Privacy Policy — How z77z Protects Your Data

z77z operates the online betting and casino platform accessible at https://z77z.io. For the purposes of this Privacy Policy, z77z acts as the data controller in respect of personal data collected from players who register and use the platform.

z77z is an English-language platform designed specifically for adult players in Bangladesh, aged 21 and above. Our primary operational language is English, and all data-related communications will be conducted in English.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our Data Protection team at any time:

• Email: [email protected] (Data Protection enquiries)
• Platform: https://z77z.io
• Support hours: 24/7, English language, Bangladesh Standard Time (BST, UTC+6)

z77z collects two broad categories of personal data: information you provide directly, and information generated automatically by your use of the platform.

Information you provide directly:

• Registration data: Full legal name, date of birth, gender (optional), residential address (including city — e.g., Dhaka, Chittagong, Sylhet), email address, and mobile phone number.
• Identity verification (KYC) documents: Copies of government-issued photo ID (National ID Card, Passport, or Driving Licence), proof of address, and payment method ownership documents.
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers linked to your registered mobile number), bank account details where bank transfer is used, and transaction history on z77z.
• Communications: Content of any support messages, live chat transcripts, emails, or feedback submitted to z77z.
• Responsible gaming data: Any deposit limits, loss limits, self-exclusion requests, or cooling-off periods you set on your account.

Information collected automatically:

z77z collects personal data through the following means:

• Direct submission: When you complete the registration form, submit KYC documents, contact support, or update your account profile.
• Automated collection: When you browse or use the z77z platform, our servers and analytics tools automatically log technical and behavioural data as described in Section 2.
• Third-party providers: KYC verification partners may return identity-check results to z77z; payment processors confirm transaction status and associated account details; fraud prevention tools may flag risk signals related to your account activity.
• Cookies and similar technologies: As described in Section 7 of this policy.

z77z does not purchase personal data from data brokers or any third-party list providers. All personal data z77z holds about you originates from your own interactions with the platform or from verification services directly connected to your account.

z77z processes your personal data only where a valid legal basis exists. The primary legal bases on which z77z relies are:

• Contractual necessity: Processing required to create and manage your z77z account, process deposits and withdrawals, settle bets, and provide the core services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties, and financial record-keeping rules.
• Legitimate interests: Processing carried out for z77z's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the quality of our services — where those interests are not overridden by your rights.
• Consent: Processing for direct marketing communications (promotional emails, SMS offers) and the use of non-essential cookies, where you have given explicit consent. You may withdraw this consent at any time.

z77z uses personal data collected from players for the following purposes:

• Creating, operating, and maintaining your z77z account
• Verifying your identity and age (21+) in compliance with our KYC obligations
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and money laundering
• Settling bets, resolving disputes, and maintaining accurate account records
• Monitoring for signs of problem gambling and applying responsible gaming tools where appropriate
• Sending transactional communications (account confirmations, password resets, withdrawal notifications)
• Sending promotional communications where you have given consent, including bonus offers relevant to BPL, IPL, and T20 World Cup seasons
• Analysing platform usage data to improve game performance, navigation, and overall user experience
• Complying with applicable legal and regulatory obligations

z77z does not use your personal data to make fully automated decisions that produce legal or significant effects without human review. Automated fraud-risk flags are always subject to review by z77z's compliance team before any account action is taken.

z77z does not sell, rent, or trade your personal data to any third party. Data is shared only where necessary and with appropriate contractual safeguards in place. The categories of third parties that may receive your data are:

All third-party service providers are contractually bound to process data only for the specified purpose, maintain appropriate security measures, and not retain data beyond the period needed for that purpose.

z77z uses cookies and similar technologies on the platform. Cookies are small text files placed on your device when you visit a website. They allow the platform to recognise your device and remember certain preferences or session information between visits.

z77z uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your logged-in session, remembering your language preference, and enabling the bet-placement workflow. These cookies cannot be disabled without breaking core functionality.
• Performance & analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, where errors occur, and how load times vary. This data is used solely to improve platform performance.
• Functional cookies: Remember your account settings and preferences (such as your preferred payment method display) to provide a more personalised experience on return visits.
• Marketing cookies: Used only where you have given consent, to track referral sources and measure the effectiveness of z77z promotional campaigns. No personal identity data is shared with advertising networks.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the z77z platform. Instructions for managing cookies are available in the help section of all major browsers.

z77z retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and transaction records: Retained for a minimum of five (5) years from the date of account closure. This period reflects financial record-keeping and AML compliance obligations.
• KYC documents: Retained for the duration of the account plus five years post-closure, in line with identity verification and anti-money laundering requirements.
• Support communications: Retained for three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your registered account, or until you withdraw consent, whichever is earlier.
• Technical and session logs: Typically retained for 90 days for platform security and fraud investigation purposes, after which they are anonymised or deleted.

