Your Privacy at zs999

1. Information We Collect

zs999 collects personal information from players at various points during the account lifecycle — from initial registration through to ongoing gameplay, financial transactions, and support interactions. The categories of personal information collected are described below.

1.1 Registration Information

When you create a zs999 account, we collect the following mandatory information:

• Full legal name, as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the minimum age requirement of 18 years.
• Residential address, including city, division, and postcode within Bangladesh.
• Email address, used for account communications, security alerts, and (where opted in) promotional messages.
• Mobile phone number, used for account verification, two-factor authentication prompts, and (where opted in) SMS marketing.
• Username and password, used to authenticate your identity each time you log in to the platform.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer obligations, zs999 collects copies of the following documents from players before enabling withdrawal access and certain account features:

• Bangladesh National ID card (NID) or valid passport (photographic identity).
• Proof of address document: utility bill, bank statement, or official government correspondence issued within the last three months.
• Payment method confirmation: screenshot or transaction reference confirming ownership of the bKash, Nagad, Rocket, Upay, or bank account used for deposits.

KYC documents are stored in an encrypted document vault. Access is restricted to authorised compliance team members. Documents are not used for any purpose other than identity verification and fraud prevention.

1.3 Financial Transaction Data

Each time you make a deposit or withdrawal, zs999 records the transaction amount in Bangladeshi Taka (৳), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction timestamp in Bangladesh Standard Time (UTC+6), the transaction reference number assigned by the payment provider, and the resulting account balance. This data is retained for audit, fraud prevention, and dispute resolution purposes.

1.4 Gameplay and Activity Data

zs999 records gameplay activity including game titles accessed, bet amounts placed, outcomes, session start and end times, and responsible gaming tool usage (such as deposit limit settings and self-exclusion requests). This data is used to operate the platform, detect irregular betting patterns, and fulfil responsible gaming obligations.

1.5 Technical and Device Data

When you access the zs999 platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, and pages visited within the platform. This data is used for security monitoring, fraud detection, and platform performance optimisation. It is not used to build advertising profiles.

1.6 Customer Support Communications

When you contact the zs999 support team via live chat or email, the content of those communications — including any attachments you provide — is recorded and retained. These records are used to resolve your query, train support staff, and maintain a history of interactions for dispute resolution purposes.

2. How We Use Your Information

The personal information zs999 collects is used for the following specific purposes. We process your data only where we have a lawful basis to do so — primarily because processing is necessary to perform the contract between you and zs999, to comply with legal obligations, or because you have given your explicit consent.

zs999 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on individual players without human review. Where automated tools flag an account for review (for example, as part of fraud or AML monitoring), a qualified member of the compliance team reviews the case before any action is taken.

3. Sharing and Disclosure

zs999 does not sell, rent, or trade your personal information to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, zs999 shares the minimum necessary transaction data with the relevant payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the information they need to execute the specific transaction. They are contractually prohibited from using your data for their own marketing purposes.

3.2 Game Content Providers

Live casino games and other titles on the zs999 platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and relevant session data to operate the game software. They do not receive your full name, contact details, or financial information.

3.3 Identity Verification Services

zs999 may use third-party KYC verification service providers to assist with validating identity documents. These providers process identity data solely for the purpose of verification and are bound by strict data processing agreements that prohibit any secondary use of the data.

3.4 Legal and Regulatory Disclosure

zs999 may disclose personal information to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, zs999 will disclose only the information specifically required and will notify the affected player where permitted to do so by the relevant authority.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of zs999's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to the privacy terms that governs their data, with a minimum of 30 days' notice before the new terms take effect.

4. Cookies and Tracking Technologies

zs999 uses cookies and similar client-side storage technologies on the platform. A cookie is a small text file stored on your device by your web browser at the request of the website you are visiting. The following table describes the categories of cookies in use on zs999.ws.

zs999 does not use advertising or cross-site tracking cookies. You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional cookies will cause the platform to lose memory of your preferences between sessions.

4.1 Local Storage

In addition to cookies, zs999 may use browser local storage to cache static assets and store non-sensitive session preferences for performance reasons. Local storage data is not transmitted to zs999 servers independently — it is read only when you actively use the platform during a session.

