za99 Privacy Policy — Your Data, Protected

za99 is an internationally licensed online gaming platform accessible at za99.im. We provide sports betting, live casino, slots, and instant games primarily to Pakistani players, with all transactions conducted in Pakistani Rupees (PKR). za99 operates under an international gaming licence and is the data controller responsible for the personal data collected through the za99 platform.

For the purposes of this Privacy Policy, references to "za99", "we", "us" or "our" refer to the za99 platform and its operating entity. References to "you", "your", or "player" refer to any individual who accesses, registers on, or uses the za99 platform in any capacity.

za99 collects personal data only to the extent necessary to provide our gaming services, comply with our regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect are set out below:

za99 collects personal data through the following channels and interactions:

• Direct Registration: When you create a za99 account, you provide your name, email address, Pakistani mobile number, date of birth, and CNIC details directly through the registration form on za99.im.
• KYC Verification: When you submit identity documents (CNIC scan, selfie verification) as part of the mandatory KYC process prior to your first withdrawal.
• Financial Transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Debit Card, or USDT TRC20, transactional metadata is collected and associated with your account.
• Platform Interaction: As you navigate and use the za99 platform, technical data including your IP address, device identifiers, browser type, and session activity is automatically collected by our servers and analytics infrastructure.
• Customer Support: When you contact za99 via live chat, email, or any other support channel, the content of those communications is recorded and associated with your player profile.
• Cookies and Similar Technologies: za99 uses functional cookies and session tokens to maintain your login state and platform preferences. Analytical cookies are used in aggregate, anonymised form to monitor platform performance. Full details are set out in Section 10.

za99 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that has not been disclosed in this policy:

• Account Management: To create, maintain, and secure your za99 player account, including authentication and password recovery.
• Service Delivery: To enable you to place bets, play casino games, access bonuses, and use all features of the za99 platform.
• Payment Processing: To process your PKR deposits and withdrawals via your chosen payment method, and to maintain accurate financial records for your account.
• Identity & Age Verification: To verify that you are who you claim to be and that you meet the mandatory 21+ age requirement for real-money gaming on za99.im.
• Regulatory Compliance: To fulfil our obligations under our international gaming licence, including anti-money laundering (AML) checks, sanctions screening, and record-keeping requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats to the platform and its players.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, apply player-requested limits, and fulfil our duty of care obligations to all registered players.
• Customer Support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the za99 platform for Pakistani mobile users.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have consented to receive such communications. You may withdraw consent at any time.

za99 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the gaming services contract you entered into when you registered your za99 account — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification requirements, and record-keeping requirements under our gaming licence.
• Legitimate Interests: Processing carried out for za99's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily relating to optional marketing communications and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

za99 does not sell, rent, or disclose your personal data to unaffiliated third parties for commercial or marketing purposes. We share personal data only in the limited circumstances described below:

• Payment Processors: Financial transaction data is shared with payment service providers — including JazzCash, EasyPaisa, and participating Pakistani banks — solely to process your deposits and withdrawals. Each payment processor operates under its own privacy policy and is independently responsible for the data it receives.
• Game Providers: Certain game session data (such as player ID and bet amounts) is shared with za99's licensed game providers to facilitate game operation, audit compliance, and jackpot processing. Game providers are contractually prohibited from using this data for any purpose other than providing the gaming service.
• Identity Verification Services: CNIC and identity document data is shared with our contracted KYC verification partner for the sole purpose of conducting identity and age verification. This partner operates under strict data processing agreements and GDPR-aligned standards.
• Regulatory Authorities & Law Enforcement: za99 may disclose personal data to our licensing authority, relevant regulatory bodies, financial intelligence units, or law enforcement agencies where required by law, court order, or where we have a good-faith belief that disclosure is necessary to investigate suspected fraud, money laundering, or other serious criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving za99, personal data held by za99 may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via the email address on your account.

za99 is an internationally operated platform. As a result, some of the personal data we collect may be processed on servers located outside of Pakistan. Where data is transferred internationally, za99 takes the following steps to ensure your data remains adequately protected:

• All international data transfers are conducted under appropriate safeguards, including standard contractual clauses, binding corporate rules, or transfers to jurisdictions that maintain data protection standards equivalent to those recognised under our licensing regime.
• Server infrastructure used by za99 is operated by enterprise-grade cloud service providers that maintain ISO 27001 certification and implement physical, technical, and administrative security measures consistent with international best practices.
• Data transfers to payment processors operating within Pakistan — including JazzCash, EasyPaisa, and local bank partners — are subject to applicable Pakistani financial data regulations.

