zb77 Privacy Policy

zb77 ("we", "us", "our") is committed to protecting the privacy and personal data of every user ("you", "your") who accesses or uses the zb77 platform, including the website at https://zb77.io, its subdomains, and any associated mobile platforms (collectively, "the Platform"). This Privacy Policy ("Policy") sets out in clear, formal terms what personal data we collect from you, the purposes for which that data is used, the legal bases upon which we rely to process it, how long we retain it, with whom we share it, and what rights you hold in relation to your data.

This Policy applies to all visitors to the Platform, including registered players, prospective players who have begun but not completed the registration process, and individuals who contact zb77 via any support channel. It applies to all personal data collected through the Platform itself, through communications between you and our support team, and through third-party data sources where we are permitted to receive such data.

This Policy should be read together with the zb77 Terms & Conditions, available at zb77.io/terms-conditions, which incorporate this Policy by reference. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall prevail in respect of privacy and personal data matters.

For the purposes of this Privacy Policy, the data controller responsible for the personal data processed in connection with the zb77 Platform is the zb77 operating entity. As the data controller, zb77 determines the purposes and means by which your personal data is processed.

If you have any questions about the identity of the data controller, the manner in which your data is processed, or the exercise of any of the rights described in Section 10 of this Policy, please contact us using the details provided in Section 14.

Where zb77 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers or payment processors), those providers act as data processors under a binding data processing agreement with zb77. They may only process your personal data in accordance with zb77's documented instructions and may not use it for their own independent purposes.

zb77 collects several categories of personal data from users of the Platform. The specific data collected depends on how you interact with the Platform — for example, whether you are a visitor, a registered player, or a player who has completed full KYC verification. The table below summarises the main categories:

zb77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued identity document submitted for KYC purposes incidentally contains such information. Where this occurs, such data is processed solely for the purpose of identity verification and is not used for any other purpose.

zb77 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, configure account settings, or contact our support team via live chat or email.
• Automated technical collection: Data collected automatically when you visit the Platform, including IP addresses, cookies, device identifiers, and server log data. See Section 6 for more information on our use of cookies.
• Payment providers: Confirmation data from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank in connection with deposit and withdrawal transactions. This data is limited to transaction references, amounts, timestamps, and account identifiers necessary to reconcile your account balance.
• KYC and identity verification partners: Where we use a third-party KYC provider to verify the identity documents you submit, that provider may return a verification result and a confidence score to zb77. The raw document data is processed by the provider in accordance with their own privacy policy, to which you will be directed during the KYC process.
• Responsible gaming databases: Where you have registered a self-exclusion with an external responsible gambling body, zb77 may receive a notification to that effect and will act upon it by restricting your account access accordingly.
• Fraud prevention services: zb77 may receive data from third-party fraud detection services indicating the risk profile associated with a particular IP address, device fingerprint, or payment method. This data is used solely to protect the integrity of the Platform and the safety of all users.

zb77 processes your personal data for specific, documented purposes. For each purpose, we rely on one or more legal bases for processing. The main purposes and their corresponding legal bases are set out below:

zb77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your consent.

The zb77 Platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, support security monitoring, and analyse how players interact with the site. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access other files on your device.

zb77 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session management cookies that keep you logged in during an active session, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your selected language, preferred game view, or responsible gaming settings, so that you do not have to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors navigate the Platform — which pages are visited most frequently, how long users spend on particular sections, and which game categories attract the most engagement. This data is used solely to improve the Platform and does not identify individual users.
• Security and Fraud Prevention Cookies: These cookies assist zb77 in identifying unusual patterns of behaviour that may indicate fraudulent activity, account takeover attempts, or the use of automated scripts, and in assigning risk scores to sessions accordingly.

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your zb77 account. zb77 does not use advertising or cross-site tracking cookies, and does not share cookie data with advertising networks.

zb77 does not sell, rent, or trade your personal data. We share your personal data with third parties only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive transaction-level data (amount, timestamp, account reference) necessary to execute your deposit and withdrawal instructions. These providers process payment data under their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: Third-party KYC providers receive the identity documents and related data you submit during the verification process. These providers are contractually bound to process your data only for identity verification purposes and to maintain appropriate security standards.
• Game software providers: Licensed game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a player session token and a pseudonymous player identifier to facilitate gameplay. These providers do not receive your full name, contact details, or payment information.
• Fraud prevention and security services: We may share technical data (IP addresses, device fingerprints, session data) with third-party fraud prevention services to protect the Platform and its users from fraudulent activity.
• Legal and regulatory authorities: zb77 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by law, court order, or regulatory direction, or where zb77 reasonably believes disclosure is necessary to protect the rights, safety, or property of zb77, its users, or the public.
• Professional advisers: Legal, financial, and compliance advisers engaged by zb77 may access personal data to the extent necessary to provide their services, and are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of zb77's business, personal data held by zb77 may be transferred to the acquiring entity. You will be notified of any such transfer that materially affects the processing of your personal data.

