At 999zs, your personal data is handled with the same care we apply to every other aspect of the platform — carefully, transparently, and only for purposes you would reasonably expect. This Policy explains exactly what we collect, why we collect it, and what rights you hold over your own information.
These cards summarise the most important data practices at 999zs. The full legal text follows below — we encourage you to read it in its entirety.
Registration details, identity documents, payment information, device and browser data, and gameplay activity. We collect only what is necessary to operate your 999zs account safely and in compliance with our licensing obligations.
Account management, identity verification (KYC), fraud detection, payment processing, responsible gaming monitoring, customer support, and platform improvement. Your data is never sold to third parties for marketing.
KYC verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast), licensed fraud prevention services, and regulatory authorities where legally required. All third parties are bound by strict data processing agreements.
256-bit SSL encryption on all data in transit, encrypted storage at rest, strict internal access controls, and regular third-party security audits. No 999zs staff member will ever ask for your account password.
You have the right to access, correct, export, and in certain circumstances delete your personal data. You may also object to specific processing activities or withdraw consent where consent is the legal basis. All requests are handled within 30 days.
Active account data is retained for the duration of your relationship with 999zs. Following account closure, records required for regulatory compliance are retained for a minimum of five years. Data no longer needed is securely deleted or anonymised.
999zs ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the 999zs platform. This Privacy Policy sets out in clear terms what personal data 999zs collects, the purposes for which it is used, the legal bases on which that use rests, the circumstances in which data may be shared, and the rights available to you as a data subject.
This Policy is written in English and applies to all users of the 999zs platform, including Pakistani users accessing the platform from any location. It should be read together with our Terms & Conditions and Responsible Gaming Policy , both of which form part of the overall agreement between you and 999zs.
We understand that Pakistani users value discretion. Whether you are placing a wager on a PSL match from Karachi, spinning slots from Lahore, or accessing live baccarat tables from Islamabad, your personal information stays within the secure boundaries of our platform — managed with professionalism and processed only for the legitimate purposes described below.
For the purposes of applicable data protection law, 999zs acts as the data controller in respect of personal data collected through the 999zs platform. This means 999zs determines the purposes and means by which your personal data is processed. Where third-party service providers process data on our behalf, they do so as data processors acting under our written instructions and subject to binding contractual obligations governing the security and confidentiality of your data.
The data controller can be contacted at: [email protected]. All privacy-related correspondence, including data subject access requests, should be directed to this address.
When you register a 999zs account, we collect the following information that you provide directly:
As part of our mandatory Know Your Customer process, we may collect copies of the following documents:
We collect records of all financial transactions processed through your 999zs account, including deposit amounts and timestamps, withdrawal requests and processing records, payment method identifiers (masked card numbers, JazzCash or EasyPaisa account references), and PKR transaction values. We do not store full card numbers or mobile banking PINs — these are handled exclusively by our PCI-DSS certified payment processing partners.
We maintain detailed records of all gameplay activity on the 999zs platform, including game session start and end times, wager amounts and game outcomes, bonus activations and wagering progress, and sports betting market selections. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
When you access the 999zs platform, our systems automatically collect certain technical data, including your IP address and approximate geolocation, browser type and version, operating system, device identifiers, and session duration and navigation patterns within the platform.
We retain records of all communications between you and the 999zs support team, including live chat transcripts, email correspondence, and support ticket history. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
999zs collects personal data through the following means:
999zs processes your personal data only where a valid legal basis exists. The following table summarises the primary legal bases on which we rely for each category of processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) | Legal obligation; legitimate interest |
| Payment processing and fraud prevention | Performance of contract; legal obligation |
| Gaming activity recording | Performance of contract; legal obligation |
| Responsible gaming monitoring | Legal obligation; legitimate interest |
| Customer support communications | Performance of contract; legitimate interest |
| Platform security and technical logs | Legitimate interest |
| Marketing communications (opt-in) | Consent |
| Regulatory reporting | Legal obligation |
Where 999zs relies on consent as a legal basis — specifically for optional marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
999zs uses the personal data it collects for the following purposes, each of which corresponds to a legal basis identified in Section 5:
999zs does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data is shared only in the following circumstances and only to the extent necessary for the stated purpose:
To fulfil our identity verification obligations, we share the documents and personal details you submit during KYC with licensed third-party verification services. These providers confirm the authenticity of your identification documents and cross-reference your details against relevant databases. They act as data processors under our instruction and are prohibited from using your data for any independent purpose.
