Privacy Policy for zc998

This Privacy Policy ("Policy") sets out the basis on which zc998 ("Platform", "we", "us", "our"), operating the website at zc998.org, collects, processes, stores, and shares personal data relating to users of the platform ("Player", "you", "your"). We are committed to handling your personal information responsibly, transparently, and in accordance with globally recognised data protection principles.

zc998 serves an English-speaking Pakistani player base with a particular presence across Karachi, Lahore, Faisalabad, and Islamabad. We recognise that data privacy is a matter of trust and that our players have every right to understand and control how their personal information is used when they engage with cricket betting, live casino games, slots, and all other services available on the zc998 platform.

By registering an account on zc998, making a deposit, placing a bet, or otherwise using any feature of the platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not accept this Policy in its entirety, you must not create or continue to use a zc998 account.

zc998 collects personal data through several touchpoints during your use of the platform. The categories of data we collect, and the circumstances under which they are collected, are described below.

2.1 Registration Data

When you create a zc998 account, we collect the following mandatory information: full legal name, date of birth, residential address (including city, e.g., Karachi, Lahore, Faisalabad, or Islamabad), email address, mobile phone number, and your chosen username and password. This data is necessary to establish your account and verify your identity.

2.2 Identity Verification (KYC) Data

Before processing any withdrawal request, zc998 is required to verify your identity. For this purpose, we collect copies of government-issued identity documents such as your CNIC (Computerised National Identity Card) or passport, and in some cases a proof of residential address such as a utility bill or bank statement dated within the past three months.

2.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bonuses, and wagering activity associated with your account. This includes the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full payment credentials — these are handled by our PCI-DSS compliant payment processors.

2.4 Gameplay and Behavioural Data

We collect data relating to your activity on the platform, including games played, bets placed, session durations, betting patterns, bonus usage, and responsiveness to responsible gaming interventions. This data is used for fraud prevention, responsible gaming monitoring, product improvement, and personalisation of your experience.

2.5 Device and Technical Data

When you access zc998, our systems automatically collect technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and connection type. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes. This includes the content of messages, timestamps, and the nature of the issue raised.

zc998 uses the personal data it collects for clearly defined, documented purposes. We do not use your data for purposes that are incompatible with those stated below without seeking your separate consent.

zc998 does not use automated profiling for decisions that have a significant legal or similarly significant effect on players without providing a mechanism for human review. Behavioural analytics used for responsible gaming monitoring may trigger automated alerts, but any resulting account restrictions are subject to review upon player request.

zc998 processes personal data only where a valid legal basis exists for doing so. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC verification requirements, and responses to lawful requests from regulatory authorities or law enforcement agencies.
• Legitimate Interests: Processing carried out in pursuit of zc998's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit, freely given consent, primarily in relation to marketing communications and optional platform personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zc998 does not sell, rent, or commercially trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: To process deposits and withdrawals, we share necessary financial and identity data with our payment processing partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network service providers. These partners are contractually bound to use your data solely for payment processing purposes.
• Identity Verification Providers: KYC document verification is conducted by accredited third-party identity verification specialists. These providers process your documents under strict data processing agreements and are not permitted to use your data for any purpose other than identity verification on behalf of zc998.
• Fraud and Security Providers: We use third-party fraud detection and cybersecurity tools that may process device fingerprint data, IP address data, and behavioural signals to identify and prevent fraudulent activity on the platform.
• Regulatory Authorities and Law Enforcement: Where required by law or a valid regulatory or court order, zc998 will disclose player data to competent authorities. We will, where legally permissible, notify you of such disclosure requests.
• Professional Advisers: In certain circumstances, data may be shared with our legal, financial, or auditing advisers under strict confidentiality obligations, solely for the purpose of obtaining professional advice or conducting audits.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of zc998's business, player data may be transferred as part of that transaction. You will be notified in advance of any such transfer and the privacy terms applicable to your data post-transfer.

zc998 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to maintain your session security, and to improve your overall experience. A cookie is a small text file stored on your device by your browser when you visit a website.

