Privacy Policy

This Privacy Policy ("Policy") describes how ZSS99 ("Platform", "we", "us", "our"), operating the website at https://zss99.cam, collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who visit or register on the Platform.

By registering an account or otherwise using the ZSS99 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

ZSS99 is committed to processing personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions and browsing activity.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, device identifiers, IP address, payment details and account activity records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller" means ZSS99, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of ZSS99 under a contractual arrangement and in accordance with ZSS99's instructions.
• "KYC" (Know Your Customer) means the identity verification process required before withdrawals are processed or as otherwise required by applicable compliance obligations.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality, remember preferences and support analytics.
• "Platform" means the ZSS99 website at https://zss99.cam together with all associated services, features and content.
• "Third Party" means any natural or legal person other than you, ZSS99, and persons who under the direct authority of ZSS99 are authorised to process Personal Data.

ZSS99 collects personal data from you in the following ways and categories:

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, phone number and chosen username when you create an account.
• KYC & Verification Documents: Copies of government-issued identity documents, proof of address, selfies or other documentary evidence submitted during the identity verification process.
• Financial Data: Payment method details (account numbers, wallet identifiers) used for deposits and withdrawals. ZSS99 does not store full card numbers — payment card data is handled by PCI-DSS compliant payment processors.
• Support Communications: The content of messages, emails or chat transcripts you submit to our support team.
• Responsible Gambling Preferences: Any deposit limits, session limits, self-exclusion requests or cool-off period selections you apply to your account.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution and referring URLs.
• Usage Data: Pages visited, games played, bets placed, session duration, clickstream data and feature interactions.
• Transaction Data: A record of all deposits, withdrawals, bonus activations, bets and game results associated with your account.
• Cookie & Tracking Data: Data collected via cookies, web beacons and similar technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

We may receive personal data about you from third-party identity verification providers, fraud-detection services, payment processors and, where applicable, publicly available sources, where this is necessary to fulfil our legal and compliance obligations.

ZSS99 uses your personal data for the following purposes. We process your data only where we have a lawful basis for doing so (see Section 5):

ZSS99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and ZSS99 — for example, creating your account, processing bets and settling withdrawals.
• Legal Obligation: Processing required to comply with applicable law — for example, KYC identity verification, AML transaction monitoring and record-keeping obligations imposed by ZSS99's licensing conditions.
• Legitimate Interests: Processing carried out for ZSS99's legitimate business interests, where those interests are not overridden by your rights — for example, fraud prevention, platform security, improving our services and responsible gambling monitoring.
• Consent: Processing based on your freely given, specific and informed consent — for example, receiving marketing emails or SMS notifications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

ZSS99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers & Data Processors

We engage third-party companies to support the operation of the Platform, including payment processors, identity verification providers, cloud hosting providers, fraud-detection services, customer support software providers and email delivery services. These providers act as Data Processors and are bound by contractual obligations to process your data only on our instructions and to maintain appropriate security standards.

6.2 Legal & Regulatory Authorities

We may disclose your personal data to regulatory bodies, law enforcement agencies, courts or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of ZSS99, its users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets or other business restructuring, your personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections.

6.4 With Your Consent

We may share your data with other third parties where you have provided your explicit consent for us to do so.

ZSS99 uses cookies and similar technologies (including web beacons, pixel tags and local storage objects) to operate core Platform functionality, improve your experience and support our analytics and security systems.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences and last-visited game categories to personalise your experience.
• Analytics Cookies: Help us understand how users interact with the Platform — which pages are visited most often, where users drop off and how features are used. This data is aggregated and anonymised where possible.
• Marketing & Retargeting Cookies: Used to serve relevant promotional content. These are only activated where you have given your consent.

7.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the Platform's core functions, including the ability to log in and maintain a session. For full instructions on managing cookies in your browser, refer to your browser's help documentation.

ZSS99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with us and for as long as required by applicable legal, regulatory and compliance obligations.

The following general retention principles apply:

• Account & Transaction Records: Retained for a minimum of five (5) years following account closure, as typically required under anti-money laundering regulations applicable to gaming operators.
• KYC & Identity Documents: Retained for the period required by our licensing obligations, generally a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Retained for up to three (3) years from the date of the interaction, unless a longer period is required due to an ongoing complaint or legal matter.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period afterwards as evidence of that consent.
• Analytics Data: Retained in aggregated, anonymised form for internal reporting. Raw usage logs are retained for a shorter period as operationally required.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

ZSS99 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields at rest, including identity documents and financial identifiers;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security assessments, vulnerability scanning and penetration testing;
• Multi-factor authentication for administrative access to Platform systems;
• Incident response procedures to detect, contain and report data breaches in accordance with applicable obligations.

Subject to applicable law and our legitimate interests and legal obligations, you may have the following rights in relation to your personal data held by ZSS99:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to our legal and regulatory retention obligations — where those obligations require us to retain your data, we will be unable to comply with an erasure request for the relevant data.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including profiling, or to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at the email address provided in Section 15. We will respond to verified requests within a reasonable period, generally within 30 days. We may need to verify your identity before processing your request.

ZSS99 operates internationally and your personal data may be transferred to, stored in and processed in countries outside the country from which you are accessing the Platform, including countries that may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, ZSS99 ensures that appropriate safeguards are in place to protect your data, which may include standard contractual clauses, binding corporate rules or reliance on applicable adequacy decisions, depending on the jurisdiction involved.

By using the Platform, you acknowledge and agree that your personal data may be transferred internationally as described in this Policy.

The ZSS99 Platform may contain references to third-party services, payment providers or other platforms. This Privacy Policy applies solely to data processed by ZSS99 through the Platform. We are not responsible for the privacy practices or content of any third-party services you may access separately.

If you interact with a third-party service — for example, a payment provider to complete a deposit transaction — your personal data will also be subject to that provider's own privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with ZSS99.

The ZSS99 Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect personal data from individuals under the minimum required age.

If we discover or have reasonable grounds to suspect that personal data has been collected from an individual who is under the minimum required age, we will take immediate steps to suspend the relevant account, delete the data in question and, where applicable, return any deposited funds.

If you are a parent or guardian and believe that a minor has registered on ZSS99, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

ZSS99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or Platform functionality. The effective date at the top of this Policy will be updated whenever a revised version is published.

Where changes are material, we will provide reasonable notice to registered Users via email or an on-Platform notification prior to the changes taking effect. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement and acceptance of those changes.

We recommend reviewing this Policy periodically to stay informed of how ZSS99 protects and manages your personal data.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact the ZSS99 data support team. Our team is available in English and Urdu to assist users across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

When contacting us about a data rights request, please include your registered account username and a clear description of your request so we can verify your identity and respond as efficiently as possible. We aim to respond to all privacy-related requests within 30 days of receipt.