Privacy Policy — zz66zz

This Privacy Policy ("Policy") is issued by zz66zz ("we", "us", "our", "the Platform") and applies to all personal data collected, processed, and stored in connection with the operation of the online casino and sports betting platform available at https://zz66zz.vip, including any mobile-optimised versions of the same platform.

zz66zz is committed to handling your personal data with transparency, integrity, and the highest practicable standard of care. This Policy explains what data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have in relation to it.

By registering an account or otherwise accessing the zz66zz platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the overall agreement between you and zz66zz, together with our Terms & Conditions and Responsible Gaming Policy.

zz66zz collects personal data from you in the following ways: directly when you register an account or interact with the platform; automatically when you access or use the platform; and from third parties such as payment processors and identity verification services where necessary. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name and date of birth
• Residential address (including city, district, and postcode)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of a government-issued photo ID (National ID card or passport)
• Proof of address document (utility bill, bank statement, or equivalent dated within three months)
• Payment method confirmation (e.g., screenshot of bKash or Nagad account registration confirming the account is in your name)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (bKash, Nagad, Rocket, Upay, Visa/Mastercard)
• Mobile wallet numbers or card details used for transactions (card numbers are tokenised; full card details are never stored on our servers)
• Account balance history and bonus activity

2.4 Gaming & Betting Activity Data

• Games played, bets placed, wager amounts, and outcomes
• Session timestamps and duration
• Responsible gaming settings applied to your account (deposit limits, self-exclusion, cooling-off periods)

2.5 Technical & Device Data

• IP address and approximate geolocation derived from it
• Browser type, version, and operating system
• Device type and screen resolution
• Referring URL and pages visited within the platform
• Session cookies and local storage values (see Section 6)

2.6 Communications Data

• Content of messages sent to zz66zz via live chat or email support
• Records of complaints and their resolution
• Preferences regarding marketing communications (where applicable)

zz66zz uses the personal data described in Section 2 for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first notifying you and, where required, obtaining your consent.

zz66zz does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you, beyond the fraud-detection and responsible gaming monitoring processes described above, which are subject to human review where they result in account action.

Every instance of personal data processing carried out by zz66zz rests on one of the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — i.e., to create and operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) mandates, and financial record-keeping regulations.
• Legitimate interests: Processing carried out in the pursuit of zz66zz's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your interests or fundamental rights.
• Consent: Where we rely on consent as the legal basis (for example, optional marketing communications), you may withdraw that consent at any time by contacting our support team or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

zz66zz does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared only in the following strictly defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card-processing partners receive transaction data necessary to process your deposits and withdrawals. These providers are independently regulated and operate under their own privacy frameworks.
• KYC & identity verification partners: Third-party identity verification services may receive copies of your KYC documents to carry out authentication checks on our behalf. These providers are bound by strict data-processing agreements with zz66zz.
• Game and software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gaming data for the purpose of game delivery and RNG certification. They do not receive personally identifiable information except where required for regulatory compliance by the provider.
• Fraud prevention and AML services: Where a transaction or account activity triggers a compliance review, relevant data may be shared with specialist fraud detection or AML screening services under confidentiality obligations.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, zz66zz may disclose personal data to competent authorities. We will notify you of such disclosure where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

zz66zz uses cookies and similar technologies (local storage, session storage) to operate the platform correctly and to improve your experience. We do not deploy third-party advertising, social media tracking, or behavioural profiling cookies.

You may control or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in to and use the platform. Disabling functional cookies will mean your preferences are not remembered between sessions.

zz66zz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as general guidance:

• Active account data: Retained for the lifetime of the account and for five years following account closure, to meet AML, regulatory audit, and dispute resolution obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC documents: Retained for five years from the date of verification or from account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the last communication in the relevant thread.
• Technical and device data (logs): Retained for up to 12 months from collection for security and fraud investigation purposes; aggregated analytics data may be retained indefinitely in anonymised form.
• Marketing preferences and consent records: Retained until consent is withdrawn plus three years, for audit purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity from the retained data.

As a registered user of zz66zz, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at support zz66zz vip. We will respond to all verifiable requests within 30 days.

• Right of access: You may request a copy of the personal data zz66zz holds about you, together with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. Certain data (such as your registered name) may require KYC document support to amend.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is not absolute — we may retain data where required by law or for legitimate business purposes such as fraud prevention or the resolution of disputes.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service provider, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

zz66zz employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to the following:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms; plain-text passwords are never stored
• Tokenisation of payment card data; full card numbers are never stored on zz66zz servers
• Role-based access controls restricting access to personal data to authorised personnel on a strict need-to-know basis
• Regular security audits and vulnerability assessments of platform infrastructure
• Intrusion detection systems and real-time monitoring for anomalous access patterns
• Secure data centre hosting with physical access controls, redundant power supply, and environmental protection

Despite these measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, zz66zz will notify you without undue delay via the contact details registered to your account.

The zz66zz platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If we become aware that personal data has been submitted by or on behalf of a person under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that your child has registered an account or provided personal data to zz66zz, please contact us immediately at support zz66zz vip and we will investigate and act promptly. We recommend that parents and guardians use device-level parental control software to restrict access to gambling websites where children may have access to shared devices.

zz66zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The version of this Policy currently published on the platform at https://zz66zz.vip/privacy-policy is the version in force and supersedes all prior versions.

When we make material changes to this Policy — changes that significantly affect how we collect, use, or share your personal data — we will provide prominent notice on the platform and, where we hold a valid email address for your account, notify you directly. Minor changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) will be published without individual notification.

Your continued use of the zz66zz platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the platform and may request account closure in accordance with the process described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which zz66zz processes your personal data, please contact our dedicated support team. We are available 24 hours a day, seven days a week.

• Live Chat: Available within your logged-in account dashboard — typically the fastest way to reach us
• Email: support zz66zz vip (plain text — not a clickable link)

When submitting a data-rights request (see Section 8), please include your registered username and a brief description of your request. We will acknowledge receipt within two business days and provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

For responsible gaming support, including self-exclusion, deposit limits, and cooling-off requests, please visit our Responsible Gaming page or contact support directly. For general platform queries and how-to guidance, our FAQ page covers the most common questions from players across Bangladesh.