zs998 Privacy
Policy

This Privacy Policy ("Policy") is issued by zs998 ("zs998", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the zs998 online casino and sports betting platform accessible at zs998.app (the "Platform").

This Policy governs personal data relating to all registered players, prospective players who browse the Platform without registering, and any individual who contacts zs998 for support or general enquiries. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read alongside the zs998 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of applicable data protection law, zs998 acts as the data controller in respect of personal data collected from players and visitors to the Platform. As data controller, zs998 determines the purposes and means by which your personal data is processed.

zs998 is operated under an international gaming licence. Where zs998 engages third-party service providers to process personal data on its behalf — including payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as data processors under written agreements that bind them to process your data only on zs998's instructions and in accordance with applicable data protection standards.

zs998 collects personal data across several categories, depending on your interaction with the Platform. The following table provides a comprehensive overview of the categories of data collected and their primary purpose:

zs998 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health data is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling request.

zs998 collects personal data through the following means:

• Direct interactions: Data you provide when you register an Account, complete KYC verification, make deposits or withdrawals, contact our support team, or respond to surveys and promotions.
• Automated technologies: As you navigate the Platform, we automatically collect technical data including IP address, device identifiers, browser information, and session activity via cookies, server logs, and similar tracking technologies. Refer to Section 8 for full details on our cookie practices.
• Third-party payment providers: When you transact via EasyPaisa, JazzCash, HBL, UBL, or Meezan Bank, we receive transaction confirmation data from those providers, including transaction reference numbers and timestamps. We do not receive your full payment credentials directly.
• KYC and identity verification providers: Where zs998 uses a third-party identity verification service to validate your CNIC or passport, that provider shares the result of the verification check with us. The raw document images may be processed by the provider under their own data handling policies in addition to ours.
• Fraud prevention and security services: zs998 may receive data from third-party risk and fraud screening services to help identify and prevent fraudulent activity on the Platform.

zs998 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis in each case:

zs998 does not sell, rent, or trade your personal data to any third party for commercial gain. Your data may be shared only in the following limited circumstances:

• Payment processors: Your financial data is shared with EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank solely for the purpose of processing your deposits and withdrawals. These institutions are subject to their own regulatory obligations and privacy frameworks.
• KYC and identity verification providers: Identity documents submitted for verification may be processed by our contracted KYC service providers, who act as data processors under written agreements with zs998.
• Fraud prevention and risk services: We may share technical and identity data with specialist fraud screening services to detect and prevent abuse of the Platform.
• Cloud infrastructure and hosting providers: Personal data is stored on secure cloud servers provided by contracted infrastructure partners. These partners process data only on zs998's instructions.
• Customer support platforms: Support ticket and live chat data may be processed through contracted customer support software providers.
• Regulatory and legal authorities: Where required by applicable law, court order, or a legitimate request from a regulatory authority, zs998 may disclose personal data to the relevant authority. zs998 will, where legally permissible, notify the affected player of any such request prior to disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the zs998 business, personal data held by zs998 may be transferred to the acquiring entity, subject to the acquirer agreeing to process such data in accordance with this Privacy Policy.

zs998 gives specific attention to the protection of financial and payment data given the sensitivity of such information and the payment methods popular among Pakistani players. The following specific terms apply to the handling of payment data on the zs998 Platform:

• zs998 does not store full EasyPaisa or JazzCash account credentials, nor full bank account numbers, on its own servers in plain text. Payment identifiers used for transaction matching are stored in encrypted or tokenised form.
• All deposit and withdrawal instructions are transmitted over encrypted connections using TLS. Any transaction details shared with payment providers (EasyPaisa, JazzCash, HBL, UBL, Meezan Bank) are transmitted via secure API integrations.
• Transaction history — including deposit amounts, withdrawal amounts, and timestamps, denominated in PKR — is retained as part of your Account record for a minimum of five years in compliance with our obligations under applicable anti-money laundering regulations.
• zs998 will never ask you to provide your EasyPaisa PIN, JazzCash MPIN, or bank internet banking password via any channel, including live chat, email, or telephone. Any communication purporting to request such information should be treated as fraudulent.

