Privacy Policy — ZS333 Platform

This Privacy Policy (the "Policy") is issued by ZS333 (the "Operator", "we", "us" or "our"), the entity responsible for operating the online gaming information platform accessible at zs333.cam. This Policy governs the collection, use, storage, disclosure and protection of personal data relating to individuals ("Users", "you" or "your") who access or use any part of the ZS333 Platform.

ZS333 operates as an English-language online casino and sports betting information platform designed for adult users, including those located in Pakistan. We are committed to processing personal data transparently, lawfully and in accordance with internationally recognised data protection principles, including those embodied in the General Data Protection Regulation (GDPR) framework, which we apply as a standard of best practice regardless of the specific jurisdiction of the user.

By registering an account on or continuing to use the ZS333 Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should cease using the Platform and contact our support team to arrange account closure.

For the purposes of this Policy, the following terms shall have the meanings set out below:

ZS333 is the Data Controller responsible for personal data collected through the Platform at zs333.cam. As Data Controller, ZS333 determines the purposes for which personal data is collected and the means by which it is processed. All data processing activities carried out by third-party Data Processors engaged by ZS333 are governed by data processing agreements that require compliance with applicable data protection standards.

For all privacy-related enquiries, data subject requests or concerns, users may contact ZS333 directly using the contact details provided in Section 16 of this Policy.

ZS333 collects personal data through various channels in the course of providing the Platform's services. The categories of data we may collect include:

4.1 Registration & Identity Data

• Full name, date of birth and gender.
• National Identity Card (CNIC) number or passport number for KYC verification purposes.
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — as provided by the user).
• Email address and mobile phone number.
• Username and encrypted password.

4.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in PKR and timestamps.
• Payment method identifiers (e.g., last four digits of a bank card, or mobile wallet account reference). Full card numbers and banking credentials are never stored on ZS333 servers.
• Source-of-funds information where required for enhanced KYC due diligence.

4.3 Platform Usage & Technical Data

• IP address, browser type and version, operating system and device type.
• Session data including login and logout timestamps, session duration and pages accessed.
• Game and betting history, including sports markets accessed, wagers placed and results.
• Cookie and local storage data as described in Section 9.

4.4 Communications Data

• Records of correspondence with ZS333 customer support, including live chat transcripts, email exchanges and support ticket content.
• Marketing communication preferences and consent records.

ZS333 processes personal data only for specific, documented purposes and in reliance on one of the following legal bases:

ZS333 does not sell, rent, trade or otherwise disclose your personal data to third parties for commercial purposes. We may share personal data with third parties only in the following limited circumstances:

6.1 Service Providers & Data Processors

ZS333 engages third-party service providers who process personal data on our behalf under contractual data processing agreements. These include KYC and identity verification providers, payment processing partners, fraud detection services, customer support platform operators and cloud hosting providers. All Data Processors are required to maintain appropriate data security standards and may not use personal data for any purpose other than performing services for ZS333.

6.2 Legal & Regulatory Disclosure

ZS333 may disclose personal data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory obligation. Such disclosures are made only to the extent required and are logged internally.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or a material part of ZS333's assets, personal data held by ZS333 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained by the successor entity.

6.4 Payment Method Context

Where users select payment options such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah to process transactions, limited transaction data may be shared with the relevant payment service provider solely to facilitate that specific transaction. ZS333 does not represent that these providers endorse gambling activities or maintain any special relationship with ZS333 beyond standard payment processing protocols.

ZS333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of the user's account relationship with ZS333, plus any legally mandated post-closure retention period.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure in compliance with standard anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years thereafter as evidence of compliance.
• Technical & Log Data: Typically retained for twelve (12) months unless required to be preserved for a longer period in connection with an ongoing investigation or legal proceeding.

Where data is no longer required and there is no overriding legal obligation to retain it, ZS333 will securely delete or anonymise the data so that it can no longer be linked to an identifiable individual.

ZS333 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between user devices and ZS333 servers.
• Encryption of sensitive personal data fields at rest within secure database environments.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures for detecting, reporting and managing potential personal data breaches.
• Staff training on data protection and information security obligations.

Notwithstanding the above, no method of transmission over the internet or electronic storage is entirely secure. ZS333 cannot guarantee absolute security and accepts no liability for security breaches that occur outside our reasonable control. Users should maintain strong, unique passwords for their ZS333 accounts and report any suspected unauthorised access immediately to [email protected].

