zz222 Privacy Policy — How We Collect, Use, and Protect Your Data

1 Who We Are

zz222 is an online casino and sports betting platform operated for players located in Bangladesh. The platform is accessible at https://zz222.io and offers casino games, live dealer games, sports betting markets (including cricket BPL and T20 World Cup), and a range of promotional services. For the purposes of this Privacy Policy, zz222 is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed.

All privacy-related enquiries, data access requests, and complaints should be directed to our support team via live chat on the Platform or in writing to [email protected]. This address is provided for written correspondence only and is not a clickable link.

2 Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, zz222 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration and KYC verification.
• Contact Data: Residential address in Bangladesh (city, district, division), mobile phone number, and email address.
• Identity Documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driving licence submitted for KYC purposes.
• Financial Data: bKash, Nagad, Rocket, or Upay account numbers used for BDT deposits and withdrawals. We do not store full payment credentials — only the account reference required to process transactions.
• Account Data: Your chosen username, account preferences, self-imposed responsible gaming limits, and communication preferences.
• Support Communications: The content of messages you send to the zz222 support team via live chat, including timestamps and chat transcripts.

2.2 Data Collected Automatically

When you access and use the zz222 Platform, certain technical data is collected automatically by our systems:

• Device and Technical Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the Platform.
• Transaction Data: Full history of deposits, withdrawals, bonus claims, wagers, wins, and losses associated with your account.
• Location Data: General geographic location inferred from your IP address, used solely to confirm you are accessing the Platform from Bangladesh.

3 How We Collect Data

zz222 collects personal data through the following channels and mechanisms:

• Direct interactions: Information you enter during the registration form, KYC upload process, deposit and withdrawal requests, promotional opt-ins, and support chat conversations.
• Automated technologies: Cookies, session tokens, and server log files that record technical data each time you access the Platform. See Section 7 for full details on cookie usage.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. We receive only the data necessary to confirm and reconcile the transaction.
• Game providers: Aggregated game-round data from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used for account balance reconciliation and dispute resolution.
• Identity verification services: Where additional identity verification is required beyond standard KYC document review, zz222 may use third-party identity verification services to cross-check document authenticity.

4 Why We Use Your Data

zz222 processes personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which each category of data is used:

zz222 does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review — for example, for suspected bonus abuse or fraudulent activity — a human compliance team member reviews the case before any action is taken.

5 Data Retention Periods

zz222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Account and transaction data: Retained for a minimum of 5 years from the date of the last transaction, in line with standard financial record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of account closure or the date the document was submitted, whichever is later.
• Support chat transcripts: Retained for 2 years from the date of the conversation, unless the conversation forms part of an ongoing dispute or investigation.
• Technical and usage logs: Retained for 12 months from the date of collection, after which they are permanently deleted or anonymised.
• Marketing consent records: Retained for the duration of the player's account plus 1 year following account closure, to demonstrate compliance with consent obligations.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players may request early deletion of non-legally-required data by contacting the support team — see Section 9 for full details of your data rights.

6 Sharing Your Data

6.1 Who We May Share Data With

zz222 does not sell your personal data. We share data only where strictly necessary and only with the following categories of recipient:

• Payment processors: bKash, Nagad, Rocket, and Upay receive only the data necessary to process BDT deposits and withdrawals — typically your account reference and transaction amount.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers receive a session token and anonymised player ID to deliver game content. They do not receive your full identity data.
• Identity verification services: Third-party KYC verification partners may receive copies of identity documents strictly for the purpose of document authenticity checks. These partners are bound by strict confidentiality agreements.
• IT infrastructure and hosting providers: zz222's cloud hosting and database service providers store data on our behalf under data processing agreements that require them to maintain equivalent security standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or a legitimate regulatory request, zz222 may be compelled to disclose player data to relevant authorities. We will notify affected players of such disclosures where legally permitted to do so.

6.2 International Data Transfers

Some of zz222's technology partners and game providers operate servers located outside Bangladesh. Where personal data is transferred internationally, zz222 takes reasonable steps to ensure that an equivalent standard of data protection is maintained through contractual data protection clauses or equivalent safeguards. By using the zz222 Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh.

