Who We Are — The za9999 Data Controller
This Privacy Policy applies to za9999, the online gaming platform accessible at za9999.biz ("za9999", "we", "us", "our"). Za9999 is the data controller responsible for all personal data collected through this platform — meaning we determine the purposes and means of processing your personal information.
Za9999 was built specifically for the Pakistani market and all of our data handling decisions are made with our Pakistani players in mind. We understand that trust is essential in online gaming — you are sharing financial information, identity documents and behavioural data with us, and we take that responsibility seriously.
This policy covers all data collected through the za9999 website, any mobile browser version of the platform, customer support communications (live chat, email, SMS), and any marketing communications you may receive from us. It does not cover third-party websites or services that may be linked from our platform.
Contact for privacy queries: All data protection enquiries, data subject requests and privacy complaints should be directed to support@za9999.biz. Please mark the subject line with "Privacy Request" so the relevant team receives it promptly.
What Data za9999 Collects and Why
Za9999 collects only the data that is genuinely necessary for operating a secure, compliant and functional online gaming platform. We do not collect data speculatively or build profiles beyond what is needed to provide you with a good, safe gaming experience.
The categories of data we collect are as follows:
Registration and Identity Data
- Full legal name as it appears on your CNIC or passport
- Date of birth (required for mandatory age verification under 18+ policy)
- Pakistani mobile number (used as primary account identifier and for OTP verification)
- Email address (used for account notifications and support communications)
- CNIC number or passport number (required for KYC compliance)
- Residential address (required for full account verification)
Financial and Transaction Data
- Easypaisa or JazzCash wallet numbers used for deposits and withdrawals
- NayaPay / SadaPay account details where used
- Bank account details for IBFT transfers (account title, IBAN)
- Masked card numbers for Visa/Mastercard transactions (full card numbers are never stored by za9999 — these pass through PCI-DSS compliant processors)
- Deposit and withdrawal history — amounts, dates, methods and transaction references
- Wagering history — games played, bet amounts, outcomes, bonus usage
Technical and Usage Data
- IP address and approximate geographic location (city-level, derived from IP)
- Device type and operating system (mobile, browser version)
- Session timestamps and duration
- Pages and game categories visited, frequency of access
- Referral source (how you found za9999 — if applicable)
Support and Communication Data
- Content of live chat transcripts and email exchanges with za9999 support
- Any documents you submit as part of KYC verification (CNIC copies, utility bills, bank statements)
- Complaint or dispute records
We do not collect: Social media profiles, device contacts, camera access, location GPS data, or any data from minors. Za9999 does not use any dark-pattern mechanisms to extract data beyond what you consciously provide during registration and account use.
How za9999 Uses Your Personal Data
Every use of your data at za9999 is tied to a specific, legitimate purpose. We do not use your data in ways you would not reasonably expect given the context of an online gaming platform.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Name, mobile, email, DOB | Contract performance |
| Age and identity verification (KYC) | CNIC, DOB, address | Legal obligation |
| Processing deposits and withdrawals | Payment method details, transaction history | Contract performance |
| Fraud prevention and security | IP, device, transaction patterns | Legitimate interest |
| Bonus and promotion management | Wagering history, account activity | Contract performance |
| Responsible gaming monitoring | Session data, deposit frequency, loss patterns | Legal obligation + legitimate interest |
| Customer support | All relevant account data, chat transcripts | Contract performance |
| Platform improvement and analytics | Anonymised usage and session data | Legitimate interest |
| Marketing communications (opt-in only) | Email / mobile number | Consent |
| Regulatory and legal compliance | Full account and transaction records | Legal obligation |
Za9999 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human review. Our fraud detection systems may flag accounts for review, but all consequential decisions (account suspension, withdrawal holds) involve a human review step before action is taken.
Legal Basis for Processing Your Data
Za9999 processes personal data under the following legal bases, depending on the specific purpose:
- Contract performance: Most core data processing — account creation, payment handling, game operation, bonus management — is necessary to deliver the services you signed up for. Without this processing, we cannot provide the za9999 platform to you.
