ZK999 Privacy Policy – How We Handle Your Data in Pakistan

This Privacy Policy applies to every person who visits the ZK999 website at zk999.win, creates a ZK999 account, uses the ZK999 mobile app, contacts ZK999 support, or otherwise interacts with the ZK999 platform in any capacity.

By registering an account or using the platform, you acknowledge that you have read this policy and consent to the collection and use of your personal information as described here. If you do not agree with this policy, you should not register an account or use ZK999.

This policy should be read alongside ZK999's Terms and Conditions, which contain additional provisions relevant to how your account is managed. Where there is any conflict between the two documents, the Terms and Conditions take precedence on matters of contract and account conduct; this Privacy Policy takes precedence on matters of data handling and your data rights.

ZK999 operates as an online gaming and sports betting platform serving players in Pakistan. All references to player data in this policy relate to data collected and processed in connection with that service.

ZK999 collects personal data through several channels. The following table sets out the main categories:

ZK999 does not collect or store full payment card numbers. Card payments are processed through PCI-DSS compliant third-party processors and only tokenised references are stored.

ZK999 does not collect biometric data, health data or data revealing political opinions, religious beliefs or other special categories of sensitive personal information.

ZK999 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, process deposits and withdrawals in PKR, and maintain an accurate record of your activity.
• Platform operation: To provide betting markets, casino games, slot games and fish shooting games, record game outcomes, settle bets and apply bonus credits correctly.
• Fraud prevention and security: To detect suspicious login patterns, flag unusual transaction behaviour, prevent money laundering and protect the integrity of the platform for all users.
• Customer support: To respond to your queries, resolve account disputes, process complaints and assist with technical issues.
• Responsible gaming: To enforce the deposit limits, session reminders and self-exclusion settings you have applied, and to identify patterns of play that may indicate problem gambling so that appropriate support can be offered.
• Legal and regulatory compliance: To meet any obligations imposed by applicable laws including anti-money laundering requirements and record-keeping duties.
• Platform improvement: To analyse aggregate usage patterns, identify performance bottlenecks and develop new features. This analysis is done on anonymised or aggregated data wherever possible.
• Communications: To send you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have consented, promotional communications about ZK999 offers.

ZK999 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review.

ZK999 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to operate your account and deliver the services you have registered to use — this covers identity verification, transaction processing and game operation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection and internal analytics, where these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining financial transaction records for anti-money laundering compliance purposes.
• Consent: Processing for optional communications such as promotional emails or push notifications, which you can withdraw at any time through your account preferences without affecting your ability to use the platform.

Where consent is the basis for processing, you may withdraw it at any time. Withdrawing consent for marketing communications does not affect the lawfulness of processing that occurred before the withdrawal.

ZK999 does not sell your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, Visa, Mastercard and other payment service providers receive only the data needed to process your transaction — typically your name and payment reference. These providers operate under their own privacy policies and data security obligations.
• KYC and identity verification services: Third-party identity verification providers may process your identity documents to confirm your age and identity. They are contractually required to handle this data confidentially and to use it only for the purpose of verification.
• Game studios: Certified game providers whose titles are available on ZK999 (such as JILI Games and other licensed studios) may receive anonymised session data for purposes such as game performance monitoring. They do not receive your name, contact details or financial data.
• IT and infrastructure providers: Companies that provide hosting, database, security scanning and other technical services to ZK999 may have access to data as part of their function. They are bound by data processing agreements that restrict use to the specified purpose.
• Legal requirement: ZK999 will disclose personal data to law enforcement or regulatory authorities where required to do so by law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of users or fulfil a lawful request.

Any third party that receives data from ZK999 is required to maintain appropriate security measures and is prohibited from using that data for any purpose beyond the one for which it was provided.

ZK999 uses cookies and similar tracking technologies to make the platform function correctly and to understand how it is being used. The main categories are:

• Essential cookies: Required for the platform to operate — these maintain your session, remember your login state and ensure the correct page is displayed. The platform cannot function without these and they cannot be disabled.
• Functional cookies: Remember your preferences such as language settings or the last game category you viewed. These improve your experience but are not strictly required.
• Analytics cookies: Collect anonymised data about which pages are visited, how long users stay and what actions are taken. This data helps ZK999 identify and fix performance issues. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent login attempts, unusual account activity and bot traffic. These are essential to platform security.

When you first visit ZK999, a cookie consent banner gives you the opportunity to accept or decline non-essential cookies. You can also manage cookie settings through your browser at any time — however, disabling essential cookies will prevent the platform from functioning correctly.

ZK999 does not use third-party advertising cookies or permit advertising networks to place tracking cookies through the platform.

ZK999 retains your personal data for as long as your account is active and for a period after account closure to meet legal obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years after account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Financial transaction data including deposit and withdrawal records in PKR is retained for a minimum of five years after the transaction date.
• Customer support records: Support chat transcripts and correspondence are retained for up to three years after the relevant interaction.
• Technical and device logs: Retained for up to 12 months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as necessary to demonstrate that consent was obtained and valid at the time communications were sent.

When retention periods expire, data is securely deleted or irreversibly anonymised. Data that has been anonymised — where it is no longer possible to identify you from it — may be retained indefinitely for aggregate analytical purposes.

As a ZK999 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting ZK999 support through the live chat function:

ZK999 maintains a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure:

• Transport security: All data in transit between your device and ZK999 servers uses 256-bit SSL/TLS encryption. This applies to all pages, login requests, payment submissions and API calls.
• Access controls: Internal access to personal data is restricted by role. Staff members can access only the data required for their specific function. Access is logged and audited regularly.
• Two-factor authentication: Available to all ZK999 account holders and strongly recommended. When enabled, a second verification step is required at login in addition to your password.
• Payment tokenisation: Card payment data is processed through PCI-DSS certified processors. ZK999 stores only tokenised payment references — not raw card numbers.
• Regular security reviews: ZK999 conducts periodic security assessments of platform infrastructure to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data in a material way, ZK999 will notify affected users as quickly as practicable after the incident is confirmed and contained.

While ZK999 takes these measures seriously, no internet-connected platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong unique password, enable two-factor authentication, and do not share your login credentials with anyone.

ZK999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is conducted as part of the KYC process before withdrawal access is granted.

If ZK999 discovers that an account has been registered by a person under 18, the account will be suspended immediately, any balance forfeited, and all personal data associated with that account deleted in accordance with this policy's retention rules — except where retention is required by law.

If you are a parent or guardian and believe that a minor in your care has registered a ZK999 account, please contact support immediately through live chat. ZK999 will investigate and act on verified reports as quickly as possible.

Parental controls are strongly recommended on shared devices where a minor may have access. Ensure your ZK999 account is password-protected and logged out when the device is not in your immediate possession.

ZK999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the law, or improvements in our data handling practices. When updates are made, the "Last Updated" date at the top of this page will reflect the revision date.

For material changes — those that meaningfully affect how your data is collected, used or shared — ZK999 will provide advance notice through the platform notification system or via your registered contact details. Minor clarifications that do not alter the substance of the policy may be made without specific notification.

Continued use of the ZK999 platform after a policy update constitutes your acceptance of the revised policy. It is your responsibility to review this page periodically. The current version of this policy is always accessible at zk999.win/privacy-policy.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how ZK999 has handled your personal data, please contact the support team:

If you are not satisfied with ZK999's response to a privacy complaint after following the process above, you may have the right to escalate the matter to a relevant data protection authority depending on your jurisdiction. ZK999 will cooperate fully with any lawful regulatory enquiry.