After the applicable retention period expires, your data will be securely deleted or irreversibly anonymised. Where deletion is not immediately possible (e.g., data held in backup archives), the data will be isolated from active processing until it can be permanently deleted.

z77z takes the security of your personal data seriously and implements a layered approach to data protection. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and z77z servers
• Encryption at rest for sensitive personal data and financial records stored on z77z infrastructure
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role
• Multi-factor authentication required for all z77z staff with access to player data systems
• Continuous intrusion detection and automated alerting for anomalous access patterns
• Regular security audits and penetration testing of the z77z platform infrastructure
• Data breach response procedures — in the event of a breach affecting your personal data, z77z will notify affected players and relevant authorities within the timeframes required by applicable obligations

While z77z employs robust technical and organisational security measures, no system can be guaranteed to be entirely secure. You also play a role in keeping your account safe — use a strong, unique password for your z77z account and do not share your credentials with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

z77z is an English-language platform primarily serving players in Bangladesh. Some of z77z's service providers — particularly game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming, as well as certain technical infrastructure providers — may process data on servers located outside Bangladesh.

Where personal data is transferred internationally, z77z ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses incorporated into agreements with all third-party processors, and data minimisation requirements limiting the personal data transferred to only what is strictly necessary for the service being provided.

z77z does not transfer your full identity or KYC documents to game providers. Game sessions are identified by anonymised session tokens only. Financial transaction data shared with payment processors such as bKash, Nagad, and Rocket is processed within Bangladesh's own financial infrastructure.

During the registration process, z77z requires all applicants to confirm that they are aged 21 or above. Age verification is further enforced through the KYC document review process, during which a valid government-issued photo ID must be submitted and verified before full account access is granted.

If z77z discovers or receives credible information indicating that a registered account belongs to a person under 21 years of age, z77z will immediately suspend the account, initiate an investigation, and if the underage status is confirmed, permanently close the account and report the matter as required by applicable law. Any funds deposited by a person found to be under 21 will be handled in accordance with applicable legal requirements.

If you believe that a minor has registered on z77z, please contact [email protected] immediately. z77z treats reports of this nature as a high priority.

As a z77z player, you hold the following rights in respect of your personal data. These rights are not absolute in all circumstances — certain legal obligations (such as AML record-keeping requirements) may limit our ability to delete specific data — but z77z will always explain clearly if a limitation applies and why.

• Right of access: You may request a copy of all personal data z77z holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may ask us to correct it. Minor corrections (such as updating a phone number) can be made directly in your account settings.
• Right to erasure: You may request deletion of personal data we hold about you where we no longer have a lawful basis to retain it. This right may be limited by legal retention requirements for financial and AML records.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Upon receiving a valid objection, z77z will cease that processing unless compelling legitimate grounds exist that override your interests.
• Right to data portability: You may request a structured, machine-readable export of personal data you have provided to z77z, in a commonly used format (e.g., CSV or JSON).
• Right to restrict processing: You may request that we restrict processing of your data while a complaint or dispute is under investigation.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact z77z's Data Protection team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and a clear description of the right you wish to exercise. z77z may need to verify your identity before processing the request. We will acknowledge all data rights requests within 5 business days and respond in full within 30 days.

z77z may, with your consent, send you promotional communications about bonuses, new game releases, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL season betting offers), and other platform news. These communications may be delivered by email or, where you have provided it, by SMS to your registered mobile number.

You can manage your marketing preferences at any time:

• Log in to your z77z account and visit the Notifications & Marketing section of your account settings
• Click the unsubscribe link included in the footer of any marketing email from z77z
• Contact [email protected] and request removal from all marketing lists

Please allow up to 5 business days for opt-out requests to take effect across all communication channels. Note that opting out of marketing communications does not affect transactional notifications — you will still receive account confirmations, withdrawal notifications, and security alerts, as these are necessary for the operation of your account.

z77z reserves the right to update or amend this Privacy Policy at any time. The most current version of this policy will always be published at https://z77z.io/privacy-policy, along with the date it was last updated.

Where z77z makes a material change to this policy — meaning a change that significantly affects how your personal data is processed or your rights in relation to it — z77z will provide at least seven (7) days' advance notice by displaying a prominent notice on the platform and, where possible, by sending a notification to your registered email address.

Your continued use of the z77z platform after the effective date of any amendment constitutes your acknowledgement of the updated policy. If you do not agree with any changes, you must stop using the platform and contact [email protected] to close your account and arrange withdrawal of any remaining balance.

For all privacy-related enquiries, data rights requests, or concerns about how z77z handles your personal data, please contact our Data Protection team using the details below. All communications should be in English.

z77z Data Protection Team
Email: [email protected]
Subject line: Privacy Enquiry / Data Rights Request
Platform: https://z77z.io
Response time: Within 5 business days (acknowledgement), 30 days (full response)
Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

z77z is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint through applicable data protection channels available in your jurisdiction.