zx999 Privacy
Policy

This Privacy Policy ("Policy") describes how zx999 ("zx999", "we", "us", "our"), the operator of the online gaming platform at https://zx999.lat ("Platform"), collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who interact with the Platform.

This Policy applies to all personal data collected through the zx999 website, any zx999 mobile application, email communications, customer support interactions, and any other channel through which you interact with zx999. It applies to all registered players and to visitors who browse the platform without creating an account.

This Policy is intended to be read in conjunction with the zx999 Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall prevail.

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is zx999, operating under its international gaming regulatory framework, accessible at https://zx999.lat.

As data controller, zx999 determines the purposes for which and the manner in which your personal data is processed. Where zx999 engages third-party service providers to process data on its behalf, those providers act as data processors under zx999's instructions and are bound by data processing agreements that require them to implement appropriate technical and organisational security measures.

All enquiries, requests, and complaints relating to this Privacy Policy or to zx999's handling of your personal data should be directed to our Privacy Team. Contact details are provided in Section 14 of this Policy.

zx999 collects personal data in several categories, depending on the nature of your interaction with the Platform. The categories of data we collect are as follows:

zx999 uses the personal data it collects for the following specific purposes. Where a purpose requires a particular legal basis, that basis is identified in Section 5.

• Account creation and management: To register your zx999 account, verify your identity, and maintain your account in good standing throughout your use of the Platform.
• Processing transactions: To process deposits, withdrawals, and bonus credits through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, Raast), and to maintain accurate records of all financial activity on your account.
• Identity and age verification (KYC): To verify that you are who you claim to be and that you are at least 21 years of age, in compliance with applicable regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal or prohibited activities.
• Customer support: To respond to your queries, complaints, and support requests via live chat, email, or other communication channels.
• Regulatory compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations, including record-keeping requirements.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits, and identify players who may be exhibiting signs of problem gambling behaviour.
• Platform improvement: To analyse usage data in aggregate to improve the performance, features, and user experience of the zx999 platform.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted into marketing communications. Players may opt out at any time (see Section 11).

zx999 processes personal data only where a valid legal basis exists for that processing. The primary legal bases we rely upon are:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the zx999 Terms & Conditions — including account management, transaction processing, and customer support.
• Legal obligation: Processing that is necessary to comply with applicable laws and regulations, including AML requirements, KYC obligations, and regulatory record-keeping requirements.
• Legitimate interests: Processing that is necessary for zx999's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for any processing of sensitive personal data. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

zx999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: We share necessary financial data with payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT infrastructure providers) solely for the purpose of processing your transactions. These providers are contractually bound to process your data only for that purpose and to maintain appropriate security standards.
• Identity verification providers: We may share identity data with third-party KYC and identity verification service providers for the purpose of verifying your identity and age as required by applicable regulations.
• Fraud and security services: We may share technical and identity data with fraud prevention and cybersecurity service providers for the purpose of protecting the zx999 platform and its players from fraudulent and malicious activity.
• Regulatory and law enforcement authorities: Where required by applicable law or court order, zx999 will disclose personal data to the relevant regulatory or law enforcement authority. We will notify you of such requests where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of zx999's assets, personal data held by zx999 may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will be preserved.

The zx999 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. A cookie is a small text file placed on your device when you visit the platform.

zx999 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core functionality such as session management, account authentication, and security. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences — such as language settings, game display preferences, and responsible gaming tool configurations — to provide a more personalised experience.
• Analytics cookies: These cookies collect anonymised information about how players use the zx999 platform, such as which pages are most visited and how players navigate between pages. This data is used to improve platform performance and user experience.
• Security cookies: These cookies assist in identifying and preventing security threats, including session hijacking, cross-site request forgery (CSRF), and brute-force login attempts.

You may control non-essential cookie categories through your browser settings. Please note that disabling certain cookies may affect the functionality of the zx999 platform. zx999 does not use third-party advertising cookies.

zx999 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal, regulatory, or contractual obligations. Our general retention principles are as follows:

• Active account data: Personal data relating to an active zx999 account is retained throughout the period the account remains active and for a minimum period of five (5) years following account closure, in compliance with applicable AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Identity verification records: KYC documentation is retained for a minimum of five (5) years following the end of the business relationship.
• Customer support records: Communications with our support team are retained for a period of two (2) years from the date of the interaction.
• Marketing preferences: Records of marketing consent and opt-out preferences are retained for as long as necessary to demonstrate compliance and for three (3) years following the last recorded marketing interaction.

zx999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• Encryption in transit: All data transmitted between your device and the zx999 platform is encrypted using Transport Layer Security (TLS) version 1.3, the current industry standard for secure web communications.
• Encryption at rest: Sensitive personal data and financial records stored in zx999's databases are encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within zx999's systems is strictly limited on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Network security: The zx999 platform is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), and undergoes regular penetration testing and security audits.
• Incident response: zx999 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

As a data subject, you have a number of rights with respect to your personal data held by zx999. These rights are as follows:

• Right of access: You have the right to request a copy of the personal data that zx999 holds about you, along with information about how it is processed (a "Subject Access Request").
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. Requests will be acted upon without undue delay.
• Right to erasure ("right to be forgotten"): You have the right to request that zx999 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction of processing: You have the right to request that zx999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a complaint is under investigation.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing will cease immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Privacy Team at [email protected] with the subject line "Data Rights Request". We will respond to all requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

zx999 may send you marketing communications — including promotional offers, bonus notifications, game announcements, and platform updates — where you have provided your consent to receive such communications during registration or at any subsequent point.

You may opt out of marketing communications at any time through any of the following methods:

• Clicking the "unsubscribe" link in any zx999 marketing email.
• Adjusting your communication preferences in your zx999 account settings.
• Contacting our support team at [email protected] and requesting to be removed from marketing lists.

The zx999 platform is strictly intended for persons aged 21 years and above. zx999 does not knowingly collect personal data from individuals below the age of 21. Our registration process includes age verification checks designed to prevent minors from accessing the platform.

If zx999 becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be immediately closed, all funds will be handled in accordance with our Terms & Conditions, and all personal data associated with the account will be deleted, subject to any legal retention requirements.

zx999 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made to this Policy, we will notify registered players via email and/or prominent platform notification prior to the changes taking effect.

The current version of this Policy will always be accessible at https://zx999.lat/privacy-policy. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Your continued use of the zx999 platform following the effective date of any revised Policy constitutes your acceptance of the changes.

If you do not agree to the revised Privacy Policy, you may request account closure by contacting our support team. We recommend reviewing this Policy periodically to stay informed of any updates.

For all privacy-related enquiries, data subject access requests, complaints, or any other matter relating to zx999's handling of your personal data, please contact our Privacy Team using the following details:

• Email: support@ zx999.lat with the subject line "Privacy Request"
• Live Chat: Available 24/7 through your zx999 account dashboard (for registered players)

We aim to respond to all privacy enquiries and data rights requests within 30 calendar days of receipt. For complex or numerous requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for the delay.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We will provide details of the applicable authority upon request.