ZY999 Privacy Policy –
How We Handle Your Data

01 Introduction

ZY999.win ("ZY999", "we", "us", "our") is committed to protecting the personal information of everyone who uses the platform. This Privacy Policy applies to all players registered on ZY999.win and to anyone who visits the website or uses the ZY999 Android application, regardless of whether they have completed registration.

This policy sets out what personal data we collect, the reasons we collect it, how long we keep it, who we share it with (and when), and the rights you have over your own information. We have written this in plain Pakistan English rather than pages of dense legal text, because we believe you deserve to understand exactly what is happening with your data.

By registering an account on ZY999 or continuing to use the platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be handled. This policy should be read alongside the ZY999 Terms and Conditions.

02 What We Collect

ZY999 only collects information that is necessary for running a legitimate online gaming platform for Pakistani players. We do not collect data for the sake of it. Below is a breakdown of the categories of data we gather and where each comes from.

We do not collect sensitive categories of personal data such as biometric data, health information, political opinions, or religious beliefs. We also do not collect your contacts list, camera access, or microphone data through the ZY999 app.

03 How We Use Your Data

Every piece of data ZY999 collects serves a specific, legitimate purpose. We do not use your information in ways that go beyond what is described in this policy. The primary reasons we process your personal data are:

• Account Management — To create, maintain, and secure your ZY999 player account, including login verification and password resets.
• Identity Verification (KYC) — To confirm that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your account belongs to a real person using their own details.
• Processing Transactions — To handle your PKR deposits via JazzCash, Easypaisa, Raast, bank transfer, cards and other supported methods, and to process withdrawal requests to your registered payment method.
• Delivering Platform Services — To give you access to sports betting markets (including cricket, PSL, T20, and football), casino games, slots, bingo, and all other features available on ZY999.
• Bonus and Promotion Management — To track bonus eligibility, ensure that promotions are claimed fairly, and apply wagering requirements correctly to your account.
• Fraud Prevention and Security — To detect unusual account activity, identify potential multi-accounting, flag suspicious transactions, and protect the platform from misuse.
• Customer Support — To respond to your messages, resolve complaints, and improve the quality of our support service.
• Platform Improvement — To analyse usage patterns in aggregate (not at an individual level) so we can improve game performance, navigation, and the overall player experience.
• Responsible Gaming — To monitor for signs of problem gaming behaviour and apply tools such as deposit limits or self-exclusion where appropriate or where requested by you.
• Legal Compliance — To meet any record-keeping, reporting, or disclosure obligations that may apply to ZY999's operations.

04 Sharing Your Data

ZY999 does not sell, rent, or trade your personal data to any third party. We do not share your information with advertisers. However, there are limited circumstances in which your data may be shared with external parties, and we want to be transparent about each of them:

• Payment Processors — When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment provider (e.g., JazzCash, Easypaisa, Raast, or your bank) to process the transaction. These providers have their own privacy policies and security standards.
• Identity Verification Partners — If ZY999 uses a third-party KYC service to help verify your identity documents, the minimum required data is shared with that partner under strict confidentiality agreements.
• Technology and Infrastructure Providers — Hosting, security, and platform infrastructure providers may have access to data as part of providing their services. All such providers are contractually required to handle data securely and only for the purposes specified.
• Legal and Regulatory Requirements — ZY999 may disclose your data if required to do so by a valid legal process, court order, or applicable law. We will only go further than the minimum required disclosure when legally compelled.
• Business Transfer — In the unlikely event that ZY999's business is transferred, merged, or acquired, player data may form part of the transferred assets. You would be notified of any such change that materially affects how your data is used.

In all cases where data is shared with third parties, we require those parties to maintain confidentiality and data security standards consistent with this policy. We do not permit third parties to use your data for their own marketing purposes.

05 Payment Data

Because ZY999 handles real-money transactions in PKR, payment data is treated with an additional layer of care. Here is how we handle the financial information you provide:

• Full card numbers, PINs, and mobile wallet PINs are never stored on ZY999's servers. Payment credentials are handled directly by the relevant payment gateway using their own secure systems.
• ZY999 stores a reference identifier (such as a masked account number or transaction ID) so that we can match deposits and withdrawals to your account, resolve disputes, and maintain required financial records.
• Transaction history — amounts, dates, and payment method types — is stored as part of your account record for the duration required by our data retention policy (see Section 7).
• All payment-related data in transit is protected by TLS encryption.

