zq999 Privacy Policy — How We Handle Your Personal Data

1.1 This Privacy Policy is issued by zq999 ("zq999", "we", "us", "our"), the operator of the online gaming platform accessible at zq999.net. zq999 acts as the data controller in respect of the personal data collected from players and users of the platform.

1.2 As data controller, zq999 determines the purposes for which and the manner in which your personal data is processed. This Policy explains those purposes and the associated processing activities in clear, accessible terms.

1.3 zq999 is committed to processing personal data lawfully, fairly, and transparently, collecting only what is necessary for identified purposes, maintaining its accuracy, storing it securely, and retaining it no longer than required.

1.4 If you have any questions about this Policy, the data we hold about you, or your rights, please refer to Section 14 of this document for contact information.

2.1 zq999 collects and processes the following categories of personal data in connection with your use of the platform:

2.2 zq999 does not deliberately collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what may be contained incidentally within submitted identity documentation.

3.1 zq999 collects personal data through the following means:

• Direct Submission: Information you actively provide during account registration, KYC verification, deposit and withdrawal requests, promotional claim forms, customer support contacts, and any other direct interaction with zq999.
• Automated Technical Collection: Data collected automatically when you access the zq999 platform — including IP addresses, device identifiers, browser data, session logs, and navigation patterns — via server logs and session management systems.
• Cookies and Similar Technologies: Data collected through cookies and related tracking technologies as described in Section 7 of this Policy.
• Third-Party Payment Processors: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers confirming transaction outcomes — not full financial account credentials, which are never transmitted to zq999.
• Regulatory and AML Sources: In fulfilling anti-money laundering and sanctions screening obligations, zq999 may cross-reference data against publicly available regulatory databases and watchlists.

4.1 zq999 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to enter into and perform the contract between you and zq999 — including account creation, game access, deposit and withdrawal processing, and bonus administration.
• Legal Obligation: Processing required to comply with legal and regulatory obligations, including Know Your Customer (KYC) identity verification, Anti-Money Laundering (AML) monitoring and reporting, sanctions screening, and responsible gaming compliance requirements imposed by zq999's gaming licence.
• Legitimate Interests: Processing necessary for purposes that serve zq999's legitimate business interests where those interests are not overridden by your rights — including fraud detection and prevention, platform security monitoring, responsible gaming risk identification, and internal analytics to improve service quality.
• Consent: Where zq999 sends optional marketing communications — including promotional emails or SMS notifications about new zq999 offers — we rely on your explicit consent, which you may withdraw at any time through your account settings or by contacting support.

5.1 zq999 uses collected personal data for the following specific purposes:

• Account Administration: Creating and maintaining your zq999 account, authenticating your identity upon login, managing account security, and processing account closure requests.
• Gaming Services: Enabling access to live casino tables, slot games, sports betting markets (including PSL and cricket), and all other gaming products available on the platform.
• Payment Processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported methods; processing withdrawal requests; maintaining transaction records.
• KYC & Identity Verification: Verifying your identity and age (21+) in compliance with regulatory requirements; maintaining verification documentation.
• AML & Fraud Prevention: Monitoring transactions and gaming activity for patterns indicative of money laundering, fraud, collusion, or other prohibited activities; reporting obligations to relevant authorities where required by law.
• Responsible Gaming: Identifying players who may be exhibiting problem gambling behaviours; administering responsible gaming tools including deposit limits, session limits, and self-exclusion programmes; complying with responsible gaming obligations under zq999's gaming licence.
• Customer Support: Responding to support requests, complaints, and account queries; maintaining records of support interactions for quality and compliance purposes.
• Bonus & Promotion Administration: Verifying eligibility for promotions; crediting and administering bonus funds; investigating bonus abuse where applicable.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game library curation, payment method reliability, and overall user experience.
• Marketing Communications (with consent): Sending promotional notifications about new games, bonus offers, PSL betting specials, and other zq999 promotions to players who have consented to receive such communications.

6.1 zq999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipient, each engaged under contractual obligations of confidentiality and data protection:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, MCB, and other payment processors engaged to process your deposit and withdrawal transactions. These providers receive only the transaction data necessary to process each payment.
• Identity Verification Services: Third-party KYC and identity verification providers engaged to verify the authenticity of identity documents submitted in connection with your account.
• Game Software Providers: The game developers and platform providers whose software powers the casino games and sportsbook available on zq999. Game providers receive session-level data necessary to operate game rounds and settle bets but do not receive your full identity profile.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, regulation, or court order, zq999 will disclose personal data to regulatory bodies, anti-money laundering authorities, law enforcement agencies, or other competent authorities. Such disclosures are made only to the extent legally required.
• Responsible Gaming Organisations: Where a player activates self-exclusion, limited data may be shared with relevant self-exclusion registry schemes operating under zq999's gaming licence framework.
• Professional Advisers: Legal, audit, and compliance advisers engaged by zq999 who require access to data in the performance of professional services, subject to professional confidentiality obligations.

