zc99 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy describes how zc99 ("we", "us", "our", "zc99", or "the Platform") collects, processes, stores, and protects personal information about individuals ("Players", "users", "you") who access or use the zc99 online gaming platform available at zc99.org.

zc99 is Pakistan's dedicated online gaming platform, offering cricket betting, live casino, jackpot slots, sports wagering, and the Super Wheel daily promotion to Pakistani players in PKR (Pakistani Rupees). We understand that the players who trust zc99 with their gaming activity are also entrusting us with personal and financial information. This Privacy Policy exists to make our handling of that information completely transparent.

By registering for a zc99 Account, depositing funds, placing bets, or using any other feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein. If you do not agree with any part of this policy, you should not use the zc99 platform and should contact us to close your Account.

zc99 acts as the Data Controller in respect of personal information collected from Players through the zc99.org platform. As Data Controller, zc99 is responsible for determining the purposes and means by which your personal data is processed.

For all data protection enquiries, rights requests, and complaints related to this Privacy Policy, the designated point of contact is the zc99 Privacy and Data Protection team, reachable at the contact details set out in Section 16 of this Policy.

Where zc99 engages third-party service providers who process personal data on our behalf (such as payment processors, identity verification services, or game software providers), those parties act as Data Processors under contractual agreements that impose obligations consistent with the standards set out in this Policy.

zc99 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third parties such as payment providers and identity verification services. The specific categories of data collected are as follows:

zc99 processes personal data for specific, documented purposes only. We do not use your data for any purpose incompatible with those described below:

• Account Creation & Management: To register your zc99 Account, verify your identity and age, maintain your account settings, and provide you with secure access to the Platform via the zc99 Login.
• Service Delivery: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit cards; to execute withdrawals to your verified Pakistani payment method; to record and settle cricket bets, casino game outcomes, and sports wagers.
• Legal Compliance & KYC: To satisfy our obligations under international gaming licensing requirements including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) due diligence, and age verification for our 21+ restriction.
• Fraud Prevention & Security: To detect and prevent fraudulent account activity, suspicious login attempts, duplicate account creation, and financial crime indicators using automated and manual monitoring processes.
• Customer Support: To respond to your enquiries, process complaints, resolve disputes, and provide responsible gaming assistance including self-exclusion requests.
• Platform Improvement: To analyse aggregated usage patterns and improve the zc99 platform for Pakistani players, including cricket betting market design, payment flow optimisation, and mobile performance on Pakistani network conditions.
• Marketing Communications: To send promotional offers, bonus notifications, PSL cricket betting promotions, and Super Wheel updates to your registered mobile number, subject to your communication preferences. You may opt out of marketing communications at any time through Account Settings or by contacting support.
• Responsible Gaming: To monitor gaming patterns that may indicate problematic behaviour, to enforce deposit limits and self-exclusion requests, and to fulfil our obligations under our responsible gaming programme.

zc99 processes your personal data on the following legal bases, consistent with international data protection standards:

• Contract Performance: Processing necessary to fulfil our obligations to you under the zc99 Terms & Conditions — including account operation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and our international gaming licensing requirements — including KYC, AML, and age verification obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and product improvement where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, non-essential cookies, and any other processing activities for which we have obtained your explicit prior consent. You may withdraw consent for these activities at any time without affecting the lawfulness of prior processing.

Financial data processed by zc99 in connection with your PKR deposits and withdrawals is handled with the highest level of security and care. The following specific provisions apply to payment data:

• JazzCash and EasyPaisa transaction references are tokenised immediately upon receipt. The original mobile wallet credentials are not stored in zc99 databases post-transaction.
• Bank account details provided for HBL, UBL, or Meezan Bank withdrawals are used solely for the specific withdrawal transaction and are not retained for longer than necessary to process and confirm the payment.
• Full debit card numbers are never stored by zc99. Card payment processing is handled by our PCI-DSS compliant payment processing partners, who return only a truncated card reference to zc99 systems.
• Transaction history — including deposit and withdrawal amounts, dates, and payment method references — is retained for a minimum of five years as required by our anti-money laundering compliance obligations.
• In the event of a suspicious transaction, zc99 may be required to report relevant financial data to competent authorities under applicable anti-money laundering or counter-terrorism financing laws, without prior notice to the Account holder.

zc99 is required under our international gaming licence to verify the identity and age of all Players before permitting withdrawals and as part of ongoing compliance monitoring. For Pakistani players, this typically involves submission of:

• Computerised National Identity Card (CNIC) — front and back copies
• Passport (where CNIC is unavailable or where additional verification is required)
• Proof of address — utility bill, bank statement, or equivalent document
• Proof of payment method ownership — screenshot of JazzCash or EasyPaisa account registered in your name

zc99 does not share KYC documents with third parties except with our authorised identity verification service provider, our payment processors where required to satisfy their own compliance obligations, or competent authorities where legally required to do so.

