Privacy Policy

This Privacy Policy ("Policy") is issued by ZS998 ("ZS998", "we", "us", "our"), the operator of the online sports betting and casino information platform accessible at https://zs998.cam (the "Platform"). This Policy sets out how ZS998 collects, processes, stores, shares and protects personal data submitted by individuals ("Users", "you") who access or use the Platform.

By registering an account, visiting the Platform or submitting any personal information to ZS998, you acknowledge that you have read and understood this Policy. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised version.

ZS998 is committed to processing personal data in a manner that is lawful, fair and transparent. We apply data minimisation principles and do not process data beyond what is necessary for the stated purposes described in this Policy.

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, CNIC number, payment account details, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. ZS998 is the Data Controller for personal data processed through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of ZS998 under a contractual arrangement and in accordance with this Policy.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics and personalisation.
• "KYC" means Know Your Customer — the identity verification process required before withdrawal of funds or as otherwise mandated by compliance obligations.
• "Sensitive Data" means a special category of Personal Data that warrants heightened protection, including financial information, identity documents and health-related data disclosed in the context of responsible gambling tools.

ZS998 acts as the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, ZS998 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that such processing is carried out in accordance with applicable data protection principles and this Policy.

Where ZS998 engages third-party service providers (Data Processors) to perform specific functions — such as payment processing infrastructure, fraud detection or customer support tools — those processors act under contractual obligations that require them to process Personal Data only on ZS998's documented instructions and to maintain appropriate security standards.

ZS998 collects Personal Data through the following categories of interaction:

ZS998 does not intentionally collect Sensitive Data beyond what is necessary for identity verification, anti-money laundering compliance and responsible gambling obligations. We do not collect racial, religious, political or biometric data unless directly required by applicable law or regulatory mandate.

ZS998 processes Personal Data on the following legal bases, applied according to the nature and purpose of each processing activity:

• Contractual Necessity: Processing required to perform the contract with you — including account creation, managing your balance, processing deposits and withdrawals, and delivering betting and gaming services.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF) laws and Know Your Customer (KYC) regulatory requirements.
• Legitimate Interests: Processing necessary for ZS998's legitimate interests, including fraud prevention, security monitoring, improving Platform performance and analytics, provided those interests are not overridden by your rights and interests.
• Consent: Where required by applicable law, processing based on your freely given, specific and informed consent — for example, in relation to certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Vital Interests: In limited circumstances, processing necessary to protect the vital interests of a data subject — for example, disclosing information to a third-party responsible gambling support organisation at the user's request.

ZS998 uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, verify and administer your ZS998 account, including processing login credentials and account preferences.
• Transaction Processing: To process deposits, withdrawals and other financial transactions through available payment channels, and to maintain accurate transaction records.
• Identity Verification: To complete KYC checks as required by our compliance obligations, including verifying identity documents and confirming source of funds where applicable.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent transactions, account abuse, money laundering and other prohibited conduct as defined in our Terms & Conditions.
• Platform Improvement: To analyse usage patterns, monitor service performance, identify technical issues and improve the usability and reliability of the Platform for Pakistani users and other audiences.
• Customer Support: To respond to your queries, complaints and account requests through Live Chat, our Help Centre and email, in English and on request in Urdu.
• Responsible Gambling: To facilitate and enforce deposit limits, loss limits, session controls and self-exclusion requests as selected or requested by you through your account settings.
• Legal Compliance: To meet reporting, record-keeping and disclosure obligations imposed by applicable law, regulatory authorities or court orders.
• Marketing Communications: Where you have provided consent or where legitimate interest applies under applicable law, to send you information about promotions, bonuses and Platform updates. You may opt out of marketing communications at any time.

ZS998 does not sell your Personal Data to third parties. We may share Personal Data with the following categories of recipients only to the extent necessary for the purposes set out in this Policy:

• Service Providers (Data Processors): Third-party vendors engaged to provide specific operational services on our behalf, including payment processing infrastructure, identity verification services, fraud detection tools, cloud hosting, customer support platforms and email delivery systems. All processors are bound by contractual data processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory directive, ZS998 may disclose Personal Data to competent authorities. We will, where legally permissible, notify you of such disclosure.
• Responsible Gambling Organisations: In limited circumstances, and only with your explicit request or consent, we may share relevant data with recognised responsible gambling support organisations to facilitate exclusion or intervention services.
• Group Entities: Where ZS998 operates within a group corporate structure, limited data may be shared with affiliated entities for internal administrative, compliance and risk management purposes, under equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition or sale of assets involving ZS998, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

In all cases of data sharing, ZS998 applies appropriate contractual, technical and organisational safeguards to protect your Personal Data and limit its use to the stated purpose.

