EZ999 Privacy Policy

Introduction

EZ999 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses the EZ999 platform at https://ez999.cam (the "Service"). This Privacy Policy ("Policy") describes how we collect, use, store, share and protect personal data in connection with the Service.

This Policy applies to all users of the EZ999 platform, including registered account holders, visitors who browse the site without registering, and individuals whose data is processed as part of the KYC verification, payment processing or responsible gambling management workflows.

By accessing the Service, creating an account or submitting personal information to EZ999, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that such consent is required by applicable law.

This Policy forms part of the overall legal framework governing use of the EZ999 platform and should be read alongside our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, national identity number, email address, IP address, payment details, biometric data and any other information that could, alone or in combination with other data, identify you as an individual.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, disclosure, transmission, erasure or destruction, whether carried out by automated or manual means.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For users of the EZ999 Service, the Data Controller is the Operator, whose details are published in the platform's licensing documentation.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement, such as a KYC verification provider or payment processor.
• "KYC" — Know Your Customer procedures: the identity, age and source-of-funds verification process required before full Account access and withdrawal processing are enabled.
• "Special Category Data" — sensitive personal data requiring heightened protection under applicable data protection law, such as data revealing racial or ethnic origin, health information, biometric data used for identification, or political opinions.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement by which you signal acceptance of particular processing activities.

Data Controller

The Data Controller responsible for personal data processed in connection with the EZ999 Service is the licensed Operator of the platform. The Operator's full legal name, registered address and licensing authority details are published in the platform's official footer documentation and Terms & Conditions.

EZ999 (ez999.cam) acts as the brand and information portal through which the Service is presented. Where data is collected directly through this interface, it is processed under the authority of and on behalf of the Operator as Data Controller.

For any data protection enquiries, requests or complaints, please contact our support team as set out in Section 16 of this Policy. Formal data protection correspondence should be directed to the Operator's registered data protection contact, details of which are available from support.

Personal Data We Collect

EZ999 collects personal data through multiple channels in the course of providing and operating the Service. The categories of personal data we collect are set out below, along with the context in which each category is typically obtained.

4.1 Registration Data

Information you provide when creating an Account:

4.2 Identity Verification (KYC) Data

Documentation collected as part of the mandatory KYC process:

• Copy of a government-issued photo identity document — for Pakistani users, typically a CNIC (Computerised National Identity Card) or valid passport.
• Proof of residential address — such as a utility bill or bank statement dated within the preceding three months.
• Biometric or liveness verification data — a real-time selfie or video confirming identity against the submitted document.
• Source of funds documentation where deposits or withdrawals exceed defined AML thresholds.
• Payment method verification — screenshots or confirmations establishing ownership of the payment method(s) in use.

4.3 Transaction Data

Records generated through your use of the platform's financial features:

• Deposit and withdrawal amounts, dates, currency and payment method references.
• Transaction identifiers and reference numbers.
• Partial payment instrument details (e.g., last four digits of a card, or the wallet reference for a payment service — not full card or account numbers).
• Bonus credits applied, wagering history and net positions.

4.4 Technical & Usage Data

Data collected automatically when you access the Service:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, page navigation paths, click events and interaction logs.
• Game-play history, betting records and session durations.
• Cookies and similar tracking technologies — see Section 10.

4.5 Communications Data

Records arising from your interactions with our support team:

• Live chat transcripts and email correspondence.
• Support ticket histories and complaint records.
• Any documents or screenshots you submit to support for assistance.

Legal Basis for Processing

Where data protection law requires a legal basis for processing personal data, EZ999 relies on one or more of the following bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and EZ999 — specifically, to create and manage your Account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification mandates and any lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for EZ999's legitimate interests in preventing fraud, maintaining platform security, enforcing these Terms, improving the Service and communicating relevant account information — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For specific processing activities — such as marketing communications or the use of non-essential cookies — we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In exceptional circumstances where processing is necessary to protect someone's life or physical safety, this basis may apply.

How We Use Your Personal Data

EZ999 uses personal data collected from users for the following specific purposes:

6.1 Account Management

To create, maintain and administer your EZ999 Account, including processing registration, enabling login, managing Account preferences, administering loyalty points and tiers, and communicating account-related notifications (such as password resets, unusual login alerts and verification status updates).

6.2 Identity Verification & Compliance

To verify your identity and age in compliance with KYC and AML obligations, to conduct ongoing monitoring of account activity for compliance purposes, and to satisfy any reporting obligations to licensing authorities or law enforcement agencies as required by applicable law.