The zs998 Platform uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform's functionality, security, and user experience. The following types of cookies are used:

• Essential cookies: These cookies are strictly necessary for the Platform to function. They enable core features such as session authentication, load balancing, and security controls. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences — such as language settings, responsible gaming reminder configurations, and last-visited game categories — to provide you with a more personalised experience on your return visits.
• Analytics cookies: zs998 uses analytics technologies to collect aggregated, anonymised data about how players navigate the Platform, which game categories are most popular, and where technical issues arise. This data is used solely for Platform improvement purposes.
• Security cookies: These cookies help detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the Platform.

zs998 does not use advertising or cross-site tracking cookies. Your browsing activity on the zs998 Platform is not shared with advertising networks or social media platforms for the purpose of serving targeted advertisements on external websites.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect the Platform's ability to authenticate your session and maintain security. Disabling functional or analytics cookies will not impair core functionality.

zs998 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account, and for a minimum of five years following Account closure, in compliance with AML and gaming licence record-keeping obligations.
• KYC and verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable regulatory guidance.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction, as required under applicable anti-money laundering regulations.
• Gaming activity data: Retained for a minimum of three years from the date of each session or transaction for dispute resolution and responsible gaming monitoring purposes.
• Communications data (support tickets, live chat logs): Retained for up to two years from the date of the last communication, subject to any ongoing complaint or regulatory investigation.
• Technical and log data: Typically retained for up to 12 months, unless a security incident or investigation requires extended retention.
• Marketing preference data: Retained until you withdraw consent or close your Account, plus a reasonable period thereafter for audit purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual concerned.

Subject to applicable data protection law and certain limitations arising from our legal obligations (such as AML record-keeping requirements), you have the following rights in respect of your personal data held by zs998:

• Right of access: You may request a copy of the personal data zs998 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data held by zs998 is inaccurate or incomplete, you may request that it be corrected. Players may update certain Account details (such as contact number or email address) directly via the Account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Note that this right is subject to our legal obligations — we may be required to retain certain data for the minimum periods set out in Section 9, and erasure requests will be fulfilled only in respect of data that we are not legally required to retain.
• Right to restriction of processing: In certain circumstances, you may request that zs998 restrict the processing of your personal data while a dispute or investigation is ongoing.
• Right to data portability: Where processing is based on your consent or a contractual obligation, you may request that zs998 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (including for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests. zs998 will assess whether its legitimate interests are overridden by your interests, rights, and freedoms.

zs998 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the zs998 Platform is encrypted using TLS 1.2 or higher. This applies to all Platform interactions including login, deposits, withdrawals, and live chat.
• Encryption at rest: Sensitive personal data stored in zs998 databases — including identity data and financial records — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within zs998's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Intrusion detection and monitoring: zs998 employs continuous security monitoring, intrusion detection systems, and automated anomaly alerts to identify and respond to potential security incidents promptly.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their Accounts. Internal systems handling personal data require multi-factor authentication for all authorised personnel.
• Vulnerability management: The Platform undergoes regular security testing, including penetration testing, to identify and remediate potential vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, zs998 will notify affected players without undue delay in accordance with applicable data breach notification requirements.

The zs998 Platform is strictly intended for individuals who are 21 years of age or older. zs998 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

Robust age verification controls are embedded into the zs998 registration and KYC process to prevent minors from accessing the Platform. Where zs998 becomes aware that personal data has been collected from an individual who is under 21 years of age, the following actions will be taken immediately:

• The Account will be suspended and access to the Platform will be blocked.
• All personal data associated with the underage Account will be deleted or anonymised as soon as practicable, subject to any legal obligations to report the matter to relevant authorities.
• Any real-money deposits made by the underage individual will be returned to the source payment method following an appropriate investigation.
• All winnings and Bonus Funds associated with the Account will be forfeited.

zs998 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new product features, or guidance from regulatory authorities.

When material changes are made to this Policy, zs998 will notify active players by one or more of the following methods:

• A notice displayed prominently on the zs998 Platform upon login.
• An email notification sent to the address registered on your Account.
• A prominent banner on the zs998 homepage.

The effective date displayed at the top of this document will be updated to reflect the date on which the revised Policy comes into force. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

Players are encouraged to review this Privacy Policy periodically, particularly before submitting new personal data or after receiving a policy update notification. Previous versions of this Policy are available upon request from the zs998 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which zs998 handles your personal data, please do not hesitate to reach out to us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the zs998 Platform after logging in to your Account. This is the fastest way to reach our team for data-related queries.
• Email: [email protected] — for formal data protection requests, including access requests, erasure requests, or complaints regarding data handling. Please include "Privacy Request" in the subject line for fastest routing.

For information about your rights as a player, including responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion, please visit our Responsible Gaming page.

For the full terms governing your use of the zs998 Platform, including account rules, bonus terms, and withdrawal conditions, please review our Terms & Conditions.