ZS998 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal Data associated with an active ZS998 account is retained for the duration of the account relationship and for a period thereafter as required by applicable AML, KYC and financial record-keeping regulations.
• Closed Accounts: Following account closure, ZS998 will retain certain Personal Data — including identity verification records, transaction history and communications logs — for a minimum period as required by the applicable licensing framework and anti-money laundering obligations. This period is typically five (5) years from the date of account closure, unless a longer period is mandated by law.
• Marketing Data: Where Personal Data is processed for marketing purposes on the basis of consent, it will be retained until consent is withdrawn or as otherwise specified in the consent collection notice.
• Technical Logs: Server and access logs are typically retained for a shorter operational period in line with security and debugging requirements.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with ZS998's internal data destruction procedures.

ZS998 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, odds format selection and display options. Disabling these may affect your user experience.
• Analytics Cookies: Used to collect aggregated information about how users interact with the Platform, including pages visited, session duration and navigation paths. This data is used to improve Platform performance and user experience.
• Marketing Cookies: Where applicable and subject to consent, used to deliver relevant promotional content. These are only placed where you have consented to receive marketing communications.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. For detailed browser-specific guidance, consult your browser's help documentation.

ZS998 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Security measures include, but are not limited to:

• TLS (Transport Layer Security) encryption for all data in transit between your device and ZS998 servers.
• Hashed storage of account passwords using industry-standard cryptographic algorithms.
• Access controls and role-based permissions limiting internal access to Personal Data to authorised personnel with a documented need.
• Two-factor authentication options for user accounts.
• Regular security assessments and monitoring of the Platform infrastructure.
• Contractual obligations on all Data Processors to maintain equivalent security standards.

While ZS998 takes all reasonable steps to protect your data, no online transmission or storage system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, ZS998 will notify affected users and relevant regulatory authorities as required by applicable law.

ZS998 may transfer Personal Data to countries outside of Pakistan for storage, processing or service delivery purposes where third-party processors operate in those jurisdictions. Such transfers are made only where:

• The destination country offers an adequate level of data protection as recognised by applicable law; or
• Appropriate contractual safeguards are in place between ZS998 and the receiving entity, such as standard contractual clauses or equivalent data protection agreements; or
• The transfer is necessary for the performance of the contract between ZS998 and the user.

Pakistani users should be aware that data protection standards in recipient countries may differ from those applicable in Pakistan. Where you wish to understand the safeguards applicable to a specific transfer, please contact us using the details in Section 16.

Subject to applicable data protection law and certain legal limitations, you have the following rights in relation to your Personal Data held by ZS998:

To exercise any of the above rights, please contact ZS998 via our Help Centre or by email at the address listed in Section 16. We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may require identity verification before processing a data rights request. Certain rights may be limited where retention is required by law or where deletion would conflict with ongoing compliance obligations.

The ZS998 Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the applicable operator licence jurisdiction or local law. ZS998 does not knowingly collect Personal Data from any person under the age of 18.

If ZS998 becomes aware that Personal Data has been collected from a person under the age of 18 without appropriate parental consent or in violation of applicable law, that data will be deleted and the associated account will be closed without delay.

Parents and guardians who believe a minor has submitted Personal Data to ZS998 should contact us immediately using the details in Section 16 so that appropriate action can be taken. ZS998 takes underage access seriously and provides age verification mechanisms as part of the account registration and KYC process.

The ZS998 Platform may contain references to, or contextual mentions of, third-party services — including payment providers familiar to Pakistani users such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are made for contextual familiarity only and do not constitute active hyperlinks to those third-party platforms.

ZS998 does not control any third-party websites or services and accepts no responsibility for their privacy practices, content or data handling. This Policy applies solely to Personal Data processed by ZS998 through the Platform. We encourage users to review the privacy policies of any third-party services they interact with independently.

ZS998 reserves the right to amend, update or replace this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, Platform functionality or our data processing practices. Where changes are material, we will notify registered users via their registered email address or through a prominent Platform notice prior to the changes taking effect.

The date of the most recent update is displayed at the top of this Policy. We recommend reviewing this Policy periodically. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise a data right or have a complaint about how ZS998 has handled your Personal Data, please contact our support team through the Help Centre or by email. Our team communicates in English, with Urdu assistance available on request.

If you are not satisfied with ZS998's response to a privacy complaint, you may be entitled to refer the matter to the relevant data protection supervisory authority in the jurisdiction under which ZS998 is licensed. Details of the applicable supervisory authority are available on request.

Pakistani users with questions about the applicability of local data protection law to their specific situation are encouraged to seek independent legal advice, as this Policy does not constitute legal guidance under Pakistani law.