By using the za99 platform, you acknowledge and consent to the transfer of your personal data to za99's server infrastructure and authorised third-party processors, which may be located outside Pakistan, subject to the protections described in this section.

za99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our regulatory and legal obligations. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active za99 account is retained for the duration of your account's active status and for a period of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• KYC & Identity Documents: CNIC scans and identity verification records are retained for a minimum of five (5) years following the conclusion of your customer relationship with za99, as required under our gaming licence obligations.
• Financial Transaction Records: Deposit and withdrawal records, including associated payment method identifiers, are retained for a minimum of seven (7) years to satisfy applicable financial record-keeping and AML compliance requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, unless the content is relevant to an ongoing investigation or dispute, in which case it is retained until resolution.
• Technical & Log Data: Server logs, IP address records, and session data are retained for twelve (12) months for security monitoring and fraud investigation purposes, after which they are automatically deleted or anonymised.

za99 respects your rights over your personal data. The following rights are available to all registered za99 players and may be exercised by contacting our support team at any time:

za99 uses cookies and similar technologies on za99.im. A cookie is a small text file stored on your device that helps the platform function correctly and efficiently. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the za99 platform to function. They include session authentication tokens, CSRF protection cookies, and load balancing identifiers. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as language settings and display options — to provide a more personalised experience on za99.im. They persist between sessions but contain no personally identifiable information.
• Analytics Cookies: za99 uses aggregated, anonymised analytics to monitor platform performance, identify technical issues, and understand how Pakistani players navigate the platform on mobile devices. This data is collected in aggregate form and cannot be used to identify individual users.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into or using the za99 platform. For a full list of cookies used by za99.im, please contact our support team.

The za99 platform is strictly for adults. Real-money gaming on za99.im is prohibited for anyone under the age of 21. za99 does not knowingly collect personal data from individuals under the age of 21.

If you believe that a minor has registered on the za99 platform, please notify us immediately via live chat or at [email protected]. We take underage gambling extremely seriously and will act on any credible report without delay.

za99 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• Encryption in Transit: All data exchanged between your device and za99's servers is encrypted using TLS 1.3. This protects your login credentials, CNIC data, and financial information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored in za99's databases — including CNIC details and financial account identifiers — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within za99's internal systems is restricted on a strict need-to-know basis. All staff who handle personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: za99 supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection against unauthorised access.
• Fraud Detection Systems: za99 operates automated fraud detection and anomaly monitoring systems that continuously analyse account activity for signs of unauthorised access, identity fraud, or unusual payment patterns.
• Penetration Testing: za99's platform infrastructure undergoes regular penetration testing and security audits conducted by qualified third-party security professionals.

The za99 platform may, from time to time, contain links to third-party websites or services — such as game provider information pages or payment processor portals. This Privacy Policy applies exclusively to the za99 platform at za99.im and does not extend to any third-party websites or services.

za99 has no control over the privacy practices of third-party websites and accepts no responsibility for the content, privacy policies, or data handling practices of those sites. We strongly encourage you to review the privacy policy of any third-party website you visit via a link from the za99 platform.

za99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or platform features. The following process applies to all material changes:

• Material amendments to this Privacy Policy will be communicated to all registered players via email notification to the address on file and/or via a prominent notice displayed on the za99 platform at the time of login.
• The updated Privacy Policy will be published on this page with a revised "Effective Date" at the top of the document. The effective date constitutes official notice of the change.
• Your continued use of the za99 platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree to the amended policy, you must cease using the platform and may request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or za99's data processing practices, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the za99 platform. Average first response time is under 3 minutes. This is the fastest way to reach us for urgent privacy concerns.
• Email (plain text — not a link): [email protected] — please use the subject line "Privacy Request" or "Data Complaint" so your message is routed directly to our compliance team.

za99 will acknowledge all privacy-related complaints within 5 business days and will provide a full written response within 30 calendar days of receiving your complaint. Where a complaint cannot be resolved through internal channels, you may have the right to refer your complaint to the relevant data protection supervisory authority or to za99's independent dispute resolution mechanism as described in our Terms & Conditions.