zt99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how zt99 ("zt99", "we", "our", "us") collects, uses, stores, and protects the personal information of individuals ("you", "Player", "User") who register for and use the zt99 online gaming platform, accessible at zt99.bid and any associated mobile applications or services (collectively, the "Platform").

By creating a zt99 account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and you consent to the data practices described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and close your account.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the zt99 Platform. Where this Policy and the Terms conflict on a data-related matter, this Policy takes precedence.

2 Who We Are

zt99 is an online gaming and entertainment platform operating in the digital marketplace under the brand name zt99. The Platform is designed to serve adult players (18+) in Pakistan, offering live casino games, accumulator sports betting, jackpot slots, and cockfighting entertainment, with all transactions processed in Pakistani Rupees (PKR).

For any data-related queries, correspondence, or formal complaints, you may reach our designated data contact at:

[email protected] (Plain text — not a clickable link)

3 Data We Collect

We collect personal data through several channels during your interaction with the zt99 Platform. The categories of data we collect and their primary collection points are set out below.

3.1 Registration Data

When you create your zt99 account you provide:

• Full legal name (as it appears on your CNIC)
• Date of birth (to verify 18+ age eligibility)
• Residential address in Pakistan (city, province, postal code)
• Mobile phone number registered in Pakistan
• Email address
• Username and hashed password

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and to verify your identity, we may request:

• Copy of your CNIC (front and back) or valid Pakistani passport
• Selfie photograph for liveness verification
• Proof of address (utility bill, bank statement, or similar document)
• Evidence of payment method ownership (screenshot of Easypaisa/JazzCash wallet or bank statement)

3.3 Transaction and Financial Data

When you deposit, withdraw, or engage in wagering activities on zt99, we record:

• Deposit and withdrawal amounts in PKR
• Payment method used (Easypaisa, JazzCash, Raast, SadaPay, HBL, UBL, MCB Bank, or USDT)
• Transaction timestamps and reference numbers
• Account balance history and wagering records

3.4 Technical and Usage Data

Automatically collected when you browse or play on the Platform:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Game activity logs (bets placed, outcomes, timestamps)
• Cookies and similar tracking technologies (see Section 8)

3.5 Communications Data

When you contact our support team or respond to surveys:

• Live chat transcripts
• Email correspondence content
• Survey responses and feedback submissions

3.6 Data Categories Overview

4 How We Use Your Data

zt99 uses your personal data for the following purposes:

4.1 Account Management and Service Delivery

To create and maintain your account, verify your identity, process PKR deposits and withdrawals across Easypaisa, JazzCash, Raast, SadaPay, HBL, UBL, MCB Bank, and USDT, and provide access to all games and features on the zt99 Platform.

4.2 Security and Fraud Prevention

To monitor for suspicious login activity, detect and prevent fraudulent transactions, identify multiple-account violations, and protect both zt99 and its players from financial crime. Technical data including IP addresses and device fingerprints plays a central role in this function.

4.3 Regulatory Compliance

To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification mandates, and any other applicable regulations. Where legally required, we may be obligated to share certain data with law enforcement or financial regulators.

4.4 Responsible Gaming

Behavioural and transaction data is used to identify patterns that may indicate problem gambling. This allows zt99 to offer timely support, enforce player-set limits, and intervene where necessary to promote responsible gaming. This use of data is in your direct interest as a player.

4.5 Customer Support

To respond to your queries, resolve disputes, process complaints, and improve our support quality. Communications data is retained for quality assurance purposes and may be reviewed by zt99's compliance team.

4.6 Platform Improvement

Aggregated and anonymised usage data helps us understand how players interact with the zt99 Platform, enabling us to improve game offerings, fix technical issues, and enhance the overall player experience.

4.7 Marketing Communications (Consent-Based Only)

If you have explicitly opted in to receive marketing communications, we may send you promotional offers, bonus announcements, and platform updates. You may withdraw consent at any time via your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you have entered into with zt99 (account management, payments, dispute resolution).
• Legal obligation: Processing required to comply with applicable AML, KYC, and regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given freely given, specific, and informed consent.

6 Sharing Your Data

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the zt99 Platform. These include identity verification providers, KYC/AML screening services, payment processors, cloud infrastructure providers, and customer support platforms. All third-party providers are contractually required to protect your data and may only process it for the specific purposes instructed by zt99.

6.2 Payment Partners

To process PKR deposits and withdrawals, we share necessary transaction data with payment partners including Easypaisa, JazzCash, Raast, SadaPay, and Pakistani banking institutions such as HBL, UBL, and MCB Bank. Each payment partner operates under its own privacy policy and applicable financial regulations.

