1 Introduction
This Privacy Policy ("Policy") describes how zss999 ("Platform", "we", "us", "our"), operating at https://zss999.cam, collects, processes, stores and protects the personal data of users ("User", "you", "your") who access or interact with the Platform in any capacity.
zss999 is an English-language online gaming information platform serving users in Pakistan and other permitted jurisdictions. We take our obligations regarding your personal data seriously. This Policy sets out our commitments to lawful, fair and transparent data processing in plain English, so that every player — whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — understands exactly how their information is handled.
This Policy applies to all personal data collected through the zss999 website, mobile-optimised Platform, customer support channels and any other interaction between you and zss999. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.
2 Definitions
In this Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, directly or indirectly (e.g., name, email address, IP address, CNIC number). |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is zss999. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller under a data processing agreement. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a specific purpose. |
| "KYC Data" | Identity and age verification documents submitted by you, including CNIC, passport, proof of address and selfie/liveness images. |
| "Cookies" | Small text files placed on your device by the Platform to maintain session state, remember preferences or gather usage analytics. |
| "Special Category Data" | Sensitive personal data requiring heightened protection, such as health information or biometric data, which may be collected only where strictly necessary (e.g., responsible gambling health indicators). |
3 Data Controller
zss999, operating at https://zss999.cam, acts as the Data Controller in respect of all Personal Data collected through the Platform. The Data Controller is responsible for determining the purposes for which your data is processed and ensuring that processing is carried out lawfully, fairly and transparently.
Where zss999 engages third-party Data Processors (such as payment processors, KYC verification providers and cloud infrastructure providers), it does so under written data processing agreements that impose obligations on those processors equivalent to those assumed by zss999 under this Policy.
For all privacy-related enquiries, including requests to exercise your data rights, please contact our Data Privacy team using the contact details in Section 17 of this Policy.
4 Data We Collect
We collect only the Personal Data that is necessary to operate the Platform and provide the services described in our Terms & Conditions. The categories of data we may collect are set out in the table below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number | Account registration, KYC verification, age confirmation |
| Contact Data | Email address, mobile number, city of residence | Account communication, support, security alerts |
| Financial Data | Deposit / withdrawal history, payment method type, transaction amounts (PKR) | Transaction processing, AML monitoring, fraud prevention |
| KYC Documents | CNIC scan, passport copy, proof of address, selfie image | Identity and age verification, regulatory compliance |
| Technical Data | IP address, device type, browser version, operating system, session duration | Security monitoring, fraud detection, platform optimisation |
| Behavioural Data | Pages visited, games played, betting history, session frequency | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, survey responses | Customer support, quality assurance, dispute resolution |
We do not collect unnecessary special category data. Where responsible gambling monitoring tools prompt users to share health-related information (e.g., self-reporting a gambling disorder), such information is treated with the highest level of protection and used solely for the purpose of facilitating appropriate support.
5 How We Collect Your Data
We collect Personal Data through the following means:
- Direct Provision: Data you provide when registering an Account, completing KYC verification, contacting support, participating in promotions or completing surveys.
- Automated Technical Collection: Technical and behavioural data collected automatically when you access the Platform, including via cookies, log files and similar tracking technologies (see Section 12).
- Third-Party Sources: Verification data from KYC and identity verification service providers; fraud-risk data from payment processors; and public records where lawfully available.
- Payment Providers: Limited transaction confirmation data from payment methods you use, such as Easypaisa, JazzCash, Raast or bank transfer confirmation references from HBL, UBL, Meezan Bank or Bank Alfalah. Payment providers are referenced for context only and do not imply endorsement of this Platform or any gambling activity.
6 Legal Basis for Processing
We process your Personal Data on one or more of the following legal bases, depending on the purpose and nature of the processing:
- Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the Platform services described in the Terms & Conditions, including Account management, transaction processing and customer support.
- Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) obligations, KYC requirements imposed by the operator's licensing jurisdiction, and requests from lawful authorities.
- Legitimate Interests: Processing is necessary for the legitimate interests of zss999 or a third party, including fraud prevention, security monitoring, platform improvement and responsible gambling oversight — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where processing is not required by contract or law, we will seek your explicit consent (e.g., for certain marketing communications). You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 How We Use Your Data
Personal Data collected by zss999 is used solely for the following purposes:
- Creating, maintaining and managing your Account;
- Verifying your identity, age and eligibility (KYC process);
- Processing deposits, withdrawals and payment method verification;
- Detecting, investigating and preventing fraud, money laundering and other prohibited activities;
- Providing and improving customer support services;
- Sending transactional communications (account confirmations, security alerts, withdrawal notifications);
- Monitoring for responsible gambling indicators and facilitating access to support tools where needed;
- Analysing Platform usage to improve performance, accessibility and user experience;
- Complying with legal obligations imposed by the operator's licensing jurisdiction and applicable law;
- Resolving disputes and enforcing our Terms & Conditions.
8 Data Sharing & Disclosure
We share your Personal Data only in the following limited circumstances:
- Service Providers (Data Processors): KYC verification providers, payment processors, cloud hosting providers, fraud detection services and IT support companies — each engaged under a written agreement that prohibits them from using your data for any purpose other than providing the contracted service to zss999.
