zv999 Privacy Policy

1.1 For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal data is zv999, the operator of the online gaming platform accessible at zv999.onl. References to "zv999", "we", "us", or "our" throughout this policy refer to that entity in its capacity as data controller.

1.2 zv999 processes personal data in accordance with applicable data protection regulations and the requirements imposed by the international gaming regulatory framework under which it operates. Where zv999 engages third-party processors to handle personal data on its behalf, those processors are subject to binding contractual obligations that mirror the data protection standards set out in this policy.

1.3 If you have any questions, concerns, or requests relating to your personal data and how zv999 processes it, you may contact our data protection team by writing to the support address provided on the Platform. Our team will acknowledge your enquiry within 48 hours and aim to provide a substantive response within 30 calendar days.

2.1 zv999 collects and processes the following categories of personal data about players on the Platform:

2.2 zv999 does not knowingly collect sensitive personal data beyond what is strictly required for regulatory compliance purposes. Where the collection of sensitive data is required — for example, as part of responsible gaming assessments — this will be done with your explicit consent and will be clearly flagged at the point of collection.

3.1 Direct Collection. zv999 collects data directly from you when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account information.

3.2 Automated Collection. When you access the zv999 Platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, session duration, pages visited, and actions taken within the Platform. This data is collected regardless of whether you are a registered and logged-in player.

3.3 Third-Party Sources. In limited circumstances, zv999 may receive data about you from third-party sources including:

• Payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) confirming transaction details;
• Identity verification service providers used to conduct KYC checks;
• Fraud prevention and AML screening databases used to verify the legitimacy of account activity;
• Responsible gaming databases where a player has registered a self-exclusion with a recognised programme.

3.4 zv999 will always process data received from third-party sources in accordance with this Privacy Policy and applicable data protection regulations. Third-party sources used by zv999 are subject to their own privacy policies governing how they collect and share data.

4.1 zv999 processes your personal data only for defined, legitimate purposes. The primary purposes for which your data is processed are as follows:

• Account Management: To create, maintain, and administer your zv999 player account, including processing login authentication and account preference settings.
• Service Delivery: To provide access to the zv999 sportsbook, casino, slots, and all other Platform features; to process bets, calculate and credit winnings, and maintain accurate account balances.
• Financial Processing: To process deposit and withdrawal transactions via JazzCash, EasyPaisa, and other accepted payment methods in Pakistani Rupees.
• Regulatory Compliance: To fulfil obligations under applicable gaming regulations and anti-money laundering requirements, including KYC identity and age verification.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, match-fixing, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and identify players who may be at risk.
• Customer Support: To respond to support enquiries, resolve disputes, and maintain records of communications.
• Marketing Communications: To send you promotional offers and updates from zv999 where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve the zv999 Platform experience for all players.

5.1 zv999 processes personal data only where a valid legal basis exists for doing so. The legal bases upon which zv999 relies are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and zv999 — including account management, bet processing, and payment handling — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML transaction monitoring, and retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and analytical purposes is carried out on the basis of zv999's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and certain non-essential cookie activities is carried out on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to that withdrawal.

6.1 zv999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the limited circumstances described below:

• Payment Processors: Financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely to process deposits and withdrawals on your behalf. These providers are subject to their own privacy policies and regulatory obligations.
• KYC & Identity Verification Providers: Identity and verification documents are shared with contracted third-party KYC service providers used to conduct age and identity checks. These providers are contractually prohibited from using your data for any purpose other than verifying your identity for zv999.
• Gaming Software Providers: Limited account and session data may be shared with licensed game studios whose software is integrated into the zv999 Platform, solely to facilitate game provision and resolve technical disputes.
• Regulatory Authorities: zv999 is required to disclose personal data to gaming regulators, financial intelligence units, and law enforcement agencies where required by applicable law or court order.
• Fraud Prevention Databases: Where required for AML compliance or fraud prevention, zv999 may share data with recognised industry fraud prevention databases.

