zc998 Privacy Policy —
Your Data, Handled with Care

1. Who We Are — Data Controller

zc998 is the data controller responsible for the personal data you provide when using the zc998 platform. As data controller, zc998 determines the purposes and means of processing your personal data and is accountable for ensuring that data is processed lawfully, fairly, and transparently in accordance with applicable data protection law.

For all data-related enquiries, requests, or complaints, players may contact the zc998 privacy team directly:

• Email: [email protected]
• Subject line for data requests: "Privacy / Data Request"
• Response target: Within 30 days of receipt

2. Personal Data We Collect

zc998 collects the following categories of personal data from players during the account lifecycle:

3. How We Collect Your Data

zc998 collects personal data through the following channels:

• Direct provision: Information you provide when completing the registration form, submitting a KYC verification request, making a PKR deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically when you access the zc998 platform, including IP address, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies (see Section 8).
• Payment processor data: Transaction reference data shared by our payment processing partners — including Easypaisa, JazzCash, Meezan Bank, HBL, UBL, and SadaPay — to confirm the status of deposits and withdrawals. zc998 does not receive or store full bank account numbers or card numbers through these integrations.
• Identity verification providers: Where enhanced KYC verification is required, zc998 may work with third-party identity verification services to confirm the authenticity of documents submitted by players.
• Responsible gaming self-disclosures: Information you voluntarily provide when using responsible gaming tools, such as setting deposit limits, requesting cooling-off periods, or initiating self-exclusion.

4. How We Use Your Personal Data

zc998 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, manage your player profile, and maintain your account security across all zc998 game categories.
• Transaction processing: To process PKR deposits and withdrawals via your chosen payment method (Easypaisa, JazzCash, Meezan Bank, HBL, UBL, or SadaPay), to credit winnings to your account, and to maintain accurate financial records.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account or payment issues via our English-language 24/7 support team.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This includes monitoring transaction patterns and comparing your data against sanctions and fraud databases.
• Responsible gaming monitoring: To identify patterns that may indicate problem gambling behaviour, to apply player-requested limits, and to administer self-exclusion requests effectively.
• Legal compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and data protection law.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the zc998 platform, fix technical issues, and enhance the player experience.
• Marketing communications (opt-in only): To send promotional offers, bonus notifications, and news about new game titles — only where you have explicitly opted in to receive such communications. You may withdraw consent at any time via your account settings.

5. Legal Basis for Processing

zc998 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to register your account, execute deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, KYC regulations, and other legal duties to which zc998 is subject.
• Legitimate interests: Processing conducted for zc998's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed consent — specifically for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

zc998 does not sell, rent, or trade your personal data to any third party for commercial advertising or marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum data necessary with our payment partners (Easypaisa, JazzCash, Meezan Bank, HBL, UBL, SadaPay) to execute PKR transactions on your behalf. Each partner is contractually bound to use this data only for payment processing purposes.
• Identity verification providers: Where KYC verification is required, we share identity document data with our verified identity verification service providers. These providers are subject to strict data processing agreements.
• Fraud prevention and financial crime databases: We may share data with third-party fraud detection services and financial crime registries as required by our anti-money laundering obligations.
• Legal and regulatory authorities: We will disclose your personal data to law enforcement, regulators, or government authorities where required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer before it takes effect.

7. Payment Data and PKR Transactions

Given that all zc998 transactions are conducted in Pakistani Rupees (PKR), zc998 processes financial data specific to the Pakistan payment ecosystem. The following data protection principles apply specifically to your payment information:

• zc998 stores payment method identifiers (such as your registered Easypaisa or JazzCash mobile number) for the purpose of processing withdrawals to the correct account. We do not store full bank account numbers, full card numbers, or unmasked financial credentials.
• All payment data in transit between zc998 and payment processors is encrypted using industry-standard TLS 1.2 or higher protocols.
• Transaction histories — showing PKR deposit amounts, withdrawal amounts, and dates — are retained for a minimum of 5 years for AML compliance purposes.
• zc998 will never ask you to share your full Meezan Bank account number, JazzCash PIN, or Easypaisa MPIN through any support channel. Any request for such information should be treated as fraudulent and reported to us immediately.

8. Cookies and Tracking Technologies

zc998 uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve your experience. The categories of cookies we use are as follows:

• Essential cookies: Required for core platform functionality including maintaining your logged-in session, loading game content, and processing transactions. These cookies cannot be disabled without impairing your ability to use zc998.
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats. These are essential for account protection and cannot be disabled.
• Analytics cookies: Used to understand how players use the zc998 platform — which pages are visited most frequently, where players encounter difficulties, and how game sessions progress. Analytics data is aggregated and anonymised.
• Preference cookies: Used to remember your language preferences, display settings, and other platform configuration choices between sessions.

You may manage your cookie preferences through your browser settings. Note that disabling essential or security cookies may affect your ability to log in and play games on zc998. For a full list of cookies used by zc998, please contact our support team.

9. Data Retention Periods

zc998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual player.

10. Your Data Rights

As a player on the zc998 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

zc998 will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, of which you will be notified. There is no charge for exercising your data rights. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

11. Data Security

zc998 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and zc998 servers
• Encrypted data storage — all player personal data is encrypted at rest using industry-standard AES-256 encryption
• Multi-factor authentication options available for all player accounts
• Real-time fraud monitoring — automated systems monitor account and transaction activity for anomalous patterns indicative of unauthorised access or fraud
• Access controls — internal access to player personal data is restricted to authorised personnel on a strict need-to-know basis
• Regular security audits — zc998 conducts periodic security assessments of its platform, infrastructure, and data handling practices
• Incident response procedures — in the event of a personal data breach affecting player rights, zc998 will notify affected players without undue delay

12. Children's Privacy — Strict 18+ Policy

The zc998 platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a player who is under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child may have registered an account on zc998, please contact us immediately at [email protected] with the subject "Underage Account Report". We take all such reports seriously and act on them promptly.

13. Updates to This Privacy Policy

zc998 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address on file and by displaying a prominent notice on the platform for a minimum of 30 days following the update.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the zc998 platform following notification of a material update constitutes your acknowledgement of the revised policy. If you do not agree with the updated policy, you should cease using the platform and may request account closure by contacting our support team.

Previous versions of this Privacy Policy are available upon request by emailing [email protected] with the subject "Previous Privacy Policy Version Request".

14. Contact — Privacy Enquiries and Complaints

For any questions, concerns, or requests related to this Privacy Policy or the way zc998 handles your personal data, please contact our privacy team:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request" as appropriate
• Support hours: 24 hours a day, 7 days a week
• Language: English
• Target response time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries

If you believe that zc998 has not handled your personal data in accordance with this policy and you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority. zc998 takes all such complaints seriously and is committed to resolving data protection concerns promptly and fairly.