06 Cookies & Tracking

ZY999.win uses cookies and similar tracking technologies to make the platform work properly and to understand how players use the site. Here is a clear breakdown of what we use and why:

• Essential Cookies — These are required for the website to function. They manage your login session, keep you authenticated while you browse, and remember your language or region preferences. You cannot opt out of essential cookies without losing access to core platform features.
• Analytics Cookies — These help us understand how players navigate ZY999 — which pages are most visited, where users drop off, and how long sessions last. This data is processed in aggregate and is not tied to individual identities. We use it to improve the platform experience.
• Security Cookies — These help us detect and prevent fraudulent activity, such as brute-force login attempts or unusual access patterns.
• Preference Cookies — These remember your settings, such as display preferences, so you do not have to re-configure them on every visit.

ZY999 does not use third-party advertising cookies or retargeting pixels. You will not be tracked across other websites for ZY999 advertising purposes. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect how the platform functions.

07 Data Retention

ZY999 retains your personal data for as long as your account is active and for a reasonable period after account closure, in line with the following principles:

• Active Accounts — While your account is open and in use, all account, transaction, and activity data is retained to support the ongoing delivery of services, resolve disputes, and maintain security.
• Closed Accounts — After an account is closed, whether by you or by ZY999, core identity and transaction records are retained for a minimum period to comply with financial record-keeping requirements and to handle any disputes or legal claims that may arise after closure.
• Marketing Data — If you have opted in to receiving promotions and communications, your contact details are retained for that purpose until you opt out. Opting out is straightforward — contact support or follow the unsubscribe instructions in any communication we send.
• Support Interactions — Chat logs and support tickets are retained for a period after closure to support quality assurance and dispute resolution.

Once data is no longer required for any of the purposes set out in this policy, it is securely deleted or anonymised so it can no longer be linked back to you as an individual.

08 Security Measures

Protecting your personal data is something ZY999 takes seriously. We have implemented a range of technical and organisational safeguards to reduce the risk of unauthorised access, loss, or disclosure of your information:

• All data transmitted between your device and ZY999 is encrypted using TLS (Transport Layer Security).
• Passwords are stored in a hashed format using modern cryptographic algorithms. ZY999 staff cannot view your password in plain text.
• Access to player data within ZY999's internal systems is restricted to authorised personnel only, based on their role. All internal access is logged.
• Our platform undergoes regular security reviews and vulnerability assessments.
• In the event of a data breach that poses a risk to your personal information, ZY999 will notify affected players as promptly as practically possible and take immediate steps to contain and remediate the breach.

While we take every reasonable precaution, no online platform can guarantee absolute security. You also play an important role — use a strong, unique password for your ZY999 account and do not share your login credentials with anyone.

09 Your Rights

You have meaningful rights over your personal data. ZY999 respects these rights and will respond to valid requests without unnecessary delay. Here is a summary of what you can ask for:

To exercise any of these rights, contact our support team with your request. We will verify your identity before processing any data-related request and respond within a reasonable timeframe. There is no charge for making a request.

10 Minors

ZY999 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are at least 18 years old, and we carry out age verification checks as part of the KYC process.

If we discover or are notified that a minor has registered an account on ZY999, we will immediately close the account, erase any associated personal data, and — if a deposit was made — work to return the funds through the payment method used.

Parents and guardians who believe a minor may have accessed ZY999 are encouraged to contact our support team immediately so we can take prompt action.

11 Policy Changes

ZY999 may update this Privacy Policy from time to time to reflect changes to the platform, services, or applicable requirements. When we make material changes — changes that meaningfully affect how your data is collected or used — we will notify active players via in-app notification or by prominently posting the updated policy on this page with a new "Last Updated" date.

We encourage you to review this page periodically. Your continued use of ZY999 after an updated policy has been posted constitutes your acceptance of the revised terms. If you disagree with any changes, you should stop using the platform and contact support to request account closure.

Minor clarifications or formatting updates that do not change the substance of the policy may be made without specific notification.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how ZY999 has handled your personal information, please get in touch. Our support team is available around the clock.