All third-party data processors engaged by zb77 are required to enter into a data processing agreement that mandates appropriate technical and organisational security measures, restricts sub-processing without prior authorisation, and requires the processor to notify zb77 of any personal data breach affecting your data within 72 hours of becoming aware of it.

zb77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The table below sets out our standard retention periods for the main categories of personal data:

Upon expiry of the applicable retention period, personal data is either securely deleted from all zb77 systems or anonymised in such a manner that it can no longer be attributed to any identifiable individual. Where anonymised data is retained, it may be used for statistical analysis and platform improvement purposes without restriction.

Where you have requested account closure, your data will be retained for the periods specified above from the date of closure. During this post-closure retention period, your account will not be accessible and your data will not be used for any commercial purpose — it is held solely to comply with legal obligations and to defend against any potential legal claim.

zb77 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and zb77 servers is encrypted using TLS 1.2 or TLS 1.3 protocols (256-bit SSL). This applies to all Platform pages, including login, registration, deposit, and KYC submission flows.
• Encryption at rest: Sensitive personal data stored on zb77 servers, including KYC documentation and financial data, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data held by zb77 is restricted on a strict need-to-know basis. Staff members who do not require access to personal data to perform their job functions are not granted such access. All staff with access to personal data receive regular data protection training.
• Password security: User account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. zb77 cannot retrieve your password — only reset it.
• Intrusion detection: zb77 employs real-time intrusion detection and monitoring systems to identify and respond to suspicious access attempts, unusual traffic patterns, and potential security incidents.
• Penetration testing: zb77's systems are subject to regular security assessments, including penetration testing conducted by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zb77 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach. zb77 will also notify the relevant regulatory authority where required by applicable law.

Subject to applicable law and any overriding legal obligations that zb77 may be subject to, you have the following rights in relation to the personal data that zb77 holds about you:

• Right of access: You have the right to request a copy of the personal data zb77 holds about you, together with information about how and why it is being processed. zb77 will respond to access requests within 30 calendar days.
• Right to rectification: If any personal data zb77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly through your account settings without needing to contact support.
• Right to erasure: In certain circumstances, you have the right to request that zb77 delete the personal data it holds about you. This right is subject to exceptions — for example, where zb77 is required to retain data to comply with a legal obligation or to defend a legal claim. zb77 will inform you if any such exception applies to your erasure request.
• Right to restriction of processing: You may request that zb77 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being investigated, or where you have objected to processing and the outcome of that objection is pending.
• Right to data portability: Where zb77 processes your personal data on the basis of your consent or on the basis of a contract, and where processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where zb77 relies on legitimate interests as the legal basis. If you object, zb77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where zb77 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". zb77 may ask you to verify your identity before acting on any request. There is no charge for exercising your rights, except in cases of manifestly unfounded or repetitive requests, where a reasonable administrative fee may apply.

The zb77 Platform is strictly for adults aged 21 years and above. zb77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and any account found to belong to a person under the age of 21 will be immediately suspended and the account balance forfeited in accordance with the zb77 Terms & Conditions.

If zb77 becomes aware that it has inadvertently collected personal data from a person under the age of 21 without a valid KYC verification outcome confirming their age, that data will be deleted as quickly as is technically practicable. If you are a parent or legal guardian and believe that a person under your care has registered an account on the zb77 Platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 48 hours of receiving your report.

The zb77 Platform primarily serves users in Bangladesh, and the majority of personal data is processed within infrastructure serving the Bangladesh region. However, some third-party service providers engaged by zb77 — including certain KYC verification providers, fraud detection services, and game software providers — may be located outside Bangladesh and may process personal data in other jurisdictions.

Where personal data is transferred to a third party located outside Bangladesh, zb77 takes steps to ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include:

• Binding contractual clauses in data processing agreements that impose equivalent data protection standards on the recipient;
• Transfers to jurisdictions that maintain data protection frameworks recognised as providing an adequate level of protection;
• Technical and organisational measures that ensure the security and confidentiality of transferred data throughout the transfer and at the destination.

By using the zb77 Platform and submitting your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh, subject to the safeguards described above. If you would like further information about the specific safeguards applied to any particular international transfer, please contact us using the details in Section 14.

zb77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in the way the Platform operates, or changes in the categories of personal data we process. The most current version of this Policy will always be available at https://zb77.io/privacy-policy and will display the "Last Updated" date at the top of the document.

Where a change to this Policy is material — meaning it significantly affects your rights or the way your personal data is processed — zb77 will notify registered users by email to the address associated with their account at least 14 calendar days before the change takes effect. For minor or non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), no prior notice will be provided beyond the updated Policy being published on the Platform.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement that you have read and understood the updated Policy. If you do not agree with any changes to this Policy, you should cease using the Platform and request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zb77 processes your personal data, please contact us using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 through the Platform
• Response time: zb77 aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

If you are not satisfied with zb77's response to your privacy enquiry or rights request, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. zb77 will cooperate fully with any investigation conducted by a competent supervisory authority in connection with your complaint.

zb77 takes all privacy complaints seriously and will acknowledge receipt of your complaint within 2 business days and provide a substantive response within 30 calendar days. Where a complaint involves a complex matter that requires additional investigation, zb77 will keep you informed of progress and will endeavour to resolve the matter as promptly as possible.