Privacy Policy

ZG999 ("ZG999", "we", "us", "our") is an English-language online gaming platform operated under an international licensing framework and accessible at zg999.cam. This Privacy Policy governs all personal data we collect, process and retain in connection with your use of the ZG999 website, mobile interface and associated services.

We understand that privacy matters deeply to our users, particularly those in Pakistan, where trust in digital platforms is built through transparent, honest communication about data practices. This policy is written in clear, structured English to ensure you understand exactly what data we hold about you, why we hold it, how it is used and what control you have over it.

By registering an account, making a deposit or otherwise using ZG999's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This policy must be read together with our Terms & Conditions, which also form part of your agreement with ZG999.

Throughout this policy, the following terms carry the meanings set out below:

ZG999, operating under the domain zg999.cam, is the Data Controller for all personal data collected through this platform. ZG999 operates under an international licensing framework. For data protection enquiries, contact details are provided in Section 16 of this policy.

ZG999 is not regulated by the Pakistan Telecommunication Authority, the State Bank of Pakistan or any Pakistani government body. The applicable data protection framework is that of the operator's licensing jurisdiction. Pakistani users should be aware that domestic data protection legislation — including any provisions of applicable Pakistani law — may or may not apply to cross-border online service providers operating under a foreign licence.

ZG999 collects personal data across several categories depending on how you interact with the platform:

4.1 Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth
• Email address
• Residential address, including city and country
• Username and encrypted password
• Contact telephone number (where provided)

4.2 KYC Verification Data

• Copy of a valid CNIC (Computerised National Identity Card) or passport
• Proof of address documentation (utility bill, bank statement or equivalent not older than three months)
• Selfie or liveness check image for identity matching
• Source of funds documentation where required for AML compliance

4.3 Financial Data

• Transaction history including deposits and withdrawals in PKR
• Payment method identifiers (partial card numbers, wallet reference IDs — not full sensitive payment credentials)
• Bonus and promotional redemption history

4.4 Gaming Activity Data

• Betting and gaming session history, outcomes and wager amounts
• Game preferences, sporting markets followed and session duration
• Responsible gambling settings and self-exclusion status

4.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, browser type and version
• Session timestamps, page visits and feature interactions
• Cookie identifiers and analytics data

4.6 Communications Data

• Content of support chat logs and email correspondence with ZG999
• Feedback and complaints submitted through any channel

ZG999 uses collected personal data for the following purposes only:

We process your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and ZG999 — including account creation, transaction processing and service delivery.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, licensing requirements and any other applicable legal duty in the operator's jurisdiction.
• Legitimate interests: Processing carried out for fraud prevention, platform security, product improvement and responsible gambling monitoring, where these interests are not overridden by your rights.
• Consent: Processing for optional activities such as marketing communications, where you have given explicit, revocable consent. You may withdraw consent at any time by contacting support.

ZG999 does not sell, rent or trade your personal data to any third party for commercial purposes. We may share data with third parties strictly in the following circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to perform functions on our behalf, including payment processing, identity verification, fraud screening, cloud hosting and customer support platform operation. These processors act only on our written instructions and are contractually prohibited from using your data for any other purpose.

7.2 Legal & Regulatory Disclosure

We may disclose personal data to regulatory bodies, law enforcement agencies, courts or government authorities where required by applicable law, court order or regulatory directive — including AML/CTF reporting obligations in the operator's licensing jurisdiction.

7.3 Payment Infrastructure

Transaction data is necessarily shared with payment processing infrastructure. Familiar Pakistani payment categories such as mobile wallets and bank transfers may be involved in processing your deposit or withdrawal. Their mention is contextual — none of these providers are affiliated with or endorse ZG999. Each provider is subject to its own data handling terms.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of ZG999 or its assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

As ZG999 operates under an international licensing framework, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction.

Where such transfers occur, ZG999 implements appropriate safeguards — including contractual obligations on receiving parties — to ensure your data remains protected to a standard consistent with this policy. By using ZG999, you acknowledge and consent to the international transfer of your personal data as described in this section.

