Privacy Policy — zy999

01 Introduction

This Privacy Policy (hereinafter "Policy") describes how zy999.cam (hereinafter "zy999", "we", "us" or "our") collects, processes, stores, shares and protects personal data relating to visitors and registered users (hereinafter "you", "your" or "User") of the website located at https://zy999.cam (the "Platform").

This Policy is intended to provide you with clear and transparent information about our data practices in plain English so that you can make fully informed decisions about using the Platform. By accessing or using the Platform in any capacity, you acknowledge that you have read, understood and accepted this Policy. If you do not accept this Policy, you must immediately cease using the Platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy. Where any conflict exists between this Policy and another document, the more specific and more recently updated document shall prevail with respect to the subject matter in question.

02 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, CNIC number, IP address, device identifiers and transaction history.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of zy999.cam.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under binding contractual obligations.
• "KYC" means Know Your Customer — the identity and age verification process required under the operator's licence and applicable anti-money-laundering obligations.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, analytics and functional operation.
• "Third Party" means any natural or legal person other than you, zy999 and authorised Data Processors acting under direct instruction from zy999.

03 Data Controller

The Data Controller for all Personal Data collected through the Platform is the operator of zy999.cam. The operator holds the applicable gaming or betting licence under which the Platform operates. If you require specific details regarding the operator's registered entity or licensing jurisdiction for the purpose of exercising a legal right, please contact us at the details provided in Section 16.

For all data protection enquiries, requests and complaints, you may contact us directly via email at [email protected] or through live chat on the Platform.

04 Data We Collect

zy999 collects Personal Data through several channels depending on how you interact with the Platform. The categories of data collected are summarised in the table below.

4.1 Data You Provide Voluntarily

The majority of Personal Data we hold is data that you have actively provided to us — during account registration, KYC verification, payment processing or through direct communication with our support team.

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically through standard web technologies including server logs, cookies and similar tracking mechanisms. This data is used for security monitoring, fraud prevention, platform optimisation and analytical purposes.

05 How We Use Your Data

zy999 processes your Personal Data for the following specific purposes:

• Account creation and management — registering your account, verifying your identity and maintaining your user profile.
• KYC and age verification — confirming that you meet the minimum age requirement and that your identity matches your payment accounts.
• Payment processing — facilitating deposits and withdrawals, verifying payment method ownership and preventing fraudulent transactions.
• Anti-money-laundering (AML) compliance — monitoring transactions for suspicious activity and fulfilling mandatory reporting obligations under applicable law.
• Responsible gambling — applying limit settings, self-exclusion requests and session reminders; monitoring usage patterns for potential problem-gambling indicators.
• Customer support — responding to queries, complaints and account issues through live chat and email.
• Platform security and fraud prevention — detecting, investigating and preventing account abuse, bonus fraud, collusion and other prohibited conduct.
• Platform improvement and analytics — analysing aggregated usage patterns to improve the Platform's functionality, content and user experience.
• Legal compliance — meeting regulatory obligations under the operator's licence and applicable law, including retaining records for the periods required by anti-money-laundering regulations.
• Marketing communications — sending promotional information where you have given explicit consent, with the ability to opt out at any time.

06 Legal Basis for Processing

Where applicable data protection law requires zy999 to identify a legal basis for processing Personal Data, the following bases apply:

• Contract performance — processing necessary to deliver the services you have contracted for, including account management and payment processing.
• Legal obligation — processing required to comply with applicable laws including KYC, AML and licence conditions.
• Legitimate interests — processing for fraud prevention, platform security and analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for optional purposes such as marketing communications, where consent has been explicitly obtained and may be withdrawn at any time.

07 Third-Party Sharing

zy999 does not sell or rent Personal Data to third parties. We may share Personal Data with the following categories of third party where strictly necessary for the purposes described in this Policy:

• KYC and identity verification providers — to verify the identity, age and document authenticity of registered users.
• Payment service providers and processors — to facilitate deposits and withdrawals. Payment provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are used for contextual reference only and do not imply any endorsement of gambling activity by those providers.
• Fraud detection and AML compliance services — to screen transactions and account activity against watchlists and risk databases as required by the operator's licence.
• Technology infrastructure providers — hosting, content delivery and platform operations providers who process data solely under instruction from zy999.
• Regulatory and law enforcement authorities — where required by law, court order, or at the legitimate request of competent authorities.

All third-party Data Processors with whom zy999 shares Personal Data are bound by contractual obligations that require them to process data only for the specified purpose, to maintain appropriate security standards and to delete data when the processing relationship ends.

