zs998 Privacy Policy

zs998 takes the privacy and security of its players' personal data seriously. Whether you are a registered player in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan, your personal information is handled with the same consistent level of care and technical protection.

This Policy is designed to be clear and straightforward. We have written it in plain legal English so that you understand precisely what happens to your data when you use the zs998 platform — from the moment you fill in your registration form to the moment you submit a withdrawal request or contact our support team.

This Policy should be read alongside the zs998 Terms & Conditions, which govern the broader contractual relationship between zs998 and registered players. Where this Policy and the Terms & Conditions address the same subject matter, this Policy governs with respect to personal data processing specifically.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the zs998 platform operating under the brand name zs998 and accessible at zs998.org. All data processing activities described in this Policy are carried out by or on behalf of zs998 in its capacity as data controller.

If you have any questions about how zs998 handles your personal data, or wish to exercise any of the rights described in Section 11 of this Policy, you may contact our dedicated privacy team using the details set out in Section 14 below.

zs998 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we may hold about you include:

zs998 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where required by KYC providers for identity verification), or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming interaction (such as requesting self-exclusion citing a gambling-related health concern). Any such disclosure is treated with the highest level of confidentiality.

zs998 collects personal data through the following channels and mechanisms:

• Direct submission: Data you enter yourself when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support ticket, or filling in any other form on the zs998 platform.
• Automated technical collection: Data collected automatically when you visit zs998.org, including IP address, browser type, device identifiers, session duration, pages visited, and referral source. This data is collected via server logs and platform analytics tools.
• Payment providers: Transaction reference data and payment status information received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and any other payment processing partners used by zs998.
• Identity verification providers: Verification status, document validity confirmation, and fraud-risk scoring received from third-party KYC and AML service providers engaged by zs998.
• Game providers: Game session data, round outcomes, and RTP logs received from the software providers who supply casino games and sportsbook functionality to the zs998 platform.
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage as described in Section 10 of this Policy.

zs998 uses personal data collected from players for the following purposes:

• Account registration and management: Creating and maintaining your player account, verifying your identity and age, and ensuring continued eligibility to use the platform.
• Payment processing: Facilitating deposits and withdrawals via your registered PKR payment method, including reconciling transactions and resolving any payment disputes.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection legislation, including filing reports with relevant authorities where legally required.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing player-set deposit limits and self-exclusion requests, and communicating responsible gaming resources to players who may need them.
• Platform security and fraud prevention: Detecting and investigating suspicious activity, preventing account takeovers, identifying bonus abuse, and protecting the integrity of the zs998 gaming environment.
• Customer support: Responding to queries, resolving complaints, and providing assistance to players via live chat and email.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience for all players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may withdraw this consent at any time via your Account settings or by contacting support.

zs998 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contract performance: Processing necessary to register your account, process payments, and deliver the gaming services you have contracted to receive as a zs998 player.
• Legal obligation: Processing required by applicable law, including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have provided explicit, informed consent and retain the right to withdraw that consent at any time.

Where zs998 relies on legitimate interests as a legal basis, we have assessed that those interests are proportionate and do not unduly infringe your privacy rights. You may request further information about these assessments by contacting our privacy team.

zs998 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processing partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and any other payment service providers engaged to process your deposits and withdrawals. These providers receive only the transactional data necessary to process the specific payment.
• KYC and AML service providers: Third-party identity verification and fraud screening providers engaged by zs998 to perform document verification, age checks, and AML risk scoring as part of the player onboarding and compliance process.
• Game software providers: Casino and sportsbook software providers whose games are available on the zs998 platform may receive game session data and player identifiers for the purpose of game integrity monitoring and dispute resolution.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or the requirements of a relevant regulatory authority, zs998 will disclose personal data to the extent mandated. zs998 will notify you of such a disclosure where legally permitted to do so.
• IT and infrastructure service providers: Cloud hosting, data storage, cybersecurity, and platform maintenance providers who process personal data on behalf of zs998 strictly in accordance with data processing agreements and under binding confidentiality obligations.