5. Data Security Measures

zs999 implements a layered security architecture designed to protect your personal information from unauthorised access, disclosure, alteration, or destruction. The principal security measures in place include the following:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or app and the zs999 servers is encrypted using TLS 1.2 or higher. This applies to all platform pages, the cashier, the game lobby, and the support chat interface.
• Encrypted Storage at Rest: Sensitive data — including KYC documents, financial records, and password hashes — is stored in encrypted form. Passwords are never stored in plain text; they are hashed using a modern adaptive hashing algorithm.
• Access Controls: Internal access to player data is governed by role-based access controls. Only team members whose job function requires access to a specific data category are granted that access. Access logs are reviewed regularly.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. Staff accounts with access to player data require 2FA without exception.
• Intrusion Detection and Monitoring: zs999 operates continuous server monitoring and intrusion detection systems that flag unusual access patterns, failed login attempts, and anomalous data queries for immediate investigation.
• Vulnerability Management: The platform undergoes regular security assessments. Identified vulnerabilities are prioritised and remediated according to their severity rating.

While zs999 takes all reasonable and practicable steps to protect your personal information, no internet-based system can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zs999 will notify affected players as promptly as circumstances allow, including a description of the nature of the breach, the data categories affected, and the steps being taken to address it.

6. Data Retention

zs999 retains your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal data categories:

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual. KYC documents are deleted from the encrypted document vault and the deletion is logged for audit purposes.

7. Your Privacy Rights

As a player on the zs999 platform, you hold the following rights in relation to the personal information we hold about you. To exercise any of these rights, please contact the support team via live chat or email at [email protected]. We will acknowledge your request within 5 Bangladesh Standard Time business days and aim to resolve it within 30 days.

7.1 Right of Access

You may request a copy of all personal information that zs999 holds about you. We will provide this in a structured, commonly used, machine-readable format upon verified request. We may ask you to confirm your identity before processing an access request.

7.2 Right to Rectification

If any personal information held by zs999 is inaccurate or incomplete, you have the right to request that it be corrected. For certain data categories — such as your registered name — correction requires re-submission of a supporting identity document to ensure the accuracy of the KYC record.

7.3 Right to Erasure

You may request deletion of your personal data. This right is subject to limitations where zs999 is required to retain data to comply with legal obligations — for example, financial transaction records required to be held for 7 years. Where erasure is not possible for the full dataset, zs999 will delete all data that is not subject to a mandatory retention obligation and will document the legal basis for retaining the remainder.

7.4 Right to Restrict Processing

You may request that zs999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is disputed or while an objection to processing is under review. During a restriction period, your data will be stored but not actively processed for any purpose other than storage.

7.5 Right to Withdraw Marketing Consent

Where you have previously given consent to receive promotional communications from zs999, you may withdraw that consent at any time by contacting the support team or by updating your notification preferences in the account settings panel. Withdrawal of marketing consent does not affect the lawfulness of communications sent before the withdrawal. Please allow up to 5 business days for withdrawal of consent to take full effect across all communication channels.

7.6 Right to Data Portability

Where processing of your data is based on your consent or on the performance of a contract, and that processing is carried out by automated means, you may request that zs999 provide your data in a structured, machine-readable format suitable for transfer to another service provider.

8. Changes to This Policy

zs999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent review is displayed in the "Last Reviewed" field at the top of this page and in the metadata bar immediately below the Table of Contents.

Where changes are material — meaning they affect how your data is collected, used, or shared in a way that is meaningfully different from the current policy — zs999 will notify registered players via email to the address on file and via a prominent notice on the platform at least 14 days before the revised policy takes effect. Non-material updates (such as formatting corrections or clarifications that do not change the substance of the policy) may be published without advance notice.

Your continued use of the zs999 platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised policy, you should cease using the platform and contact the support team to close your account and request deletion of your personal data to the extent permitted by applicable retention obligations.

We encourage all players to review this Privacy Policy periodically. Questions about any aspect of this policy or about how zs999 handles your personal information should be directed to the support team at [email protected]. Our English-language support team is available 24 hours a day, 7 days a week, including during public holidays in Bangladesh such as Eid, Victory Day (December 16), and Independence Day (March 26).