Privacy Policy — zh99 Online Casino Pakistan

Data Category	Examples	Source	Primary Purpose
Identity Data	Full name, CNIC number, date of birth, nationality	You (during registration / KYC)	Age verification, KYC compliance, account ownership
Contact Data	Email address, mobile number, city (e.g. Karachi, Lahore, Islamabad)	You (during registration)	Account communication, support, security alerts
Financial Data	JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank details, transaction history	You & payment processors	Deposits, withdrawals, fraud prevention, AML compliance
Technical Data	IP address, device ID, browser type, operating system, login timestamps	Automatically collected	Security, fraud detection, platform optimisation
Gaming Activity	Game history, bet amounts in PKR, win/loss records, session duration	Automatically collected	Responsible gaming monitoring, dispute resolution, regulatory reporting
Preference Data	Favourite games, deposit limit settings, marketing consent, language preference	You (account settings)	Platform personalisation, responsible gaming tools
Communications Data	Support chat transcripts, email correspondence, complaint records	You (support interactions)	Customer service, quality assurance, dispute resolution

01 Data Controller Information

zh99 ("zh99", "we", "us", "our") is the data controller responsible for the personal data of users who access the online gaming platform available at https://zh99.bio and all associated subdomains and mobile interfaces.

As data controller, zh99 determines the purposes and means by which personal data collected through the platform is processed. zh99 operates under an international gaming licence and is subject to the data protection obligations imposed by that licence as a minimum standard of privacy compliance.

If you have any questions, concerns, or requests relating to this Privacy Policy or to zh99's data processing activities, please contact our support team. Contact details are provided at the end of this document. All privacy-related enquiries are handled by our dedicated compliance team within a reasonable timeframe and no later than 30 days from receipt of your request.

02 Information We Collect

zh99 collects personal data through the following channels:

Information you provide directly: When you register an account, you provide identity data (including your full name and date of birth for age verification purposes), contact data (email address and mobile number), and financial data necessary to enable deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank. During KYC verification, you may be asked to provide a copy of your CNIC or passport.

Information collected automatically: When you access zh99.bio, our systems automatically collect technical data including your IP address, device identifiers, browser type and version, operating system, referral source, pages visited, session duration, and login timestamps. This data is collected using server logs, cookies, and similar technologies as described in Section 8 of this policy.

Information from third parties: zh99 may receive verification data from identity verification service providers used during KYC processing, and transaction data from payment processors. zh99 may also receive fraud-risk scores from third-party fraud-prevention services. All third-party data providers used by zh99 are contractually required to share data with us lawfully and in compliance with applicable privacy requirements.

03 How We Use Your Data

zh99 uses personal data collected from Pakistani users for the following purposes:

To create and manage your zh99 account, including verifying your identity and age (21+) at registration and during ongoing KYC processes.
To process deposits and withdrawals in PKR through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) and to maintain accurate transaction records.
To deliver the gaming and sports betting services you access on zh99, including maintaining game session history, settling bets, and managing bonus balances.
To detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
To monitor gaming activity for responsible gaming purposes, including identifying potential problem gambling behaviour and enabling the responsible gaming tools available in your account settings.
To communicate with you regarding your account, including security alerts, transaction confirmations, and responses to support requests.
To send you promotional communications regarding zh99 offers, bonuses, and new features — but only where you have provided explicit consent for marketing communications. You may withdraw this consent at any time.
To meet our legal and regulatory obligations under zh99's international gaming licence, including record-keeping requirements, anti-money laundering (AML) obligations, and reporting duties.
To improve the zh99 platform through aggregated, anonymised analytics — no individual user is identifiable in any analytics reporting used for product development purposes.

04 Legal Basis for Processing

zh99 processes personal data on the following legal bases, depending on the specific purpose of processing:

Contractual necessity: Processing required to fulfil our obligations under the User Agreement you enter into when registering an account — including account management, payment processing, and delivery of gaming services.
Legal obligation: Processing required to comply with zh99's obligations under its international gaming licence, including age verification, KYC/AML compliance, responsible gaming record-keeping, and regulatory reporting.
Legitimate interests: Processing carried out to protect the security and integrity of the zh99 platform, detect and prevent fraud and abuse, and conduct anonymised analytics to improve our services — where these interests are not overridden by your privacy rights.
Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Third Parties

zh99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for each specific purpose:

Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider processes this data under their own privacy policies and applicable financial regulation.
Identity verification providers: Third-party KYC service providers receive identity documentation submitted during verification. These providers are contractually bound to process data solely for identity verification purposes.
Game software providers: Game studios and software providers that supply games on the zh99 platform may receive anonymised session data necessary to operate and maintain those games. They do not receive your identity or payment data.
Fraud prevention services: zh99 shares technical data (such as IP address and device fingerprint) with fraud-prevention partners to detect multi-accounting, bonus abuse, and financial crime.
Regulatory and law enforcement authorities: zh99 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, court order, or the conditions of our international gaming licence.
Business transfers: In the event of a merger, acquisition, or sale of substantially all of zh99's assets, user data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties with whom zh99 shares personal data are required to enter into data processing agreements that bind them to process the data only for the specified purpose, to apply appropriate security measures, and to comply with applicable privacy requirements.

