zc99 Privacy Policy —
How We Handle Your Personal Data

1Introduction

zc99 operates the online gaming platform at zc99.win, serving players based in Pakistan. When you use our platform — whether to browse, register an account, make a deposit in PKR, play Slot Games, access Live Casino, join a Bingo room, or place a Cricket or Football bet — we process certain personal information as part of providing that service.

This Privacy Policy sets out in plain terms what that information is, how it is used, who it may be shared with, how long it is kept, and what choices you have. We are committed to handling your data responsibly, keeping it secure, and being transparent about our practices.

By registering an account on zc99, you confirm that you have read this Privacy Policy and agree to the collection and use of your information as described here. If you do not agree, please do not register or continue using the platform. For questions about anything in this document, contact support through the details at the end of this page.

2Data We Collect

zc99 collects information in the following categories depending on how you interact with the platform:

We collect only the information that is necessary for the purposes described above. We do not collect sensitive categories of data such as health information, religious beliefs, or political views.

3How We Collect Your Data

Information is collected through the following methods:

• Direct input — Information you provide when registering, updating your profile, contacting support, or completing identity verification
• Automated collection — Technical data collected automatically when you access the platform, including IP address, device identifiers, and session data
• Transaction processing — Financial data generated when you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, or card payments
• Gaming activity — Data generated as a natural result of using the platform — bets placed, games accessed, session lengths, and account balance movements
• Third-party verification — Identity and age verification data returned by verification service providers when KYC is completed
• Cookies and similar technologies — See the Cookies section below for full details

4How We Use Your Data

Your personal data is used exclusively for the following purposes:

• Creating and managing your zc99 account and maintaining accurate account records
• Processing deposits and withdrawals in PKR via your chosen payment method
• Verifying your identity and age to ensure compliance with the 18+ requirement
• Detecting and preventing fraud, money laundering, and unauthorised account access
• Calculating VIP tier status and cashback based on your wagering activity
• Providing customer support and responding to account-related queries
• Sending account notifications — including deposit confirmations, withdrawal updates, and security alerts
• Improving the platform by analysing usage patterns and resolving technical issues
• Enforcing the Terms and Conditions and investigating suspected policy breaches
• Providing responsible gaming tools and monitoring for indicators of problem gambling behaviour

5Payment Data and PKR Transactions

All financial transactions on zc99 are processed in Pakistani Rupees (PKR). When you deposit using JazzCash, Easypaisa, Raast, bank transfer, or card payments, zc99 processes the transaction references and amounts necessary to credit your account and to maintain an accurate financial record for your account history.

zc99 does not store full card numbers, bank account passwords, or your JazzCash and Easypaisa PIN codes. Payment data is handled in accordance with the security requirements of the payment processors involved. Transaction references and amounts are retained as part of your account history for the period described in the Data Retention section.

• Deposit and withdrawal records are kept as part of your account history
• Payment method references (e.g. a partial JazzCash number) may be stored to link transactions to your account
• Financial records may be reviewed by the fraud prevention team as part of standard security checks
• Withdrawal verification may require you to confirm ownership of the payment method used for deposits

6Data Sharing and Third Parties

zc99 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors — JazzCash, Easypaisa, Raast, and card payment providers receive the transaction data needed to process your deposits and withdrawals
• Identity verification providers — When KYC is required, verification documents may be processed by a third-party identity verification service
• Fraud prevention services — Technical data including IP address and device information may be shared with anti-fraud systems to detect and prevent fraudulent activity
• Platform infrastructure providers — Hosting and database providers who process data on our behalf under confidentiality obligations
• Legal and regulatory requirements — Where required by law, court order, or to protect the rights and safety of other users

All third parties who process data on behalf of zc99 are required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared. We do not permit third-party service providers to use your data for their own marketing or commercial purposes.

7Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter, in line with the following guidelines:

• Account and identity data — Retained for the duration of the account and for a minimum of five years after account closure to support fraud prevention and legal compliance
• Transaction records — Deposit and withdrawal history in PKR is retained for a minimum of five years in accordance with standard financial record-keeping practices
• Gaming activity logs — Retained for the duration of the account and up to two years after closure
• Support communications — Chat logs and email correspondence are retained for up to two years after the conversation closes
• Verification documents — Retained for the period required to satisfy the purpose for which they were collected, typically up to five years

When data is no longer needed and the retention period has passed, it is deleted or anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for platform analytics and improvement purposes.

8Cookies and Tracking Technologies

zc99 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. Cookies are small text files stored on your device by your browser when you visit the platform.

• Essential cookies — Required for the platform to function. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled without breaking core platform functionality.
• Functional cookies — Remember your preferences such as language settings, preferred payment method, and game lobby filters
• Analytics cookies — Collect anonymised data on how users navigate the platform, which pages are most visited, and where errors occur. Used solely to improve the platform experience.
• Security cookies — Help detect suspicious activity, verify that requests come from a genuine session, and protect against cross-site scripting and session hijacking

9Data Security

zc99 applies technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encrypted data transmission using HTTPS/TLS across all platform connections
• Passwords stored using industry-standard hashing algorithms — never in plain text
• Access to personal data within the organisation restricted to staff who require it for their role
• Regular security assessments and monitoring of platform infrastructure
• Session timeout and automatic logout for inactive sessions
• Two-factor authentication options available for account login

While we take data security seriously and apply reasonable measures, no online platform can guarantee complete security against all possible threats. You play an important role in keeping your account secure — use a strong, unique password and do not share your login credentials with anyone.

10Your Rights Over Your Data

As a zc99 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact support with your account details and the specific request:

Requests will be reviewed and responded to within a reasonable timeframe. Some requests may be limited where legal, fraud prevention, or contractual obligations require us to retain certain data regardless of a deletion request.

11Minors and Under-18 Protection

zc99 is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If during identity verification or account review we determine that a user is under 18, the account will be suspended immediately, data will be handled in accordance with this policy, and any deposits will be returned.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms. If you believe a minor has registered on zc99, please contact support immediately with the relevant details so the account can be reviewed and closed promptly.

12Changes to This Privacy Policy

zc99 may update this Privacy Policy from time to time to reflect changes in platform operations, data practices, or applicable requirements. When updates are made, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how your data is used, we will notify active account holders via the contact details held on their account. Continued use of the platform after a policy update constitutes acceptance of the revised terms. We recommend reviewing this page periodically, particularly if you are an active depositing player.

13Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise one of your data rights, or have a concern about how your information is being handled, you can reach the zc99 support team 24 hours a day through the in-platform live chat or by emailing the address shown in the footer of this page.

Please include your registered account username or email address when submitting a data request so we can locate and verify your account efficiently. All privacy requests are handled confidentially and responded to as promptly as possible.