6.2 All third parties with whom zv999 shares personal data are required to handle that data in accordance with applicable data protection standards and the specific terms of their agreements with zv999. zv999 conducts due diligence on all third-party processors and reviews those arrangements periodically.

7.1 zv999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML regulatory requirements.
• Transaction and financial records: Retained for a minimum of five years following the date of the transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for the duration of the account relationship and for a minimum of five years following account closure.
• Support communications: Retained for a period of three years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Technical and usage data: Retained for a period of up to two years for analytical and security purposes, subject to earlier anonymisation where retention of identifiable data is no longer necessary.
• Marketing consent records: Retained for the duration of the consent period and for one year following withdrawal of consent, to demonstrate compliance.

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8.1 zv999 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL encryption on all data transmissions between your device and the zv999 Platform;
• Encryption of sensitive data fields — including passwords and financial identifiers — at rest in zv999 databases;
• Role-based access controls that restrict employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Multi-factor authentication options for player accounts, including Pakistani mobile number verification;
• Continuous monitoring of Platform systems for unusual activity or unauthorised access attempts;
• Incident response procedures that ensure prompt detection, investigation, and remediation of any data security incidents.

8.2 In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected players, zv999 will notify the relevant regulatory authorities within the timeframes required by applicable law and will inform affected players without undue delay.

8.3 While zv999 takes all reasonable measures to protect your personal data, no method of electronic transmission or storage is completely secure. Players are advised to protect their zv999 account by using a strong, unique password and enabling two-factor authentication.

9.1 As a player on the zv999 Platform, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of Access: You have the right to request a copy of the personal data that zv999 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that zv999 holds about you. You may update certain account information directly from your account settings at any time.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to any legal obligations that require zv999 to retain your data for a specified period.
• Right to Restriction: You have the right to request that zv999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, where you believe your rights and freedoms override those interests. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

9.2 To exercise any of the above rights, contact the zv999 data protection team via live chat on the Platform. zv999 will not charge a fee for handling data rights requests. Responses will be provided within 30 calendar days, subject to extension in complex cases where you will be notified promptly.

10.1 The zv999 Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, analyse Platform performance, and deliver relevant promotional content to logged-in players. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform — including session maintenance, login authentication, and security functions. These cookies cannot be disabled without affecting the functionality of the Platform.
• Functional Cookies: Used to remember your preferences — such as language settings and display options — to provide a more personalised experience on zv999.
• Analytical Cookies: Used to collect aggregated data about how players use the Platform, which pages are visited most frequently, and where technical issues occur. This data is used to improve Platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content to players based on their activity on the Platform. These cookies are only set with your consent.

10.2 You can manage your cookie preferences using the cookie settings panel accessible from the Platform footer. Withdrawing consent for non-essential cookies will not affect your ability to access the core features of zv999, but may limit the personalisation of your experience.

10.3 Most web browsers also allow you to control cookies through browser settings. Please note that disabling all cookies via your browser may prevent certain features of the zv999 Platform from functioning correctly.

11.1 The zv999 Platform is intended exclusively for adults aged 21 and above. zv999 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the KYC process, and any account found to belong to a person under the minimum age requirement will be closed immediately.

11.2 If zv999 becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted promptly and the account will be closed in accordance with zv999's responsible gaming procedures.

11.3 Parents and guardians are strongly advised to use parental control software to prevent minors from accessing online gaming platforms. If you believe that a minor has registered a zv999 account using your details or those of another adult, please contact our support team immediately via live chat so that prompt action can be taken.

12.1 zv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or the way in which zv999 processes personal data. The effective date at the top of this page will be updated whenever material changes are made.

12.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way in which your data is processed — zv999 will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

12.3 Continued use of the zv999 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you should discontinue use of the Platform and request account closure.

12.4 Previous versions of the zv999 Privacy Policy are available upon request from the support team. Players who registered their zv999 account prior to the current effective date remain bound by the updated policy from the date it is published.