zd999 Privacy Policy — How We Handle Your Personal Data With Care

1 Who We Are

This Privacy Policy is published by zd999, the operator of the online gaming platform accessible at https://zd999.games ("the Platform"). Throughout this Policy, references to "zd999", "we", "us", or "our" refer to the zd999 operating entity. References to "you", "your", or "member" refer to any individual who registers an account with, or accesses any portion of, the zd999 Platform.

zd999 is committed to protecting the privacy and personal data of all its members in Pakistan and internationally. This Policy describes our practices in plain, accessible English so that every member — whether they are in Karachi, Lahore, Islamabad, or anywhere else — understands exactly how their information is handled.

By registering a zd999 account or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood its contents and consent to the data practices described herein. If you do not agree with this Policy, you must not use the zd999 Platform.

2 Personal Data We Collect

zd999 collects the following categories of personal data from members:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If you voluntarily disclose such information in a support communication, we will handle it with appropriate care but will not retain it beyond the immediate need.

3 How We Collect Your Data

zd999 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, and session logs captured via server logs and cookies (see Section 8).
• Payment providers: Transaction confirmation data shared by Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank when you initiate a deposit or withdrawal.
• Identity verification partners: Confirmation of identity document authenticity and fraud-risk scoring provided by third-party KYC service providers.
• Fraud prevention services: Risk signals provided by anti-fraud and anti-money-laundering partners to help us detect suspicious account activity.

4 Why We Use Your Personal Data

zd999 uses the personal data it collects for the following clearly defined purposes:

• Account creation and management: To create, verify, and maintain your zd999 account, including applying responsible gaming limits you have set.
• Processing financial transactions: To process PKR deposits and withdrawals via your chosen payment method and maintain accurate transaction records.
• Identity verification and fraud prevention: To verify that you are who you say you are and to prevent money laundering, underage gambling, duplicate account creation, and other fraudulent activity.
• Providing customer support: To respond to enquiries, resolve disputes, and deliver the 24/7 English-language support service via WhatsApp, Telegram, and Live Chat.
• Personalisation and platform improvement: To improve the relevance of game recommendations, platform features, and promotional offers based on your activity on zd999.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering laws, age-verification requirements, and any lawful request from a competent authority.
• Security monitoring: To detect, investigate, and prevent technical vulnerabilities, cyberattacks, and account breaches.
• Marketing communications: To send you promotional messages about zd999 offers, where you have opted in to receive such communications. You may unsubscribe at any time.

5 Legal Basis for Processing

zd999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement with you, including operating your account and processing transactions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age-verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out in pursuit of zd999's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — for example, the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

zd999 does not sell your personal data to any third party. We share personal data with external parties only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank receive the minimum data necessary to process your PKR transactions.
• Identity and KYC verification providers: Third-party identity verification partners who confirm the authenticity of your documents and provide fraud-risk assessments.
• Technology and infrastructure partners: Hosting providers, cloud infrastructure services, and platform security vendors who process data solely on our behalf under strict data processing agreements.
• Law enforcement and regulatory authorities: Where we are legally required or compelled by a court order, government request, or regulatory authority to disclose information.
• Anti-fraud networks: Shared risk signals with industry fraud-prevention services to protect all parties against account fraud and financial crime.

7 Payments, KYC & Anti-Money-Laundering

As a gaming operator, zd999 is subject to know-your-customer (KYC) and anti-money-laundering (AML) obligations. This means that we are legally required to verify the identity of members, particularly before processing withdrawals above certain thresholds or where a member's activity triggers a risk review.

KYC documents — which may include a copy of your CNIC, a selfie, or a proof-of-address document — are collected, stored securely, and used solely for identity verification and regulatory compliance purposes. These documents are not used for any other purpose and are not shared with any party other than our KYC verification partner.

zd999 retains AML-related records for the minimum period required by applicable anti-money-laundering law. Where a member's account is subject to an active regulatory investigation, relevant records may be retained for longer.

8 Cookies & Tracking Technologies

zd999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and understand how members use the site so that we can improve it over time.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies: Remember your language preference, display settings, and last login. Disabling these may reduce platform usability.
• Analytics cookies: Collect anonymised data about how members navigate the Platform — which pages are visited most, session duration, and error rates. This helps us identify and fix issues. We use aggregated, anonymised data only.
• Marketing cookies: Used only where you have explicitly consented to receive personalised promotional content from zd999. You may withdraw this consent at any time through your account preferences.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the Platform from functioning correctly.

9 How Long We Retain Your Data

zd999 retains personal data for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status.
• Closed account data: Core identity and transaction records are retained for a minimum of five years following account closure to meet AML and regulatory requirements.
• Support communications: Retained for three years from the date of the interaction, unless required for longer by an ongoing dispute or investigation.
• Technical and log data: Typically retained for 12 months before being anonymised or deleted.
• Marketing consent records: Retained for the duration of your marketing opt-in, plus three years from the date of opt-out or account closure.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

10 How We Protect Your Data

zd999 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transferred between your device and the zd999 Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data fields — including identity document references and financial data — are encrypted within our databases.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis and governed by role-based access control policies.
• Two-factor authentication: Optional 2FA is available to all zd999 members and is strongly recommended for account protection.
• Regular security assessments: We conduct periodic internal security reviews and engage external parties for penetration testing on a scheduled basis.
• Incident response: zd999 maintains a data breach response plan. In the event of a breach that poses a material risk to members, we will notify affected individuals promptly.

While zd999 takes all reasonable steps to protect your data, no internet transmission or digital storage system is guaranteed to be 100% secure. You are also responsible for maintaining the security of your account credentials (see our Terms & Conditions).

11 Your Data Rights

As a zd999 member, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team — details are in Section 14.

We will respond to all valid data rights requests within 30 days. In certain circumstances — for example, where we are legally required to retain data for AML compliance — we may be unable to immediately fulfil an erasure request, and we will explain the reason for any such delay clearly.

12 Children and Minors

zd999 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. All registration submissions are subject to age verification, and accounts identified as belonging to a minor will be closed immediately, with any associated data deleted subject to applicable legal retention requirements.

If you are a parent or guardian and you believe that a minor in your care has registered an account on zd999, please contact our support team immediately. We take underage gaming extremely seriously and will investigate all such reports as a priority.

13 Changes to This Privacy Policy

zd999 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that meaningfully affect how your data is collected, used, or protected — we will publish the revised Policy on this page with an updated effective date and notify registered members via email or a prominent in-platform notification.

We recommend that you review this page periodically to stay informed about how zd999 protects your personal data. Your continued use of the Platform following a published update constitutes your acceptance of the revised Privacy Policy.

14 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise one of your data rights, or would like to raise a concern about how your personal data has been handled, please reach out to the zd999 team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the zd999 Platform.
• WhatsApp & Telegram: Contact details are available in the Platform's support section.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line for faster routing to our data protection team.

All privacy-related communications are handled in English and treated with strict confidentiality. We aim to acknowledge all data rights requests within five working days and to provide a substantive response within 30 days.