Contents
- 1. Who We Are
- 2. Data We Collect
- 3. Why We Collect It
- 4. Legal Basis
- 5. How We Use Your Data
- 6. Sharing Your Data
- 7. Payments & Financial Data
- 8. Cookies & Tracking
- 9. Data Security
- 10. Data Retention
- 11. Your Rights
- 12. Children's Privacy
- 13. Marketing Communications
- 14. Changes to Policy
- 15. Contact Us
1 Who We Are
z9999 is an online casino and sports betting platform operating at z9999.biz, designed and built primarily for players in Pakistan. When this Privacy Policy refers to "z9999," "we," "our," or "us," it means the operator of the z9999.biz platform.
z9999 acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data. If you have any questions about how your data is handled, you can reach our privacy team directly at privacy@z9999.biz.
This Privacy Policy applies to all z9999 products and services including online casino games, live casino tables, poker, roulette, esports betting, the VIP Club, and all promotional and customer communications. By registering a z9999 account, you acknowledge that you have read and understood this Privacy Policy.
2 Data We Collect
z9999 collects personal data at the point of registration, during your use of the platform, and when you contact our support team. Below is a breakdown of the categories of data we collect:
Registration Data
- Full name as it appears on your CNIC or government-issued ID.
- Date of birth — required for age verification.
- Mobile number — used for OTP verification and account security alerts.
- Email address — for account communications and marketing (if opted in).
- Residential city or province in Pakistan.
- Password — stored in hashed, salted form. z9999 cannot read your password in plain text.
Identity Verification Data (KYC)
- Copy of CNIC, passport, or other government-issued identity document.
- Proof of address (utility bill, bank statement, etc.) where requested.
- Selfie or live photo confirmation where required by our KYC process.
Transaction Data
- Deposit and withdrawal amounts, dates, and payment method references.
- Easypaisa, JazzCash, NayaPay, or SadaPay account references (not full credentials).
- Bank account details used for IBFT transfers.
- Masked card details (last four digits, expiry) for Visa/Mastercard transactions.
Gameplay Data
- Bet history, game sessions, wager amounts, and outcomes across all z9999 products.
- VIP tier status and cumulative wager totals.
- Bonus claims, promotional participation, and cashback records.
Technical Data
- IP address and approximate geolocation derived from it.
- Device type, operating system, and browser information.
- Session timestamps, login history, and platform usage patterns.
- Cookie data (see Section 8).
Communications Data
- Content of support ticket conversations, live chat messages, and emails sent to z9999.
- Feedback, survey responses, and complaint records.
3 Why We Collect It
Every piece of data z9999 collects serves a specific purpose. We do not collect information speculatively or "just in case." Here is why each category is necessary:
| Data Category | Why It's Collected |
|---|---|
| Registration data | To create and manage your z9999 account and verify your identity at sign-up. |
| KYC documents | To comply with age verification requirements and prevent fraud and money laundering. |
| Transaction data | To process deposits and withdrawals in PKR and maintain accurate financial records. |
| Gameplay data | To settle bets, calculate VIP cashback, apply bonuses, and detect problem gambling patterns. |
| Technical data | To secure your account, detect fraud, optimise platform performance for Pakistani users. |
| Communications data | To resolve support queries, investigate complaints, and improve our service quality. |
4 Legal Basis for Processing
z9999 processes your personal data on one or more of the following legal grounds depending on the purpose:
- Contractual necessity: Processing required to fulfil our agreement with you — creating your account, processing your bets, handling your deposits and withdrawals.
- Legal obligation: Processing required to comply with applicable laws — including identity verification, fraud prevention, anti-money laundering requirements, and financial record-keeping.
- Legitimate interests: Processing necessary for z9999's legitimate business interests where those interests are not overridden by your rights — including platform security, fraud detection, and service improvement.
- Consent: Processing based on your explicit, freely-given consent — primarily marketing communications. Where consent is the basis, you can withdraw it at any time without affecting any other processing.
5 How We Use Your Data
z9999 uses the personal data we collect from Pakistani players in the following specific ways:
- Account management: Creating, maintaining, and securing your z9999 account. This includes password resets, two-factor authentication, and login notifications.