- Legal obligation: KYC verification, age checks, anti-money-laundering (AML) monitoring, transaction record-keeping and responsible gaming obligations are required by applicable regulations. Za9999 cannot opt out of these processing activities regardless of player preference.
- Legitimate interests: Fraud detection, platform security, technical improvement and some responsible gaming monitoring activities are justified by za9999's legitimate interest in running a secure, fair platform. We balance this against your privacy rights and only use this basis where the data use would not surprise a reasonable player.
- Consent: Marketing communications — including promotional emails, SMS notifications about new offers and seasonal bonus alerts — are sent only to players who have actively opted in. You can withdraw consent at any time by updating your communication preferences in your za9999 account settings or by contacting support.
Who za9999 Shares Your Data With
Za9999 does not sell your personal data to third parties. We do not share your data for external marketing purposes. Sharing is limited to the following categories of recipients, each with a specific, documented purpose:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and our bank transfer and card processing partners receive the minimum data necessary to process your specific transaction. These processors operate under their own privacy policies and applicable Pakistani financial regulations.
- KYC and identity verification providers: When document verification is conducted, your CNIC image and associated details may be shared with a third-party identity verification service operating under strict data processing agreements with za9999.
- Fraud prevention and security services: Anonymised or pseudonymised data may be shared with industry-standard fraud detection services to identify and prevent abusive patterns. These services do not receive your full identity data.
- Game providers: For third-party game titles on the za9999 platform, the game provider may receive session data (bets placed, outcomes, timestamps) under our supplier agreements. Game providers do not receive your identity or payment data.
- Legal and regulatory authorities: Za9999 will disclose personal data to Pakistani law enforcement, financial intelligence units or regulatory bodies when legally required to do so by a valid legal order. We will inform you of any such disclosure where we are legally permitted to do so.
- Professional advisers: Auditors, legal counsel and similar professional service providers may access limited data under strict confidentiality obligations where necessary for their engagement with za9999.
No data sold, no advertising networks: Za9999 does not share your data with advertising networks, data brokers or analytics companies for the purpose of targeting you with advertising elsewhere on the internet. Your gaming behaviour on za9999 stays with za9999.
Cookies and Tracking Technologies
Za9999 uses cookies and similar technologies on our web platform to provide a functional, secure and improved experience. Here is a clear breakdown of what we use and why:
| Cookie Type | Purpose | Required | Duration |
|---|---|---|---|
| Session management, login state, security tokens, CSRF protection | Yes — cannot be disabled | Session / 30 days | |
| Fraud detection signals, device fingerprint for security | Yes — security requirement | 90 days | |
| Anonymised page view and session analytics to improve platform performance | Optional — default on, can be disabled | 12 months | |
| Game usage patterns — which categories are most visited (anonymised) | Optional | 6 months | |
| Storing your display preferences (language, layout settings) | Optional | 12 months |
Za9999 does not use third-party advertising cookies or tracking pixels from social media platforms. We do not participate in cross-site tracking for advertising purposes.
You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the za9999 platform from functioning correctly — you will not be able to log in or process transactions without them. Disabling analytics cookies will not affect your ability to use any za9999 feature.
How za9999 Protects Your Data
Data security is not something za9999 treats as a tick-box exercise. Our platform handles financial transactions and identity documents for hundreds of thousands of Pakistani players — that creates a genuine responsibility to protect that data properly.
Our security measures include:
- Transport encryption: All data transmitted between your device and the za9999 servers is encrypted using TLS 1.2 or TLS 1.3 (256-bit SSL). The padlock in your browser confirms this is active on every page of the platform.
- Password security: Player passwords are stored using strong one-way hashing algorithms. Za9999 staff cannot view or retrieve any player's password. The only way to regain access to a forgotten password is through the reset process, which verifies your identity via your registered mobile number.
