ZC99 Privacy Policy — How We Handle Your Personal Data in Pakistan

ZC99 is an online gaming and sports betting platform operated at zc99.ws, serving players in Pakistan. When this Privacy Policy refers to "ZC99," "we," "us," or "our," it means the ZC99 platform and the team operating it. ZC99 is the data controller responsible for the personal information collected through the zc99.ws website and all associated services.

ZC99's primary contact for all privacy-related queries, data access requests, and complaints is privacy@zc99.ws. We are based in Pakistan and operate exclusively for the Pakistani market. All player data collected through ZC99 is processed in accordance with this Privacy Policy.

By creating an account on ZC99 or continuing to use our platform after being notified of an update to this Privacy Policy, you confirm that you have read and understood how your personal data is collected and used as described in this document. If you have any questions before registering, please contact us at the email address above before proceeding.

ZC99 collects personal data in two main categories: information you provide directly to us, and information collected automatically through your use of the platform. Here is a detailed breakdown:

ZC99 does not collect sensitive personal data such as biometric information, health records, or religious beliefs. We collect only what is necessary to operate the platform, verify your identity, process payments, and comply with applicable regulations.

ZC99 collects your personal data through several channels depending on how you interact with the platform:

• Direct registration: When you create a ZC99 account, you provide your name, mobile number, date of birth, and create a password. This is the core identity dataset that forms the basis of your account.
• Identity verification: When you request your first withdrawal above the standard threshold, ZC99 may request a copy of your CNIC and a supporting document. These documents are provided directly by you and stored securely.
• Payment processing: When you deposit or withdraw on ZC99 via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, payment reference data is generated and recorded to link your transaction to your account. ZC99 does not store full card numbers — only masked references.
• Automated platform tracking: ZC99's systems automatically log your IP address, device details, session start and end times, pages accessed, and games played. This data is used for platform security, fraud detection, and improving the ZC99 experience.
• Cookies and similar technologies: ZC99 uses cookies on zc99.ws as described in Section 7. These collect technical and behavioural data automatically when you visit or use the platform.
• Customer support interactions: When you contact ZC99 via live chat or email, the content of those communications is stored and associated with your account record for quality assurance and dispute resolution purposes.

Every piece of personal data ZC99 collects is collected for a specific purpose. We do not collect data speculatively or "just in case." Here is what each category of data is used for on ZC99:

• Account operation: Your name, mobile number, and login credentials are used to create and maintain your ZC99 player account and to authenticate you when you log in.
• Age and identity verification: ZC99 is legally and ethically obligated to ensure all players are 18 or older. Identity data is used to verify this requirement and to confirm that your account belongs to a real person in Pakistan.
• Payment processing: Financial data is used exclusively to process your deposits and withdrawals. ZC99 requires this information to route PKR to and from your Easypaisa, JazzCash, or bank account correctly and securely.
• Fraud and security monitoring: Technical and behavioural data — IP addresses, device fingerprints, login patterns — are analysed by ZC99's security systems to detect and prevent unauthorised account access, duplicate account creation, and financial fraud.
• Platform improvement: Aggregated and anonymised behavioural data helps ZC99 understand how players use the platform so we can improve game navigation, betting interfaces, payment flows, and customer support responsiveness.
• Responsible gaming compliance: Data about your deposit history, session duration, and gambling behaviour is used by ZC99's responsible gaming systems to identify patterns that may indicate problem gambling and to ensure our responsible gaming tools are working effectively.
• Legal compliance: ZC99 may use your personal data where required to comply with applicable Pakistani law, respond to lawful requests from law enforcement, or to exercise or defend legal claims.
• Service communications: ZC99 uses your mobile number or email to send you transactional notifications — deposit confirmations, withdrawal updates, security alerts. ZC99 does not send unsolicited marketing without your explicit consent.

ZC99 does not sell your personal data to anyone. We share data with third parties only where necessary to operate the platform and only with parties who are contractually bound to handle it securely. The categories of recipients are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard network processors receive the transaction data necessary to complete your deposits and withdrawals. These parties receive only what is needed to process each specific transaction.
• Identity verification services: For account verification, ZC99 may use a third-party identity check service that receives your name, CNIC reference, and date of birth to confirm your identity. This service is bound by data processing agreements with ZC99 and may not use your data for any other purpose.
• Game providers: Third-party game developers whose titles appear on ZC99 — such as crash game providers — receive anonymised session data necessary to operate their games within ZC99's platform. Your real name and payment details are never shared with game providers.
• Fraud detection services: ZC99 uses specialised fraud prevention tools that analyse technical data (IP address, device fingerprint, login patterns) to flag suspicious account activity. These services process data on ZC99's behalf and are bound by strict data handling contracts.
• Customer support infrastructure: ZC99's live chat and ticketing system stores support interaction records. The provider of this infrastructure processes data as a processor on ZC99's behalf and does not have independent access rights to player data.
• Law enforcement and regulatory authorities: ZC99 will disclose personal data to Pakistani law enforcement or regulatory bodies where legally required to do so, where there is a valid legal process, or where ZC99 believes disclosure is necessary to prevent serious harm.

All third parties who process data on ZC99's behalf are subject to data processing agreements requiring them to maintain confidentiality, implement appropriate security measures, and use your data only for the specific purpose for which it was shared.

