ze66 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how ze66 ("ze66", "we", "our", "us") collects, uses, stores, protects, and discloses personal information obtained from players ("you", "your", "the Player") who access or use the ze66 online betting platform available at ze66.io and all associated subdomains, mobile interfaces, and applications.

This Policy applies to all personal data collected through your use of the ze66 platform, whether you are browsing as a guest, completing the registration process, placing bets, accessing live casino games, making deposits or withdrawals, or contacting our customer support team. It applies equally to players located in Bangladesh and to players in any other jurisdiction where ze66 services are accessed.

By registering for a ze66 account or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

ze66 collects personal data through several channels: directly from you when you register or update your account; automatically when you use the platform; and from third-party identity verification and payment partners during the KYC process. The categories of data we collect include:

Identity & Contact Data

Financial & Transaction Data

Behavioural & Technical Data

ze66 uses your personal data strictly for the purposes necessary to deliver, maintain, and improve the platform and to meet our legal and operational obligations. Specifically, we use your data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain accurate account records.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi banks, and to maintain an accurate transactional record for each player.
• KYC compliance: To verify your age (21+), identity, and source of funds in accordance with our anti-money-laundering obligations and responsible gaming commitments.
• Platform personalisation: To present relevant promotions, game recommendations, and cricket or sports content based on your platform usage patterns. This personalisation does not involve sharing your data with external advertising networks.
• Security and fraud prevention: To detect and prevent fraudulent activity, account takeover attempts, collusion, bonus abuse, and any other form of prohibited conduct outlined in our Terms & Conditions.
• Customer support: To respond to your inquiries, investigate disputes, and maintain a record of all support interactions for quality assurance purposes.
• Legal compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions and this Policy.
• Platform improvements: To analyse aggregated, anonymised usage data and improve the performance, design, and feature set of the ze66 platform over time.

ze66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the ze66 Terms & Conditions — for example, processing deposits, maintaining your account balance, and settling bet winnings.
• Legitimate interests: Processing that is necessary for ze66's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud prevention, platform security, and internal analytics.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining transaction records, cooperating with law enforcement investigations, and conducting KYC checks.
• Consent: Where we rely on your consent as a legal basis — for example, for optional marketing communications — you may withdraw that consent at any time by contacting [email protected] without affecting any prior processing.

ze66 does not sell, rent, or trade your personal information. We may share your data with carefully selected third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi bank partners receive transaction reference data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services may process your identity documents to confirm your age, name, and address. These providers operate under strict confidentiality agreements and may not use your data for any purpose other than the verification request.
• Game content providers: Studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming receive anonymised session identifiers to facilitate live casino and slot game functionality. They do not receive your full identity or payment data.
• Technology and infrastructure partners: Hosting providers, cloud infrastructure services, and cybersecurity partners may process data as part of platform operation. All such partners are contractually obligated to process data solely as directed by ze66 and to maintain appropriate security standards.
• Legal and regulatory authorities: ze66 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or in response to a valid legal request.

ze66 applies a tiered KYC verification process. Basic verification is required before a player's first withdrawal. Enhanced verification may be required for withdrawals above ৳50,000 or where account activity triggers a risk flag. The documents ze66 may request include:

• Government-issued photo identification (National ID card, passport, or driving licence).
• Proof of residential address dated within the last three months (utility bill, bank statement, or official letter).
• Proof of payment method ownership (screenshot of mobile wallet registered in the player's name, or bank statement).
• Source of funds declaration for high-value accounts, where required for compliance purposes.

All identity documents submitted to ze66 are stored in encrypted form and are accessible only to authorised compliance team members. Documents are retained for a minimum of five (5) years from the date of account closure in accordance with standard anti-money-laundering record-keeping requirements.

ze66 does not store full card numbers, CVV codes, mobile banking PINs, or internet banking passwords at any point during the payment process. Payment tokenisation is handled exclusively by the relevant payment gateway provider.

ze66 uses the following categories of cookies and similar technologies on its platform:

• Essential cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. The platform cannot operate without these cookies, and they cannot be disabled via cookie preferences.
• Performance cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is aggregated and used solely to improve the platform. No individual player is identified in performance analytics.
• Security cookies: Used to detect suspicious login patterns, identify automated bot activity, and flag potential account takeover attempts. These cookies are a component of ze66's fraud prevention infrastructure.

ze66 does not deploy advertising cookies, social media tracking pixels, or any third-party behavioural profiling technology. You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent login and account functionality from operating correctly.

ze66 retains your personal data for as long as your account remains active and for the periods required by our legal and operational obligations thereafter. The following retention periods apply:

• Active account data: Retained for the full duration of your account membership plus five (5) years following account closure.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of account closure.
• Support correspondence: Retained for three (3) years from the date of the most recent interaction in a given support thread.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

Upon expiry of the applicable retention period, ze66 will securely delete or anonymise your personal data in accordance with our internal data lifecycle management procedures.

ze66 implements a multi-layered security framework to protect player data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and ze66 servers.
• AES-256 encryption for sensitive data stored at rest within ze66's server infrastructure.
• Role-based access control ensuring that only authorised personnel can access personally identifiable information, and only to the extent required by their specific operational role.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and 24/7 automated monitoring for anomalous access patterns.
• Multi-factor authentication for internal administrative access to player data systems.
• Strict vendor security due diligence applied to all third-party service providers who process player data on behalf of ze66.

In the event of a data breach that is likely to result in a risk to your rights or interests, ze66 will notify affected players promptly via the email address registered to their account and will take all reasonable steps to contain and remediate the breach.

ze66 respects your rights regarding your personal data. The following rights are available to all ze66 players. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request".

Right	What It Means	Response Time
Access	Request a full copy of all personal data ze66 holds about you.	Within 30 days
Rectification	Request correction of inaccurate or incomplete personal data.	Within 14 days
Erasure	Request deletion of your data, subject to legal retention obligations.	Within 30 days
Restriction	Request that we limit processing of your data in certain circumstances.	Within 30 days
Portability	Receive your data in a structured, machine-readable format.	Within 30 days
Objection	Object to processing carried out on the basis of legitimate interests.	Within 30 days

Please note that certain rights may be limited where ze66 has overriding legal obligations — for example, we cannot erase transaction records that are required to be retained under anti-money-laundering regulations. ze66 will explain any applicable limitation clearly in our response to your request.

The ze66 platform is strictly for adults aged 21 years and older. ze66 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the relevant account, delete the associated data, and return any real-money balance to the originating payment source.

If you are a parent or guardian and believe that a minor has registered for a ze66 account without your knowledge, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and respond within 48 hours.

ze66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal standards. When material changes are made, we will notify registered players via the email address on file at least seven (7) days before the updated Policy takes effect. The updated Policy will also be published on this page with a revised effective date.

Your continued use of the ze66 platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any update to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

For all privacy-related enquiries, data rights requests, or concerns about how ze66 handles your personal information, please contact us at:

• Email: [email protected] — subject line "Privacy Enquiry"
• Response time: All privacy enquiries will receive an initial response within 5 business days (Bangladesh Standard Time, UTC+6).