zy99 Privacy Policy —
Your Data, Handled With Care

Introduction

zy99 ("we", "us", "our") operates the online casino and sports betting platform accessible at zy99.win. We take the privacy of our players seriously. This Privacy Policy describes the categories of personal information we collect from players in Pakistan, the purposes for which that information is processed, and the safeguards we have in place to protect it.

This policy applies to all personal data collected by zy99 through the platform, including data collected during account registration, identity verification (KYC), PKR transactions via Easypaisa, JazzCash, and other Pakistan payment methods, customer support interactions, and general use of the zy99 website and mobile interface.

If you have any questions about how zy99 handles your personal data, you may contact our team at any time. Contact details are provided in Section 14 of this policy.

Personal Data We Collect

zy99 collects the following categories of personal information from registered players:

How We Use Your Personal Data

zy99 uses the personal data described in Section 2 for the following purposes:

• Account Management: Creating, maintaining, and securing your zy99 player account. This includes password resets, login verification, and account suspension where required.
• Identity Verification (KYC): Verifying that you are the person you claim to be and that you meet the 18+ age requirement. This is a regulatory and responsible gaming obligation.
• Transaction Processing: Processing PKR deposits and withdrawals via your chosen Pakistan payment channel (Easypaisa, JazzCash, bank transfer, etc.) and maintaining accurate financial records of all account activity.
• Platform Personalisation: Tailoring game recommendations, lobby layout, and promotional communications to your usage patterns and stated preferences.
• Customer Support: Responding to queries, disputes, and account issues submitted via live chat or email.
• Fraud Prevention and AML Compliance: Monitoring account activity for patterns indicative of fraud, money laundering, or prohibited conduct as described in the zy99 Terms & Conditions.
• Responsible Gaming: Tracking the use of responsible gaming tools you activate (deposit limits, self-exclusion, session timers) and monitoring for signs of problem gaming behaviour so that appropriate intervention can be offered.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, fix bugs, and develop new features.
• Legal and Regulatory Compliance: Retaining records as required by applicable financial services, anti-money laundering, and data protection obligations.
• Marketing: Sending you promotional offers, bonus notifications, and news about new zy99 products via your registered mobile number or email address, where you have consented to receive such communications. See Section 12 for opt-out options.

Legal Basis for Processing

zy99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and zy99 — i.e., to operate your account, process transactions, and deliver the services described in the Terms & Conditions.
• Legal Obligation: Processing required to comply with legal and regulatory requirements, including Anti-Money Laundering (AML) rules, Know Your Customer (KYC) obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing that is necessary for zy99's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Where zy99 has obtained your explicit consent for specific processing activities, such as sending direct marketing communications. You may withdraw consent at any time by contacting zy99 support or using the opt-out mechanism in any marketing message.

Data Sharing & Third Parties

zy99 does not sell, rent, or trade your personal data to third-party commercial organisations. However, zy99 may share your personal data with the following categories of third party for the purposes described in this policy:

• Payment Service Providers: Pakistan mobile wallet operators (Easypaisa, JazzCash, SadaPay, Raast) and banks (HBL, UBL, MCB Bank, Bank Alfalah, Meezan Bank) for the purpose of processing PKR deposits and withdrawals to and from your zy99 account.
• Identity Verification Services: Third-party KYC and identity verification providers engaged by zy99 to perform regulatory-compliant age and identity checks on new and existing players.
• Technology and Infrastructure Providers: Cloud hosting providers, cybersecurity firms, and software vendors who provide the technical infrastructure that powers the zy99 platform. All such providers are bound by data processing agreements and are not permitted to use player data for any purpose other than delivering services to zy99.
• Game Content Providers: Game studios and content licensors whose games appear in the zy99 casino lobby. These providers may receive anonymised or aggregated gameplay data for game performance purposes. They do not receive individually identifiable player financial data.
• Regulatory and Law Enforcement Authorities: Where zy99 is legally required to disclose personal data to government bodies, regulators, law enforcement agencies, or courts, zy99 will comply with such obligations. zy99 will disclose only the minimum information required and, where legally permissible, will notify the affected player of the disclosure.

International Data Transfers

The zy99 platform and its associated infrastructure may involve the processing of data in locations outside Pakistan. Where personal data is transferred to third-party service providers operating in other countries, zy99 takes reasonable steps to ensure that appropriate contractual safeguards are in place to protect your personal data to a standard at least equivalent to that required under applicable data protection principles.

By using the zy99 platform, you acknowledge and consent to the potential transfer of your personal data to locations outside Pakistan where such transfers are necessary for the delivery of zy99 services, subject to the safeguards described in this section.

