zz999 Privacy Policy
for Bangladesh Players

When you interact with the zz999 platform — whether by visiting the website, creating an account, making a deposit, placing a bet, or contacting our support team — we may collect and process various categories of personal data. The specific data collected depends on the nature of your interaction with the platform.

The following table summarises the categories of personal data that zz999 collects and the primary source from which each category is obtained:

zz999 does not knowingly collect sensitive personal data beyond what is required for identity verification and anti-money laundering (AML) compliance. We do not collect biometric data, religious affiliation, political opinions, or health information as part of our standard registration or KYC process.

All data collection on the zz999 platform is conducted with your knowledge and, where required by applicable data protection principles, your explicit or implied consent. By registering an account and using the platform, you acknowledge that the data described in this section will be collected and processed as set out in this Privacy Policy.

zz999 processes the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following are the primary purposes for which your data is processed on the zz999 platform:

• Account Management: To create, maintain, verify, and secure your zz999 player account. This includes processing your registration details, authenticating your identity at login, and managing any changes to your account settings.
• KYC & Identity Verification: To fulfil our Know Your Customer obligations by verifying your age (18+), identity, and residency using your Bangladesh National ID Card (NID) before processing any withdrawals or high-value deposits.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer. Your financial data is used solely to execute the transactions you initiate and to comply with source-of-funds requirements.
• Service Delivery: To provide you with access to all zz999 games, sports betting markets, live dealer tables, and promotional offers, and to deliver a personalised platform experience based on your gaming preferences and history.
• Responsible Gaming: To monitor your gaming patterns and identify potential indicators of problem gambling. This allows us to proactively reach out with responsible gaming resources and to enforce any deposit limits, cool-off periods, or self-exclusion arrangements you have activated. See our Responsible Gaming page for details.
• Fraud Prevention & AML: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the platform. This is a legally mandated processing purpose that zz999 cannot waive at your request.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services. Communications data (live chat transcripts, email correspondence) is retained to maintain an accurate record of interactions.
• Marketing & Promotions: To send you information about bonuses, seasonal promotions (e.g., BPL cricket season offers, Eid promotions, Pohela Boishakh specials), and platform updates — but only if you have opted in to receive such communications. You may opt out at any time via your account notification settings.
• Legal & Regulatory Compliance: To fulfil any legal obligations applicable to zz999, including responding to lawful requests from regulatory bodies or law enforcement authorities in Bangladesh.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and feature set of the zz999 platform for all players.

zz999 does not use your personal data for automated decision-making processes that produce legally significant effects on you, other than standard fraud-detection systems that flag accounts for human review. If your account is flagged by an automated system, a member of the zz999 compliance team will review the flag manually before any action is taken.

There are circumstances in which zz999 must share your personal data with third parties in order to operate the platform, fulfil our legal obligations, or protect the security and integrity of our services. In every such case, we ensure that appropriate safeguards are in place to protect your data.

• Payment Processors: Your financial data (bKash number, Nagad number, bank details) is shared with the relevant payment service provider solely for the purpose of processing the specific transaction you have initiated. zz999 does not store complete payment account credentials on its own servers.
• KYC & Identity Verification Providers: Your identity documents (NID scan, selfie, proof of payment method) may be processed by a third-party KYC verification service engaged by zz999 to assist with identity verification. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than verification.
• Game Software Providers: When you play games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical data (session tokens, bet records) is processed by those providers' servers as an inherent part of game delivery. This does not include your full identity or financial data.
• Fraud Prevention & Security Services: Anonymised or pseudonymised technical data may be shared with specialist fraud-prevention and cybersecurity service providers to help protect the zz999 platform and its player community from bad actors.
• Legal & Regulatory Authorities: zz999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies in Bangladesh when required to do so by a lawful order or when we believe in good faith that such disclosure is necessary to prevent serious harm or illegal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the zz999 platform, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the applicable privacy terms in advance.

All third parties with whom zz999 shares personal data are required to process that data only for the specified purpose, to maintain adequate technical and organisational security measures, and to comply with applicable data protection obligations. zz999 does not transfer your personal data to countries outside Bangladesh except where necessary to deliver specific services (such as game software platforms), in which case we ensure that appropriate contractual protections are in place.

The zz999 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience for players in Bangladesh. A cookie is a small text file placed on your device by the website you are visiting. Cookies do not contain executable code and cannot directly harm your device.

zz999 uses the following categories of cookies:

zz999 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. We do not share cookie data with advertising networks for the purpose of serving you targeted advertisements on other websites.

You may manage or disable optional cookies through your browser settings at any time. Please note that disabling functional or analytics cookies will not prevent you from using the zz999 platform, but some personalisation features may not work as intended. Strictly necessary and security cookies cannot be disabled as they are essential to the safe operation of your account.

Most modern browsers allow you to view, manage, and delete cookies via the browser's settings menu. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's official help documentation.

zz999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The retention periods described below represent our standard practices; actual retention in any given case may vary where extended retention is required by law or to resolve an ongoing dispute.