6.3 Payment Processing

To process deposits and withdrawal requests, to verify payment method ownership, to detect and prevent payment fraud, and to maintain transaction records as required by financial regulations. Where you use familiar payment infrastructure such as bank transfers through HBL, UBL, Meezan Bank or Bank Alfalah, we process the transaction reference data provided through those channels — we do not receive or store your full banking credentials.

6.4 Responsible Gambling Management

To administer responsible gambling tools including deposit limits, loss limits, session timers and self-exclusion requests. We may also use account activity data to identify patterns that may indicate problem gambling behaviour and, where appropriate, proactively reach out to offer support or apply safeguards.

6.5 Fraud Prevention & Security

To detect, investigate and prevent fraudulent activity, account takeovers, money laundering, collusion and other prohibited conduct. This may include automated analysis of transaction patterns, login behaviour and device fingerprinting.

6.6 Service Improvement

To analyse usage patterns, diagnose technical issues, conduct research and development, and improve the quality, performance and accessibility of the EZ999 platform — including mobile optimisation for Pakistani users on 4G networks.

6.7 Marketing Communications

Where you have provided consent, to send you promotional communications about EZ999 offers, new game launches, cricket betting market updates and relevant platform news. You may opt out of marketing communications at any time by contacting support or using the unsubscribe mechanism in any promotional email.

Sharing & Disclosure of Personal Data

EZ999 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf under contractual obligations that require them to maintain appropriate security measures and use data only for the purposes we specify. These include:

• KYC and identity verification providers — to process document checks and liveness verification.
• Payment processing partners — to facilitate deposits and withdrawals through supported payment rails.
• Cloud hosting and infrastructure providers — to store and process platform data securely.
• Customer support platforms — to manage live chat and email ticket workflows.
• Fraud detection and security analytics providers.
• Email and communications delivery services for account and security notifications.

7.2 Regulatory & Legal Disclosure

EZ999 may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies or courts where we are legally obligated to do so. This includes disclosures required under AML legislation, court orders, regulatory investigations or applicable data protection law.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets or restructuring of the Operator's business, personal data held by EZ999 may form part of the transferred assets. Users will be notified of any such change in data controller as required by applicable law.

7.4 With Your Consent

In any other circumstances, we will share personal data only with your explicit prior consent.

International Data Transfers

EZ999 operates through an international platform infrastructure. Personal data collected through the Service may be transferred to and processed in countries outside your country of residence — including countries in which the Operator's servers, KYC providers or payment processors are based.

Where personal data is transferred to countries that do not provide a level of data protection equivalent to that applicable in the Operator's licensing jurisdiction, EZ999 and the Operator will implement appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) approved by the applicable data protection authority.
• Binding Corporate Rules where transfers occur within a corporate group.
• Adequacy decisions recognising equivalent protection in the destination country.

Pakistani users should note that their personal data will be processed outside Pakistan by the Operator's international infrastructure. Pakistan does not currently maintain a formal data transfer adequacy framework equivalent to the EU GDPR regime. By using the Service, Pakistani users acknowledge that their data will be processed in international jurisdictions governed by the Operator's applicable data protection obligations.

Data Retention

EZ999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active Accounts: Personal data is retained for the duration of your Account's active status and for a reasonable period thereafter to address any outstanding queries, disputes or regulatory obligations.
• Regulatory Retention Requirements: KYC documentation, transaction records and AML-related data are subject to minimum retention periods mandated by the Operator's licensing authority. These periods typically extend for a specified number of years after Account closure or the last transaction — specific timeframes are available from the support team.
• Marketing Data: Where processing is based on consent, marketing-related data is retained until you withdraw consent or opt out of communications.
• Self-Excluded Accounts: Records of self-exclusion are retained for the full duration of the exclusion period and for a defined period thereafter to prevent re-registration in breach of the exclusion.
• Legal Claims: Where personal data is relevant to an ongoing or anticipated legal dispute, we may retain it until the matter is resolved, even if the standard retention period would otherwise have expired.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be used to identify you as an individual.

Cookies & Tracking Technologies

EZ999 uses cookies and similar tracking technologies (including pixel tags and local storage) to enable platform functionality, analyse usage patterns and — where consent has been obtained — deliver relevant content.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies enable core functions such as session management, login authentication, security controls and responsible gambling tool enforcement. They cannot be disabled without preventing the platform from functioning correctly.
• Functional Cookies: Remember your preferences and settings — such as language preferences and interface customisations — to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform to help us identify performance issues and improve the Service. These cookies do not identify you personally.
• Marketing & Preference Cookies: Used only where you have provided consent, to track browsing activity and deliver relevant promotional content. You may withdraw this consent at any time.