- Regulatory & Law Enforcement Authorities: Where we are required by applicable law, court order, regulatory direction or lawful request to disclose Personal Data, we will do so. We will, where legally permitted, notify you of such a request.
- Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.
- Responsible Gambling Organisations: Where you voluntarily request referral to a responsible gambling support service, limited data (sufficient to facilitate the referral) may be shared with that service.
We do not share your Personal Data with sports organisations, payment brands (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) for marketing purposes, or with any third party for their independent commercial use.
9 International Data Transfers
As an online platform, zss999 may process and store data in jurisdictions outside Pakistan. Where Personal Data is transferred outside Pakistan to service providers or infrastructure partners in other countries, we take steps to ensure that an equivalent level of protection is maintained, including through:
- Contractual safeguards (data processing agreements incorporating appropriate data protection clauses);
- Engaging service providers who maintain internationally recognised security certifications;
- Storing KYC documents in encrypted, access-controlled environments.
Pakistan does not currently have a comprehensive data protection law equivalent to the EU General Data Protection Regulation (GDPR). However, zss999 applies data handling standards consistent with internationally recognised good practice. This Policy does not constitute legal advice on Pakistani data protection law.
10 Data Retention
We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Account Data: Retained for the duration of your Account plus a minimum of five (5) years after Account closure, to comply with AML record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years from the date of collection or the date of Account closure, whichever is later.
- Transaction Records: Retained for a minimum of five (5) years to satisfy financial record-keeping requirements.
- Communications Data: Support communications retained for up to three (3) years for quality assurance and dispute resolution purposes.
- Technical Logs: IP logs and access logs retained for up to twelve (12) months for security monitoring purposes.
- Cookie Data: Session cookies expire when you close your browser. Persistent cookies expire as indicated at the time of setting (typically 30 days to 12 months).
At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with a specific individual.
11 Security Measures
zss999 implements technical and organisational security measures designed to protect your Personal Data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:
- 256-bit TLS/SSL encryption for all data transmitted between your browser and the Platform;
- Encryption of stored sensitive data, including KYC documents and financial records;
- Role-based access controls ensuring that staff access to Personal Data is limited to what is necessary for their function;
- Regular penetration testing and security audits;
- Multi-factor authentication for Platform administration systems;
- Incident response procedures for detecting, reporting and managing personal data breaches.
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to applying the highest practical standard of protection.
12 Cookies & Tracking Technologies
zss999 uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use are described below:
- Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without breaking Platform functionality.
- Functional Cookies: Remember your preferences (e.g., language selection, display settings) to provide a more personalised experience across visits.
- Analytics Cookies: Collect anonymised data about how users navigate the Platform (e.g., pages visited, time on page) to help us identify areas for improvement. Analytics data is aggregated and does not identify individual users.
- Security Cookies: Used to detect and mitigate fraudulent activity, bot traffic and suspicious login patterns.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will affect Platform functionality, including your ability to remain logged in. zss999 does not use cookies to serve third-party advertising.
13 Your Rights
Subject to applicable law, you hold the following rights in relation to your Personal Data held by zss999. You may exercise any of these rights by contacting us at the details provided in Section 17:
We will respond to verified data rights requests within a reasonable period and no later than thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, with notification to you. We reserve the right to verify your identity before processing any data rights request.
14 Children's Privacy
The zss999 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals under the age of 18.
If we discover that Personal Data has been collected from a minor, that Account will be immediately closed, the data will be deleted and any funds held will be dealt with in accordance with our Terms & Conditions and applicable law.
If you are a parent or guardian and believe your child has registered an Account on zss999, please contact us immediately at [email protected] so that we can take prompt action.
15 Pakistan-Specific Notice
Pakistan does not currently have a comprehensive, dedicated data protection statute equivalent to major international frameworks (such as the EU GDPR). However, certain obligations in respect of data handling may arise under the Prevention of Electronic Crimes Act, 2016 (PECA), the Pakistan Telecommunication (Re-organisation) Act, 1996 and other applicable laws.
zss999 applies data handling standards consistent with internationally recognised good practice and the requirements of the operator's licensing jurisdiction. Pakistani users in Karachi, Lahore, Islamabad and other cities should note that this Policy does not constitute legal advice on Pakistani data law, and users are encouraged to seek independent advice if uncertain about their rights.
References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in the context of payment method verification are for context only. Transaction confirmation data received from such providers is used solely for deposit/withdrawal verification. It does not imply that those institutions endorse this Platform or any gambling activity.
16 Policy Updates
zss999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data practices or Platform services. Material changes will be communicated to registered Users by email or by a prominent notice on the Platform before the change takes effect.
Non-material updates (such as typographical corrections or clarifications that do not alter the substance of any data processing obligation) may be made without prior notice. The effective date displayed at the top of this page reflects when the Policy was last reviewed.
Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.
17 Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the way zss999 handles your Personal Data, please contact our Data Privacy team:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
- Response Time: We aim to respond to all privacy enquiries within five (5) business days. Data rights requests will be fulfilled within thirty (30) days of identity verification.
- Languages: English (primary); Urdu available on request.
When submitting a data rights request, please include your registered email address and a description of the right you wish to exercise. Do not include your CNIC number or password in your initial email — we will request appropriate verification through a secure channel.