za999 Privacy Policy
Your Data. Your Rights.

za999 ("the Platform", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at za999.bio. In the context of data privacy law, za999 acts as the data controller in respect of all personal data collected from Members ("you") and processed in connection with the operation of your za999 Account and your use of the Platform's services.

As the data controller, za999 is responsible for determining the purposes and means of processing your personal data, for implementing appropriate technical and organisational measures to protect your data, and for ensuring that your data is processed in accordance with applicable data protection principles and the terms of this Privacy Policy.

za999 operates under international gaming licensing standards that impose specific obligations in respect of data handling, identity verification, and the prevention of money laundering and underage gambling. Data processing conducted for these compliance purposes forms a mandatory part of za999's data controller obligations and cannot be waived by individual Members.

za999 collects the following categories of personal data from Members and prospective Members:

2.1 Registration & Identity Data

• Full legal name as it appears on your Pakistani national identity card (CNIC) or passport;
• Date of birth (for age verification — Members must be 21 years or older);
• Pakistani CNIC number or passport number;
• Residential address;
• Mobile phone number (Pakistani 03xx format or international format);
• Email address.

2.2 Financial & Payment Data

• EasyPaisa wallet account number or phone number linked to your EasyPaisa account;
• JazzCash wallet account number or linked phone number;
• Bank account details for HBL, UBL, or Meezan Bank withdrawals (account title and IBAN);
• Visa card details (processed via tokenisation — full card numbers are not stored by za999);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

2.3 Gameplay & Betting Data

• Gaming session data including games played, bets placed, amounts wagered, and outcomes;
• Sports betting history including markets bet on, odds accepted, stake amounts, and settlement results;
• Account balance history and bonus balance history;
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status).

2.4 Technical & Device Data

• IP address at the time of login and each session;
• Device type and model (e.g., Samsung Galaxy A-series, as commonly used in Karachi and Lahore);
• Operating system and browser version;
• Session timestamps and duration;
• Cookie and tracking technology data (see Section 7).

2.5 Communications Data

• Support tickets, live chat transcripts, and email correspondence between you and za999's support team;
• Dispute and complaint records;
• Responses to surveys or promotional communications where you have opted to participate.

za999 collects your personal data through the following channels and mechanisms:

• Direct provision by you: When you complete the za999 Account registration form, submit identity verification documents, deposit funds via EasyPaisa or JazzCash, request a withdrawal, contact za999 support, or respond to a survey.
• Automated technical collection: Via cookies and similar tracking technologies deployed on za999.bio when you visit the Platform (see Section 7 for details).
• Payment processors: za999 receives transaction confirmation data from EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and Visa in connection with your deposit and withdrawal instructions. This data is limited to transaction status, amount, and reference identifiers.
• Identity verification services: Where za999 uses third-party identity verification providers to confirm the authenticity of documents you submit, those providers may return verification status data to za999.
• Fraud and compliance screening: za999 may receive data from licensed fraud detection or anti-money-laundering screening services as required under its licensing obligations.

The table below sets out the primary purposes for which za999 processes your personal data and the legal basis for each processing activity:

za999 does not sell, rent, or commercially transfer your personal data to unaffiliated third parties. za999 shares your personal data with third parties only in the following specific circumstances:

• Payment processors: Your payment details are shared with EasyPaisa (Telenor Microfinance Bank), JazzCash (Jazz), HBL, UBL, Meezan Bank, and Visa solely for the purpose of processing your deposit and withdrawal instructions. za999 does not receive or store your full payment credentials — all sensitive payment data is handled directly by the relevant payment processor under their own security standards.
• Identity verification providers: Where za999 uses an accredited third-party identity verification service to authenticate your CNIC or other identity documents, your document data is shared with that service for the sole purpose of verification. These providers are contractually bound to process your data only for this purpose.
• Game software providers: Game providers (such as PG Soft and Pragmatic Play, among others) may receive your anonymised session data necessary for game delivery and RNG function. No personally identifiable data beyond a session token is shared with game providers.
• Licensing and regulatory authorities: za999 is required under its international gaming licensing obligations to report certain data to the relevant regulatory authority. This may include identity data and financial transaction data relating to specific Members where required by law or regulatory instruction.
• Law enforcement: za999 will disclose personal data to law enforcement agencies, courts, or government authorities where required to do so by a valid legal order, court judgment, or applicable law. za999 will notify affected Members of such disclosures where permitted by law to do so.
• Fraud prevention networks: za999 may share data with licensed fraud prevention and anti-money-laundering screening services to comply with its legal obligations under financial crime prevention regulations applicable under its licensing framework.

