WZ999 Privacy Policy

This Privacy Policy ("Policy") describes how WZ999 ("we", "us", "our") collects, uses, stores, shares and protects personal data in connection with your use of the WZ999 platform at https://wz999.cam and all associated services, features and content ("Platform").

We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is intended to give you a clear and honest account of our data practices so that you can make an informed decision about using the Platform.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

The following definitions apply throughout this Privacy Policy:

WZ999 is the Data Controller for personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes for which your data is processed and the manner in which it is processed.

Where we engage third-party Data Processors — for example, cloud hosting providers, payment verification services or analytics platforms — those parties process data solely under our documented instructions and are contractually bound to maintain appropriate data security measures.

Contact details for data-related enquiries are provided in Section 16 of this Policy. All data access requests, correction requests and erasure requests must be submitted to the contact address specified therein.

The categories of personal data we collect depend on how you interact with the Platform. The following table summarises the main data categories:

We do not collect special categories of sensitive personal data (such as health data, biometric data or political opinions) unless specifically required by a regulatory obligation and with your explicit consent where applicable.

We collect personal data through the following channels:

• Direct Submission: Data you provide voluntarily when creating an account, completing KYC, placing bets, contacting support or configuring account preferences.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device fingerprints, session tokens and browser metadata via server logs, cookies and similar technologies.
• Third-Party Sources: Identity verification and fraud-prevention data supplied by KYC and AML service providers. Data from payment processors confirming transaction status. Aggregated analytics data from performance monitoring tools. In all cases, third-party sourced data is limited to what is necessary for the stated purpose.
• Public Sources: Where permitted, publicly available information (e.g., sanctions lists, politically exposed persons databases) may be cross-referenced for compliance purposes.

WZ999 processes personal data only where a valid lawful basis exists. The primary lawful bases on which we rely are:

• Contractual Necessity: Processing required to perform the contract between you and WZ999 — including account management, bet settlement, payment processing and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) regulations and responsible gambling mandates imposed by our licensing authority.
• Legitimate Interests: Processing carried out for WZ999's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, abuse prevention and internal analytics used to improve our services.
• Consent: Processing based on your freely given, specific and informed consent — primarily applicable to non-essential cookies, marketing communications and any processing that does not fall under the bases above. You may withdraw consent at any time without prejudice to processing already carried out.

We use the personal data we collect for the following purposes:

• Account Management: Creating, maintaining and securing your WZ999 account; enabling login and authentication; processing account closure requests.
• Service Delivery: Enabling you to place bets, access casino games, participate in promotions and use Platform features.
• Payment Processing: Processing deposits and withdrawal requests; verifying payment method ownership; managing payment disputes. References to payment methods such as those used in Pakistan (e.g., bank transfers through local institutions) are contextual only — payment method availability depends on the operator's cashier configuration.
• Identity Verification & KYC: Verifying your identity, age and residential address to comply with licensing and AML obligations.
• Fraud Prevention & Security: Detecting, preventing and investigating fraudulent activity, unauthorised access, money laundering and abuse of Platform features.
• Responsible Gambling: Implementing and monitoring responsible gambling tools including deposit limits, session timers and self-exclusion controls in accordance with your preferences and any regulatory requirements.
• Customer Support: Responding to your enquiries, complaints and support requests; maintaining records of communications for quality assurance.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, content quality and user experience.
• Legal & Regulatory Compliance: Maintaining records required by our licensing authority; responding to lawful requests from regulatory bodies, law enforcement agencies and courts.
• Marketing (Consent-Based): Sending promotional communications, bonus notifications and personalised offers — only where you have consented to receive such communications and have not subsequently withdrawn that consent.

WZ999 does not sell personal data. We may share your data only in the following circumstances and only to the extent necessary:

• Service Providers and Data Processors: Third-party vendors engaged to deliver platform infrastructure, payment processing, identity verification, fraud prevention, customer support tooling and analytics. All such processors are bound by contractual data processing agreements.
• Licensing and Regulatory Authorities: Our licensing authority and any other applicable regulatory body may require access to certain user data for the purpose of compliance audits, investigations or regulatory reporting. WZ999 complies with all lawful regulatory disclosure obligations.
• Law Enforcement and Legal Process: Where required by a binding court order, subpoena, warrant or equivalent legal instrument, or where disclosure is necessary to prevent imminent harm, fraud or criminal activity, we may disclose personal data to law enforcement or other governmental authorities.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of WZ999's assets, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such change and afforded the opportunity to request deletion of their data where legally permissible.
• With Your Consent: Any sharing not covered by the categories above will only occur with your explicit prior consent.