Financial data deserves specific attention given its sensitivity. When you make a deposit or withdrawal on ZC99, here is exactly how your financial information is handled:

• ZC99 does not store your full Easypaisa or JazzCash mobile number in plain text — it is masked and encrypted after use in transaction processing.
• ZC99 does not store full bank card numbers. When you pay by Visa or Mastercard, your card details are processed directly by the card payment gateway. ZC99 receives only a masked token (e.g., last 4 digits and card type) for your records.
• Your complete bank account number for IBFT transfers is stored in encrypted form and used only for processing the specific withdrawal you requested.
• All financial data transmitted between your device and ZC99's servers is encrypted using TLS 1.3 protocol.
• ZC99 maintains a full transaction history for your account — all deposits, withdrawals, bets, and game results — which you can view from your ZC99 account dashboard at any time. This history is retained for seven years to comply with financial record-keeping requirements.

ZC99 uses cookies and similar technologies on zc99.ws to make the platform work correctly, keep you logged in between visits, and understand how players use the site. Here are the types of cookies ZC99 uses:

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent ZC99 from functioning correctly. Blocking optional cookies will not prevent access to the platform but may affect your personalised experience. ZC99 does not use third-party advertising cookies or cross-site tracking cookies.

ZC99 implements layered technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Specific security measures in place include:

• Encryption in transit: All data transmitted between your device and ZC99's servers uses TLS 1.3 encryption. This means your login credentials, payment data, and personal information cannot be read by third parties intercepting the connection.
• Encryption at rest: Sensitive personal data — including CNIC references, financial account details, and identity verification documents — is stored in AES-256 encrypted form in ZC99's databases. Even in the unlikely event of a database breach, this data cannot be read in plain text.
• Access controls: Access to player personal data within ZC99's systems is restricted on a strict need-to-know basis. Only staff whose role requires access to specific data categories are authorised to view it. All access is logged and audited.
• Two-factor authentication: ZC99 recommends and supports two-factor authentication for player accounts and requires it for administrative access to ZC99's internal systems.
• Regular security review: ZC99 conducts periodic reviews of its data security practices, including penetration testing, to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach affecting your personal information, ZC99 will notify affected players promptly via the contact details on their ZC99 account, describing what data was affected and what steps ZC99 has taken in response.

ZC99 retains personal data only for as long as necessary for the purposes described in this Privacy Policy. Specific retention periods are:

• Account and identity data: Retained for the duration of your ZC99 account and for five years after account closure. This is required for identity verification compliance and to respond to any retroactive legal or regulatory inquiries.
• Transaction and financial records: Retained for seven years from the date of each transaction. This is standard financial record-keeping practice and is required to resolve payment disputes and comply with financial regulations.
• Customer support communications: Retained for three years from the date of the last communication in a support thread. This allows ZC99 to reference prior interactions when handling related follow-up queries.
• Technical and security logs: IP address logs and session data are retained for 12 months. Fraud detection data associated with confirmed fraudulent activity is retained for longer to prevent repeat abuse.
• Responsible gaming records: Self-exclusion records and deposit limit history are retained for the duration of the exclusion plus five years, to prevent circumvention of self-exclusion by re-registration.

When the applicable retention period expires, ZC99 securely deletes or anonymises the data. Anonymised data — where you cannot be identified — may be retained indefinitely for aggregate statistical analysis of platform usage patterns.

ZC99 respects your rights over your personal data. As a ZC99 player based in Pakistan, you have the following rights, which you can exercise by contacting privacy@zc99.ws:

ZC99 is an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires date of birth and ZC99 actively screens for underage registrations. If ZC99 discovers that a player account has been created by someone under 18, the account will be immediately closed and any deposited funds will be returned to the original payment method.

If you are a parent or guardian and you believe your child has created a ZC99 account, please contact us immediately at support@zc99.ws. We will investigate and act within 24 hours of receiving a verified complaint of this nature. ZC99 cooperates fully with parental requests in cases of underage account creation.

The ZC99 platform integrates third-party game providers, payment processors, and analytics services as described in this Privacy Policy. Each of these third parties operates its own privacy practices. ZC99 has reviewed and approved these practices for compatibility with our own standards before integration, but ZC99 is not responsible for the independent privacy practices of third-party systems beyond what is covered by our data processing agreements with them.

ZC99's website does not contain links to external websites for commercial or informational purposes. All links on zc99.ws lead to internal ZC99 pages. If you navigate away from ZC99 to a different website through a bookmark or typed URL, ZC99's Privacy Policy does not apply to that external site and ZC99 accepts no responsibility for the privacy practices of third-party websites.

ZC99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make changes, we will update the "last updated" date at the top of this page. For material changes that significantly affect how your personal data is used, ZC99 will notify you via email to the address registered on your account and/or via an in-platform notification at least 7 days before the changes take effect.

Your continued use of ZC99 after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. We recommend bookmarking this page and reviewing it periodically — particularly if you receive a notification of changes from ZC99. If you have questions about any update, please contact privacy@zc99.ws before the effective date.

For all privacy-related enquiries — including data access requests, correction requests, deletion requests, and questions about how ZC99 handles your personal information — contact us at:

If you believe ZC99 has not handled your personal data in accordance with this Privacy Policy and your concern is not resolved through our standard support channels, you may escalate by emailing privacy@zc99.ws with the subject line "Privacy Complaint — [Your Account Username]." ZC99 will treat escalated privacy complaints as high priority and respond with a full written explanation of the action taken or reasons for not acting within 10 business days.

ZC99 is committed to resolving all privacy concerns directly with affected players. We take every complaint seriously because trust is the foundation of everything we do at ZC99.