ZF999 Privacy Policy

This Privacy Policy ("Policy") sets out how ZF999 ("ZF999", "we", "us" or "our"), the operator of the online sports betting and casino platform accessible at https://zf999.cam ("the Platform"), collects, uses, stores, discloses and protects the personal data of users ("you", "User" or "Data Subject") who access or register on the Platform.

ZF999 is committed to handling your personal data responsibly, lawfully and transparently. This Policy is written in plain English to ensure that Pakistani users — and all other users of the Platform — can clearly understand how their personal information is managed.

This Policy should be read alongside ZF999's Terms & Conditions, which govern the overall relationship between ZF999 and its users. By registering or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following definitions shall apply:

ZF999 acts as the Data Controller in respect of personal data collected from users of the Platform. As Data Controller, ZF999 is responsible for determining how and why personal data is processed.

ZF999 engages third-party Data Processors — including payment service providers, identity verification partners, cloud hosting services and analytics providers — to perform specific functions on our behalf. These processors are contractually bound to handle personal data only as directed by ZF999 and to maintain appropriate security standards.

ZF999 does not maintain a registered office in Pakistan and does not claim that this Policy satisfies the requirements of any specific Pakistani governmental or regulatory authority, including the Pakistan Telecommunication Authority or the State Bank of Pakistan.

ZF999 collects the following categories of personal data from or about users of the Platform:

4.1 Registration & Identity Data

• Full legal name (as it appears on a government-issued ID such as a Pakistani CNIC or passport)
• Date of birth
• Email address
• Contact number (where provided)
• Residential address
• Username and account credentials (passwords are stored in hashed, non-recoverable format)

4.2 Identity Verification (KYC) Data

• Government-issued photo identification documents (e.g., CNIC, passport)
• Proof of address documents (e.g., utility bill, bank statement dated within three months)
• Payment method verification documents
• Facial verification images where required by the verification process

4.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (partial account numbers, wallet identifiers — full payment card numbers are not stored by ZF999)
• Account balance history and bonus transaction records

4.4 Betting & Gaming Activity Data

• Wager history, stake amounts, odds accepted and outcomes
• Casino game sessions, game titles played, stake and win records
• Bonus participation records and wagering requirement progress

4.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps, page visit data and navigation paths
• Referral source and marketing attribution data (where applicable)

4.6 Communications Data

• Support chat transcripts and email correspondence with ZF999
• Feedback and survey responses submitted through the Platform

ZF999 collects personal data through the following means:

• Directly from You: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact support, respond to surveys or participate in promotions.
• Automatically via the Platform: Through cookies, server logs and analytics tools that record your interaction with the Platform, including pages visited, session duration and technical device information.
• From Third-Party Verification Providers: ZF999 may receive identity and fraud-screening data from specialist KYC and AML compliance partners when verifying your identity or payment methods.
• From Payment Processors: Transaction confirmation data and payment method status information passed to ZF999 by processing partners to facilitate deposits and withdrawals.

ZF999 processes personal data on the following legal bases, which may vary depending on the specific purpose of processing:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

ZF999 uses the personal data it collects for the following purposes:

• Account Administration: Creating and managing your ZF999 account, processing login and authentication, and maintaining accurate account records.
• Identity Verification (KYC): Verifying your identity, age eligibility and compliance with account eligibility requirements as stated in our Terms & Conditions.
• Payment Processing: Facilitating deposits and withdrawals, reconciling transaction records and preventing payment fraud.
• Responsible Gambling Monitoring: Monitoring account activity for signs of problem gambling behaviour, applying account limits where requested or required, and administering self-exclusion requests.
• Customer Support: Responding to your queries, complaints and support requests through live chat, email and the help centre.
• Fraud & Security: Detecting, investigating and preventing fraud, money laundering, unauthorised account access and other prohibited activities.
• Legal Compliance: Meeting ZF999's obligations under applicable anti-money laundering, data protection and gambling regulations in our operating jurisdiction.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, user experience and service quality.
• Marketing Communications: Sending you promotional offers, personalised recommendations and platform updates — only where you have opted in or where permitted under applicable law. You may opt out at any time.

ZF999 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients only where necessary and on a strictly need-to-know basis:

• Payment Service Providers: To process deposits and withdrawals on your behalf. These providers receive only the data required to complete the specific transaction.
• Identity Verification Partners: Specialist KYC and AML compliance vendors who process your identity documents to verify eligibility and meet regulatory obligations.
• Technology & Hosting Partners: Cloud infrastructure providers, platform software vendors and security providers who process data as part of delivering the Platform's technical operations.
• Regulatory and Law Enforcement Authorities: Where ZF999 is required by law, court order or regulatory direction to disclose personal data, or where disclosure is necessary to prevent, detect or prosecute criminal activity including fraud or money laundering.
• Affiliated Entities: Where ZF999 operates within a group structure, personal data may be shared with affiliated companies for internal compliance, fraud prevention and audit purposes only.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of ZF999's business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third-party data processors engaged by ZF999 are subject to data processing agreements that require them to handle personal data only in accordance with ZF999's instructions and to maintain appropriate technical and organisational security measures.