08 Cookies & Tracking Technologies

zy999 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to function correctly, remember your preferences and collect usage analytics.

8.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to operate. These include session management cookies that keep you logged in during an active session. These cannot be disabled.
• Functional cookies — remember your preferences such as language selection and display settings to improve your experience.
• Analytics cookies — collect aggregated, anonymised data about how visitors navigate the Platform to help us improve its structure and content.
• Security cookies — detect and prevent fraudulent activity, bot access and account takeover attempts.

8.2 Managing Cookies

You may control cookie behaviour through your browser settings. Note that disabling strictly necessary cookies will impair the Platform's ability to function correctly and may prevent you from accessing your account. Analytics and functional cookies can typically be disabled without affecting core Platform functionality.

09 Data Retention

zy999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account and KYC data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by standard AML record-keeping obligations. This period may be extended where a regulatory investigation, legal proceeding or unresolved dispute is pending.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction in accordance with financial record-keeping obligations.
• Communication data — retained for up to two (2) years from the date of last interaction, unless related to an ongoing dispute or support matter.
• Analytics and technical data — aggregated or anonymised data may be retained indefinitely for statistical purposes, as it no longer constitutes Personal Data once adequately anonymised.
• Marketing consent records — retained for as long as you hold an active account and for a reasonable period thereafter to evidence your consent history.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data management procedures.

10 Security Measures

zy999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and financial information
• Role-based access controls ensuring that staff can only access Personal Data necessary for their function
• Regular security assessments and vulnerability monitoring
• Fraud detection systems monitoring account and transaction activity in real time
• Secure deletion protocols for data that has reached the end of its retention period

While zy999 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely infallible. You are responsible for maintaining the confidentiality of your own account credentials. Please contact us immediately if you believe your account has been compromised.

11 International Data Transfers

As an internationally operating platform, zy999 may transfer Personal Data to, or process it in, countries outside your country of residence. This may include transfers to countries where the operator's servers, KYC providers or payment processors are located.

Where Personal Data is transferred internationally, zy999 ensures that appropriate safeguards are in place — including contractual data transfer mechanisms and equivalent data protection standards — so that your data receives a level of protection consistent with this Policy regardless of where it is processed.

12 Your Rights

Subject to applicable data protection law and certain legal limitations, you hold the following rights with respect to your Personal Data held by zy999:

To exercise any of the above rights, please contact zy999 support via live chat or email at [email protected]. We will respond to all data rights requests within a reasonable timeframe and in any event within the period required by applicable law. We may need to verify your identity before processing a request.

13 Minors & Age Restrictions

The Platform is strictly intended for adults aged 18 years or above — or the higher minimum required by the operator's licence jurisdiction. zy999 does not knowingly collect or process Personal Data of individuals below the applicable minimum age.

Age verification is conducted as a mandatory step in the KYC process. Where zy999 discovers or reasonably suspects that a registered account is held by a minor, the account will be immediately suspended, all funds held will be returned, and any associated data will be managed in accordance with applicable legal requirements. Please report any concerns about underage access to us immediately via support.

14 Pakistan-Specific Notice

zy999 serves a significant number of users located in Pakistan, including major cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This section provides specific context for Pakistani users regarding data privacy.

Pakistan does not currently have a comprehensive data protection statute directly equivalent to established international frameworks. However, zy999 applies the privacy standards described in this Policy to all users regardless of their country of residence, because we believe that strong data protection is a universal right, not a jurisdiction-specific obligation.

Personal data submitted through payment interactions — including reference to mobile wallets such as Easypaisa and JazzCash, or bank transfer details for institutions such as HBL, UBL, Meezan Bank and Bank Alfalah — is used solely for payment verification and fraud prevention purposes. zy999 does not share payment information with these providers beyond what is technically necessary to process the transaction in question, and we do not claim any affiliation with or endorsement from these payment services.

15 Changes to This Policy

zy999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page.

For significant changes — particularly those that affect how we use your Personal Data for new purposes or that alter your rights — we will provide reasonable advance notice where practicable, either through a prominent notice on the Platform or by direct communication to your registered email address.

Your continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.

16 Contact Us

For all privacy-related enquiries, data rights requests, complaints and concerns, please contact the zy999 data privacy team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest method for urgent privacy matters
• Email: [email protected] — mark your email "Privacy Request" for priority handling. Responses typically within 24 hours as per operator service standards.

Please include your registered Account username and a clear description of your request or concern to enable us to locate your records and respond effectively. Urdu-language support is available on request.