ZeroSec Privacy Policy —
How We Handle Your Data

This Privacy Policy applies to all users of the ZeroSec platform accessible at zerosec.onl and covers every service ZeroSec provides — including account registration, sports betting on cricket and PSL fixtures, live casino, slots, deposits, withdrawals, VIP programmes, and promotions.

By creating a ZeroSec account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described within it. If you do not agree with this policy, please do not create an account or continue using the platform.

This policy should be read alongside the Terms and Conditions, which govern the broader relationship between you and ZeroSec. Where both documents are relevant to a situation, both apply simultaneously.

ZeroSec collects personal data in three main ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party partners such as payment processors and identity verification services.

Information You Provide Directly

• Full name, date of birth, and gender provided during account registration.
• Contact details including email address and mobile number.
• Residential address used for identity verification purposes.
• National Identity Card (CNIC) number or copy when required for KYC verification.
• Payment method details including JazzCash account numbers, Easypaisa wallet IDs, bank account information, and card details used for deposits and withdrawals in PKR.
• Communications you send to ZeroSec support — including chat transcripts and email correspondence.
• Responsible gaming preferences such as deposit limits or self-exclusion requests submitted through your account.

Information Collected Automatically

• Device information including device type, operating system version, and browser type.
• IP address and approximate geographic location derived from it.
• Session data including login times, pages visited, games played, bets placed, and time spent on the platform.
• Cookies and similar tracking technologies as described in Section 6 of this policy.
• Performance and error logs that help ZeroSec identify and fix technical issues.

Information from Third Parties

• Identity verification outcomes from KYC/AML service providers.
• Transaction confirmations from payment processors including JazzCash, Easypaisa, Raast, and banking partners.
• Fraud risk signals from financial compliance partners where relevant to account security.

Every piece of data ZeroSec collects is used for a specific, defined purpose. The table below sets out the main categories of use:

ZeroSec does not use your personal data for automated decision-making that produces significant legal effects without a human review stage. If an account action is taken based on automated signals — such as a temporary hold — you have the right to request human review by contacting support.

ZeroSec does not sell personal data. We do share data with a limited set of third-party service providers who help us operate the platform. All third parties who receive your data are bound by data processing agreements that restrict how they may use it.

• Payment Processors: JazzCash, Easypaisa, Raast, banking partners, and card processors receive the minimum data needed to process your PKR transactions.
• Identity Verification Providers: KYC and AML service providers receive your identity documents to verify your eligibility to use the platform.
• Game Providers: Third-party casino, slots, and live casino software providers may receive a pseudonymised player identifier and session data to deliver the game. They do not receive your full name, CNIC, or payment details.
• Fraud Prevention Services: Security and fraud screening partners receive device fingerprints, IP data, and transaction signals to identify and prevent fraudulent activity.
• Technical Infrastructure: Cloud hosting and content delivery providers that store and serve platform data. These providers operate under strict data processing agreements.

All financial transactions on ZeroSec are conducted in PKR. When you make a deposit or request a withdrawal — whether through JazzCash, Easypaisa, Raast, bank transfer, card, or another supported mobile wallet — the following applies to your payment data:

• Full payment credentials (card numbers, full account numbers) are never stored on ZeroSec's own servers. They are tokenised and stored by our PCI-compliant payment processor.
• ZeroSec retains a record of each transaction — including the amount in PKR, date, time, payment method type, and outcome — for account management and compliance purposes.
• Withdrawal requests are matched against the deposit method on file as a standard security measure. If a mismatch is detected, additional verification may be required before processing.
• Transaction records are retained for the minimum period required by applicable financial record-keeping standards. After that period, they are securely deleted or anonymised.

If you believe a transaction on your ZeroSec account was made without your authorisation, contact support immediately. ZeroSec's security team will review the account activity and take appropriate action, which may include temporarily suspending the account while the investigation is underway.

ZeroSec uses cookies and similar technologies — including local storage and session tokens — to operate the platform, keep you logged in securely, remember your preferences, and understand how the platform is being used so we can improve it.