Pakistani za999 members primarily use EasyPaisa and JazzCash for deposits and withdrawals. za999 handles payment data for these methods as follows:

6.1 EasyPaisa. When you deposit via EasyPaisa, you initiate the transaction from the EasyPaisa app or by authorising a transfer from your EasyPaisa wallet to za999's payment processing gateway. za999 receives confirmation of the transaction amount and a transaction reference number from EasyPaisa. za999 does not receive, store, or have access to your EasyPaisa PIN or wallet password. Your EasyPaisa wallet number (which is your Pakistani mobile phone number) is stored by za999 solely to identify your linked withdrawal account.

6.2 JazzCash. The same principles apply to JazzCash transactions. za999 stores your JazzCash-linked mobile number for withdrawal processing but does not store your JazzCash MPIN or any security credentials.

6.3 Visa Card Payments. Visa card transactions processed on za999 are handled via a PCI-DSS compliant payment gateway. Full card numbers are never transmitted to or stored on za999's servers. za999 receives and stores a tokenised reference for recurring withdrawal purposes only.

6.4 Bank Transfer Data. For withdrawals to HBL, UBL, or Meezan Bank accounts, za999 stores your account title, IBAN number, and bank name for the sole purpose of processing your withdrawal request. This data is encrypted at rest on za999's servers and accessed only by authorised finance operations personnel.

za999.bio uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The categories of cookies used on za999.bio are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session cookies that maintain your login state across pages, security tokens, and cookies that manage your game session state. These cookies cannot be disabled without impairing your ability to use za999. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences such as language, currency display, and responsible gambling tool settings. Disabling them may affect your experience but will not prevent access to the Platform.
• Analytics Cookies: za999 uses analytics cookies to understand how Members use the Platform — which game categories are most popular, how long sessions last, and which pages are most frequently visited. This data is used in aggregated, anonymised form to improve the Platform. You may opt out of analytics cookies.
• Security & Fraud Detection Cookies: These cookies help za999 identify unusual login patterns, detect potential account takeover attempts, and flag suspicious transaction behaviour. They are a core component of za999's security infrastructure.

Most Pakistani members access za999 via mobile browsers (Chrome on Android is most common). Standard mobile browser cookie management settings apply. You may clear cookies at any time through your browser settings, but this will log you out of your za999 session and clear any locally stored preferences.

za999 implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your device and za999.bio is encrypted using TLS 1.2 or higher (equivalent to 256-bit SSL). The padlock symbol in your browser's address bar confirms this encryption is active during your za999 session.
• Password Storage: Account passwords are stored using industry-standard bcrypt hashing with appropriate work factors. za999 staff cannot access your password in plain text under any circumstances.
• Payment Tokenisation: Financial credentials (EasyPaisa wallet numbers, bank IBANs) are stored in an encrypted database with access controls. Full payment card numbers are never stored — only tokenised references managed by the relevant payment processor.
• Two-Factor Authentication (2FA): za999 offers 2FA for all Member accounts via OTP delivered to the Member's registered Pakistani mobile number. za999 strongly recommends all Members enable 2FA.
• Access Controls: Internal access to Member personal data is restricted to za999 employees and contractors who require it to perform their specific job functions. Access is logged and audited.
• Penetration Testing: za999's platform infrastructure is subject to periodic security assessments by qualified security professionals under za999's international licensing requirements.
• Breach Notification: In the event of a data breach affecting Member personal data, za999 will notify affected Members and the relevant regulatory authority within the timeframes required under applicable law and licensing obligations.

za999 retains your personal data for as long as is necessary for the purposes for which it was collected and as required to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required under za999's licensing obligations relating to anti-money-laundering record-keeping.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial crime prevention regulations.
• Gameplay and betting history: Retained for the duration of your Account and for three (3) years following Account closure.
• Support and communications records: Retained for three (3) years from the date of the most recent communication in each thread, to support dispute resolution.
• Technical and device data: Session logs retained for ninety (90) days in rolling format for security monitoring purposes; aggregated analytics data retained for up to three (3) years.
• Self-exclusion records: Retained permanently to prevent a previously self-excluded Member from bypassing their self-exclusion by creating a new Account.