All third-party service providers engaged by zs998 are subject to contractual data protection obligations no less protective than those described in this Policy. zs998 conducts due diligence on new service providers before granting access to player data.

zs998 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by applicable AML legislation and licensing conditions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Game session and betting history: Retained for a minimum of three (3) years from the date of the session, for dispute resolution and game integrity purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction, or longer where the communication relates to an unresolved complaint or legal proceeding.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure, to evidence consent and respect withdrawal of consent.
• Technical logs (IP address, session data): Retained for a rolling period of twelve (12) months for security and fraud prevention purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for analytical and platform improvement purposes.

zs998 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and zs998.org is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this connection is active during every session.
• Encryption at rest: Sensitive data stored on zs998 servers — including KYC documents, financial records, and password hashes — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to player personal data within the zs998 organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role.
• Password security: Player passwords are stored exclusively as salted cryptographic hashes. zs998 staff cannot retrieve your plaintext password at any time, and will never ask for it.
• Two-factor authentication (2FA): zs998 offers optional 2FA for player accounts to provide an additional layer of login security.
• Intrusion detection and monitoring: The zs998 platform operates continuous security monitoring systems to detect and respond to anomalous activity, attempted breaches, and data exfiltration attempts in real time.
• Penetration testing: zs998 commissions periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that poses a risk to your rights and freedoms, zs998 will notify affected players without undue delay in accordance with its obligations under applicable data protection law.

zs998 uses cookies and similar tracking technologies on the zs998.org website to support essential platform functionality and, with your consent, to improve your experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies, load-balancing cookies, and security tokens. These cookies cannot be disabled without breaking core platform functionality and do not require your consent.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming limit configurations. These cookies improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the platform, helping zs998 identify areas for improvement. Activated only with your consent.
• Marketing cookies: Used to track interactions with promotional content and measure the effectiveness of marketing campaigns. Activated only with your explicit consent and subject to immediate withdrawal at any time.

You may manage your cookie preferences at any time via the cookie settings panel accessible from the footer of the zs998.org website. Note that disabling functional or analytics cookies will not affect your ability to play games or access account features.

As a data subject whose personal data is processed by zs998, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact our privacy team using the details in Section 14.

zs998 will respond to all valid rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it within the initial thirty-day period.

There is no charge for exercising your privacy rights. However, where requests are manifestly unfounded or excessive (in particular because of their repetitive character), zs998 reserves the right to charge a reasonable administrative fee or decline to act on the request.

The zs998 platform is strictly restricted to individuals aged 21 years and older. zs998 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

Age verification is a mandatory component of the zs998 KYC process. Players are required to submit a valid government-issued identity document (such as a Pakistani CNIC or passport) confirming their date of birth before any withdrawal is processed. Where a player's age cannot be confirmed, their account will be suspended pending satisfactory verification.

If zs998 discovers that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — the relevant account will be immediately suspended, all balances will be forfeited, and the personal data will be securely deleted to the fullest extent permitted by applicable law. The incident may be reported to the relevant regulatory or law enforcement authority where appropriate.

zs998 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, zs998 will notify registered players via the email address associated with their account and will display a prominent notice on the zs998.org website for a minimum period of seven (7) days prior to the revised Policy taking effect.

The "Last Updated" date at the top of this page will be revised on each update. We encourage you to review this Policy periodically to stay informed of how zs998 protects your personal data. Your continued use of the zs998 platform following the effective date of any revised Policy constitutes your acceptance of the changes.

Prior versions of this Privacy Policy are available on request from the zs998 privacy team. Requests will be processed within fourteen (14) business days.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how zs998 has handled your personal data, please contact our privacy team through the following channels:

• Live Chat: Available 24/7 inside your zs998 Account dashboard — the fastest route to privacy assistance.
• Email: [email protected] — please include "Privacy Request" in the subject line so your query is routed to the correct team.
• Response time: Privacy enquiries are acknowledged within 48 hours and resolved within 30 calendar days as a standard commitment.

If you are not satisfied with the response you receive from the zs998 privacy team, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation. Details of the escalation process will be provided to you by the privacy team upon request.