• Account Data (active accounts): Retained for the full duration of your active account relationship with zz999, plus a minimum of 5 years following account closure to satisfy any applicable record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, in accordance with anti-money laundering record-keeping requirements. Copies of NID documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Financial Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction. This is required for AML compliance and for resolving any future payment disputes.
• Gaming History: Bet records, game outcomes, and session logs are retained for a minimum of 3 years. Aggregated, anonymised gaming statistics may be retained indefinitely for platform improvement purposes.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, unless the communication relates to a dispute or investigation that requires longer retention.
• Technical & Log Data: Server logs, IP address records, and session data are retained for up to 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing Preference Data: Retained for the duration of your account, or until you withdraw your marketing consent, whichever is earlier. Withdrawal of marketing consent does not affect the lawfulness of any prior marketing activities.

Upon expiry of the applicable retention period, your personal data is either securely deleted or anonymised in a manner that makes it impossible to re-identify you from the remaining data. zz999 conducts periodic data retention reviews to ensure that data is not held for longer than necessary.

As a player on the zz999 platform, you hold the following rights with respect to your personal data. Requests to exercise these rights will be acknowledged within 5 business days and fulfilled within 30 calendar days of receipt, subject to identity verification and any applicable legal limitations.

• Right of Access: You have the right to request a copy of the personal data that zz999 holds about you. We will provide this in a structured, commonly used, and machine-readable format (e.g., a PDF summary or CSV export) upon verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most of your basic contact information directly within your zz999 account dashboard. Changes to identity data (name, date of birth, NID number) require re-verification and must be requested via our support team.
• Right to Erasure: You may request that zz999 delete your personal data. This right is subject to certain limitations — we cannot delete data that we are legally required to retain (such as KYC records and financial transaction records under our AML obligations). Where erasure is not possible for legal reasons, we will explain why and indicate the earliest date on which the data can be deleted.
• Right to Restrict Processing: In certain circumstances (for example, where you contest the accuracy of data we hold), you may request that we restrict the processing of your personal data while the matter is resolved. During a restriction period, we will continue to store your data but will not actively process it beyond what is strictly necessary.
• Right to Data Portability: Where processing is based on your consent, you have the right to receive your personal data in a portable format and to transfer it to another service provider. This right applies primarily to data you have provided directly (e.g., your profile information and gaming preferences).
• Right to Withdraw Marketing Consent: If you have consented to receive marketing communications from zz999, you may withdraw that consent at any time via your account notification settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of marketing sent prior to the withdrawal.
• Right to Lodge a Complaint: If you believe that zz999 has processed your personal data in a manner that does not comply with applicable data protection principles, you have the right to raise a formal complaint with zz999's data protection contact ([email protected]) and, where applicable, with a relevant supervisory authority in Bangladesh.

To exercise any of the rights described above, please contact the zz999 data privacy team by emailing [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise. We may ask you to verify your identity before processing the request.

zz999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. The following measures form part of our data security framework:

• 256-bit SSL Encryption: All data transmitted between your browser or device and the zz999 platform is encrypted using industry-standard 256-bit SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocols. The padlock icon in your browser address bar confirms an active encrypted connection.
• Encrypted Data Storage: Sensitive data at rest — including copies of identity documents submitted for KYC, financial account details, and password hashes — is stored in encrypted form using AES-256 or equivalent encryption standards. Plain-text storage of passwords or NID data is strictly prohibited in our systems.
• Access Controls: Access to player personal data is restricted on a strict need-to-know basis. Only authorised zz999 personnel whose job functions require access to specific categories of data are granted that access, and all such access is logged and auditable.
• Two-Factor Authentication (2FA): zz999 offers two-factor authentication for player accounts. We strongly recommend that all Bangladesh players enable 2FA in their account security settings to add an additional layer of protection against unauthorised account access.
• Penetration Testing & Security Audits: The zz999 platform is subject to regular security assessments, including vulnerability scanning and periodic penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed data security incident that affects player personal data, zz999 will notify affected players as promptly as possible with information about what data was involved, what steps we have taken in response, and what actions we recommend you take to protect yourself.

While zz999 implements robust security measures, no digital platform can guarantee absolute protection against all possible cyber threats. You also have a responsibility to contribute to the security of your own account by using a strong and unique password, enabling 2FA, keeping your login credentials confidential, and accessing the platform only from secure and trusted devices and networks. If you suspect that your account has been compromised, contact our support team immediately via live chat or at [email protected].

zz999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or the services we offer to Bangladesh players. When material changes are made to this policy, we will update the "Effective Date" shown at the top of this page and, where the changes are significant, we will notify registered players directly via their account dashboard or registered contact details.

Your continued use of the zz999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this policy, you have the right to close your account and withdraw your data as described in Section 6 above.

The current version of this Privacy Policy is always available at zz999.bio/privacy-policy. We recommend bookmarking this page and reviewing it each time you receive a notification of an update.

For responsible gaming concerns that may intersect with your personal data — such as requests to permanently delete your account and all associated data as part of a self-exclusion arrangement — please refer to our Responsible Gaming page for dedicated guidance, or contact support directly. All such requests are treated with the highest level of priority and sensitivity.