za99 Privacy Policy

za99 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who visits or registers on the za99 online gaming platform at za99.vu. This Privacy Policy has been prepared to inform you clearly and transparently about our data handling practices.

This document sets out what categories of personal data za99 collects from you, the purposes for which that data is processed, the lawful basis on which processing takes place, how long data is retained, who it may be shared with, and what rights you hold in respect of your own information. This Privacy Policy should be read alongside the za99 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and za99.

By registering a za99 account, completing KYC verification, making a deposit, or continuing to use the platform after being notified of updates to this policy, you acknowledge that you have read and understood how za99 processes your personal data. If you do not agree with any part of this Privacy Policy, you should not use the za99 platform.

For the purposes of applicable data protection legislation, za99 is the data controller in respect of personal data collected through the platform. As data controller, za99 is responsible for determining the purposes and means of processing your personal data.

za99 operates under international gaming standards and maintains its data processing practices in accordance with its obligations under its operating licence framework. Questions regarding data controllership or this Privacy Policy may be directed to za99's Data Protection contact at [email protected].

za99 collects the following categories of personal data, depending on how you interact with the platform:

za99 collects personal data through the following means:

• Directly from you: When you complete the za99 registration form, upload KYC documents, make a deposit or withdrawal request, contact player support, or update your account settings.
• Automatically: Technical data such as IP addresses, device identifiers, and session information is collected automatically when you visit za99.vu, regardless of whether you are logged in.
• From payment processors: za99 receives transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processors to verify that payments have been made and to reconcile account balances.
• From identity verification partners: Where third-party KYC verification services are used, za99 may receive identity verification outcomes and associated data from those partners.
• From fraud prevention services: za99 may receive risk scores or flagged data from fraud detection partners as part of its security and anti-money-laundering controls.
• Via cookies and tracking technologies: za99 uses cookies and similar technologies to collect data about your browsing behaviour on the platform. See Section 11 for full details.

za99 processes your personal data for the following purposes:

• Account management: Creating and maintaining your za99 account, verifying your identity and age, processing login requests, and enabling access to platform features.
• Payment processing: Processing deposits from and withdrawals to your registered payment methods, reconciling balances, and detecting and preventing payment fraud.
• Legal compliance and KYC: Fulfilling za99's obligations under its international gaming licence, including Know Your Customer, Anti-Money Laundering, and age verification requirements.
• Platform operation and security: Detecting and preventing fraudulent activity, account takeover attempts, and prohibited conduct as defined in the za99 Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviours, enforcing deposit limits and self-exclusions, and facilitating responsible gaming interventions where appropriate.
• Customer support: Responding to your enquiries, resolving disputes, and providing account assistance via live chat and email.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use za99 and to improve product design, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time through your account settings.

za99 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the agreement between za99 and the player, including account management, payment processing, and game service delivery.
• Legal obligation: Processing required to comply with za99's obligations under its gaming licence, including KYC, AML, age verification, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytical improvements to the platform — where those interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and certain profiling activities — where you have provided clear, informed consent and retain the right to withdraw it at any time.

za99 does not sell, rent, or trade your personal data to unaffiliated third parties. za99 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 processors receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification partners may receive identity data to perform verification on za99's behalf, subject to confidentiality agreements.
• Fraud prevention and AML services: za99 may share data with fraud detection and anti-money-laundering screening services to protect the integrity of the platform.
• Game software providers: Game studios and providers whose products are integrated into za99 may receive anonymised gameplay data for product support and performance monitoring purposes.
• Regulatory authorities: za99 may disclose personal data to its licencing authority, law enforcement agencies, or other regulatory bodies where required by law or by the terms of its gaming licence.
• Professional advisers: Lawyers, auditors, and accountants engaged by za99 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

za99 operates internationally and some of its service providers, technology partners, and game studios may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

When personal data is transferred internationally, za99 ensures that appropriate safeguards are in place to protect your information, including contractual protections with receiving parties and adherence to the data protection standards applicable under za99's operating licence framework. za99 does not transfer personal data to recipients who cannot demonstrate adequate protection for your information.

za99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your za99 account and for a minimum of five years following account closure, in accordance with gaming licence and AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following the date of each transaction, as required under applicable anti-money-laundering regulations.
• KYC documents: Retained for the duration of your account and for a minimum of five years after account closure or the conclusion of any related investigation.
• Customer support records: Retained for a minimum of two years following the closure of each support interaction, or longer if the matter relates to an ongoing dispute or regulatory inquiry.
• Gaming and betting records: Retained for a minimum of five years, as required by za99's gaming licence obligations.
• Marketing preferences: Retained until you withdraw consent or close your account. Withdrawal of consent does not affect the validity of prior processing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

za99 takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the za99 platform.
• Encrypted storage of sensitive personal data at rest, including financial data and KYC documents.
• Access controls ensuring that za99 staff can only access personal data necessary for their specific role and responsibilities.
• Two-factor authentication available on all player accounts to protect against unauthorised login.
• Regular independent security audits and penetration testing of the za99 platform infrastructure.
• Documented incident response procedures ensuring swift action in the event of any suspected data breach.

za99 uses cookies and similar tracking technologies on za99.vu to operate the platform, remember your preferences, and improve your experience. A cookie is a small text file placed on your device by a website you visit.

• Strictly necessary cookies: Essential for the platform to function. They enable login session management, security features, and core navigation. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language selection, display settings, and previously entered information to improve your experience across sessions.
• Analytical cookies: Collect anonymised data about how players navigate and use za99, helping us identify areas for improvement. za99 does not use this data to identify individual players.
• Marketing cookies: Used to deliver promotional content relevant to your interests, where you have provided consent. You may opt out of marketing cookies at any time through your account settings or browser controls.

You may control cookie settings through your browser. Note that disabling strictly necessary cookies will impair your ability to use the za99 platform. Continued use of za99 after being informed of our cookie usage constitutes consent to the placement of strictly necessary and functional cookies.

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by za99:

• Right of access: You may request a copy of the personal data za99 holds about you. za99 will provide this within 30 calendar days of receiving a valid request.
• Right to rectification: If any personal data za99 holds about you is inaccurate or incomplete, you may request that it be corrected. Minor updates can be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that za99 may be required to retain certain data to fulfil legal obligations even after an erasure request.
• Right to restrict processing: You may request that za99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to za99's processing of your personal data where that processing is based on legitimate interests. za99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

za99 performs mandatory age verification as part of the KYC process for all registered accounts. If za99 discovers that it has inadvertently collected personal data from an individual under the age of 21, it will promptly delete that data, close the associated account, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe that a minor under your care has registered on za99, please contact support immediately at [email protected]. za99 takes underage gambling extremely seriously and will act on all such reports without delay.

za99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the platform. The date at the top of this document will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how za99 processes your personal data or your rights under this Policy — za99 will notify registered players by email and/or through a prominent notice on the platform. Continued use of za99 after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

za99 encourages all players to review this Privacy Policy periodically to stay informed about how their personal data is being handled.

If you have any questions, concerns, or complaints regarding this Privacy Policy or za99's data handling practices, please contact us using the details below. za99 treats all privacy-related enquiries with priority and will respond promptly.

If you are not satisfied with za99's response to your privacy enquiry, you have the right to escalate the matter to the relevant data protection authority applicable in your jurisdiction or to za99's gaming licence supervisory authority. za99 is committed to resolving all privacy concerns fairly and transparently.