10.2 Managing Cookie Preferences

You can manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies will impair your ability to use core platform features. For analytics and marketing cookies, you may manage consent through the platform's cookie preference centre where available.

Data Security

EZ999 implements technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Transport Layer Security (TLS/SSL) encryption across all pages of the platform, including the registration form, cashier, KYC upload portal and support interfaces.
• Encryption of sensitive data at rest, including KYC documents and payment references.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability monitoring of platform infrastructure.
• Two-factor authentication (2FA) support for user Accounts.
• Dedicated secure document submission portals for KYC uploads, separate from general support chat channels.

In the event of a personal data breach that poses a risk to your rights and freedoms, EZ999 will notify affected users and, where required by applicable law, the relevant supervisory authority, within the timeframes prescribed by law.

Your Rights as a Data Subject

Subject to applicable data protection law and regulatory obligations — particularly AML retention requirements — you have the following rights in relation to your personal data held by EZ999:

To exercise any of the above rights, contact our support team via live chat or by emailing [email protected]. We will acknowledge your request within a reasonable timeframe and respond substantively within the period required by applicable law (typically thirty days, extendable in complex cases).

Where we are unable to comply with a request in full — for example, because regulatory obligations require us to retain certain AML records — we will explain the reasons clearly and specify which data has been retained and why.

Minors & Age Verification

The EZ999 Service is strictly for adults aged 18 and over — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from minors.

Age verification is conducted as part of the mandatory KYC process. Where an Account holder's age cannot be verified, or where we have reasonable grounds to believe that an Account is held by a minor, the Account will be restricted pending investigation and, if the concern is substantiated, closed with any Real Money Funds returned to the verified payment method.

If you are a parent or guardian and believe a minor has accessed the EZ999 platform or provided personal data to us, please contact support at [email protected] immediately. We will take appropriate action, including deletion of the minor's data, as promptly as possible.

Specific Considerations for Pakistani Users

EZ999 operates internationally and targets Pakistani users as part of its English-language content offering. The following specific considerations apply to users based in or accessing the Service from Pakistan:

• Pakistan does not currently have a comprehensive general data protection law equivalent to the EU GDPR. The Prevention of Electronic Crimes Act, 2016 (PECA) and the Personal Data Protection Bill (in legislative process at time of drafting) may be relevant to the rights of Pakistani data subjects. EZ999 does not provide legal advice on the application of these instruments.
• EZ999 is not supervised by the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan (SBP), the Federal Investigation Agency (FIA) or any other Pakistani regulatory body in respect of data protection compliance.
• Personal data collected from Pakistani users — including CNIC copies, selfies and transaction records — is processed by the Operator's international infrastructure and its approved Data Processors, who may be located outside Pakistan.
• References to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in these documents are for contextual purposes only. EZ999 does not share user personal data with these providers except to the minimum extent technically necessary to process a specific transaction you have initiated, in compliance with the provider's own data handling terms.
• Pakistani users should be aware that the use of this Service may be subject to monitoring under applicable Pakistani law and telecommunications regulations. EZ999 is not in a position to provide assurances about the privacy implications of accessing international online services from Pakistan.

Updates to This Privacy Policy

EZ999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law or platform features. The current version of this Policy, together with its effective date, is always accessible at https://ez999.cam/privacy-policy.

Where changes to this Policy are material — meaning they significantly affect how we use your data or your rights in relation to that data — we will notify registered users by email to the address on their Account or by a prominent notice displayed on the platform for a period of at least fourteen (14) days before the revised Policy takes effect.

For non-material updates such as typographical corrections, clarifications of existing practices or changes required to comply with new legal requirements, we may update the Policy without advance notice. In all cases, the "Last Reviewed" date at the top of this document will reflect when the Policy was most recently amended.

Your continued use of the Service after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please close your Account and cease using the Service.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by EZ999, please contact us through the following channels:

• Email: [email protected] (Plain text only — not a clickable link. Copy this address to your email client. Typical response time: within 24 hours for standard queries; within 30 days for formal data subject access requests.)
• Live Chat: Available 24/7 through the EZ999 platform interface. Suitable for general privacy queries and guidance on exercising data subject rights.
• Formal Data Protection Requests: For formal data subject access requests, erasure requests or complaints, please identify your request clearly as a "Data Protection Request" in your correspondence. The Operator's data protection contact details are available on request from the support team.

If you are not satisfied with the response to a privacy complaint, you may have the right to lodge a complaint with the supervisory authority in the Operator's licensing jurisdiction. The relevant authority details are available from the support team.