Privacy Policy
📑 Table of Contents
- 01 Introduction
- 02 Definitions
- 03 Personal Data We Collect
- 04 How We Collect Data
- 05 How We Use Your Data
- 06 Legal Basis for Processing
- 07 Data Sharing & Disclosure
- 08 Data Retention
- 09 Cookies & Tracking
- 10 Your Data Rights
- 11 Data Security
- 12 Minors & Age Restrictions
- 13 Third-Party Services
- 14 Policy Amendments
- 15 Contact Us
Your privacy is important to za99. This Privacy Policy explains in clear, plain English what personal data we collect from users of the za99 Platform (za99.cam), why we collect it, how we process and protect it, who we share it with and what rights you have over your own information. By using the za99 Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not consent, please do not use the Platform.
Introduction
za99 ("we", "our" or "the Platform") operates the online casino and sports betting information platform available at za99.cam and its associated subdomains and mobile-optimised interfaces. This Privacy Policy applies to all users who access the Platform from any country or territory, including users in Pakistan and the cities of Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
za99 is committed to protecting the privacy and personal data of all users in accordance with applicable data protection laws and industry best practices. We collect the minimum personal data necessary to deliver Platform services, process transactions, verify user identities, prevent fraud and fulfil any applicable regulatory or legal obligations.
This Privacy Policy should be read alongside our Terms & Conditions, which form the primary agreement governing your use of the Platform. Capitalised terms used but not defined in this Privacy Policy carry the meanings assigned to them in the Terms & Conditions.
za99 does not claim that this Privacy Policy satisfies the requirements of the Pakistani Prevention of Electronic Crimes Act 2016, the Personal Data Protection Bill or any other specific Pakistani data protection legislation that may be enacted or amended from time to time. Users in Pakistan are encouraged to consult qualified legal or privacy professionals for advice on their specific data rights under Pakistani law.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
Any information relating to an identified or identifiable natural person — including name, email address, date of birth, national identity number, payment details, IP address and device identifiers.
Any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure or destruction, whether automated or manual.
za99 — the entity that determines the purposes and means of processing your personal data.
A third party that processes personal data on behalf of za99 under a data processing agreement (e.g. payment processors, KYC service providers, hosting providers).
Know Your Customer — identity and age verification processes that require submission of government-issued identification documents such as a Pakistan CNIC, passport or driving licence.
A freely given, specific, informed and unambiguous indication by the data subject, by a statement or a clear affirmative action, that they agree to the processing of their personal data.
Small text files placed on your device by the Platform to store session information, preferences and analytical data. See Section 9 for full details.
The za99 website at za99.cam, its subdomains, mobile interfaces and any associated digital services operated by za99.
Personal Data We Collect
za99 collects the following categories of personal data from users, depending on the nature and extent of your interaction with the Platform:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g. Pakistan CNIC) | Registration & KYC |
| Contact Data | Email address, mobile phone number, city/region of residence | Registration |
| Financial Data | Payment method type, transaction references, deposit/withdrawal history, account balance | Payment Processing |
| KYC Documents | Copies of CNIC, passport, driving licence, utility bill or bank statement submitted for identity/address verification | KYC Verification |
| Technical Data | IP address, browser type and version, device type and OS, screen resolution, session timestamps | Platform Access (Automatic) |
| Usage Data | Pages visited, games played, bet history, session duration, responsible gambling tool settings | Platform Use (Automatic) |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer Support Interactions |
| Marketing Preferences | Email/SMS marketing consent status, communication preferences, opted-out categories | Registration & Preference Updates |
za99 does not knowingly collect special category data (such as health information, political opinions, religious beliefs or biometric identifiers) unless directly and voluntarily provided by a user in a responsible gambling context (e.g., self-disclosure of a gambling problem to access exclusion tools). Such data is processed solely for responsible gambling case management and is never used for marketing.
How We Collect Personal Data
za99 collects personal data through the following methods:
Information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, use responsible gambling tools, contact our support team or update your account preferences.
Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs and similar technologies. This data is collected whether or not you are logged in to an account.
Identity verification data from KYC service providers where we use third-party identity-checking tools to verify registration information. Fraud and AML (anti-money-laundering) screening data from risk management service providers. We may also receive data from payment processors to confirm transaction status.
Payment providers referenced on the za99 Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are named for contextual familiarity only. These references do not imply partnership, endorsement or data-sharing arrangements with those institutions. Any data processed in connection with payment transactions flows through the operator's contracted payment processors, not directly through the named contextual payment references.
How We Use Your Personal Data
za99 uses the personal data we collect for the following specific purposes:
- Account Creation and Management: To create, maintain and administer your za99 user account, including processing your registration, verifying your identity and managing account settings.
- Identity Verification (KYC): To verify that you meet the minimum age and eligibility requirements for using the Platform, as required under applicable regulatory and operator policies.
- Payment Processing: To process deposits, withdrawals and related financial transactions securely and accurately.
- Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, money laundering, account compromise, bonus abuse and other unlawful or unauthorised activity on the Platform.