ZF999 retains personal data for the periods necessary to fulfil the purposes described in this Policy, comply with legal obligations and resolve disputes. The following general retention schedule applies:

After the applicable retention period, personal data will be securely deleted, anonymised or pseudonymised. Where deletion is not immediately technically feasible (e.g., in backup systems), data will be isolated from further active processing until deletion is completed.

ZF999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit.
• Password Hashing: User passwords are stored as irreversible cryptographic hashes — ZF999 employees cannot access or recover your password in plain text.
• Access Controls: Internal access to personal data is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed.
• Infrastructure Security: Platform servers are hosted in secured data centres with physical access controls, intrusion detection and regular security assessments.
• Two-Factor Authentication: Optional 2FA is available to users and is strongly recommended to protect account access.
• Regular Security Reviews: ZF999 conducts periodic security assessments and vulnerability testing to identify and address potential weaknesses in the Platform's security posture.

Despite these measures, no data transmission over the internet or electronic storage system is entirely risk-free. ZF999 cannot guarantee absolute security. In the event of a material data breach that poses a risk to your rights, ZF999 will notify affected users in accordance with applicable data protection requirements.

ZF999 uses cookies and similar technologies (including pixels, local storage and session identifiers) to operate and improve the Platform. The following categories of cookies are in use:

You may manage your cookie preferences through the Platform's cookie consent interface. Disabling non-essential cookies will not prevent you from using the Platform's core functionality but may affect certain preference-based features.

Your browser settings may also allow you to block or delete cookies at the device level. Please note that blocking essential cookies may impair the Platform's ability to maintain your login session or process transactions correctly.

ZF999 operates an online platform with global infrastructure. Your personal data may be transferred to, stored in or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, ZF999 takes steps to ensure that appropriate safeguards are in place, including:

• Transferring data only to countries or recipients that provide an adequate level of data protection;
• Implementing contractual data transfer mechanisms with third-party processors in other jurisdictions;
• Ensuring that cloud hosting partners with data centre locations outside Pakistan maintain equivalent technical security standards.

Pakistani users should note that there is currently no bilateral data transfer agreement between Pakistan and the jurisdictions in which ZF999 operates. By using the Platform, you acknowledge and accept that your data may be processed in these jurisdictions.

Subject to applicable law and ZF999's legitimate operational and legal obligations, you have the following rights in respect of your personal data:

To exercise any of these rights, please contact ZF999 through the Live Chat inside your account or by email at [email protected]. ZF999 will respond to rights requests within a reasonable timeframe and will request verification of your identity before processing any request that involves disclosure or modification of personal data.

ZF999 is strictly an adults-only platform. No person under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction — is permitted to register on, access or use the Platform in any capacity.

ZF999 does not knowingly collect personal data from minors. If ZF999 becomes aware that personal data has been collected from a person under the minimum eligible age, that data will be deleted without delay and the associated account will be permanently closed. Any funds deposited by a verified minor will be subject to forfeiture in accordance with ZF999's Terms & Conditions.

Parents and guardians who believe that a minor under their care may have registered on ZF999 should contact ZF999 support immediately at [email protected].

The Platform may reference or link to third-party services, tools or resources — including payment method providers, game studios and technology vendors. ZF999 is not responsible for the privacy practices, data handling or content of any third-party platform or service.

When you interact with a third-party service — for example, when initiating a transaction through a mobile wallet provider such as Easypaisa or JazzCash — your data is subject to that provider's own privacy policy, not this Policy. ZF999 encourages users to review the privacy policies of any third-party service they interact with.

References to payment provider names in this Policy and elsewhere on the Platform are contextual and educational only. They do not imply that those providers endorse ZF999 or that their services are currently available or confirmed for use with the Platform.

ZF999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as modifications to how we collect, use or share personal data — ZF999 will notify registered users via the Platform or by email to the registered address, with a reasonable period of advance notice before the changes take effect.

Minor amendments — such as clarifications, formatting corrections or updates to reflect regulatory changes — may be made without direct notification. The "Effective Date" at the top of this Policy will be updated each time the Policy is revised.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised Policy, you should discontinue use of the Platform and, if applicable, request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or ZF999's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your registered ZF999 account. This is the fastest channel for account-specific data queries.
• Help Centre: Accessible through the support section of the Platform. Self-service articles cover common data and account topics.
• Email: [email protected]

ZF999 will acknowledge data-related requests promptly and aims to respond substantively within a reasonable timeframe. Where identity verification is required before fulfilling a request, users will be asked to provide appropriate confirmation.