zc99 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, maintain your login session, and analyse usage patterns to improve the player experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your zc99 account, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing the Platform from operating correctly.
• Functional Cookies: Remember your preferences such as language settings and last-selected game categories. These improve your experience but are not essential for core platform operation.
• Analytics Cookies: Collect anonymised data about how players use zc99 — which pages are visited most frequently, how mobile users navigate on different Pakistani device types, and where players typically leave the deposit flow. This data is used to improve the Platform and is not linked to your individual identity.
• Marketing Cookies: Used to track whether you have responded to a zc99 promotional campaign. These are only placed with your consent and may be managed through your cookie preferences settings.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the zc99 Platform, including maintaining your login session and accessing your account balance.

zc99 does not sell your personal data to any third party. We share personal data with external parties only in the following specific, documented circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit card processing partners receive the minimum data necessary to process your deposit or withdrawal transaction. These parties operate under their own privacy frameworks and are selected in part based on their data protection standards.
• Identity Verification Providers: Our KYC compliance partner receives the identity documents you submit for age and identity verification. This service is provided under a Data Processing Agreement that prohibits the use of your documents for any purpose beyond the verification service provided to zc99.
• Game Software Providers: Third-party game studios (such as Pragmatic Play, PG Soft, and others whose games appear on zc99) may receive limited gaming session data as part of their technical integration. This is restricted to session identifiers and bet amounts necessary to operate the game — it does not include your identity information.
• Fraud & Security Providers: We use third-party fraud detection services that analyse transaction and behavioural data to identify suspicious activity. Data shared with these providers is processed for security purposes only and is subject to strict data minimisation requirements.
• Legal & Regulatory Authorities: zc99 will disclose personal data to competent authorities — including gaming regulators, financial intelligence units, or law enforcement — where required to do so by applicable law, court order, or regulatory direction. We will notify affected Players of such disclosures where legally permitted to do so.

zc99 retains personal data for as long as is necessary for the purposes described in this Policy, including ongoing account operation, legal compliance, and the resolution of any pending disputes. Specific retention periods are as follows:

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any individual Player.

zc99 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and zc99 servers
• AES-256 encryption at rest for all databases containing personal data
• Bcrypt hashing for all stored passwords — plain-text passwords are never stored
• Role-based access controls limiting employee access to personal data to those with a documented operational need
• Automated intrusion detection and login anomaly monitoring with real-time alerting
• Regular penetration testing and security audits conducted by independent security specialists
• Data breach response procedures providing for Player notification where a breach poses a risk to your rights and freedoms

Despite these measures, no internet-based service can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, zc99 will notify affected Players without undue delay, consistent with applicable notification obligations.

As a zc99 player, you hold the following rights in relation to your personal data. All rights requests should be submitted to [email protected] and will be responded to within 30 calendar days:

Where zc99 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age, the following actions will be taken immediately:

• The Account will be suspended pending investigation
• All funds in the Account will be frozen and reviewed under our minor protection protocol
• All personal data associated with the Account will be flagged for deletion following conclusion of any required regulatory reporting
• The matter may be reported to competent authorities where required under applicable law

If you are a parent or guardian who believes a minor has accessed zc99 and registered an Account, please contact us immediately at [email protected] with relevant details so we can investigate and take appropriate action promptly.

As an internationally operated platform serving Pakistani players, some processing of your personal data may involve transfers to, or storage on, servers located outside Pakistan. When such transfers occur, zc99 ensures that appropriate safeguards are in place to protect your data to standards equivalent to those described in this Policy.

Appropriate safeguards for international transfers include:

• Standard Contractual Clauses (SCCs) or equivalent data transfer mechanisms with receiving parties
• Transfers only to jurisdictions recognised by our licensing authority as providing adequate data protection
• Binding contractual obligations on all third-party recipients regarding data security, purpose limitation, and deletion

zc99's primary game server infrastructure is hosted in jurisdictions that maintain data protection standards consistent with international best practice. Pakistani player data is not transferred to countries with materially weaker data protection frameworks without the safeguards described above being in place.

zc99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or our service offering. When material changes are made, the following process applies:

• The revised Policy is published at zc99.org/privacy-policy with an updated version number and effective date
• Players with active accounts are notified of material changes via SMS to their registered Pakistani mobile number, or via a notification displayed upon next login to their zc99 account
• Continued use of zc99 following the effective date of any material change constitutes acceptance of the revised Privacy Policy
• Previous versions of this Policy are archived and available upon request by contacting [email protected]

Where changes to this Policy require your fresh consent under applicable law (for example, where we propose a new processing purpose requiring consent), we will seek that consent explicitly before commencing the new processing activity.

For any questions about this Privacy Policy, requests to exercise your data rights, or complaints about how zc99 has handled your personal data, please contact us using the details below. All contact information is provided as plain text only and is not a clickable link:

If you are not satisfied with how zc99 has responded to your privacy complaint, you have the right to escalate your complaint to our licensing authority's data protection oversight function. Details of the applicable oversight body are available from zc99's compliance team upon request.

This Privacy Policy was last updated in January 2026 and supersedes all prior versions. Version 2.4. The English text of this Policy is the controlling version in all cases.