Your Privacy Matters at zz7 — How We Handle Your Data

1 Information We Collect

When you use the zz7 platform, we collect personal information that is necessary to provide our services, comply with legal obligations, and maintain a safe and fair gaming environment. We only collect information that is relevant and proportionate to these purposes. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a zz7 account, we collect the following information directly from you: full legal name, date of birth, residential address (including city, district, and postal code), email address, mobile phone number, and preferred currency (Bangladeshi Taka, BDT). This data is required to open your account and verify your eligibility to use the Platform.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to confirm that all players are 18 years of age or older, we collect copies of government-issued identity documents. These may include your National Identity Card (NID), passport, driving licence, or other official documents accepted by zz7's compliance team. We may also request proof of address in the form of a utility bill, bank statement, or similar document issued within the past three months.

1.3 Financial Data

zz7 does not store full card numbers, CVV codes, or bank account credentials on our own servers. Payment data is processed through our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), who maintain their own certified security environments. We do, however, retain transaction records including deposit amounts, withdrawal requests, timestamps, and the payment method type used — for example, "bKash" or "Nagad" — for audit and compliance purposes.

1.4 Technical and Usage Data

When you access zz7, our servers automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type (desktop or mobile), the pages you visit on our site, the time and duration of your visits, and referring URLs. This data is used for platform security, fraud detection, and service improvement purposes.

1.5 Communications Data

If you contact our support team by email or live chat, we retain a record of that correspondence including your name, contact details, and the content of the exchange. This allows us to track the history of any query and provide consistent, informed support.

2 How We Use Your Data

zz7 uses the personal data we collect for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Below is a full account of how your data is used across our operations.

2.1 Service Delivery

The primary use of your data is to operate the zz7 platform — opening and managing your account, processing deposits and withdrawals via bKash, Nagad, Rocket and other local payment methods, granting access to casino games and sports betting markets, crediting bonuses, and responding to support queries. Without this processing, we would be unable to provide the services you have registered for.

2.2 Identity Verification and Fraud Prevention

We use your registration and KYC data to confirm your identity, verify that you are aged 18 or over, and to detect and prevent fraudulent activity, money laundering, and other financial crimes. Our compliance team reviews flagged accounts and transactions as part of an ongoing monitoring programme. This processing is a legal obligation that zz7 must fulfil regardless of your consent.

2.3 Responsible Gaming Monitoring

We use account activity data — including betting patterns, session frequency, deposit volumes, and self-exclusion history — to identify players who may be exhibiting signs of problem gambling. Where our systems flag a concern, our responsible gaming team may make contact to offer support resources. This processing is carried out in the interest of player welfare and is considered a legitimate purpose under our responsible gaming obligations.

2.4 Marketing Communications

With your explicit consent, zz7 may use your email address and mobile number to send you promotional communications about new games, upcoming cricket and BPL betting markets, bonus offers, and seasonal promotions such as Eid and Pohela Boishakh specials. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting our support team at [email protected].

2.5 Platform Improvement and Analytics

Aggregated and anonymised usage data is analysed to understand how players use the Platform, which features are most popular, and where technical issues occur. This analysis informs product decisions and helps us improve the overall player experience. Individual players are not identifiable from this aggregated data.

3 Data Sharing & Disclosure

zz7 does not sell your personal data to any third party. We share your data only where it is necessary to deliver our services, meet our legal obligations, or protect the integrity of the Platform. All third parties with whom we share data are subject to binding data processing agreements that restrict their use of your information to the specific purposes for which it was shared.

3.1 Payment Processing Partners

To process your deposits and withdrawals, we share relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and card networks operated by Visa and Mastercard. The data shared is limited to what is strictly necessary to complete the transaction — typically your registered phone number, transaction amount, and account reference. Each payment partner is responsible for the security of data within their own environment.

3.2 Game Software Providers

zz7 hosts games developed and operated by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. When you play a game powered by one of these providers, a session token and limited account identifier are passed to the provider's game server to authenticate your session. Full personal details such as your name, address, or NID number are not transmitted to game providers.