7.1 The zq999 platform uses cookies and similar tracking technologies to support platform functionality, maintain authenticated sessions, and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform operation — including session authentication, login persistence (where "Keep me signed in" is selected), security token management, and load balancing. These cookies cannot be disabled without preventing normal platform access.
• Functional Cookies: Remember user preferences such as language settings, game lobby view configuration, and responsible gaming tool settings. These enhance the convenience of your zq999 experience but are not essential to platform operation.
• Analytical Cookies: Used to collect aggregated data on how players navigate the platform — which game categories are most visited, where sessions begin and end, and general performance metrics. This data informs platform improvements. Individual player data is not shared with external analytics providers for their own commercial use.
• Security Cookies: Support fraud detection and account security monitoring functions — including device fingerprinting for recognition of trusted devices and detection of unusual login patterns.

7.2 You may configure your browser to reject or delete non-essential cookies. Blocking strictly necessary cookies will prevent normal platform access. Blocking analytical or functional cookies will not prevent platform use but may reduce convenience.

7.3 zq999 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the platform without player consent.

8.1 zq999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the zq999 servers — including login credentials, identity data, financial information, and session activity — is encrypted in transit using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data, including identity documents and financial data, is stored in encrypted form on zq999's secure server infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis within the zq999 organisation, governed by role-based access control policies and enforced through authentication systems.
• Intrusion Detection: Continuous monitoring of platform systems for unauthorised access attempts, unusual traffic patterns, and security anomalies, with automated alerting and response protocols.
• Penetration Testing: Regular independent security assessments and penetration testing to identify and remediate vulnerabilities in the platform infrastructure before they can be exploited.
• Data Breach Procedures: Documented incident response procedures for data security breaches, including notification obligations to affected players and relevant regulatory authorities where required.

9.1 zq999 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:

9.2 Where retention beyond these periods is required by a specific legal obligation — such as an ongoing regulatory investigation — data will be retained for the duration of that obligation and deleted promptly upon its conclusion.

10.1 Subject to applicable law, you hold the following rights in respect of the personal data that zq999 processes about you. To exercise any of these rights, please contact zq999 as described in Section 14.

11.1 The zq999 platform is strictly restricted to individuals aged 21 years and above. zq999 does not knowingly collect or process personal data from individuals under the age of 21.

11.2 If zq999 discovers that personal data has been collected from an individual under 21 years of age — whether through an age misrepresentation at registration or any other means — that data will be deleted as promptly as reasonably practicable, the associated account will be closed, and any funds held in the account will be dealt with in accordance with applicable regulatory requirements.

11.3 If you have reason to believe that a person under 21 has registered an account with zq999, please contact the support team immediately using the contact details in Section 14 of this Policy.

12.1 Given the international nature of zq999's gaming licence and technology infrastructure, your personal data may be transferred to, stored in, or processed in countries outside Pakistan. Such transfers occur in connection with the platform's hosting infrastructure, payment processing systems, game software providers, and KYC verification services.

12.2 Where personal data is transferred internationally, zq999 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual clauses requiring recipient organisations to apply data protection standards equivalent to those applied by zq999;
• Transfers limited to jurisdictions recognised as providing an adequate level of data protection under applicable standards; and
• Technical security measures — including encryption in transit and at rest — applied regardless of the geographic location of processing.

12.3 By creating a zq999 account and using the platform, you acknowledge that your personal data may be transferred and processed internationally as described in this Section, subject at all times to the protections described in this Policy.

13.1 zq999 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, data processing practices, or platform functionality. The revised Policy, along with the updated effective date, will be published at zq999.net/privacy-policy.

13.2 Where updates to this Policy are material — meaning they affect how your data is used in a way that could reasonably concern you — zq999 will notify active account holders via their registered contact details prior to the updated Policy taking effect.

13.3 Your continued use of the zq999 platform following publication of an updated Privacy Policy constitutes acknowledgment of the revised Policy. If you do not accept any change, you should cease using the platform and may close your account in accordance with the Terms & Conditions.

14.1 Exercising Your Rights. To exercise any of the data rights described in Section 10, or to submit a question or concern about this Privacy Policy, please contact the zq999 data team through the support channel below:

14.2 Response Timeframes. zq999 will acknowledge receipt of all data rights requests within five (5) business days and will provide a substantive response within thirty (30) days of the request. Where a request is complex or involves a large volume of data, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and its reason within the initial thirty-day period.

14.3 Complaints. If you believe that zq999 has processed your personal data in violation of this Policy or applicable data protection law, you are encouraged to contact zq999's support team in the first instance so that we may attempt to resolve your concern. If you remain dissatisfied following our response, you have the right to refer the matter to the relevant supervisory authority under zq999's applicable licensing and regulatory framework.