zx999 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

zx999 ("we", "us", "our") operates the online betting and casino platform accessible at zx999.asia (the "Platform"). This Privacy Policy describes how zx999 handles personal information relating to registered players and visitors to the Platform. It applies to all personal data collected through the registration process, account use, customer support interactions, and technical platform operations.

This Policy should be read alongside the zx999 Terms & Conditions, which govern the overall relationship between you and zx999. By creating an Account or using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing activities described herein.

When you create a zx999 Account, we collect the following registration information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for mandatory age verification — you must be 18 or older).
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Peshawar).
• Pakistani mobile phone number (Jazz, Zong, Ufone, Telenor, or Warid).
• Email address.
• Password (stored in encrypted, one-way hashed form — not accessible in plaintext by zx999 staff).

As part of our Know Your Customer obligations, we may request and retain copies of:

• Pakistani CNIC (Computerized National Identity Card) or valid passport.
• Proof of residential address (utility bill, bank statement, or equivalent document).
• Proof of payment method ownership (e.g., screenshot of JazzCash, Easypaisa, HBL, or other registered account in your name).
• Selfie photograph for identity matching where required for high-value verification.

We record all financial transactions conducted through your Account, including deposit amounts, deposit method, withdrawal requests, withdrawal method, transaction timestamps, and PKR amounts. Transaction records are retained as required by applicable anti-money laundering regulations.

We collect records of your betting and gaming activity on the Platform, including game sessions, bet amounts, game outcomes, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and statutory reporting obligations.

When you access the Platform, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session timestamps, and referring URL where applicable. This information is used for security monitoring, fraud detection, and platform performance optimisation.

When you contact zx999 support by email or other supported channel, we retain records of your communications for quality assurance, dispute resolution, and Account management purposes. Do not include your password in any support communication — zx999 staff will never request it.

zx999 uses personal data collected from you for the following purposes:

• Account creation and management: To register, verify, and maintain your zx999 Account and to authenticate your identity at login.
• Transaction processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and USDT, and to maintain accurate financial records of your Account balance.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering, age verification, and identity verification regulations. Transaction and identity records may be retained for the periods required by law.
• Fraud prevention and security: To detect and prevent unauthorised account access, payment fraud, identity fraud, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: To monitor gaming patterns and proactively identify players who may be experiencing gambling-related harm, and to administer player-requested self-exclusion, deposit limit, and cool-off settings.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes related to Account activity, transactions, or game outcomes.
• Platform improvement: To analyse aggregate, anonymised usage patterns to improve the performance, reliability, and content of the Platform. Individual gaming behaviour is not shared or sold for this purpose.
• Promotional communications: Where you have consented, to send you promotional information about zx999 offers, bonus programmes, and new game releases. You may withdraw consent to marketing communications at any time by contacting support.

Where applicable data protection law requires zx999 to identify a legal basis for processing your personal data, the following bases apply:

• Contract performance: Processing necessary to operate your Account, process transactions, and provide the services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering, age verification, and record-keeping obligations imposed by applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, and responsible gaming risk assessment, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

zx999 engages third-party service providers to support Platform operations, including payment processing partners (JazzCash, Easypaisa, and banking partners), game content providers, KYC and identity verification services, and cloud infrastructure providers. These parties access personal data only to the extent necessary to perform their contracted services and are contractually bound to treat it with appropriate confidentiality.

zx999 may disclose personal data to regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or regulatory direction. This includes disclosure of transaction records and identity information in connection with anti-money laundering investigations.

zx999 does not sell, rent, or license your personal data to third parties for advertising, profiling, or commercial purposes. Your information is not shared with data brokers or marketing companies.

zx999 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Session cookies required to maintain your authenticated login state and to enable core Platform functionality. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Cookies that remember your platform preferences, such as language settings and last-visited game sections. These persist between sessions on the same device.
• Security cookies: Tokens used to identify and prevent cross-site request forgery and other session-based attacks.

zx999 does not place third-party advertising cookies or cross-site tracking pixels on the Platform. You may manage cookie settings through your browser, but disabling strictly necessary cookies will prevent Platform login.

zx999 implements technical and organisational security measures appropriate to the sensitivity of the personal data held, including:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform.
• One-way cryptographic hashing of account passwords — zx999 cannot retrieve your password in plaintext.
• Access controls limiting internal staff access to personal data on a need-to-know basis.
• SMS OTP two-factor authentication for new device logins.
• Regular security reviews and penetration testing of Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights, zx999 will notify affected players in accordance with applicable notification obligations.

Personal data is retained for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration data: retained for the duration of the Account and for a minimum of five (5) years following Account closure, as required for AML record-keeping.
• KYC identity documents: retained for a minimum of five (5) years following the end of the customer relationship.
• Transaction records: retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: retained for three (3) years or until any related dispute is finally resolved, whichever is later.
• Technical logs (IP addresses, device data): retained for up to twelve (12) months for security monitoring purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

Subject to applicable law, you may have the following rights in relation to personal data held by zx999:

• Right of access: You may request a copy of the personal data zx999 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal retention obligations, such as AML record-keeping requirements.
• Right to restrict processing: You may request that we limit the ways in which we use your personal data in certain circumstances.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact zx999 support at [email protected] (plain text reference). Identity verification will be required before any access, rectification, or erasure request is processed. zx999 will respond to valid requests within a reasonable period, ordinarily thirty (30) days.

The Platform is strictly intended for adults aged eighteen (18) years and over. zx999 does not knowingly collect personal data from persons under the age of 18. If zx999 becomes aware that personal data has been collected from a minor, the Account will be immediately suspended, all associated data reviewed, any deposited funds returned at our discretion, and the data deleted in accordance with our retention policy. If you believe a minor has registered on the Platform, please notify zx999 support immediately.

As an online platform serving Pakistani players, zx999's infrastructure, third-party service providers, and game content partners may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, zx999 takes steps to ensure that appropriate safeguards are in place, including contractual obligations on data processors to maintain standards of data protection equivalent to those applicable to the original collection.

zx999 may update this Privacy Policy from time to time to reflect changes in legal obligations, Platform functionality, or data processing practices. The date of the most recent revision is displayed at the top of this page. Material changes will be notified to registered players via email to the registered address or via an in-Platform notification. Your continued use of the Platform after the effective date of a revision constitutes acceptance of the updated Policy. If you do not accept the revised terms, you should cease using the Platform and request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zx999, please contact our support team. Email: [email protected] (plain text reference — not a clickable link). Please include your registered Account phone number (do not include your password) to assist with identification.

For information about self-exclusion and responsible gaming controls, please visit our Responsible Gaming page. For general account and platform questions, visit zx999 FAQ.