- Payment processing: Verifying deposit sources, processing withdrawals to your registered payment method, and maintaining transaction records in PKR.
- Age and identity verification: Confirming you are 18 or older and that the account is genuinely yours — required before first withdrawal and potentially at other points during your account lifecycle.
- Fraud prevention and security: Detecting unusual account activity, preventing unauthorised access, identifying potential bonus abuse, and flagging transactions that may indicate money laundering.
- Customer support: Responding to your questions, resolving disputes, processing complaints, and providing technical assistance related to your z9999 account.
- VIP programme management: Tracking wager totals for tier progression, calculating weekly cashback amounts in PKR, and communicating VIP benefits and tier changes.
- Responsible gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour and, where appropriate, intervening with support information or account restrictions.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the z9999 platform, optimise performance on Pakistani mobile networks, and develop new features.
- Marketing: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications.
Automated decision-making: z9999 uses automated systems to detect fraud and unusual betting patterns. If an automated decision significantly affects your account (such as a temporary suspension for suspected fraud), you have the right to request human review of that decision. Contact support@z9999.biz to exercise this right.
6 Sharing Your Data
z9999 does not sell your personal data. We do not share it with third parties for their own marketing purposes. The only circumstances in which z9999 shares your data with external parties are as follows:
Service Providers
z9999 works with carefully selected service providers who process data on our behalf under strict contractual obligations. These include payment processors (Easypaisa, JazzCash, NayaPay and banking partners), KYC verification services, cloud hosting providers, fraud detection systems, and customer support software providers. All service providers are contractually required to process data only for the purposes we specify and to maintain appropriate security measures.
Legal Requirements
z9999 may disclose personal data where required to do so by law or in response to a valid legal request from a Pakistani or international authority. This includes requests related to fraud investigations, money laundering, or other criminal matters.
Business Transfers
In the event that z9999 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your data will remain subject to the privacy protections described in this policy.
We never share your data with: marketing agencies, data brokers, other gambling operators, or any party who would use it for purposes beyond operating your z9999 account.
7 Payments & Financial Data
Given that z9999 handles real PKR transactions for Pakistani players, the security of financial data is particularly important. Here is specifically how we handle payment information:
- Card data: z9999 does not store your full card number, CVV, or card PIN on its own servers. Card data is tokenised by our PCI-DSS certified payment processor. z9999 retains only a masked reference (last four digits and expiry) sufficient to identify the payment method.
- Mobile wallet references: Easypaisa and JazzCash account numbers used for deposits are stored in encrypted form and only used to match deposits to accounts and process withdrawals back to the same wallet. z9999 does not store mobile wallet PINs or passwords.
- Bank account details: IBFT bank account numbers provided for withdrawals are stored in encrypted form and used solely for processing the withdrawal. z9999 does not initiate any debit from your bank account — only credits.
- Transaction history: Your deposit and withdrawal history on z9999 is maintained for a minimum of 5 years as required for financial record-keeping purposes. You can access your full transaction history at any time from within your z9999 account dashboard.
PCI-DSS Compliance: All card payment processing at z9999 is handled through PCI-DSS Level 1 certified payment processors — the highest standard of card data security. z9999 itself is never in scope for card data, meaning your card details never pass through our own servers.
8 Cookies & Tracking Technologies
z9999 uses cookies and similar technologies to operate the platform, maintain your session, analyse usage, and — where you have consented — personalise your experience and deliver relevant offers. Here is how each category of cookie is used:
You can manage your cookie preferences at any time through the cookie settings panel in your z9999 account. Disabling non-essential cookies may affect some personalisation features but will not impact your ability to play, deposit, or withdraw.
9 Data Security
z9999 implements a comprehensive set of technical and organisational security measures to protect your personal data. These include:
- Encryption in transit: All data transmitted between your device and z9999 servers is encrypted using TLS 1.3. You should always see the padlock icon in your browser when using z9999.biz.
- Encryption at rest: Sensitive personal data and financial records stored on z9999 servers are encrypted using AES-256 encryption.
- Access controls: Access to personal data within z9999's systems is restricted to personnel with a legitimate operational need. Access is logged and audited regularly. Former employees' access is revoked immediately upon departure.