Types of Cookies Used

• Essential Cookies: Required for the platform to function. These handle your login session, security tokens, and basic platform navigation. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and last-used payment method. Disabling these will not break the platform but may affect your experience.
• Analytics Cookies: Collect anonymised data about how players use ZeroSec — which pages are visited, how long sessions last, and which features are most used. This data helps ZeroSec improve the platform. No personally identifiable data is sent to analytics tools.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your ZeroSec account. For most players, accepting all cookie categories is recommended for the best experience on the platform.

ZeroSec retains your personal data for as long as is necessary for the purposes described in this policy. The main retention periods are:

• Active Account Data: Retained for the full duration your ZeroSec account is active. This includes your registration information, contact details, and account preferences.
• Financial Transaction Records: Retained for the minimum period required by applicable financial compliance and anti-money laundering standards, typically a minimum of five years from the date of the transaction.
• Identity Verification Documents: Retained for the period required by KYC/AML compliance obligations, counted from the date of account closure or the last transaction — whichever is later.
• Support Communications: Retained for up to two years from the date of the last communication, to assist with follow-up queries and dispute resolution.
• Closed Account Data: Following account closure, certain data is retained for the compliance periods described above. Data not subject to a legal retention requirement is deleted within 90 days of closure.

When data reaches the end of its retention period, it is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

ZeroSec takes the security of your personal data seriously. We maintain technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction. These include:

• TLS encryption for all data transmitted between your device and the ZeroSec platform.
• Encryption at rest for stored personal and financial data.
• Access controls ensuring that only authorised personnel with a legitimate need can access personal data, with access logged and audited.
• Regular security assessments of platform infrastructure and third-party integrations.
• Two-factor authentication available for player accounts to add an extra layer of login security.

While ZeroSec takes reasonable and appropriate security precautions, no online platform can guarantee absolute security. You play a role in keeping your account secure — use a strong, unique password for your ZeroSec account, do not share your login credentials, and contact support immediately if you notice any suspicious activity on your account.

As a ZeroSec user, you have the following rights with respect to your personal data. You can exercise most of these directly from your account settings, or by contacting ZeroSec support:

To exercise any of these rights, contact ZeroSec support through the platform. ZeroSec will respond to data rights requests within a reasonable timeframe. Some requests — particularly deletion requests — may be limited where ZeroSec has a legal obligation to retain the data in question.

ZeroSec is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has created a ZeroSec account or provided personal data to the platform, please contact support immediately.

Upon receiving a verified report of a minor's account, ZeroSec will close the account, delete the associated personal data, and reverse any transactions where possible. ZeroSec takes the protection of minors' data extremely seriously and treats such reports as a priority.

During registration, users must confirm that they are 18 or older. ZeroSec may request age verification documents at any point, and accounts where age verification cannot be completed will be suspended pending review. Providing false date of birth information is a breach of the Terms and Conditions and will result in immediate account closure.

ZeroSec may update this Privacy Policy from time to time to reflect changes to our data practices, new platform features, or evolving compliance requirements. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date shown at the top.

For changes that are material — meaning they significantly affect your rights or how your data is used — ZeroSec will make reasonable efforts to notify registered users through in-platform messaging or via the email address linked to your account, giving you advance notice before the changes take effect.

Your continued use of the ZeroSec platform after a Privacy Policy update constitutes your acceptance of the revised policy. If you disagree with changes to this policy, you should stop using the platform and contact support to request account closure and data deletion.

If you have any questions, concerns, or requests relating to this Privacy Policy or how ZeroSec handles your personal data, please reach out to the ZeroSec support team. Our support is available around the clock, seven days a week.

• For data access, correction, or deletion requests — contact support through your account dashboard.
• To opt out of marketing communications — use the unsubscribe link in any ZeroSec email, or update your preferences in account settings.
• To report a suspected data breach or security concern — contact support immediately and mark your message as urgent.
• For general privacy queries — visit our FAQ page for answers to common questions, or contact support directly.