- Responsible Gambling: To facilitate responsible gambling tools — including deposit limits, session time limits, loss limits, cooling-off periods and self-exclusion — that you activate on your account. Usage data may be analysed to identify potential problem gambling patterns and to provide proactive responsible gambling outreach.
- Customer Support: To respond to your queries, complaints and requests submitted via live chat, email or other support channels.
- Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders and requests from authorised regulatory bodies.
- Marketing Communications (with Consent Only): To send you promotional offers, bonus alerts and platform updates — only where you have provided explicit consent and only to the extent permitted by applicable law. You may withdraw consent at any time.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience and game content selection.
Legal Basis for Processing
Where applicable data protection law requires a defined legal basis for processing personal data, za99 relies on the following bases:
- Contractual Necessity: Processing required to perform the contract between you and za99 (i.e., the Terms & Conditions) — including account management, payment processing and KYC verification.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements — including AML obligations, age verification mandates and record-keeping duties.
- Legitimate Interests: Processing necessary for the legitimate interests of za99 — including fraud prevention, security monitoring, platform analytics and responsible gambling oversight — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your explicit, freely given consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting support or updating your preferences in your account settings.
Data Sharing & Disclosure
za99 does not sell, rent or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following limited circumstances:
We engage trusted third-party service providers to perform functions on our behalf — including identity verification (KYC) providers, payment processing technology providers, cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform providers. These processors are contractually bound to process your data only on our documented instructions and to maintain appropriate security standards.
We may disclose personal data to regulators, law enforcement agencies, courts or other competent authorities where required to do so by applicable law, court order or binding regulatory requirement.
In the event of a merger, acquisition, restructuring or sale of all or part of za99's business, personal data held by za99 may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.
We may share your personal data with specific third parties where you have provided clear, explicit prior consent to that specific sharing arrangement.
Important: za99 never shares your personal data with advertisers, data brokers, social media platforms or other third parties for commercial marketing purposes without your explicit consent. Payment provider names referenced on this site (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) do not receive your personal data by virtue of being mentioned on our platform.
Data Retention
za99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:
- Active Account Data: Retained for the full duration of your account being open and active on the Platform.
- KYC and Identity Documents: Retained for a minimum period following account closure as required by applicable AML and identity verification regulations. Specific retention periods vary by jurisdiction and operator licence requirements.
- Financial Transaction Records: Retained for a minimum period as required by applicable financial and tax record-keeping obligations. Typically this is a minimum of five (5) years following the transaction date, though this may vary.
- Support and Communications Data: Retained for a reasonable period following resolution of the relevant support interaction, or longer where the communication relates to an ongoing dispute or regulatory matter.
- Self-Exclusion Records: Retained for the full duration of the exclusion period plus a reasonable period thereafter, to prevent circumvention of the exclusion.
- Marketing Data: Retained until you withdraw consent or request deletion, whichever occurs first.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data may be retained indefinitely for analytics purposes.
Cookies & Tracking Technologies
za99 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable the Platform to recognise your browser, maintain session state, remember your preferences and collect analytical information about your use of the Platform.
These cookies are essential for the Platform to function and cannot be disabled. They enable core functions such as account authentication, session management, security enforcement and load balancing. Without these cookies, the Platform cannot operate correctly.
These cookies collect anonymised information about how visitors use the Platform — including pages visited most frequently, session duration and navigation paths. This data helps us improve Platform performance and user experience. These cookies do not identify individual users.
These cookies allow the Platform to remember choices you have made — such as your language preference, display settings and responsible gambling limit configurations — to provide a more personalised experience.
Marketing cookies may be used to present relevant promotions and offers within the Platform based on your usage patterns. These cookies are only placed with your consent. You may withdraw consent and disable marketing cookies at any time via your browser settings or by contacting support.
Managing Cookies: Most web browsers allow you to control cookie settings via the browser's settings or preferences menu. You can typically choose to block all cookies, accept only first-party cookies or delete existing cookies. Please note that blocking strictly necessary cookies will impair the functionality of the Platform. For mobile devices, cookie management options are available via the browser settings on your Android or iOS device.
Your Data Rights
Subject to applicable data protection laws and any overriding legal obligations, you have the following rights in respect of your personal data held by za99. To exercise any of these rights, contact support at [email protected]:
Right of Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where we no longer have a lawful basis to retain it (subject to legal retention obligations).
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
Right to Portability
Request a machine-readable copy of the data you have provided to za99, to transfer to another service provider where technically feasible.
Right to Object
Object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds.
Right to Withdraw Consent
Withdraw any previously given consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Automated Decision-Making
Where automated decision-making significantly affects you (e.g., account restriction triggered by automated fraud detection), you may request human review of that decision.
za99 will respond to data rights requests within a reasonable timeframe — typically within 30 days of receipt. Where a request is complex or numerous, we may extend this period and will notify you accordingly. We may require identity verification before processing any data rights request to ensure we are responding to the legitimate account holder.