- Penetration testing: z9999 commissions regular independent security audits and penetration tests of its platform and infrastructure.
- Incident response: z9999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within 72 hours where technically feasible.
- Two-factor authentication: All z9999 accounts can enable 2FA to add an additional layer of security to your login process. We strongly recommend enabling 2FA.
While z9999 takes all reasonable security measures, no system is completely impervious. You also have a responsibility to keep your z9999 login credentials secure. Never share your password with anyone — including z9999 staff, who will never ask for your password.
10 Data Retention
z9999 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to legal minimum retention periods. Specific retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC/identity documents | 5 years from last account activity |
| Transaction records | 5 years (financial record-keeping requirement) |
| Gameplay history | 3 years after account closure |
| Support correspondence | 3 years from the date of the interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Technical/log data | 90 days rolling unless retained for investigation |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymous, aggregated data may be retained indefinitely for statistical purposes.
11 Your Rights
As a z9999 player in Pakistan, you have the following rights in relation to your personal data. To exercise any of these rights, contact privacy@z9999.biz with your registered email address and a description of your request. We will respond within 30 days.
Request a copy of all personal data z9999 holds about you — your account data, transaction history, gameplay records, and support interactions.
Request correction of inaccurate personal data. For example, if your name is misspelt or your contact details have changed, we will update your records promptly.
Request deletion of your personal data, subject to legal retention requirements. We cannot delete data we are legally required to retain (e.g. transaction records).
Request that we limit how we process your data while a complaint or verification request is being resolved, without deleting the data entirely.
Request your personal data in a structured, machine-readable format so that you can transfer it to another service if you choose to do so.
Object to processing based on legitimate interests, including profiling for personalisation. If you object, we will review whether our interests override yours in that specific context.
12 Children's Privacy
z9999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account belongs to a minor, we will immediately close that account, delete the associated personal data, and return any deposited funds where verification is possible.
If you are a parent or guardian and believe your child has registered at z9999, please contact us immediately at support@z9999.biz. We treat these cases with urgency and will act within 24 hours of a verified report.
z9999 uses age-verification checks at the point of registration and during the KYC process. However, we also encourage parents and guardians to use parental controls on shared devices to prevent underage access to online gambling platforms.
13 Marketing Communications
z9999 will only send you marketing emails and SMS messages if you have explicitly opted in to receive them. Marketing communications from z9999 may include:
- New bonus offers and promotional campaigns.
- VIP Club tier updates and exclusive member offers.
- New game launches and platform feature announcements.
- Seasonal promotions and tournament invitations.
You can opt out of all z9999 marketing communications at any time by:
- Clicking the "unsubscribe" link at the bottom of any z9999 marketing email.
- Replying "STOP" to any z9999 marketing SMS.
- Updating your communication preferences in your z9999 account settings.
- Contacting support@z9999.biz with a request to be removed from marketing lists.
Opting out of marketing has no effect on transactional communications — you will still receive important account notifications such as deposit confirmations, withdrawal approvals, and security alerts regardless of your marketing preferences.
14 Changes to This Privacy Policy
z9999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes, we will notify registered players by email at least 7 days before the updated policy takes effect.
The updated Privacy Policy will be published on this page with a revised "last updated" date. Continued use of z9999 after the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you should stop using z9999 and request account closure before the effective date.
We encourage all z9999 players to review this Privacy Policy periodically to stay informed about how we protect their data. The current version will always be available at z9999.biz/privacy-policy.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data at z9999, please contact our privacy team:
- Privacy enquiries: privacy@z9999.biz
- General support: support@z9999.biz
- Live chat: Available 24/7 within the z9999 platform.
- Response time: Privacy requests are acknowledged within 24 hours and resolved within 30 days. Complex requests may require additional time, and we will inform you if this is the case.
For data access, rectification, erasure, or portability requests, please include your registered email address and a clear description of your request. We may need to verify your identity before processing certain requests — this is to ensure we only release your data to you.
This Privacy Policy was last updated in January 2025 and applies to all personal data collected by z9999 from Pakistani players via z9999.biz. For the most current version, always refer to this page. Our Terms and Conditions and Responsible Gaming policy are companion documents to this Privacy Policy.