Privacy Policy — How z999 Protects Your Data

1 Introduction

1.1 z999 is Bangladesh's leading online casino and sports betting platform, accessible at z999.vu. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player or as a visitor browsing our site.

1.2 This Privacy Policy applies to all personal data collected through the z999 website, account registration process, customer support interactions, payment transactions, and any other channel through which you provide information to us.

1.3 We recognise that trust is fundamental to the relationship between z999 and our players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond. Responsible, transparent data handling is part of our commitment to being a safe and reliable platform.

1.4 This policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated herein by reference.

2 Data Controller

2.1 For the purposes of this Privacy Policy, z999 acts as the data controller in respect of all personal data collected from players and site visitors through the z999 platform.

2.2 As data controller, z999 determines the purposes and means of processing your personal data. Where z999 engages third-party service providers to process data on our behalf (for example, payment processors or KYC verification providers), those parties act as data processors and are bound by contractual obligations to handle your data only as instructed by z999 and in accordance with applicable data protection standards.

2.3 All data-related enquiries, access requests, and complaints should be directed to our support team at [email protected].

3 Data We Collect

z999 collects personal data in three primary ways: data you provide directly, data generated automatically through your use of the platform, and data obtained from trusted third parties for verification purposes.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile number provided during account creation.
• Identity verification (KYC) data: Copies of government-issued photo ID (National ID card, passport, or driver's licence), proof of address documents (utility bills or bank statements), and payment method verification documents.
• Payment data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay numbers), bank account details for withdrawals, and transaction reference numbers.
• Support communications: Any information you share when contacting our customer support team via email or live chat, including the content of your messages and any documents attached.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, cooling-off period requests, and any other data submitted through our responsible gaming tools.

3.2 Data Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage data: Pages visited, games played, session duration, betting history, deposit and withdrawal activity, and navigation patterns within the platform.
• Cookie data: Session tokens, authentication cookies, preference cookies, and analytics identifiers. See Section 7 for full details of our cookie use.
• Location data: Approximate geographic location derived from your IP address, used for compliance purposes to identify access from Prohibited Territories.

3.3 Data from Third Parties

• KYC and identity verification providers: Results of automated identity checks and fraud screening conducted by our verification partners.
• Payment processors: Transaction status confirmations and fraud flags received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.
• Responsible gaming databases: Where applicable, information from self-exclusion registries to prevent excluded individuals from opening new accounts.

4 How We Use Your Data

The personal data z999 collects is used for the following specific purposes:

4.1 z999 does not use your personal data for automated profiling that produces legal or similarly significant effects without human oversight.

4.2 Where z999 uses your data for analytics or platform improvement purposes, this is done using aggregated and anonymised datasets wherever possible, so that individual players cannot be identified from the resulting analysis.

5 Legal Basis for Processing

z999 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between z999 and the player — including account management, game delivery, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing that is necessary for z999's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement, where those interests are not overridden by the player's rights and interests.
• Consent: Processing of data for optional purposes such as marketing communications, where z999 relies on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

6.1 z999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared only in the circumstances described below.

6.1 Service Providers (Data Processors)

z999 engages carefully selected third-party service providers who process data on our behalf. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), KYC and identity verification providers, game software providers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi), IT infrastructure and hosting providers, and customer support platforms. All such providers are contractually required to process data only as instructed by z999 and to maintain appropriate data security standards.

6.2 Legal and Regulatory Disclosure

z999 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, a valid legal order, or where such disclosure is necessary to protect the rights, property, or safety of z999, our players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of z999's business, personal data held by z999 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to applicable privacy terms that result from it.

6.4 Aggregated Data

z999 may share aggregated, anonymised statistical data (for example, platform usage trends or game popularity statistics) with industry partners or publish such data publicly. This data cannot be used to identify individual players.

