z999 Privacy Policy – How We Handle Your Personal Data

01

What Personal Data We Collect

z999 collects personal data from you in three ways: directly from you when you register or use the platform, automatically as you interact with the site, and occasionally from third-party sources such as payment processors for verification purposes.

The following table summarises the categories of data we collect, why we collect them, and the legal basis for doing so:

z999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is specifically required by applicable law — for example, certain responsible gaming interventions may require health-related declarations.

02

How We Use Your Personal Data

z999 uses the personal data we collect for specific, stated purposes. We do not use your data for any purpose that is incompatible with the reasons listed below without first obtaining your explicit consent.

• Running your account: Processing your registration, verifying your identity, maintaining your balance, processing deposits and withdrawals, and providing access to games and betting markets.
• Security and fraud prevention: Detecting and preventing fraudulent activity, identifying unusual betting patterns, verifying that your payment methods belong to you, and protecting the integrity of the z999 platform for all players.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering laws, responding to lawful requests from regulatory authorities, and maintaining the records required by law.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling, applying player-requested limits and exclusions, and contacting players where our systems flag potential harm.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve our games, interface, and services. This analysis does not identify individual players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news — but only if you have opted in to receive these. You can withdraw your consent at any time.

z999 does not use automated decision-making or profiling to make decisions that have a legal or similarly significant effect on you, except as required to detect fraud or comply with anti-money-laundering obligations. If automated systems flag your account for review, a human member of our compliance team conducts the final assessment.

03

Cookies and Tracking Technologies

z999 uses cookies and similar technologies on the z999.wine website and within the platform interface. A cookie is a small text file stored on your device that helps the platform remember certain information between sessions. Here is a breakdown of the types of cookies z999 uses:

• Essential cookies: These are required for the platform to function at all. They keep you logged in, maintain your session state, and ensure that security features such as two-factor authentication work correctly. You cannot opt out of essential cookies while using z999.
• Security cookies: Used to detect fraudulent activity and protect against cross-site request forgery and similar attack vectors. These do not track your activity beyond what is needed for security purposes.
• Analytics cookies: Help z999 understand how players use the platform in aggregate — which pages are most visited, where players encounter issues, how long sessions last. This data is anonymised and never used to identify individual players.
• Preference cookies: Remember your settings such as language preferences, display options, and which games you have recently opened. These improve your experience but are not essential to platform operation.

z999 does not use third-party advertising cookies. We do not participate in cross-site tracking networks or retargeting programmes that follow you to other websites after you leave z999.wine.

You can also manage cookies through your browser settings. Note that disabling cookies beyond essential ones may affect the functionality of parts of the z999 platform.

04

Data Sharing and Third Parties

z999 does not sell your personal data. Period. However, operating a platform of this complexity requires working with certain trusted third-party service providers. When we share data with these parties, we share only what is strictly necessary for the specific service they provide, and we ensure that they are contractually bound to use it only for that purpose.

The categories of third parties with whom z999 may share your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners require transaction data to process your deposits and withdrawals. They receive only the minimum information required to complete the transaction.
• Identity verification providers: Third-party KYC (Know Your Customer) services process your identity documents for age and identity verification. These providers are certified to handle sensitive identity data and are bound by strict data processing agreements.
• Game providers: Licensed game providers such as Microgaming, NetEnt, Evolution Gaming, and Playtech operate the game engines used on z999. These providers may receive a player session token to initialise a game session but do not receive your personal identity information.
• IT and security infrastructure: Cloud hosting and cyber-security providers who maintain the infrastructure on which z999 runs. These providers have access to server-level data as part of their service but are contractually prohibited from using it for any other purpose.
• Legal and regulatory authorities: z999 may be required by law to disclose personal data to government bodies, financial intelligence units, or law enforcement agencies. Such disclosures are made only when legally required and are documented internally.

05

Data Security

z999 takes data security seriously — not as a compliance exercise, but because a security breach would directly harm our players, and that is unacceptable to us. The following technical and organisational measures are in place to protect your personal data:

• Transport encryption: All data transmitted between your device and z999 servers uses TLS 1.3, the current gold standard for transport encryption.
• Data at rest: Personal data stored in z999 databases is encrypted at rest using AES-256 encryption.
• Payment isolation: Payment processing occurs in a fully isolated environment. Raw payment credentials are never stored on z999 servers.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who do not have a legitimate operational reason to access your data cannot do so.
• Penetration testing: z999 commissions independent security assessments of the platform on a regular basis to identify and address vulnerabilities before they can be exploited.
• Incident response: z999 maintains a documented data breach response plan. In the event of a breach that affects your personal data, we will notify you within 72 hours of becoming aware of it.

06

Your Rights Over Your Personal Data

As a z999 player, you have the following rights in relation to the personal data we hold about you. All requests are processed free of charge and within 30 days of receipt:

To exercise any of these rights, contact our Data Protection team at support@z999.wine with the subject line "Data Request". Please include your registered mobile number so we can verify your identity before processing the request.

07

Data Retention and Deletion

z999 retains personal data only for as long as it is genuinely needed for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When data reaches the end of its retention period, it is deleted securely or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

If you close your z999 account voluntarily, personal data subject to legal retention requirements will be held for the minimum period required and then deleted. Data that is not subject to retention requirements — such as marketing preferences and preference cookies — is deleted within 30 days of account closure.

08

Policy Updates and How to Contact Us

z999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data protection practices. When we make material changes — meaning changes that significantly affect your rights or how your data is used — we will notify registered players by email and post a prominent notice on the z999.wine website at least 7 days before the change takes effect.

For non-material changes such as minor clarifications or corrections to wording, the updated policy will simply replace the previous version. The "Last updated" date at the top of this page will always reflect when the most recent change was made.

For any privacy-related queries, requests, or concerns, contact z999 as follows:

• Email: support@z999.wine — subject line "Privacy Request"
• Live Chat: Available 24/7 via the chat icon within the z999 platform
• Response time: Within 2 hours by live chat; within 24 hours by email for general queries; within 30 days for formal data subject requests

We take all privacy queries seriously. If you contact us about a data concern, you will receive a response from a qualified team member — not an automated reply — within the timeframes stated above.