When personal data is no longer required for any lawful purpose, za999 will delete or anonymise it securely. Where deletion is not technically feasible (for example, data stored in backup archives), za999 will isolate the data and prevent it from further processing until deletion is possible.

As a za999 Member, you have the following rights in respect of your personal data. You may exercise any of these rights by submitting a written request to za999 support at [email protected]. za999 will acknowledge your request within 48 hours and will respond substantively within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data that za999 holds about you, together with information about how that data is processed.
• Right of Rectification: If any personal data za999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly via your za999 Account profile.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing. Note that za999 may be required to retain certain data to comply with legal obligations — in such cases, za999 will inform you of the data it is required to retain and the applicable legal basis.
• Right to Restriction: You may request that za999 restrict processing of your personal data in certain circumstances, for example while a dispute about the accuracy of data is resolved.
• Right to Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where za999 relies on its legitimate interests as the legal basis for processing. You may also withdraw consent for marketing communications at any time — see Section 12.
• Right to Complain: If you are not satisfied with how za999 has handled your personal data, you have the right to lodge a complaint with the relevant data protection authority or with the regulatory body under za999's licensing framework.

za999 services are strictly limited to persons aged 21 years and above. za999 does not knowingly collect personal data from individuals under the age of 21 and does not permit underage persons to create or use a za999 Account.

As part of the registration process, za999 requires all Members to confirm that they are at least 21 years of age. Age verification is conducted using the date of birth provided at registration, supplemented by identity document verification where required. Pakistani CNIC identity cards include date of birth information that za999 uses to confirm the age eligibility of Members who are required to provide documentary verification.

If za999 discovers or has reasonable grounds to suspect that an Account is held by a person under the age of 21, za999 will immediately suspend the Account, cease all data processing activities on the Account other than those required to complete an investigation, and if the suspicion is confirmed, will permanently delete the Account and return any deposit to the source payment method where verifiably possible.

If you believe that za999 has inadvertently collected personal data from a person under the age of 21, please contact za999 support immediately at [email protected]. za999 will investigate and take appropriate action within five (5) business days of notification.

za999 may send you promotional communications, including bonus offers, new game announcements, PSL betting promotions, and special events, via email and SMS to your registered contact details. za999 will only send marketing communications where you have opted in to receive them or where doing so falls within the scope of a legitimate interest in communicating with existing Members about directly related services.

You may opt out of marketing communications from za999 at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in any za999 marketing email;
• Updating your communication preferences from within your za999 Account settings;
• Contacting za999 support at [email protected] with a request to opt out of all marketing communications.

Opting out of marketing communications will not affect transactional communications that za999 is required to send in connection with your Account, such as withdrawal confirmations, security alerts, changes to terms and policies, and responsible gambling tool confirmations. These communications are necessary for the operation of your Account and cannot be opted out of while your Account remains active.

The za999 Platform may reference or operate alongside third-party services including game software providers, payment processors, and responsible gambling resources. za999's Privacy Policy governs only the data processing conducted by za999 as data controller. It does not govern the privacy practices of third-party service providers, payment processors, game providers, or any other third parties.

Each third-party service provider that processes data in connection with za999's services does so under their own privacy policy and data processing agreements. za999 enters into data processing agreements with all third-party processors that handle za999 Member data, requiring those processors to maintain appropriate security standards and to process Member data only for the specific purposes authorised by za999.

za999 accepts no responsibility for the privacy practices of any third-party services that Members choose to interact with independently of the za999 Platform.

za999 reserves the right to update or amend this Privacy Policy at any time. The current version of the Privacy Policy will always be available at za999.bio/privacy-policy, together with the effective date of the most recent revision. Material amendments to this Policy — including changes that affect how za999 uses your data or that reduce your rights — will be communicated to Members via email to their registered address with a minimum of fourteen (14) days' notice before taking effect.

Your continued use of the za999 Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact za999 support to request Account closure.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded in their entirety by this version.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 10, or wish to make a complaint about za999's data processing practices, please contact za999's support team using the details below:

Please note that the support email address above is displayed as plain text only and is not a clickable hyperlink. When submitting a privacy request via email, please include your full name, your registered za999 mobile number or email address, and a clear description of your request or complaint. Do not include sensitive document images in your initial email — za999 will provide a secure upload channel if documentary evidence is required to process your request.

If you are not satisfied with za999's response to your privacy complaint, you may escalate the matter to the relevant data protection authority or the regulatory body under za999's international gaming licensing framework.