Transaction data is shared with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast — to the extent necessary to initiate, confirm, and record deposits and withdrawals on your account. Each payment partner operates under its own published privacy policy in respect of data it independently controls.
To protect the integrity of the 999zs platform, certain technical identifiers (such as IP addresses and device fingerprints) may be shared with fraud prevention services that maintain databases of known risk indicators. This sharing is carried out under legitimate interest and is limited strictly to security purposes.
999zs will disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. We will notify affected users of such disclosures where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of the 999zs business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the applicable privacy terms before the transfer takes effect.
Some of the third-party service providers with whom 999zs shares personal data may be located or operate servers in jurisdictions outside Pakistan. Where personal data is transferred internationally, 999zs ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that which applies within our primary jurisdiction. Such safeguards may include standard contractual clauses, binding corporate rules, or equivalent data transfer mechanisms recognised under applicable data protection law.
If you would like further information about the specific safeguards applied to any particular international transfer, please contact us at [email protected].
The 999zs platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored in your browser that help us recognise your session, remember your preferences, and analyse how the platform is used.
The following categories of cookies are used on 999zs.org:
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. 999zs does not use third-party advertising cookies or share cookie data with external marketing networks.
999zs retains your personal data for as long as your account remains active and for such additional period thereafter as is required by our legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:
Where data is no longer required for any legitimate purpose, it is securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be associated with any individual.
999zs implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
As a data subject, you hold the following rights in respect of the personal data that 999zs holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.
Request a copy of all personal data 999zs holds about you, along with details of how it is used.
Request correction of any inaccurate or incomplete personal data held on your account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit the processing of your data in certain circumstances, for example while a rectification request is being assessed.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing carried out on the basis of legitimate interests, including profiling, where your interests override ours.
Please note that certain rights are subject to limitations where our processing is required by law or is necessary for the establishment, exercise, or defence of legal claims. We will clearly explain any applicable limitation when responding to your request.
The 999zs platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect, process, or retain personal data relating to any person under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, we will immediately suspend the associated account, delete all personal data associated with it, and return any deposited funds to the originating payment method, subject to our standard compliance review.
If you believe that a person under the age of 21 has registered a 999zs account, please notify us immediately at [email protected]. We treat all such reports with urgency and complete confidentiality.
Certain personal data — specifically your deposit history, session durations, betting patterns, and account activity — is used by our responsible gaming systems to monitor for potential signs of problem gambling behaviour. This processing is carried out under a legal obligation and legitimate interest basis and cannot be opted out of while your account remains active, as it forms a core component of our duty of care to users.
Self-exclusion records are retained indefinitely to ensure that excluded individuals cannot circumvent their own exclusion by registering new accounts. Where a self-exclusion period has been requested and confirmed, 999zs will flag the associated identity details internally to prevent re-registration for the duration of the exclusion period.
For full information on responsible gaming tools available to 999zs users, including deposit limits, cooling-off periods, and self-exclusion, please visit our Responsible Gaming page.
999zs reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that affect your rights or the way your personal data is used in a significant way — will be communicated to registered users via the email address on their account at least 7 days before the change takes effect. Non-material updates, such as corrections of typographical errors or clarifications that do not affect the substance of the Policy, may be made without prior notice.
The "Last Updated" date shown at the top of this page reflects the date on which the most recent version of this Policy came into effect. We encourage you to review this Policy periodically to stay informed about how 999zs protects your personal data.
For any questions, concerns, or requests relating to this Privacy Policy or the way 999zs handles your personal data, please contact our dedicated privacy team through any of the following channels:
Data subject access requests and rights-exercise requests should be submitted in writing to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Where the complexity of a request requires additional time, we will notify you of the extended timeline before the initial 30-day period expires.
999zs protects your personal data with industry-leading security while delivering the best cricket betting, live casino, and slots experience for Pakistani players — all in PKR, via JazzCash and EasyPaisa. 21+ only. Please play responsibly.
Login to 999zs Explore the Casino