Privacy Policy
How zk999 Handles Your Data

zk999 is an internationally licensed online casino and sports betting platform operated under a recognised gaming licence. For the purposes of data protection law, zk999 acts as the data controller in respect of all personal data processed through the zk999 Platform, including the website at zk999.org and any associated mobile interfaces used by players across Pakistan.

As data controller, zk999 determines the purposes and means by which your personal data is collected and processed. We take this responsibility seriously. Our data handling practices are shaped by the requirements of our international gaming licence, which mandates strict player data protections as a condition of continued operation.

For all data-related enquiries, including subject access requests, correction requests, or complaints, you may contact our Data Protection team at [email protected]. We aim to respond to all data-related requests within thirty (30) calendar days of receipt.

zk999 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the website, and in limited cases from third-party sources such as payment processors or fraud prevention services. The categories of data we collect are set out below.

zk999 uses the personal data we collect for the following purposes. Each purpose is supported by a specific legal basis, which is detailed in Section 4 below.

• Account Registration & Management: To create your zk999 Account, verify your identity via CNIC, maintain your account profile, and process your login credentials securely.
• Payment Processing: To process deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported Pakistani payment methods, and to execute withdrawal requests to your verified payment account.
• KYC & AML Compliance: To verify your age (21+), confirm your identity, and meet our anti-money laundering obligations under our international gaming licence. This includes screening against relevant sanctions and fraud databases.
• Platform Operation: To allow you to place bets, play casino games, access live dealer tables, and use all features of the zk999 Platform in the normal course of play.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce self-exclusion instructions, apply deposit and session limits you have set, and fulfil our duty of care obligations under our licence.
• Customer Support: To respond to your queries, investigate complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bot use, and any other prohibited conduct described in our Terms & Conditions.
• Communications: To send you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about bonuses and offers available on zk999.
• Platform Improvement: To analyse aggregated usage data, understand how Pakistani players interact with our games and features, and improve the overall user experience on the zk999 Platform.
• Legal Compliance: To comply with applicable laws, regulatory directions, court orders, and requests from competent authorities.

zk999 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

1. Contractual Necessity: Processing that is necessary to enter into and perform the contract between you and zk999 — including account creation, payment processing, game access, and withdrawal execution — is carried out on the basis that it is required to fulfil our contractual obligations to you.
2. Legal Obligation: Processing carried out to comply with our obligations under our international gaming licence, including KYC verification, AML checks, age verification (21+), responsible gaming monitoring, and responses to regulatory or law enforcement requests.
3. Legitimate Interests: Processing for fraud prevention, platform security, multi-accounting detection, and internal analytics, where our legitimate interests in protecting the Platform and its users are not overridden by your privacy interests.
4. Consent: Where you have given us specific, informed consent — for example, when opting in to receive promotional emails or SMS notifications about zk999 bonuses and offers. You may withdraw this consent at any time via your Account dashboard or by contacting support.

zk999 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment Processors: We share the financial and identity data necessary to process your deposits and withdrawals with our integrated Pakistani payment providers, including JazzCash, EasyPaisa, Raast, 1LINK, and partner banks. These providers act as independent data controllers in respect of payment processing.
• KYC & Identity Verification Providers: We share identity and verification documents with licensed third-party KYC service providers for the purpose of conducting identity checks and age verification in compliance with our licensing obligations.
• Fraud Prevention & AML Services: We may share data with specialist fraud prevention and sanctions screening services to detect and prevent money laundering, fraud, and other financial crimes.
• Game Software Providers: Game outcome data and session information may be shared with our third-party game suppliers (RNG-certified casino game studios and live dealer providers) solely for the purpose of game operation, auditing, and dispute resolution.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of zk999, our players, or the public.
• Professional Advisers: We may share data with our legal advisers, auditors, and accountants where necessary for the provision of professional services, subject to strict confidentiality obligations.

The zk999 website uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to gather aggregated analytics data that helps us improve the experience for all Pakistani players. A summary of the cookies we use is provided below.

You can manage cookie preferences via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your zk999 Account and accessing real-money gaming features. Disabling analytics or performance cookies will not affect your ability to use the Platform but may result in a less optimised experience over time.

zk999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law, our licensing obligations, or legitimate business needs. The general retention periods we apply are as follows:

• Account Data & Transaction Records: Retained for a minimum of five (5) years from the date your Account is closed or from the date of the last transaction, whichever is later. This retention period is mandated by our AML compliance obligations under our international gaming licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or from the date of Account closure. Copies of CNIC scans and related documents are stored in encrypted form with restricted internal access.
• Responsible Gaming Records: Self-exclusion records, deposit limit history, and cooling-off period logs are retained for the duration of any active restriction plus five (5) years thereafter, to prevent circumvention by way of re-registration.
• Support & Communications Data: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical & Log Data: Server logs and IP address records are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.
• Marketing Preferences: Records of your consent or opt-out status for marketing communications are retained indefinitely to demonstrate compliance, even if the underlying preference is to receive no marketing.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a zk999 player, you have specific rights over your personal data. These rights can be exercised at any time by contacting our Data Protection team at [email protected]. We will respond to all valid requests within thirty (30) calendar days, with an extension of up to a further sixty (60) days for complex requests, in which case we will notify you of the extension and reason within the initial thirty-day period.

zk999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in line with industry best practices and our licensing requirements.

• Encryption in Transit: All data transmitted between your device and the zk999 Platform is encrypted using 256-bit SSL/TLS technology. This applies to all connections, including during login, deposits, withdrawals, and KYC document uploads.
• Encryption at Rest: Sensitive personal data, including identity documents, financial data, and password hashes, is stored in encrypted form on our servers. Plain-text storage of passwords is strictly prohibited.
• Access Controls: Access to personal data within zk999 is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role, and all access is logged and audited.
• Two-Factor Authentication: 2FA is available to all registered players via SMS OTP to Pakistani mobile numbers. zk999 staff accounts require 2FA as a mandatory security control.
• Penetration Testing: Our Platform infrastructure undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: zk999 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals without undue delay in accordance with applicable requirements.

The zk999 Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification via CNIC or equivalent government-issued identity document is a mandatory step in the registration process and may be repeated at any time during the lifecycle of an Account.

If zk999 discovers that an Account has been registered by or is being used by an individual under the age of 21, the Account will be immediately terminated and all associated personal data will be deleted, except where retention is required by law for the purpose of fraud investigation or regulatory reporting.

If you are a parent or guardian and believe that a minor has registered on the zk999 Platform using false information, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

zk999 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, regulatory requirements, or Platform features. When material changes are made, we will notify registered Account holders by email and display a prominent notice on the zk999 website prior to the changes taking effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this page periodically to stay informed about how zk999 protects your personal data. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Historical versions of this Privacy Policy are available from our support team upon request. If you have any questions about a specific change, please contact us at [email protected] and we will be happy to clarify.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints about zk999's data handling practices, please reach out to us through the following channels. We are committed to responding to all privacy-related communications promptly and transparently.

• Email: [email protected] — for formal data requests, complaint submissions, and document exchanges. Target response within 4–8 business hours for general queries; data subject requests handled within 30 calendar days.
• Live Chat: Available 24/7 on the zk999 website. Ideal for quick clarifications about your data or privacy settings. For formal requests, we recommend following up in writing via email to ensure a documented record.
• Account Dashboard: Your zk999 Account dashboard allows you to update your personal details, manage marketing preferences, and activate responsible gaming tools — all without needing to contact support.