Data Retention

zy99 retains personal data for as long as is necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by applicable law. The general retention principles zy99 applies are as follows:

• Active Accounts: Personal data and transaction records are retained for the duration of your account's active status and for a minimum period after account closure as required by applicable financial and AML record-keeping obligations.
• KYC Documentation: Identity verification documents (e.g., CNIC copies) are retained for a minimum period as required under applicable AML regulations, beginning from the date of account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Chat transcripts and email correspondence are retained for a period sufficient to resolve any related disputes or complaints and to comply with applicable consumer rights obligations.
• Technical and Usage Data: Log data and usage analytics are retained in aggregated or anonymised form for platform improvement purposes and may be retained indefinitely in that form.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual.

Cookies & Tracking Technologies

zy99 uses cookies and similar tracking technologies (including pixel tags and local storage) on its platform for the following purposes:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged into your zy99 account and cookies that remember your language and layout preferences. These cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to understand how players navigate and use the zy99 platform. This data is used in aggregate form to identify performance issues and improve the player experience.
• Responsible Gaming Cookies: Used to support responsible gaming features such as session duration tracking and pop-up reminders, which rely on your browser retaining certain preference data between sessions.
• Marketing Cookies: Where you have consented, zy99 may use cookies to track which promotional content you have engaged with, in order to avoid showing you the same offer repeatedly and to measure the effectiveness of promotional campaigns.

Your Rights Over Your Personal Data

As a zy99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact zy99 support using the details in Section 14.

• Right of Access: You have the right to request confirmation of whether zy99 holds personal data about you and, if so, to receive a copy of that data along with information about how it is being used.
• Right to Rectification: If any personal data zy99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly from your zy99 account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations. zy99 may be required to retain certain data (particularly financial and AML records) regardless of a deletion request.
• Right to Restrict Processing: You may request that zy99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where zy99 relies on legitimate interests as its legal basis, subject to zy99's ability to demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

zy99 will respond to data rights requests within a reasonable timeframe and, in any event, within the period required by applicable data protection obligations. In some cases, zy99 may need to verify your identity before processing a request.

Children's Privacy — 18+ Only

zy99 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. If zy99 discovers that personal data has been collected from a person under 18 years of age, that data will be deleted as promptly as possible and the associated account will be closed.

zy99 employs age verification checks during the account registration process and may request additional documentary evidence of age (such as a CNIC or equivalent identity document) at any point during a player's account lifecycle where zy99 has reasonable grounds to question whether the player meets the 18+ eligibility requirement.

Security Measures

zy99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and the zy99 platform is encrypted using 256-bit TLS (Transport Layer Security).
• Account passwords are stored in hashed form using industry-standard cryptographic hashing. Plain-text passwords are never retained by zy99.
• Two-step mobile verification is available for all zy99 accounts and is strongly recommended to protect against unauthorised login attempts.
• Access to player data within zy99's internal systems is restricted on a need-to-know basis. Staff members are permitted to access only the data necessary to perform their job functions.
• zy99 conducts regular internal security assessments of its platform and data processing infrastructure.
• Third-party vendors who process player data on behalf of zy99 are subject to data processing agreements that require them to maintain security standards at least equivalent to those described in this policy.

Despite these measures, no method of data transmission over the internet or data storage system is entirely infallible. zy99 cannot guarantee absolute data security, but we are committed to maintaining robust protections and responding promptly to any identified security incidents.

Marketing Communications

Where you have consented to receive marketing communications from zy99, we may contact you via your registered Pakistan mobile number (SMS) or email address with information about:

• New games added to the zy99 casino lobby (including new Jackpot Slots and Ganesha Gold titles).
• Upcoming promotions, deposit bonuses, and loyalty rewards available on your account.
• Major cricket events and upcoming HBL PSL betting markets on zy99.
• Platform updates and new features.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any zy99 promotional email.
• Replying "STOP" to any zy99 promotional SMS.
• Contacting zy99 support directly via live chat or email to request removal from marketing lists.

Opting out of marketing communications does not affect transactional communications such as deposit confirmation messages, withdrawal processing notifications, or account security alerts, which zy99 will continue to send regardless of your marketing preferences.

Changes to This Privacy Policy

zy99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When material changes are made, zy99 will notify registered players via their registered email address or mobile number, or by displaying a prominent notice on the platform.

The "Last Updated" date at the top of this policy will always reflect when the most recent revision was made. Continued use of the zy99 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

Contact zy99 — Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data zy99 holds about you, please get in touch with our team through the following channels:

• Live Chat: Available 24/7 directly from your zy99 account dashboard. Live chat is the fastest way to reach us for most queries.
• Email: support@zy99.win — displayed as plain text only, not a clickable link. For formal privacy requests, please email with the subject line "Privacy Request" and include your registered mobile number and full name so we can identify your account.

zy99's support team is available around the clock and operates in English. We aim to acknowledge all formal privacy requests within two business days and to provide a full response within a reasonable period thereafter.

For questions specifically relating to responsible gaming tools, deposit limits, or self-exclusion requests, please visit the Responsible Gaming page for dedicated guidance.

For a full explanation of the rules governing your use of the zy99 platform, including account terms, financial transaction rules, and prohibited conduct, please refer to the Terms & Conditions.