Privacy Policy — zs999d

This Privacy Policy ("Policy") is published by zs999d ("Platform", "we", "us", "our") and governs the collection, use, storage, processing and disclosure of personal data relating to users ("User", "you", "your") of the zs999d website at https://zs999d.cam and all associated services.

zs999d is committed to protecting the privacy and personal data of all its users. We recognise that users across Pakistan — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — entrust us with sensitive personal and financial information, and we take that responsibility seriously.

By registering for an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should cease using the Platform and may request account closure in accordance with our Terms and Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means zs999d, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written agreement.
• "KYC" means Know Your Customer — the identity verification process required before full account functionality is available.
• "AML" means Anti-Money Laundering — the compliance framework that requires the Platform to monitor and report certain transaction activity.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.
• "Platform" means the zs999d website at https://zs999d.cam and all associated pages, features and services.

zs999d collects the following categories of personal data in connection with your registration and use of the Platform:

We do not intentionally collect special categories of sensitive personal data (such as health, biometric or racial data) unless specifically required by a regulatory or legal obligation applicable to the Platform.

zs999d collects personal data through the following channels:

• Direct Submission: Data you provide during account registration, KYC submission, deposit or withdrawal requests, support interactions and other voluntary submissions through the Platform.
• Automated Collection: Technical and usage data collected automatically when you interact with the Platform, including through server logs, session management systems and browser-level data.
• Cookies and Similar Technologies: Information gathered via cookies, local storage and similar technologies as described in Section 9 of this Policy.
• Third-Party Verification Providers: Data received from third-party identity verification, fraud prevention or KYC service providers used by the Platform to validate the information you submit.
• Payment Processors: Confirmation and transaction status data received from payment processing partners in connection with deposits and withdrawals. Payment references such as Easypaisa, JazzCash, Raast and bank transfers through institutions such as HBL, UBL, Meezan Bank and Bank Alfalah may involve data exchange limited to transaction confirmation. These providers do not endorse the Platform.

zs999d processes personal data only where a lawful basis for doing so exists. The following table sets out the primary purposes for which we process personal data and the applicable legal basis in each case:

• Account Registration and Management: Processing is necessary for the performance of the contract between you and zs999d (the Terms and Conditions).
• Identity Verification (KYC/AML): Processing is necessary to comply with legal obligations applicable to the operator, including anti-money laundering and counter-terrorism financing regulations in the license jurisdiction.
• Payment Processing: Processing is necessary for the performance of the contract and to fulfil our payment and reconciliation obligations.
• Fraud Prevention and Security: Processing is based on our legitimate interests in preventing fraud, protecting users and maintaining platform integrity.
• Responsible Gambling Monitoring: Processing is based on our legitimate interests and legal obligations to identify and respond to potential problem gambling behaviour.
• Customer Support: Processing is necessary for the performance of the contract and our legitimate interests in resolving disputes and improving service quality.
• Platform Analytics and Improvement: Processing is based on our legitimate interests in optimising the Platform for users, subject to your rights to object.
• Marketing Communications: Processing is based on your prior consent, which you may withdraw at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

zs999d does not sell, rent or trade your personal data. We may share personal data with third parties only in the following limited circumstances:

6.1 Service Providers and Data Processors

We engage third-party service providers to support Platform operations, including identity verification providers, payment processors, hosting infrastructure providers, fraud detection services and customer support tools. These providers act as Data Processors under written agreements and are permitted to process your data only in accordance with our instructions and this Policy.

6.2 Regulatory and Legal Obligations

We may disclose personal data to regulators, law enforcement agencies, courts or other governmental authorities where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, protect national security or comply with a court order.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Platform's operations, personal data held by zs999d may be transferred to the successor entity, subject to equivalent privacy protections.

6.4 Fraud Prevention Networks

Where required to protect the integrity of the Platform and the interests of legitimate users, we may share limited data with fraud prevention and AML compliance networks.

zs999d retains personal data for no longer than is necessary for the purposes for which it was collected, subject to legal and regulatory retention requirements. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship and for a period thereafter as required by applicable AML, KYC and financial compliance regulations in the operator's license jurisdiction.
• KYC and Identity Documents: Retained for the minimum period mandated by applicable anti-money laundering legislation, typically five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Retained in accordance with financial record-keeping obligations applicable in the license jurisdiction, typically a minimum of five (5) years.
• Support and Correspondence Records: Retained for a period sufficient to support dispute resolution and regulatory audit requirements, typically up to three (3) years from the date of last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus a further short period to document the withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data lifecycle procedures.

Subject to applicable law and any legal obligations that require us to retain certain data, you have the following rights in relation to your personal data held by zs999d:

To exercise any of these rights, please submit a written request to [email protected]. We aim to respond to all verified requests within 30 days. We may require identity verification before processing any rights request.

zs999d uses cookies and similar technologies to support core Platform functionality, improve user experience and monitor performance. The following categories of cookies may be in use:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, authentication and security. These cannot be disabled.
• Functional Cookies: Support enhanced functionality such as remembering your language preferences, display settings and session state.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, enabling us to identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and IP reputation scoring.

zs999d does not deploy third-party advertising or behavioural targeting cookies. You may manage or block non-essential cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform.

zs999d may store and process personal data on servers located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the laws applicable in the operator's license jurisdiction, we ensure that appropriate safeguards are in place. These may include:

• Standard contractual clauses approved by the relevant data protection authority.
• Binding data processing agreements with third-party processors.
• Adequacy decisions applicable to the destination country or region.

Pakistani users are advised that Pakistan's data protection framework may differ from international standards. zs999d applies data protection standards based on the requirements of the operator's license jurisdiction rather than any specific Pakistani regulation, and does not represent that its practices comply with any specific Pakistani data protection legislation.

zs999d implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between user devices and Platform servers.
• Encryption and access controls for sensitive data stored at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring.
• Incident response and data breach notification procedures in accordance with applicable regulatory requirements.
• Two-factor authentication options for user accounts.

The zs999d Platform is strictly intended for adults aged 18 years or older, or the higher minimum required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from individuals below the minimum eligible age.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

The zs999d Platform does not intentionally include links to third-party websites. Where reference is made to external services — such as payment provider names used as contextual payment references — these are mentioned for informational purposes only and do not constitute links, endorsements or affiliations.

If you navigate to any third-party website independently, zs999d accepts no responsibility for the privacy practices or data handling of such sites. Users should review the privacy policies of any third-party services they interact with independently.

zs999d reserves the right to amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered users by email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.

If you have any questions, concerns or complaints relating to this Privacy Policy, the way your personal data is handled, or if you wish to exercise any of your data rights, please contact the zs999d Data Privacy team:

Support Email (plain text — not a clickable link):

[email protected]

Please include in your message: your registered account username, the nature of your privacy request or complaint, and any supporting information. We aim to acknowledge all privacy-related requests within 48 hours and to resolve them within 30 calendar days of receiving full details.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the data protection authority or regulator applicable in the operator's license jurisdiction. zs999d does not represent that Pakistani data protection regulatory bodies have jurisdiction over this Platform.