7 Cookies & Tracking Technologies

7.1 The z999 platform uses cookies and similar technologies to operate correctly and to provide a consistent experience across sessions. The categories of cookies z999 uses are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during your visit and security cookies that help detect and prevent fraudulent activity. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display preferences, so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used in anonymised or aggregated form to help z999 understand how players navigate the platform, which features are most used, and where technical issues occur. This data informs platform improvements.

7.2 z999 does not place third-party behavioural advertising cookies on your device. We do not permit advertising networks to track your activity across other websites via cookies set on the z999 platform.

7.3 Most browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, accept only certain categories, or delete cookies after each session. Please note that disabling strictly necessary cookies will impair your ability to use the z999 platform, including account login and payment functions.

8 Data Retention

8.1 z999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

8.2 As a general guideline, the following retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure to satisfy legal and compliance obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, or longer where required by anti-money laundering regulations.
• Transaction and payment records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support records: Retained for 3 years from the date the support interaction was closed.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to evidence the withdrawal.
• Website usage and analytics data: Retained in anonymised form indefinitely; identifiable usage data is deleted or anonymised within 24 months.

8.3 When personal data is no longer required, z999 will securely delete or anonymise it using industry-standard data destruction methods.

9 Data Security

9.1 z999 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

9.2 Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and z999 servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring that z999 staff can only access personal data necessary for their specific role;
• Multi-factor authentication for internal system access;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of platform infrastructure for anomalous activity or intrusion attempts;
• Documented incident response procedures for data breach scenarios, including player notification protocols where legally required.

9.3 While z999 applies rigorous security controls, no online platform can provide an absolute guarantee against all possible threats. You also play a role in keeping your account secure by maintaining a strong, unique password and not sharing your credentials with others. If you suspect unauthorised access to your z999 account, contact us immediately at [email protected].

10 Your Rights

10.1 As a z999 account holder, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of all personal data z999 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data z999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly within your account settings.
• Right to erasure: You may request that z999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that this right is subject to z999's legal retention obligations — we may be required to retain certain data despite an erasure request.
• Right to restrict processing: You may request that z999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that z999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where z999 relies on legitimate interests as the legal basis, unless z999 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10.2 To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 calendar days. We may request proof of identity before processing certain requests to protect against fraudulent data access.

11 Children & Minors

11.1 The z999 platform is strictly restricted to individuals aged 21 years or older. z999 does not knowingly collect personal data from individuals under the age of 21.

11.2 Age verification is a mandatory step in the z999 registration process. Where z999 discovers or reasonably suspects that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be suspended immediately, all associated data will be reviewed, and any funds held in the account will be handled in accordance with our Terms & Conditions.

11.3 If you are a parent or guardian and believe that a minor in your care has registered an account with z999, please contact us immediately at [email protected] so that we can take prompt action.

12 International Data Transfers

12.1 z999 operates its platform for players based in Bangladesh. Some of our third-party service providers — including game software providers and technical infrastructure partners — may be located outside Bangladesh, which may involve the transfer of personal data across international borders.

12.2 Where personal data is transferred internationally, z999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include contractual data protection clauses, binding corporate rules, or equivalent transfer mechanisms.

12.3 By using the z999 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to countries other than Bangladesh where such transfers are necessary to deliver our services.

13 Changes to This Privacy Policy

13.1 z999 reserves the right to update or amend this Privacy Policy at any time. Changes will take effect upon publication of the updated version on this page. The "Last Updated" date at the top of the policy will be revised accordingly.

13.2 Where z999 considers an amendment to be material — for example, a significant change to the categories of data we collect or how we use it — we will make reasonable efforts to notify registered players via email or an in-platform notification prior to the change taking effect.

13.3 Your continued use of the z999 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by z999, please contact our support team using the details below. All data-related enquiries are handled in English.

When contacting us regarding a data subject request, please include your full name, the email address registered to your z999 account, and a clear description of your request. We may ask you to provide proof of identity before processing requests that relate to accessing or deleting account data.