6.3 Legal and Regulatory Disclosure

We may disclose your personal data to government authorities, law enforcement agencies, or financial regulators where required to do so by law, court order, or to protect the rights, safety, and property of zt99 or other players.

6.4 No Sale of Data

zt99 does not sell, rent, or transfer your personal data to third-party advertisers, data brokers, or unaffiliated marketing companies under any circumstances.

7 Payments & PKR Processing

All financial transactions on zt99 are denominated and settled in Pakistani Rupees (PKR). When you initiate a deposit via Easypaisa, JazzCash, or any other supported channel, the relevant payment provider may receive transaction metadata including the amount, timestamp, and a reference code generated by zt99's payment gateway. Your full banking credentials or wallet PINs are never transmitted to or stored by zt99 — these remain strictly between you and your payment provider.

For USDT transactions, conversion to PKR is performed at the prevailing exchange rate displayed at the time of your deposit. The converted PKR amount is what is credited to your zt99 account balance. USDT conversion transaction data is stored in accordance with the retention schedule set out in Section 10.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website to store preferences and session information. zt99 uses cookies and similar technologies (local storage, session tokens, device fingerprinting) to operate the Platform securely and efficiently.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. You cannot opt out of these without ceasing to use the Platform.
• Functional Cookies: Store your language preferences, display settings, and game layout choices to personalise your experience.
• Analytical Cookies: Allow us to understand aggregate usage patterns — which games are most popular, where players encounter errors, and how navigation flows can be improved. These use anonymised data only.
• Marketing Cookies: Used only if you have explicitly consented. These track whether you arrived via a promotional link, enabling us to attribute offers correctly.

8.3 Managing Your Cookie Preferences

You may manage non-essential cookie preferences via the cookie consent panel available on your first visit to zt99.bid. You can also adjust browser-level cookie settings at any time. Note that disabling certain functional cookies may impact your experience on the Platform.

9 Data Security

zt99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• TLS 1.2+ encryption for all data in transit between your device and zt99 servers
• AES-256 encryption for sensitive data stored at rest
• Bcrypt hashing for all account passwords — plaintext passwords are never stored
• Two-factor authentication (2FA) available and strongly recommended for all accounts
• Regular penetration testing and security audits by independent specialists
• Role-based access controls ensuring staff access only the data necessary for their role
• Automated anomaly detection and alerting for suspicious login or transaction activity

Despite our robust security practices, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, zt99 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

10 Data Retention

zt99 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable financial, regulatory, and legal obligations. Our standard retention schedule is as follows:

• Account and identity data: Retained for the duration of your account's active life plus a minimum of 5 years from account closure, as required for AML and financial recordkeeping compliance.
• Transaction records: Retained for a minimum of 7 years to satisfy financial audit requirements under applicable regulations.
• Support communications: Retained for 3 years from the date of the last interaction to enable dispute resolution and quality review.
• Marketing consent records: Retained for as long as you have an active marketing relationship with zt99, plus 2 years to demonstrate consent compliance.
• Technical / session logs: Retained for up to 12 months for security monitoring and fraud investigation purposes.

On expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis.

11 Your Rights

As a zt99 player, you hold the following rights over your personal data. To exercise any of these rights, contact us at [email protected] or via live chat with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond fully within 30 days.

12 Children's Privacy

The zt99 Platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect or process personal data relating to children under the age of 18. If you are a parent or guardian and believe that a minor has registered on zt99 or that their data has been collected, please contact us immediately at [email protected]. Upon verification, we will delete all data relating to that minor and permanently close the associated account.

13 Changes to This Privacy Policy

zt99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will notify you via a prominent notice on the Platform and, where appropriate, by email to your registered address. The updated Policy will display a revised "Last Updated" date at the top of this page.

Your continued use of the zt99 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may request account closure before the revised Policy takes effect.

We recommend that you review this Privacy Policy periodically to stay informed about how zt99 is protecting your information. Previous versions of this Policy are available upon request by contacting [email protected].

14 Contact & Complaints

If you have any questions, concerns, or complaints about how zt99 handles your personal data, or if you wish to exercise any of the rights described in Section 11, please contact us through one of the following channels:

• Live Chat: Available 24/7 from within your zt99 account dashboard — the fastest way to raise a data-related query.
• Email: [email protected] — use subject line "Privacy Request" or "Data Rights Request" for faster routing.
• Response Time: We acknowledge all privacy-related requests within 72 hours and provide a full response within 30 calendar days. Complex requests may take up to 60 days, in which case we will notify you of the extension.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.