Pakistani users should note that the specific data rights described above are based on widely recognised international data protection principles. The extent to which these rights are directly enforceable in Pakistan depends on applicable local legislation, which continues to evolve. za99 commits to honouring these rights as a matter of platform policy regardless of strict local legal obligation.
Data Security
za99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our primary security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and za99 servers is encrypted in transit using industry-standard SSL/TLS protocols.
- Encrypted Data Storage: Sensitive personal data — including KYC documents and payment details — is encrypted at rest using strong encryption standards.
- Access Controls: Personal data is accessible only to za99 staff and authorised processors who have a legitimate need to access it for the purposes described in this Privacy Policy. Access is controlled through role-based permissions and is audited.
- Two-Factor Authentication (2FA): 2FA is available for user accounts and is enforced for internal staff systems that handle personal data.
- Regular Security Reviews: za99 conducts regular reviews of its technical security posture and data processing procedures to identify and address potential vulnerabilities.
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You use the Platform and transmit personal data at your own risk. You are responsible for maintaining the security of your account credentials — including your password and any 2FA codes — and must notify za99 immediately if you suspect any unauthorised access to your account.
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, za99 will notify affected users without undue delay, in accordance with applicable data protection law requirements.
Minors & Age Restrictions
The za99 Platform is strictly intended for users aged 18 years or older, or the higher minimum age required by the operator's applicable license jurisdiction. za99 does not knowingly collect, store or process personal data of individuals under the minimum age requirement.
During registration, users are required to confirm their date of birth, and za99 operates a mandatory KYC identity verification process that includes age verification. If za99 becomes aware that a user is under the minimum age requirement, the account will be immediately suspended, all balances will be reviewed in accordance with the Terms & Conditions, and personal data associated with the underage account will be deleted to the extent permitted by applicable law and record-keeping requirements.
If you are a parent or guardian and believe that your child may have created an account on za99, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action.
Third-Party Services & Links
The za99 Platform may reference third-party services, brands or contextual information for the benefit of Pakistani users. This includes payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, which are referenced for contextual familiarity only. These references do not constitute data-sharing arrangements, commercial partnerships or endorsements by those institutions.
Game content on the za99 Platform is provided by third-party game studios and live dealer providers. These providers may collect technical data (such as game session identifiers and device information) through their embedded game clients for the purposes of game function, fairness certification and studio-level analytics. This data collection is governed by the privacy practices of the respective game studio, not by this Privacy Policy.
za99 is not responsible for the privacy practices of any third-party service provider, game studio or payment processor. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.
Policy Amendments
za99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements or Platform functionality. All updates will be published on this page with a revised "Last Updated" date.
Where changes are material — for example, changes to the categories of data we collect, new third-party sharing arrangements or changes to your data rights — za99 will make reasonable efforts to notify registered users in advance, such as by displaying a prominent notice on the Platform or sending an email to registered addresses.
Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you should stop using the Platform and may request account closure by contacting support.
Contact Us
For all privacy-related enquiries — including data access requests, correction requests, deletion requests, consent withdrawal and data portability requests — please contact the za99 Data Protection team:
Email:
[email protected]
Subject Line: Use "Privacy Request" for all data-related enquiries
Response Time: We aim to acknowledge all privacy requests within 72 hours and respond fully within 30 days
Languages: English (primary); Urdu assistance available on request
For general support queries not related to privacy or data protection, please contact us at the same email address without the "Privacy Request" subject line, or use the live chat feature on the Platform.
Acknowledgement: By continuing to use the za99 Platform you confirm that you have read this Privacy Policy and consent to the collection, processing and use of your personal data as described herein. This Policy was last updated on 1 January 2026. If you have any questions, please contact us at [email protected].
Six Ways za99 Protects Your Data
A plain-English summary of our most important privacy commitments to every user on the Platform.
End-to-End Encryption
All data exchanged between your browser and za99 servers is protected by 256-bit SSL encryption. Sensitive data including KYC documents and financial records is encrypted both in transit and at rest.
We Never Sell Your Data
za99 will never sell, rent or trade your personal information to advertisers, data brokers or any other commercial third party. Your data is used solely to operate the Platform and fulfil legal obligations.
Your Rights, Always Respected
Access, correct, delete or export your data at any time. Withdraw marketing consent whenever you choose. All data rights requests are acknowledged promptly and processed within 30 days.
Minimal Retention Periods
We retain your data only for as long as legally required or operationally necessary. Data that no longer needs to be retained is securely deleted or anonymised — not accumulated indefinitely.
Strict Age Verification
za99 does not knowingly collect data from users under 18 years of age. KYC verification includes mandatory age checks. Underage accounts are immediately suspended and associated data deleted.
Breach Notification Commitment
If a data breach occurs that poses a risk to your rights and freedoms, za99 commits to notifying affected users without undue delay — in plain English, with clear guidance on what to do next.
Your Data Is Safe — Now Explore with Confidence
You understand how za99 handles your data. Head back to the homepage to explore games, sports betting markets and everything else the Platform has to offer Pakistani players.
🔞 18+ only. Gambling involves financial risk. Local laws may restrict participation. Questions about your data? Contact [email protected]