Privacy Policy — How z99999 Protects Your Data

z99999 collects personal data from players and visitors in order to operate the platform safely, process financial transactions, comply with legal obligations, and deliver a personalised gaming experience. We collect only the minimum data necessary for these purposes. The categories of data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor, it will be deleted immediately and the associated account will be closed.

z99999 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases on which we rely are: performance of a contract (operating your account), compliance with a legal obligation (KYC, AML, age verification), our legitimate interests (fraud prevention, platform security, responsible gaming monitoring), and in limited cases, your explicit consent (for optional marketing communications).

The following table sets out the specific purposes for which we use your personal data and the corresponding lawful basis for each:

• Account Creation and Management: Processing your registration, maintaining your account profile, and enabling you to log in and access the z99999 platform. Lawful basis: contract performance.
• Identity and Age Verification: Verifying that you are who you say you are and that you are aged 18 or above, as required before allowing you to deposit or wager. Lawful basis: legal obligation.
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and connected banking partners. Lawful basis: contract performance.
• Fraud Prevention and Security: Monitoring transactions and account activity for signs of fraud, money laundering, multi-accounting, or other prohibited conduct. Lawful basis: legitimate interests and legal obligation.
• Responsible Gaming Monitoring: Identifying patterns of play that may suggest problem gambling behaviour and, where appropriate, intervening with responsible gaming tools or communications. Lawful basis: legitimate interests and legal obligation.
• Customer Support: Responding to your enquiries, complaints, and support requests. Lawful basis: contract performance and legitimate interests.
• Platform Improvement: Analysing usage data in aggregate to improve the z99999 platform, fix bugs, and enhance game performance. Lawful basis: legitimate interests.
• Legal Compliance: Retaining records as required by applicable financial, tax, and anti-money laundering regulations and responding to lawful requests from regulatory or law enforcement authorities. Lawful basis: legal obligation.
• Marketing Communications (Optional): Sending you promotional offers, bonus notifications, and news about z99999 — only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected]. Lawful basis: consent.

z99999 does not sell, rent, or exchange your personal data with third parties for commercial or marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment Service Providers: We share the financial data necessary to process your deposits and withdrawals with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners process your data under their own privacy policies and are subject to their own regulatory obligations.
• Identity Verification Providers: Where we use third-party services to assist with KYC verification, your identity documents and associated data may be shared with those providers solely for verification purposes. Such providers are contractually bound to handle your data confidentially and securely.
• Game Technology Providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens) necessary to deliver their games within the z99999 platform. These providers do not receive your financial data or full identity details.
• Fraud Prevention and Security Agencies: In cases of suspected fraud, money laundering, or other prohibited conduct, z99999 may share relevant data with fraud prevention agencies, financial intelligence services, or law enforcement authorities, as permitted or required by law.
• Legal and Regulatory Authorities: We may disclose your personal data to government bodies, regulatory authorities, or courts where we are legally required to do so by a valid court order, statutory requirement, or formal regulatory request.
• Business Transfers: In the event that z99999 undergoes a business restructuring, merger, acquisition, or asset sale, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the privacy implications via a notice posted on the z99999 platform.

z99999 uses cookies and similar tracking technologies (including local storage and session storage) to make the platform function correctly, to keep your session secure across pages, and to understand how players use the platform so we can improve it. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

z99999 does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies. We do not share cookie-derived data with advertising networks. Most web browsers allow you to control cookies through the browser's settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional or analytical cookies will not affect your ability to play but may reduce your experience.

z99999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security programme includes the following controls:

• Transport Layer Security (TLS): All data transmitted between your device and z99999 servers is encrypted using TLS 1.2 or higher (256-bit). This protects your login credentials, financial data, and personal information from interception during transmission.
• Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or transmitted after the point of entry.
• Access Controls: Access to personal data within z99999 is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure Security: z99999 servers are hosted in secure, access-controlled data centres. We employ firewalls, intrusion detection systems, and regular vulnerability scanning to protect our infrastructure.
• Security Monitoring: Our security operations team monitors the platform 24 hours a day, 7 days a week for signs of unauthorised access or anomalous activity. Suspected security incidents are investigated promptly and escalated to appropriate response procedures.
• Incident Response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, z99999 will notify affected players as soon as reasonably practicable after becoming aware of the breach and will take immediate remediation steps.

While z99999 takes its data security obligations seriously and maintains robust controls, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their z99999 account, to enable two-factor authentication where available, and to contact support immediately if they suspect their account has been compromised.

z99999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and regulations. The retention periods we apply are determined by the nature of the data and the legal obligations attached to it.

• Active Account Data: Data collected during account registration and ongoing play is retained for the full duration of your active account plus a minimum of five (5) years following account closure.
• Financial Transaction Records: Records of all deposits, withdrawals, and wagers are retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC and Identity Documents: Copies of identity verification documents submitted during KYC are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Customer support correspondence and complaint records are retained for a minimum of three (3) years from the date of the final communication in the relevant case.
• Technical and Log Data: Server logs, IP address records, and session data are retained for a period of up to twelve (12) months, after which they are deleted or anonymised.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the full duration of your account plus three (3) years after account closure, as evidence of your consent preferences.

As a player on the z99999 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how we use it and who we share it with. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many of your account details directly through the z99999 account settings page.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restriction of Processing: You have the right to request that we restrict our processing of your personal data in certain circumstances, such as while you contest the accuracy of data we hold about you.
• Right to Data Portability: Where our processing of your data is based on your consent or on contract performance and is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing of your data is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

If you have any questions, concerns, or complaints about this Privacy Policy or about how z99999 handles your personal data, please contact our dedicated privacy support team. We treat all privacy-related enquiries with high priority and aim to provide a substantive response within five (5) business days.

You may reach us at the following contact point:

z99999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes to the z99999 platform, or changes in applicable laws and regulations. When we make material changes to this policy, we will post the updated version on this page with a revised effective date. For significant changes that materially affect how we handle your data, we will notify registered players via email or via a prominent notice on the platform.

Players are encouraged to review this Privacy Policy periodically. Continued use of the z99999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to the Privacy Policy, you should cease using the platform and contact us to close your account.

This Privacy Policy is written in English and governed by applicable law. Any translation of this policy provided for convenience does not constitute a separate agreement and does not supersede the English version. In the event of any conflict between the English version and any translation, the English version shall prevail.