zss99 Privacy Policy

1 Who We Are

zss99 ("the Company", "we", "us", "our") operates the online gaming platform accessible at zss99.com, including all associated mobile applications and sub-domains. zss99 is the data controller responsible for the personal data collected through the platform and processed in connection with the provision of our sports betting, live casino, slot, and instant gaming services.

zss99 operates under an internationally recognised gaming licence and is committed to processing personal data in a manner that is lawful, fair, and transparent. All data processing activities described in this Privacy Policy are conducted in accordance with applicable data protection legislation and our licensing obligations as an online gaming operator.

If you have any questions about this Privacy Policy or about how zss99 handles your personal data, you may contact our Data Protection team at [email protected].

2 Data We Collect

zss99 collects the following categories of personal data in connection with the registration, operation, and improvement of the zss99 platform:

Where zss99 is required by its gaming licence or by applicable anti-money laundering regulations to collect enhanced due diligence information — such as proof of source of funds — we will request this separately and explain the reason for the request at the time it is made.

3 How We Collect Data

zss99 collects personal data through the following channels:

• Direct Interactions: When you register a zss99 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated Technologies: When you access and use the zss99 platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 7 for full details.
• Third-Party Sources: We may receive identity verification data from our KYC partners, fraud screening data from anti-fraud service providers, and payment confirmation data from payment processors such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Publicly Available Sources: In limited circumstances related to fraud prevention or regulatory compliance, zss99 may cross-reference your information against publicly available databases or sanctions lists.

4 Why We Use Your Data

zss99 uses the personal data it collects for the following purposes:

• To create, verify, and manage your zss99 account, including performing age and identity verification as required under our gaming licence.
• To process deposits and withdrawals in PKR and to maintain accurate financial records of all transactions on your zss99 account.
• To provide, operate, and maintain all zss99 gaming services, including sports betting, live casino, slot games, and virtual sports.
• To detect, prevent, and investigate fraud, money laundering, underage gambling, and other prohibited activities on the zss99 platform.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming requirements imposed by our gaming licence.
• To personalise your zss99 experience, including serving relevant promotions and game recommendations based on your activity history.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you marketing communications about zss99 promotions, bonuses, and new features — but only where you have given explicit consent to receive such communications.
• To monitor responsible gaming indicators and to apply account-level interventions where our systems identify patterns consistent with problem gambling behaviour.
• To improve and develop the zss99 platform through analysis of aggregated usage data and player feedback.

5 Legal Basis for Processing

zss99 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and providing gaming services — is carried out on the basis that it is necessary to fulfil the agreement between you and zss99.
• Legal Obligation: Certain processing activities — including KYC verification, AML screening, and responsible gaming monitoring — are carried out because they are required by applicable law or our gaming licence conditions.
• Legitimate Interests: zss99 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent — for example, sending you marketing communications or placing non-essential cookies on your device — we will always obtain your explicit consent beforehand. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

zss99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age verification services receive the identity documents and personal details necessary to verify your zss99 account.
• Fraud Prevention & AML Services: Specialist third-party services receive certain account and transaction data to assist zss99 in detecting and preventing fraud and money laundering.
• Game Content Providers: Where you play a game powered by a third-party provider on zss99, that provider may receive your player identifier and game session data in order to deliver the game and calculate results.
• Regulatory Authorities: zss99 may be required to disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other government authorities in response to lawful requests or regulatory requirements.
• Professional Advisers: Legal, accounting, and auditing firms engaged by zss99 may access personal data on a strictly confidential basis where necessary to provide their professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the zss99 business, personal data held by zss99 may be transferred to the acquiring entity. You will be notified of any such transfer where required by law.

All third-party recipients of personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the purpose for which it was shared.

7 Cookies & Tracking Technologies

The zss99 platform uses cookies and similar tracking technologies to operate effectively, to remember your preferences, and to analyse how the platform is used. The main categories of cookies we use are:

• Essential Cookies: Required for the zss99 platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without breaking core platform functionality.
• Analytical Cookies: Help us understand how members use zss99, which pages are visited most frequently, and where technical errors occur. Data collected through analytical cookies is aggregated and anonymised wherever possible.
• Functional Cookies: Remember your preferences such as your preferred language, currency display settings, and responsible gaming limits so that your settings persist between sessions.
• Marketing Cookies: Used to deliver personalised promotional content and to track the effectiveness of zss99's marketing campaigns. These cookies are only placed with your explicit prior consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the zss99 platform. Withdrawing consent to marketing cookies does not affect your ability to use any core zss99 gaming services.