ZS333 uses cookies and similar tracking technologies on the Platform. The following categories of cookies may be set on your device:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They manage user sessions, maintain login state and ensure security features operate as intended. These cookies cannot be disabled without significantly impacting your ability to use the Platform.

9.2 Performance & Analytics Cookies

These cookies collect anonymised data about how users interact with the Platform — which pages are visited most frequently, where users encounter errors and how they navigate between sections. This information is used to improve Platform performance and user experience. No personally identifiable information is collected through analytics cookies without additional consent.

9.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, currency display settings (e.g., PKR) and notification choices — to provide a more personalised experience on return visits.

9.4 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's settings or preferences menu. You can typically choose to block all cookies, block third-party cookies only or delete existing cookies. Please note that blocking cookies may affect the functionality of certain Platform features.

ZS333 operates as an international platform and some of the personal data we collect may be stored or processed in countries outside the jurisdiction in which you are located, including countries that may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred internationally, ZS333 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to recipients in countries recognised as providing an adequate level of data protection.
• Use of contractual clauses that impose data protection obligations on the recipient equivalent to those applicable in the originating jurisdiction.
• Ensuring that third-party Data Processors engaged by ZS333 maintain equivalent security and data protection standards regardless of geographic location.

For Pakistani users specifically: Pakistan does not have a bilateral adequacy agreement with the European Union or equivalent frameworks. ZS333 applies GDPR-aligned data protection principles as a matter of platform policy for all users, regardless of location.

ZS333 is strictly an adults-only platform. The Platform is not directed at, designed for or intended to be used by individuals under the age of 18, or such higher minimum age as required by the applicable operator licence jurisdiction.

ZS333 does not knowingly collect personal data from minors. If we become aware that personal data has been collected from an individual under the applicable minimum age, we will take immediate steps to close the associated account, return any outstanding balance in accordance with our standard procedures and permanently delete the personal data of the minor from our systems.

ZS333 respects your rights in relation to your personal data. The following rights are available to all users of the Platform:

To exercise any of the above rights, submit your request in writing to [email protected]. We will acknowledge receipt within 72 hours and respond to your request within one calendar month. In complex cases this period may be extended by a further two months, in which case we will notify you of the extension and the reason for it. Identity verification may be required before we are able to process your request.

ZS333 sends promotional communications — including information about bonus offers, new game announcements, sports event promotions and platform updates — only to users who have explicitly opted in to receive such messages during the account registration process or subsequently through account settings.

You may withdraw consent to receive marketing communications at any time by:

• Using the unsubscribe link included in every marketing email sent by ZS333.
• Updating your communication preferences through your account settings.
• Contacting our support team directly with a request to cease marketing communications.

Withdrawal of marketing consent will not affect your ability to receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, security alerts and support responses. These service communications are sent on the basis of contract performance and legitimate interest, not marketing consent, and cannot be disabled while your account remains active.

The ZS333 Platform may contain references to or integrations with third-party services, including payment processing partners and game software providers. This Privacy Policy applies solely to personal data collected and processed by ZS333 directly. ZS333 is not responsible for the privacy practices of third-party services and recommends that users review the privacy policies of any third-party service they interact with independently of the ZS333 Platform.

Payment service providers referenced in the context of Pakistani payment ecosystems — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — operate under their own privacy policies and data protection frameworks. ZS333 references these providers as familiar payment context for Pakistani users only. Any data shared with payment providers is limited strictly to what is necessary to process the relevant transaction.

ZS333 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, changes to the categories of personal data collected, the purposes for which data is used or the third parties with whom data is shared — ZS333 will provide reasonable advance notice to registered users via email or a prominent on-Platform notification prior to the changes taking effect.

The date on which this Policy was last reviewed and updated is displayed at the top of this page. Users are encouraged to review this page periodically. Continued use of the Platform following notification of updated Policy terms constitutes acceptance of the revised Policy.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by ZS333, please contact our support team. We are available around the clock in English, with Urdu-language assistance available on request.

Complaints

If you are not satisfied with how ZS333 has handled your personal data or responded to a data subject request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. ZS333 commits to cooperating fully with any such investigation and to implementing any remedial action required.

We encourage users to contact us directly in the first instance, as many privacy concerns can be resolved quickly and informally through direct communication with our support team.