- Payment data isolation: Full card details are never stored on za9999 servers. Card transactions pass through PCI-DSS Level 1 compliant payment processors. Za9999 retains only masked card references (last four digits and card type) for transaction records.
- Access controls: Internal access to player data is restricted on a strict need-to-know basis. Support agents see only the information necessary to resolve your specific query. Full identity documents are accessible only by the compliance team and only during active verification reviews.
- Security audits: Za9999 conducts periodic technical security reviews, including penetration testing of the platform's external-facing infrastructure.
- Incident response: In the event of a data breach that poses a risk to players, za9999 will notify affected players via their registered mobile number or email within 72 hours of confirming the breach, consistent with good practice.
Your role in security: Keep your za9999 password unique and do not share it with anyone. Za9999 will never ask for your full password by any communication channel. Use the account's two-factor authentication option (SMS OTP) for additional protection.
Data Retention — How Long We Keep Your Information
Za9999 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
- Active account data: Retained for the full duration of your account being open and active at za9999.
- Transaction and wagering records: Retained for a minimum of 5 years from the date of the transaction. This is a standard requirement for financial record-keeping compliance and AML obligations.
- KYC verification documents: Retained for 5 years from account closure or the date of the most recent transaction, whichever is later. After this period, documents are securely deleted.
- Support communications: Live chat transcripts and email exchanges retained for 2 years from the date of the interaction, to support dispute resolution and quality review.
- Closed account data: Following voluntary account closure, za9999 retains the minimum data necessary to meet legal obligations for the required statutory period, after which all personal data is deleted or anonymised.
- Marketing consent records: Retained for as long as your consent remains active. If you withdraw marketing consent, your preference is recorded and respected immediately — though the record of the withdrawal itself is retained for compliance purposes.
Right to deletion: You can request deletion of your personal data by contacting support@za9999.biz. Where deletion is not possible due to legal retention requirements, za9999 will restrict processing of your data to only what is legally required and confirm what data must be retained and for how long.
Your Data Rights as a za9999 Player
As a za9999 player, you have the following rights with respect to your personal data. We are committed to honouring these rights promptly and without unnecessary friction.
Right of Access
Request a full copy of all personal data za9999 holds about you. We will provide this within 30 days of a verified request.
Right to Rectification
If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. Most account details can be updated directly in your za9999 profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose and no legal retention obligation applies.
Right to Restriction
Ask za9999 to limit how your data is processed — for example while a dispute about accuracy is being resolved.
Right to Portability
Receive a structured, machine-readable copy of data you provided to za9999 — such as your account and transaction history — to transfer elsewhere.
Right to Object
Object to processing based on legitimate interests — including profiling for responsible gaming monitoring — where you have grounds relating to your particular situation.
To exercise any of these rights, contact support@za9999.biz with the subject line "Data Rights Request". Za9999 may ask you to verify your identity before processing the request. We aim to respond within 30 days. Complex requests may take up to 60 days — we will inform you if this applies.
Za9999 will not charge a fee for standard data rights requests. Repeated, manifestly unfounded or excessive requests may be subject to a reasonable administrative fee or refusal, with an explanation provided.
Policy Updates and How to Contact za9999
Za9999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features or applicable regulations. When updates are made:
- The "Last Updated" date at the top of this page will be revised
- For minor or clarificatory changes, the updated version is published on this page without direct notification
- For material changes that significantly affect your rights or how your data is used, za9999 will send advance notification to your registered mobile number or email address at least 7 days before the changes take effect
Continued use of the za9999 platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the changes. If you have concerns about a change, contact our privacy team before the effective date — we are happy to explain any specific change in plain terms.
For all privacy-related queries, requests and complaints:
- Email: support@za9999.biz (subject line: "Privacy Request")
- Live Chat: Available 24/7 in your za9999 account dashboard
- Response time: We aim to acknowledge all privacy contacts within 24 hours and resolve them within 30 days
Policy version: 2.4 | Effective date: 1 July 2025 | Platform: za9999.biz