8 Data Security

zss99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zss99 platform.
• Encryption of sensitive data fields — including financial identifiers and identity document numbers — at rest in our databases.
• Role-based access controls ensuring that zss99 staff can only access personal data that is necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Multi-factor authentication requirements for internal systems that process member personal data.
• Documented incident response procedures to ensure that any personal data breach is identified, contained, and reported in accordance with applicable law.

While zss99 takes all reasonable steps to protect your data, no transmission over the internet can be guaranteed to be 100% secure. You also play a role in keeping your account secure — please ensure you use a strong, unique password for your zss99 account and do not share your login credentials with anyone.

9 Data Retention

zss99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming licence obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active zss99 account plus a minimum of five years following account closure, as required by applicable AML and gaming regulations.
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC & Identity Documents: Retained for the duration of your zss99 account plus five years post-closure. Originals are never retained; only verified data summaries are stored.
• Customer Support Records: Retained for up to three years from the date of the last interaction, to enable resolution of any follow-up disputes or regulatory enquiries.
• Marketing Consent Records: Retained for as long as you hold a zss99 account plus a reasonable period thereafter to evidence your consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with zss99's internal data disposal procedures.

10 Your Rights

As a data subject, you hold the following rights in relation to the personal data processed by zss99. To exercise any of these rights, please contact us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that zss99 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that zss99 holds about you.
• Right to Erasure: In certain circumstances, you have the right to request that zss99 delete your personal data. This right is subject to our legal and regulatory retention obligations — we may not be able to delete all data where retention is required by law.
• Right to Restriction: You have the right to request that zss99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to zss99's processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

zss99 will respond to all valid data rights requests within 30 days of receipt. In complex cases this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

11 Children's Privacy

The zss99 platform is strictly intended for adults aged 21 and over. zss99 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed at the point of registration and, where appropriate, at later stages of the account lifecycle.

If zss99 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete or anonymise all personal data associated with that account, and return any deposited funds to the originating payment method where technically possible.

If you have reason to believe that a minor is using the zss99 platform, please contact us immediately at [email protected]. We take reports of underage access extremely seriously and will act on all credible reports without delay.

12 International Data Transfers

As an online gaming platform serving players primarily in Pakistan, zss99 may in certain circumstances transfer your personal data to service providers and partners located outside Pakistan. Such transfers may occur in connection with our KYC verification, fraud prevention, game content delivery, or payment processing services.

Wherever personal data is transferred internationally, zss99 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that which applies within our primary operating jurisdiction. Such safeguards include contractual data protection clauses with recipient organisations and due diligence assessments of recipient countries' data protection frameworks.

13 Third-Party Services

The zss99 platform integrates with a number of third-party service providers to deliver its full range of gaming products and payment services. These third parties operate under their own privacy policies and data processing terms, which are separate from this Privacy Policy.

zss99 is not responsible for the privacy practices of third-party game content providers, payment gateways, or other external services. Where you interact directly with a third-party interface embedded within the zss99 platform — such as a live casino studio stream — that provider may collect certain technical data directly. We encourage you to review the privacy documentation of any third-party service you interact with.

zss99 conducts due diligence on all third-party data processors before engaging them and requires all such processors to enter into data processing agreements that bind them to standards of data protection consistent with those described in this Privacy Policy.

14 Policy Updates

zss99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. When we make material changes to this policy, we will post a notice on the zss99 platform and update the "Last Updated" date at the top of this document.

Where a change to this Privacy Policy materially affects the way in which we process your personal data, we will seek your renewed consent where required by law. Continued use of the zss99 platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how zss99 is protecting your personal information.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how zss99 processes your personal data, please get in touch with our Data Protection team using the contact details below:

• Email: [email protected]
• Live Chat: Available 24/7 through the zss99 platform chat widget
• Languages: Support available in English and Urdu

zss99 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.