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our licensing authority. The general principles governing our retention approach are:

• Active Accounts: Personal data associated with an active account is retained throughout the duration of the account relationship.
• Closed Accounts: Following account closure, we retain certain personal data (including identity verification records, transaction history and communications records) for a period of at least five (5) years, or longer where required by AML regulations or other applicable law.
• Technical and Usage Data: Aggregated and anonymised usage data may be retained indefinitely for analytical purposes. Identifiable technical data (e.g., IP address logs) is typically retained for twelve (12) months from collection.
• Marketing Preferences: Consent records and marketing preference data are retained for as long as necessary to demonstrate compliance, or until you withdraw consent, whichever is sooner.

Where data is no longer required for any of the above purposes and no legal obligation requires its continued retention, it is securely deleted or irreversibly anonymised.

Subject to the applicable data protection laws of our operating jurisdiction and any limitations arising from regulatory obligations (such as AML record-keeping requirements), you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact our Data Protection team at the email address stated in Section 16. We will respond to all requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days with written notification to you.

The WZ999 Platform uses cookies and similar tracking technologies to deliver functionality, improve performance and, where consent is given, personalise your experience. The categories of cookies we use are as follows:

You can manage your cookie preferences at any time through your browser settings or via the cookie preference centre available on the Platform. Disabling strictly necessary cookies will impair Platform functionality. Disabling performance or marketing cookies will not affect your ability to use the core features.

WZ999 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) protocols. The Platform is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data and financial records stored on our infrastructure are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within our organisation is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and security training.
• Intrusion Detection: We maintain monitoring systems to detect and respond to unauthorised access attempts, anomalous activity and potential security breaches.
• Third-Party Security Assessments: We periodically review the security practices of our Data Processors to ensure they maintain standards consistent with our own obligations.

Notwithstanding the above, no internet transmission or electronic storage system is entirely secure. We cannot guarantee the absolute security of data transmitted to or from the Platform. You are responsible for maintaining the security of your account credentials and should notify us immediately if you suspect unauthorised access to your account.

WZ999 operates internationally and your personal data may be transferred to, stored in and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred outside the jurisdiction in which WZ999 is licensed, we implement appropriate safeguards to ensure the data remains adequately protected. These safeguards may include:

• Standard contractual clauses approved by the relevant data protection authority
• Data processing agreements incorporating appropriate technical and organisational security measures
• Transfer to countries recognised as providing adequate data protection by the applicable supervisory authority

For Pakistani users specifically: data submitted to the Platform is processed in servers located in our operating jurisdiction and may pass through third-party infrastructure providers operating internationally. By using the Platform, you acknowledge that your data will be processed outside Pakistan in circumstances where Pakistani data protection law may not apply.

The WZ999 Platform is strictly for adults aged 18 or older (or the higher minimum age required by the operator's licensing jurisdiction). We do not knowingly collect or process personal data relating to individuals under the applicable minimum age.

As part of our registration and KYC process, we take reasonable steps to verify the age of all users. Where we discover that personal data has been collected from a user who is below the minimum age, we will:

• Immediately suspend the associated account
• Delete all personal data collected from that user as soon as practicable
• Forfeit any balance held in the account in accordance with our Terms & Conditions
• Where appropriate, refer the matter to the relevant regulatory authority

If you are a parent or guardian and believe that your child has registered an account on WZ999, please contact our support team immediately using the contact details in Section 16.

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or regulatory requirements. When material changes are made, we will:

• Update the "Effective Date" and "Last Reviewed" fields at the top of this document
• Display a prominent notice on the Platform for a reasonable period following the update
• Where practicable and for material changes, notify registered users via their registered email address

Your continued use of the Platform after the updated Policy comes into effect constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically, particularly before making any new financial transactions through the Platform.

For all privacy-related enquiries, data access requests, correction requests, erasure requests or complaints regarding WZ999's data practices, please contact our Data Protection team through the following channels:

• Support Email (plain text — not a link): [email protected]
• Subject Line: Please include "Privacy Request" or "Data Protection Enquiry" in the subject line of your email to ensure it is routed to the appropriate team
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat interface for general enquiries
• Response Time: Data access and rights requests will receive a substantive response within 30 days of receipt. General privacy enquiries are typically addressed within 5 business days.

When submitting a data rights request, please include your full name, registered email address and account reference number (if applicable) to allow us to locate your records accurately. For security purposes, we may ask you to verify your identity before processing the request.