ZG999 uses cookies and similar tracking technologies to operate the platform, maintain session state, remember your preferences and collect analytics information. The categories of cookies in use are:

• Essential cookies: Strictly necessary for platform operation, including login session management and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, currency display and responsible gambling limits.
• Analytics cookies: Used to collect aggregated, anonymised usage statistics to help us understand how the platform is used and where improvements can be made.
• Marketing cookies (with consent): Used only where you have explicitly consented, to track promotional campaign effectiveness. No personal data from these cookies is sold or shared with advertisers.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent the platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to use ZG999's core features.

ZG999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal, regulatory or contractual obligations requiring longer retention. Indicative retention periods are:

• Account and KYC data: Retained for the duration of the active account plus a minimum of five (5) years following account closure, in accordance with standard AML retention obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction to meet financial record-keeping requirements.
• Support and communication records: Retained for a minimum of two (2) years from the date of the final interaction.
• Analytics data: Aggregated and anonymised within twenty-four (24) months of collection. Anonymised data may be retained indefinitely for statistical purposes.
• Marketing consent records: Retained for as long as the consent remains valid, plus a reasonable period to evidence the consent history.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Deletion requests submitted under your data rights (see Section 12) may be subject to mandatory retention requirements that override the deletion obligation.

ZG999 implements technical and organisational security measures appropriate to the risk level of processing, including:

• TLS/SSL encryption for all data transmitted between your device and our servers
• Encryption of stored sensitive data, including KYC documents and financial records
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security assessments of platform infrastructure and third-party processors
• Incident response procedures for detecting and responding to data breaches
• Staff training on data protection and responsible data handling

Notwithstanding these measures, no data transmission or storage system is entirely immune to risk. ZG999 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access to support immediately.

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your personal data held by ZG999. To exercise any of these rights, contact us using the details in Section 16.

ZG999 will acknowledge data rights requests within two (2) business days and provide a substantive response within thirty (30) calendar days. Complex requests may require additional time; we will notify you of any extension.

ZG999's services are strictly for adults aged 18 years or older, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect personal data from any person under this minimum age.

Mandatory KYC age verification — using CNIC or passport date of birth — is applied to every account before real-money gaming access is granted. If ZG999 discovers that an account has been opened by or on behalf of a minor, the account will be immediately closed, all balances will be frozen pending review and the matter will be escalated in accordance with our responsible gambling obligations.

If you believe a minor has accessed ZG999 using your or another adult's credentials, please report this to support immediately so that appropriate action can be taken.

The ZG999 platform may contain references to third-party payment providers and other external services. These are mentioned for contextual reference only. ZG999 is not responsible for the privacy practices, data handling policies or security standards of any third-party provider.

Familiar Pakistani payment references cited on ZG999 — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are named solely as recognisable payment categories for Pakistani users. Their inclusion on this platform does not imply any partnership, endorsement or data-sharing arrangement with ZG999 beyond the minimum data required to process a transaction through their infrastructure.

Each such provider operates under its own privacy policy and terms. We encourage users to review those policies independently.

ZG999 may update or revise this Privacy Policy from time to time to reflect changes in applicable law, platform functionality, data processing practices or regulatory guidance. Where changes are material, we will notify registered users via the email address associated with their account or through a prominent notice within the platform, providing a reasonable period to review the changes before they take effect.

The effective date shown at the top of this document indicates when the current version came into force. Continued use of ZG999 following the effective date of any revision constitutes acceptance of the updated policy. If you do not accept revised terms, you should cease using the platform and request account closure.

For all data protection enquiries, requests to exercise your rights, or to report a privacy concern, please contact ZG999 using the details below. For data rights requests, please include your full name, registered email address and a clear description of your request to enable us to respond efficiently.

We aim to acknowledge all data protection requests within two (2) business days and provide a complete response within thirty (30) calendar days. If a request is particularly complex, we will inform you within the initial thirty-day period and provide an updated timeline.

If you are not satisfied with our handling of your data rights request, you have the right to raise a complaint with the relevant data protection authority in the operator's licensing jurisdiction.