure, typically a minimum of five years after the account's last activity date.
• KYC Documents: Retained for the period mandated by applicable AML legislation applicable to our licensed jurisdiction, generally five years from the date of the last transaction or account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of five years following the relevant transaction, in accordance with AML and financial record-keeping requirements.
• Customer Support Records: Retained for three years following the close of the relevant support interaction, unless a longer period is required for an active dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for three years following the withdrawal of consent, as evidence of the consent history.
• Analytics Data: Aggregated or anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once it cannot identify an individual.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

10. International Data Transfers

zt9999 operates internationally and your personal data may be transferred to, and processed in, countries other than Pakistan or your country of residence. These transfers may occur when we engage technology providers, KYC service providers or cloud infrastructure vendors whose servers are located in other jurisdictions.

Where personal data is transferred outside the jurisdiction of our primary data protection framework, we ensure that appropriate safeguards are in place, which may include: standard contractual clauses approved by the relevant data protection authority; adequacy decisions recognising the destination country's data protection standards; or other legally recognised transfer mechanisms.

11. User Rights

Subject to the applicable data protection law of our licensing jurisdiction, you may have the following rights in respect of your personal data. To exercise any of these rights, contact our support team via Live Chat or by email at [email protected] (plain text reference only — not a clickable link). We will acknowledge your request within a reasonable timeframe and respond fully within the period required by applicable law.

12. Children's Privacy

The zt9999 Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect, process or retain personal data from persons below the applicable minimum age.

If we become aware that personal data has been submitted by or on behalf of a person below the minimum required age, we will immediately close the associated account, return any deposited funds through appropriate channels and securely delete all personal data associated with that account, to the extent not retained by mandatory legal obligations.

If you are a parent or guardian and believe that a minor has accessed or registered on zt9999 without your knowledge, please contact our support team immediately so that we can investigate and take appropriate action.

13. Data Security

zt9999 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive personal data stored in our databases, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data to those with a documented operational need.
• Multi-factor authentication for staff access to systems containing personal data.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures for the detection, containment and notification of personal data breaches.

Despite these measures, no data transmission over the internet or data storage system is completely secure. zt9999 cannot guarantee absolute security of your personal data. You are responsible for keeping your login credentials confidential and for ensuring the security of the device from which you access the Platform.

14. Policy Amendments

zt9999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law or our licensing obligations. The "Effective Date" at the top of this document reflects the version currently in force.

Where we make material changes to this Policy — such as introducing a new category of data collection, a new sharing arrangement or a new processing purpose — we will notify registered users by email or via a prominent on-Platform notification prior to the changes taking effect, where practicable.

Your continued use of the Platform following notification of a material amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you should cease using the Platform and contact support to close your account.

15. Contact Us

For any questions, requests or concerns relating to this Privacy Policy or the processing of your personal data, please contact zt9999 through the following channels:

• Live Chat: Available 24/7 directly within the Platform. Recommended for immediate data-related queries.
• Help Centre: Accessible via the Platform, covering common questions about data rights, account management and cookie settings.
• Email: [email protected] — for formal data subject access requests or written privacy concerns. Please include your registered username and a clear description of your request. Allow up to 30 days for a formal response to data rights requests. Do not send identity documents via email — use the secure verification portal in your account settings.

Pakistani users may also find answers to common privacy questions on our FAQ page.