The categories of cookies used by zc998 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your login session, maintain your authenticated state, and protect against cross-site request forgery. These cookies cannot be disabled without affecting core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the platform — such as which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used solely for internal platform improvement purposes.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and notification choices — so that you do not need to reconfigure them each time you log in.
• Marketing Cookies (with consent only): With your explicit consent, zc998 may use cookies to deliver relevant promotional content within the platform based on your gaming preferences and activity history. You may opt out of marketing cookies at any time through your account preferences.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the zc998 platform. For all other cookie categories, the platform provides a preference management interface accessible upon first visit and from your account settings at any time thereafter.

zc998 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical and platform improvement purposes.

zc998 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and zc998 servers is encrypted using TLS 1.3 protocol. Insecure HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data stored on zc998 servers — including KYC document copies, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are never stored in plain text. They are hashed using bcrypt with an appropriate cost factor, rendering them unrecoverable even in the event of a data breach.
• Two-Factor Authentication: Players are strongly encouraged to enable SMS-based two-factor authentication (2FA) on their accounts. 2FA significantly reduces the risk of unauthorised account access even where login credentials have been compromised.
• Access Controls: Access to personal data within zc998 is restricted on a strict need-to-know basis. Staff with access to player data undergo background screening and are bound by confidentiality obligations.
• Penetration Testing: zc998 conducts periodic third-party security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a data breach affecting player personal data, zc998 will notify affected players and, where legally required, relevant regulatory authorities, within the timeframes stipulated by applicable law.

zc998 respects your rights in relation to your personal data. The following rights are available to all players, and may be exercised by contacting our support team at support@zc998.org with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data zc998 holds about you. We will provide this within 30 days of receipt of a valid request, at no cost for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details such as your registered email address and mobile number can be updated directly within your account settings panel.
• Right to Erasure: You may request that zc998 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the processing was unlawful. Note that this right is subject to our legal obligations to retain certain data — for example, AML regulations require us to retain transaction records and KYC data for five years regardless of account closure.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while accuracy of data is disputed, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data where that processing is based on legitimate interests, including profiling. You may also object to direct marketing at any time, in which case we will cease all such communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

zc998 aims to respond to all data rights requests within 30 calendar days. Where a request is complex or involves large volumes of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

The zc998 platform is strictly an adult gaming service. Access is permitted only to individuals who are at least 21 years of age. zc998 does not knowingly collect, process, or retain personal data from any person under the age of 21.

All accounts are subject to age verification as part of the KYC process. Where zc998 discovers or has reasonable grounds to believe that a registered user is under the age of 21, the account will be immediately suspended, all pending transactions cancelled, and any balance held in the account returned to the verified payment method on file pending identity confirmation. If no verified payment method exists, the balance will be held pending resolution.

If you are a parent or guardian and believe that a minor under your care has accessed or registered on the zc998 platform, please contact us immediately at support@zc998.org. We take all such notifications seriously and will act promptly to investigate and resolve the matter.

zc998 primarily serves players in Pakistan, and our core data processing infrastructure is designed with the Pakistani market in mind. However, some of our third-party service providers — including identity verification specialists, fraud detection providers, and cloud infrastructure partners — may process data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, zc998 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding the protections described in this Policy. Safeguards may include contractual data processing agreements incorporating internationally recognised standard contractual clauses, adequacy decisions by relevant regulatory bodies, or verified adherence to recognised international data protection frameworks.

zc998 does not transfer player personal data to jurisdictions that do not provide an adequate level of data protection without first implementing additional contractual or technical safeguards to compensate for any protection gap.

The zc998 platform integrates with a number of third-party service providers to deliver its full suite of gaming and payment features. While zc998 exercises due diligence in selecting partners who meet our data protection standards, we are not responsible for the privacy practices of independent third parties once data has been processed by them for their own purposes.

Third-party services integrated within or accessible through the zc998 platform include game content providers, payment gateway operators, customer support tooling, and analytics platforms. Each of these providers operates under its own privacy policy and data processing terms, which govern how they handle data in their capacity as independent data controllers or processors.

zc998 does not embed links to external websites in its platform content. Any third-party services referenced in this Policy are engaged solely for operational purposes under contractual data processing terms. Players should be aware that any direct interaction with a third-party provider outside of the zc998 platform — such as logging into a JazzCash or EasyPaisa portal to initiate a transfer — is governed by that provider's own privacy terms.

zc998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. Any changes will be published on this page at zc998.org/privacy-policy and the "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes are material — meaning they significantly affect the way in which we process your personal data or alter your rights — zc998 will provide advance notice via your registered email address or through a prominent notice within the platform. You will be given a reasonable opportunity to review material changes before they take effect.

Your continued use of the zc998 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which zc998 handles your personal data, please contact our dedicated privacy support team through any of the following channels.

• Live Chat: Available 24/7 directly within the platform. Average response time is 3–5 minutes.
• Email: support@zc998.org — please use the subject line "Privacy Policy Enquiry" to ensure your message is routed to the correct team. Responses are provided within 24 hours on business days.
• Data Rights Requests: For formal data rights requests — including access, rectification, erasure, portability, or objection — please email support@zc998.org with the subject line "Data Rights Request" and include your registered email address and a brief description of your request.

Players located across Karachi, Lahore, Faisalabad, and Islamabad can expect the same quality of response regardless of location, as all support is delivered digitally with no geographic restrictions.