Privacy Policy — Your Data, Our Commitment

Section 1

Data Controller

tz999 is the data controller responsible for the personal information collected through the tz999 platform. As data controller, tz999 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with this Policy and applicable data protection standards under our international gaming license.

For all data-related enquiries, requests, and complaints, you may contact the tz999 Data Protection team at: [email protected] with the subject line "Data Protection Request". We will acknowledge receipt of your request within 5 business days.

Section 2

Data We Collect

tz999 collects the following categories of personal data from players. The data collected at each stage is limited to what is necessary for the stated purpose:

Section 3

How We Collect Data

tz999 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account preferences.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and use the tz999 platform. See Section 6 for full details on our cookie practices.
• From payment providers — when you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, those providers may share transaction confirmation data with tz999 to verify the payment.
• From identity verification partners — tz999 may use third-party KYC and fraud-detection services to assist in verifying the identity and age of players. These services process identity documents on tz999's behalf and under strict confidentiality obligations.
• From publicly available sources — where required for fraud prevention or compliance purposes, tz999 may cross-reference information against publicly available databases or sanction screening lists.

Section 4

Purposes & Legal Basis for Processing

tz999 processes your personal data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis:

• Account creation and management — Processing is necessary for the performance of the contract between you and tz999 (i.e., your registered account and the services we provide under it).
• Identity and age verification (KYC) — Processing is required to comply with tz999's legal obligations under our international gaming license, which mandates that all withdrawing players be verified as at least 21 years of age with a confirmed identity.
• Transaction processing — Necessary for the performance of our contract with you, enabling deposits and withdrawals in PKR via your chosen payment method.
• Fraud prevention and security — Processing is carried out in pursuit of tz999's legitimate interests in protecting the integrity of the platform, preventing financial crime, and safeguarding other players.
• Responsible gaming enforcement — Processing is necessary both to fulfil our contractual obligations to you (applying the limits and exclusions you request) and to comply with responsible gaming requirements under our gaming license.
• Customer support — Processing communications data is necessary to perform the contract and to pursue our legitimate interest in resolving player issues efficiently.
• Marketing communications — Where you have given explicit consent, tz999 may send you promotional offers, bonus notifications, and platform updates by email or push notification. You may withdraw consent at any time from your account settings.
• Legal and regulatory compliance — Processing is necessary to comply with applicable laws, gaming regulations, anti-money-laundering obligations, and lawful requests from regulatory or law enforcement authorities.

Section 5

Data Sharing & Disclosure

5.1 No Sale of Data. tz999 does not sell, rent, or trade your personal information to third parties for marketing purposes under any circumstances.

5.2 Service Providers. tz999 may share your personal data with carefully selected third-party service providers who process data on our behalf, including:

• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — for transaction processing only.
• Identity verification and KYC service providers — for age and identity confirmation as required by our gaming license.
• IT infrastructure and cloud hosting providers — who store and process platform data under strict data processing agreements with tz999.
• Fraud detection and anti-money-laundering screening services.
• Customer support platform providers — who process live chat and email communications on our behalf.

All service providers are bound by contractual data processing agreements that restrict their use of your data solely to the purposes for which it was shared, and require them to maintain security standards equivalent to those of tz999.

5.3 Legal Disclosure. tz999 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, by our gaming license obligations, or in response to a valid legal order. We will notify you of such disclosure where we are legally permitted to do so.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of tz999 or its assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you via your registered email address prior to your data being transferred and becoming subject to a different privacy policy.

Section 6

Cookies & Tracking Technologies

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit the tz999 platform. They allow tz999 to recognise your device, remember your preferences, maintain your login session, and gather analytics data to improve the platform experience.

6.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without rendering the platform unusable.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits, and display preferences to provide a consistent experience across sessions.
• Analytics Cookies: Collect anonymised data on how players use the platform — which pages are visited most, how long sessions last, and where technical errors occur — to help tz999 improve the platform.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional communications. You may withdraw consent at any time from your browser settings or account preferences.

6.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect your experience on the tz999 platform, including the ability to maintain your login session.

Section 7

Data Retention

tz999 retains your personal data for as long as your account remains active and for such additional period as is required by our legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, as required by anti-money-laundering and gaming license regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with applicable financial record-keeping obligations.
• Gaming history: Retained for a minimum of 3 years for dispute resolution and responsible gaming audit purposes.
• Support and communications data: Retained for 3 years from the date of the relevant communication.
• Marketing consent records: Retained for as long as you are registered with tz999 and for 2 years following account closure, to evidence the lawful basis for any marketing sent during that period.

When data is no longer required, tz999 will securely delete or anonymise it in accordance with our internal data destruction procedures.

Section 8

Security Measures

tz999 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it:

• Encryption in transit: All data transmitted between your device and tz999 servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: All stored personal and financial data is encrypted using AES-256 encryption on secured server infrastructure.
• Access controls: Access to player personal data within tz999 is restricted to authorised personnel only, governed by role-based access control policies and subject to full audit logging.
• Two-factor authentication: tz999 offers optional 2FA for all player accounts and strongly recommends its use. Internal tz999 systems use mandatory 2FA for all staff with access to player data.
• Regular security audits: The tz999 platform undergoes periodic security assessments and penetration testing conducted by independent security specialists.
• Incident response: tz999 maintains a documented data breach incident response procedure. In the event of a breach affecting your personal data, we will notify you within the timeframe required by our licensing authority.

While tz999 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure by maintaining a strong, unique password and enabling 2FA.

Section 9

Your Rights

As a tz999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data tz999 holds about you. We will provide this within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Please note that certain data must be retained for regulatory purposes even after account closure.
• Right to Restrict Processing: You may request that tz999 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of tz999's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Section 10

Children & Minors

The tz999 platform is strictly for adults aged 21 years and above. tz999 does not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that a player is under the minimum age, we will immediately close the account, void any associated transactions, and securely delete the data collected during that registration, except where retention is required for legal or regulatory reporting purposes.

If you believe that a minor has registered on tz999 or that tz999 has inadvertently collected data from a minor, please notify us immediately at [email protected].

Section 11

Third-Party Links

The tz999 platform may contain references to third-party payment processors and service providers. Where you interact with those third-party services (for example, completing a JazzCash or EasyPaisa transaction), their own privacy policies and data practices apply to the data you provide directly to them. tz999 is not responsible for the privacy practices of third-party service providers and encourages you to review their privacy notices before submitting any personal information to them.

Section 12

Policy Changes

tz999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where a proposed update materially affects how we process your personal data, we will notify you by email to your registered address at least 14 days before the change takes effect, and display a prominent notice on the tz999 platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of tz999 following the effective date of an update constitutes acceptance of the revised Policy.

Section 13

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data tz999 holds about you, please contact our Data Protection team:

• Email: [email protected] — subject line "Data Protection Request"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Escalation: If you are not satisfied with our response, you may escalate your complaint to the data protection authority or dispute resolution body specified by tz999's international gaming license. Contact details are available from our support team on request.

For general platform support, responsible gaming assistance, or account enquiries, our 24/7 live chat support is available directly on the tz999 platform, or you may write to [email protected].