7 Cookies and Tracking Technologies

7.1 What Cookies We Use

zz222 uses the following categories of cookies when you access the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Remember your language preferences, responsible gaming settings, and account display preferences across sessions.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the Platform — such as which game categories are most visited and which pages generate the highest exit rate. This data is used exclusively to improve the Platform and is not linked to any individual player's identity.

7.2 What We Do Not Use

zz222 does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or retargeting technologies of any kind. We do not share cookie data with advertising networks. Our analytics are conducted using first-party tools only.

7.3 Managing Cookies

You can manage, restrict, or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling functional cookies will cause your preferences to reset on each visit. Disabling analytics cookies will have no effect on your ability to use any Platform feature.

8 Data Security

zz222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the zz222 servers.
• Encrypted data storage for all personal data held in our databases, including identity documents and financial reference data.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access specific categories of player data.
• Regular security audits and penetration testing carried out by independent third-party security specialists to identify and remediate vulnerabilities.
• Two-factor authentication available to all players for account login, and mandatory for all zz222 staff accessing internal systems.
• Incident response procedures ensuring that in the event of a data breach, affected players are notified promptly and appropriate remediation steps are taken without delay.

9 Your Rights

As a registered zz222 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or in writing to [email protected]. zz222 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: Request a copy of all personal data zz222 holds about you, including account details, transaction history, and support communications.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data held on your account. Minor corrections (such as updating your phone number) can be made directly in your account settings.
• Right to Erasure: Request deletion of personal data that is no longer required for the purposes for which it was collected, subject to our legal obligation to retain certain data categories for a minimum of 5 years.
• Right to Restrict Processing: Request that we limit our use of your data to storage only, while a dispute or rectification request is being resolved.
• Right to Data Portability: Request a structured, machine-readable export of the personal data you have provided to zz222 directly (such as account registration data and transaction history).
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Use the unsubscribe option in any marketing message, or contact support directly.
• Right to Object: Object to processing carried out on the basis of legitimate interest, including use of anonymised usage data for platform analytics. Where a valid objection is raised, zz222 will cease that specific processing activity unless we can demonstrate compelling legitimate grounds.

10 Children and Minors

The zz222 Platform is strictly intended for adults aged 21 years and above. zz222 does not knowingly collect personal data from individuals under the age of 21. The date-of-birth field in the registration form and the mandatory KYC age verification process are both in place specifically to prevent underage individuals from accessing the Platform.

If zz222 becomes aware that an account has been registered by an individual under the age of 21, all personal data associated with that account will be securely deleted, the account will be permanently closed, and any funds held in the account will be forfeited. If you are a parent or guardian and believe that a minor has registered an account on the zz222 Platform using your or their own details, please contact our support team immediately via live chat so the account can be identified and closed without delay.

11 Changes to This Policy

zz222 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data we collect, the purposes for which we use it, or the parties with whom we share it — registered players will be notified via email and by a prominent notice on the Platform at least 7 days before the changes take effect.

Minor or clarifying amendments (such as corrections to grammar or formatting) may be made without prior notice. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the zz222 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and contact support to close your account and request deletion of your personal data where applicable.

12 Contact and Complaints

12.1 How to Contact Us

For all privacy-related queries, data rights requests, or concerns about how zz222 handles your personal data, please contact our support team via 24/7 live chat on the Platform. You may also submit written requests to [email protected] — this is a plain-text address and is not a clickable link. We aim to acknowledge all written privacy requests within 48 hours and to provide a substantive response within 30 calendar days.

12.2 Complaints

If you are not satisfied with how zz222 has handled your personal data or responded to a data rights request, you are entitled to raise a formal complaint. Begin by submitting a written complaint to our support team, clearly describing the nature of your concern and the outcome you are seeking. zz222 will investigate all formal privacy complaints thoroughly and provide a written response within 14 calendar days. If you remain dissatisfied following our internal review, you may escalate the matter to the relevant data protection authority applicable to your jurisdiction.