06 Data Retention

zh99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

Account data and KYC records: Retained for the duration of your account's active status and for a minimum of 5 years following account closure, as required by AML regulations and zh99's licensing obligations.
Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
Gaming activity logs: Retained for a minimum of 3 years from the date of each gaming session, for dispute resolution and regulatory reporting purposes.
Support and communications records: Retained for 2 years from the date of last communication, for quality assurance and dispute resolution purposes.
Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent, to demonstrate compliance.
Self-exclusion records: Retained for the full duration of any self-exclusion period and for 5 years thereafter, to prevent re-registration by excluded users.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted to the minimum personnel necessary.

07 Data Security

zh99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

Transport Layer Security (TLS) encryption for all data transmitted between your device and zh99's servers.
Encryption at rest for sensitive data categories including identity documents and financial records.
Role-based access controls ensuring that zh99 staff can access personal data only to the extent required for their specific job function.
Regular security assessments and penetration testing of the zh99 platform infrastructure.
Multi-factor authentication requirements for staff accessing systems containing personal data.
Incident response procedures that include notification obligations to affected users and relevant authorities in the event of a data breach involving personal data.

While zh99 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account password and for logging out of your account on shared devices. If you suspect unauthorised access to your zh99 account, please contact our support team immediately.

08 Cookies & Tracking Technologies

zh99 uses cookies and similar tracking technologies on zh99.bio to enhance your experience, maintain your session, and collect analytics data. The following categories of cookies are used:

Strictly necessary cookies: Essential for the operation of zh99.bio, including session management, authentication, and security features. These cannot be disabled without affecting platform functionality.
Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations to provide a more personalised experience.
Analytics cookies: Collect aggregated, anonymised data about how users navigate zh99.bio — pages visited, time on site, and navigation paths — to help us improve the platform. No individual user is identifiable through analytics data.
Security and fraud-prevention cookies: Assist in identifying suspicious behaviour, detecting bot activity, and preventing multi-accounting and bonus abuse.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of zh99.bio and may prevent you from accessing certain features including login and payment processing. zh99 does not use third-party advertising or behavioural tracking cookies.

09 Your Privacy Rights

As a registered zh99 user, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team. zh99 will respond to all verified requests within 30 days.

Right of access: You may request a copy of the personal data zh99 holds about you, along with information about how it is processed.
Right to rectification: You may request correction of inaccurate or incomplete personal data held by zh99. You can update many of your account details directly through your account settings.
Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that zh99 may be required to retain certain data to comply with legal and regulatory obligations, even after account closure.
Right to restriction: You may request that zh99 restrict processing of your data in certain circumstances, for example while the accuracy of your data is being verified following a rectification request.
Right to data portability: You may request a copy of the personal data you provided to zh99 in a structured, commonly used, machine-readable format.
Right to object: You may object to zh99 processing your data on the basis of legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes, which takes effect immediately upon receipt of your request.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 International Data Transfers

zh99 operates as an internationally licensed platform and, as such, your personal data may be transferred to and processed in countries outside Pakistan. This may occur when data is processed by our third-party service providers, including KYC providers, payment processors, and game software providers, who may be located in various jurisdictions.

Where personal data is transferred internationally, zh99 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognised privacy frameworks. These safeguards may include contractual clauses that impose data protection obligations on the recipient, or reliance on adequacy determinations where applicable.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our support team.

11 Protection of Minors

zh99 is strictly prohibited for individuals under 21 years of age. We take the protection of minors extremely seriously and have implemented the following measures:

All users are required to provide date of birth during registration, and zh99 will not create an account for any individual who does not meet the 21+ age requirement.
zh99 conducts KYC verification that includes age verification for all registered accounts. Where age cannot be confirmed, the account is suspended pending verification.
If zh99 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, the account is closed immediately, all pending transactions are cancelled, and any personal data collected from that individual is deleted as soon as our legal record-keeping obligations permit.
zh99 does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered on our platform, please contact our support team immediately.
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming and betting platforms, including zh99.bio.

21+ zh99 is an adults-only platform. You must be 21 years of age or older to register and play.

12 Changes to This Policy

zh99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the conditions of our international gaming licence. The updated policy will be published on this page with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect your rights or the way in which zh99 processes your personal data — zh99 will notify registered users by email to the address associated with their account at least 14 days before the changes take effect. Your continued use of the zh99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how zh99 protects your personal data. If you have any questions about any changes to this policy, please contact our support team prior to the effective date of the update.

zh99 Privacy Policy

Your Privacy Matters to zh99

What Data zh99 Collects

Complete Privacy Policy

Join Pakistan's Premier Gaming Platform