3.3 Regulatory and Legal Disclosure

zz7 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. We may also disclose data where we reasonably believe disclosure is necessary to protect the rights, property, or safety of zz7, our players, or the public — for example, in cases of suspected money laundering or fraud that warrant referral to authorities.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of zz7's business or assets, player data may form part of the assets transferred. In such a scenario, zz7 will notify affected players by email and ensure that the acquiring entity agrees to honour the privacy commitments made in this Policy.

4 Cookies & Tracking Technologies

zz7 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how players interact with the site. This section explains what cookies we use, why, and how you can manage them.

4.1 What Are Cookies

Cookies are small text files stored by your web browser when you visit a website. They allow the site to recognise your device on return visits and retain certain preferences or session states. Cookies do not contain executable code and cannot be used to access other data on your device.

4.2 Types of Cookies Used by zz7

4.3 Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling essential cookies may impair your ability to log in and use key features of the zz7 Platform. Analytics and preference cookies can be disabled without affecting core functionality.

5 Data Retention

zz7 retains your personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymised data is retained beyond these periods for statistical or analytical purposes, it is no longer considered personal data under applicable privacy frameworks.

6 Data Security Measures

zz7 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, the measures described below represent our commitment to protecting your information to a high standard.

6.1 Encryption

All data transmitted between your browser and zz7's servers is encrypted using TLS 1.2 or higher. Data stored on our servers — including account credentials and identity documents — is encrypted at rest using AES-256 encryption. Passwords are stored using one-way hashing algorithms and are never stored in plaintext.

6.2 Access Controls

Access to personal data within zz7's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required for their specific role. All internal access is logged, and access logs are reviewed periodically as part of our internal audit programme. Access privileges are reviewed and updated when staff roles change.

6.3 Two-Factor Authentication

zz7 offers two-factor authentication (2FA) via SMS one-time password for all player accounts. We strongly encourage all players to enable 2FA in their account security settings. Internal administrative access to player data systems requires mandatory 2FA for all staff.

6.4 Security Incident Response

In the event of a data security incident that may affect your personal data, zz7 will notify affected players by email within a reasonable timeframe after becoming aware of the incident. The notification will describe the nature of the incident, the categories of data affected, the steps zz7 has taken in response, and any recommended actions for affected players to protect themselves.

7 Your Privacy Rights

As a player on the zz7 Platform, you hold a number of rights in relation to the personal data we hold about you. zz7 is committed to honouring these rights promptly and without creating unnecessary barriers. The following rights apply to all registered players.

7.1 Right of Access

You have the right to request a copy of all personal data that zz7 holds about you. This is known as a Subject Access Request (SAR). To submit an SAR, please email [email protected] with the subject line "Data Access Request" and include sufficient information to allow us to verify your identity. We will respond within 30 days of receiving a verified request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — such as email address and phone number — can be updated directly in your account settings. For fields that require identity verification to change (such as your legal name or date of birth), please contact our support team.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that certain data — including transaction records and KYC documents — must be retained for legally mandated periods even following an erasure request. Where erasure is not possible in full, we will explain which data must be retained and why.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data while we verify it, or if you have objected to processing and we are assessing the grounds for that objection. During a restriction period, we will continue to store your data but will not actively process it beyond what is required to maintain the restriction.

7.5 Right to Withdraw Marketing Consent

Where processing is based on your consent — specifically for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. You can manage marketing preferences in your account settings or by contacting [email protected].

8 Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zz7 handles your personal data, our support team is available to assist you. All privacy-related enquiries should be directed to:

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 48 hours for general enquiries; within 30 days for formal rights requests.

8.1 Changes to This Privacy Policy

zz7 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — such as a new category of data being collected, a new purpose being introduced, or a new category of third-party recipients being added — we will notify registered players by email at least 14 days before the change takes effect.

The effective date at the top of this Policy indicates when it was last reviewed. Your continued use of the zz7 Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you may close your account before the change takes effect by contacting [email protected].

8.2 Links to Third-Party Sites

The zz7 Platform may contain references to third-party game providers and payment services. This Privacy Policy applies solely to data processed by zz7 directly. Each third-party provider — including bKash, Nagad, Pragmatic Play, and Evolution Gaming — maintains its own privacy policy governing data processed within its own systems. zz7 is not responsible for the privacy practices of any third party and encourages you to review their individual privacy notices.