At 999zc, your privacy is not an afterthought — it is a fundamental part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect from players in Pakistan, why we collect it, how it is stored and protected, and what rights you hold over your own information.
Six core principles that define the way 999zc handles every piece of data you share with us. Full legal detail is in the sections below.
All data transmitted between your device and 999zc servers is protected using industry-standard TLS encryption. Personal and financial information is stored using AES-256 encryption at rest. Your login credentials are hashed and never stored in plain text.
999zc does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Full stop. Data shared with trusted service partners is done strictly on a need-to-know basis under binding confidentiality agreements.
Every 999zc player has the right to access, correct, and delete their personal data. You may request a full copy of everything we hold on you, ask us to rectify inaccurate records, or initiate permanent account deletion — all at no cost.
999zc retains personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law and regulatory obligations. Account data is purged on a defined schedule following the closure of inactive accounts.
We collect only what is genuinely necessary to operate the 999zc platform, verify your identity, process payments in PKR, and comply with our regulatory obligations. We do not build advertising profiles or track your behaviour outside our platform.
In the unlikely event of a data security incident affecting your personal information, 999zc will notify affected players via their registered email address within 72 hours of becoming aware of the breach, in line with responsible disclosure standards.
999zc ("we", "us", "our", "the Company") operates the online gaming platform accessible at https://999zc.net and its associated mobile applications and subdomains (collectively, the "Platform"). 999zc is the data controller responsible for the personal information collected from users ("you", "your", "Player") who register, browse, or transact on the Platform.
999zc is primarily oriented toward players based in Pakistan, offering cricket betting, live casino games, slots, and specialty games. All financial transactions are conducted in Pakistani Rupees (PKR) via locally recognised payment channels including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast/1LINK, SadaPay, and NayaPay.
This Privacy Policy applies to all personal data processed by 999zc in connection with the Platform, regardless of whether you access it via desktop browser, mobile browser, or native application. It should be read alongside the 999zc Terms & Conditions and Responsible Gaming Policy.
If you have any questions about this Policy or about how 999zc handles your personal information, please contact our Data Protection Officer at the details provided in Section 14 of this document.
999zc collects personal data through several channels: directly from you when you register or use the Platform, automatically through your device and browser as you interact with our services, and in limited circumstances from trusted third-party sources for identity verification purposes. The categories of data we collect are set out below.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Provided by you during registration & KYC |
| Contact Data | Email address, Pakistani mobile number, city of residence (e.g., Karachi, Lahore, Islamabad) | Provided by you during registration |
| Financial Data | JazzCash / EasyPaisa account references, HBL / UBL / Meezan account details, deposit and withdrawal history in PKR | Provided by you; generated by Platform transactions |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatically collected |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interactions | Automatically collected |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Generated through your interactions with support |
| Verification Documents | Scanned copies of CNIC, utility bills, payment method ownership proofs | Provided by you during KYC verification |
Special Category Data: 999zc does not intentionally collect special category data (such as health information, religious beliefs, or political opinions). If you voluntarily disclose such information through support channels, it will be handled with the highest level of confidentiality and deleted once the relevant support matter is resolved.
999zc uses the personal data we collect strictly for defined and legitimate purposes. We do not use your data for purposes incompatible with those stated below without first obtaining your explicit consent.
999zc processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:
You may request details of the specific legal basis applied to any particular processing activity by contacting the 999zc Data Protection Officer at the address in Section 14.
999zc uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, remember your preferences, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The categories of cookies we deploy are described below.
You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the 999zc Platform. Note that disabling certain categories of cookies may affect the functionality and performance of the Platform.
999zc does not sell, rent, or commercially exploit your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
All third parties with whom 999zc shares personal data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was shared.
As an internationally licensed gaming platform, 999zc may process and store personal data on servers located outside Pakistan. Where data is transferred internationally, 999zc ensures that appropriate safeguards are in place to protect your personal information to a standard equivalent to that required under applicable data protection principles.
Safeguards we rely upon for international transfers include contractual protections in our agreements with third-party service providers, technical security controls (encryption in transit and at rest), and organisational measures (access controls, staff training, and incident response procedures).
If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact the 999zc Data Protection Officer at the details provided in Section 14.
999zc retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML regulatory requirements |
| Transaction Records (PKR) | 7 years from transaction date | Financial record-keeping obligations |
| KYC Documents | 5 years post-account closure | AML / CTF compliance |
| Support Communications | 3 years from last contact | Dispute resolution & quality review |
| Technical & Usage Logs | 13 months rolling | Security monitoring & fraud detection |
| Marketing Consent Records | Until consent withdrawn + 3 years | Evidence of lawful marketing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any identifiable individual.
As a 999zc player, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to the Data Protection Officer at the contact details in Section 14. 999zc will respond to all valid requests within 30 days.
999zc will not charge a fee for exercising any of the above rights in ordinary circumstances. However, if requests are manifestly unfounded or excessive (including repetitive requests), 999zc reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.
The 999zc Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain personal data from any person under the age of 21. The Platform employs age verification measures during registration and at key transaction points to enforce this restriction.
21+ Policy: If 999zc becomes aware that personal data has been collected from a person under 21 years of age without verified parental or guardian consent, we will take immediate steps to delete that data and close the relevant account. Any deposits made will be returned to the originating payment method after completing applicable verification checks.
Parents and guardians in Pakistan who believe their child may have registered on 999zc are urged to contact our support team immediately at the email address in Section 14. We will treat such matters with urgency and full confidentiality.
999zc implements a comprehensive, layered security framework designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key technical and organisational measures include:
Notwithstanding the above measures, no internet-based system can be guaranteed to be 100% secure. 999zc therefore encourages all players to use strong, unique passwords for their accounts and to enable any two-factor authentication features offered on the Platform.
The 999zc Platform may contain links to third-party websites or services — for example, links to game provider promotional pages or payment method information portals. These links are provided for convenience only. 999zc does not control and is not responsible for the privacy practices or content of any third-party website.
We strongly recommend that you review the privacy policy of any third-party website before providing any personal information. 999zc's Privacy Policy applies solely to data collected and processed through the 999zc Platform itself.
999zc reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or Platform functionality. The revised Policy will be published on this page with an updated effective date.
Where changes are material — for example, where we introduce a new processing purpose or a new category of data sharing — 999zc will notify registered players via their registered email address at least 14 days before the changes take effect. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.
We recommend bookmarking this page and reviewing it periodically. Archived versions of previous Privacy Policies are available upon request by contacting the Data Protection Officer.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 999zc processes your personal data, please contact our Data Protection Officer using the details below. All correspondence will be handled in strict confidence.
999zc Data Protection Officer
Email: [email protected]
Subject Line: Privacy / Data Protection Request
Response Time: Within 30 calendar days of receipt of a valid written request
Languages: English & Urdu
Support Hours: 24 hours a day, 7 days a week
If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution body designated under 999zc's international gaming licence.
Your data is protected, your deposits are secure, and your rights are respected. Experience cricket betting, live casino, and slots with full confidence that 999zc has your privacy covered.