zz55 Privacy Policy

1 Data We Collect

zz55 collects personal data from players in several ways: directly when you register an account or contact support, automatically when you interact with the platform, and from third parties where required to fulfil our legal and operational obligations.

1.1 Registration and Account Data

When you create a zz55 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are 18 years of age or older).
• Residential address, including division, district, and postcode.
• Email address (used for account notifications, security alerts, and player communications).
• Mobile phone number (used for two-factor authentication and payment verification).
• Username and a hashed version of your chosen password (passwords are never stored in plain text).

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling, money laundering, and fraud, we collect the following documents from players prior to processing withdrawals or where triggered by our risk monitoring systems:

• A copy of a valid government-issued photo ID — National Identity Card (NID), passport, or birth certificate.
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days).
• Source of funds documentation where required by our compliance team for high-value transactions.

KYC documents are stored in an encrypted format on access-controlled servers. They are reviewed by trained compliance personnel and are never shared with third parties except as described in Section 3 of this Policy.

1.3 Transaction Data

We record all financial transactions conducted through your zz55 account, including:

• Deposit and withdrawal amounts, dates, times, and processing status.
• Payment method identifiers (e.g., the last four digits of a card, or a masked bKash or Nagad account number).
• Transaction reference numbers provided by payment processors.
• Bonus credits, wagering activity, and promotion redemptions.

1.4 Technical and Usage Data

When you access the zz55 platform, our servers and analytics tools automatically collect the following technical information:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited, time spent on each section, and navigation paths through the platform.
• Game rounds played, bet sizes, and game session durations (used for responsible gaming monitoring).
• Error logs and crash reports (used for platform maintenance and debugging).

1.5 Communications Data

If you contact zz55 via email, live chat, or any support channel, we retain records of those communications, including your messages, our responses, attachments, and the date and time of each interaction. This data is used to resolve disputes, improve support quality, and maintain a record of instructions given by players.

2 How We Use Your Data

zz55 processes personal data only for legitimate purposes that are proportionate to the data collected. The table below sets out the primary purposes for which we use your data and the legal basis under which each processing activity is carried out.

Marketing Communications

zz55 will only send promotional emails, SMS messages, or push notifications to players who have explicitly opted in to receive them. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the account settings panel or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or receive essential account-related notifications.

3 Data Sharing & Disclosure

zz55 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below.

3.1 Service Providers and Technology Partners

We engage carefully selected third-party service providers to assist in operating the zz55 platform. These providers act as data processors on our behalf and are contractually bound to process your data only for the specific purpose for which it was shared, in accordance with our instructions, and with appropriate security measures in place. Categories of service providers include:

• Payment processors and banking partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking institutions) — for processing deposits and withdrawals.
• KYC and identity verification technology providers — for document scanning and identity matching.
• Game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — who receive only anonymised session tokens, not your personal identification data.
• Cloud hosting and infrastructure providers — who store encrypted platform data on our behalf.
• Fraud detection and anti-money laundering screening services — who analyse transaction patterns to identify suspicious activity.

3.2 Legal and Regulatory Disclosure

zz55 may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or other government bodies where we are required to do so by applicable law, court order, or binding regulatory directive. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of the disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that zz55 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players by email in advance of any such transfer and will ensure that the receiving entity agrees to honour the terms of this Privacy Policy with respect to your data.

3.4 No Cross-Border Data Sales

zz55 does not transfer your personal data to international data brokers, overseas advertising networks, or any organisation whose primary purpose is the commercial exploitation of personal data. Where data is processed by a service provider located outside Bangladesh, zz55 ensures that appropriate contractual safeguards are in place to maintain an equivalent level of data protection.

4 Cookies & Tracking

zz55 uses cookies and similar tracking technologies on the zz55.club platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us remember your preferences, keep your session active, and understand how players use the platform so we can continuously improve it.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preference, and ensure that security tokens are correctly applied. These cookies cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: These cookies remember choices you have made — such as your preferred deposit method or notification settings — so you do not need to re-enter them on every visit.
• Analytics Cookies: We use first-party analytics to understand how players navigate the platform — which pages are visited most, where sessions end, and how long players spend on each section. This data is aggregated and anonymised. We do not use third-party advertising analytics cookies.
• Responsible Gaming Cookies: These cookies track session duration and betting frequency to power the responsible gaming tools available on the platform, such as session-time reminders.

4.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your zz55 account. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

5 Data Security

zz55 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire zz55.club domain.
• Passwords are stored using bcrypt hashing with a per-user salt. Plain-text passwords are never stored or logged.
• Payment card data and mobile banking identifiers are tokenised. Full account numbers and PINs are never stored on zz55 servers.
• KYC documents are stored in encrypted form on access-controlled cloud storage with audit logging enabled.
• Production databases are isolated from public-facing network segments using firewalls and private virtual network configurations.
• Regular automated vulnerability scans and periodic manual penetration testing are conducted on the platform infrastructure.

Organisational Safeguards

• Access to personal data is restricted to zz55 personnel on a strict need-to-know basis. Access rights are reviewed quarterly.
• All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• A formal incident response procedure is in place to manage data security events. In the event of a breach affecting player data, affected players will be notified within 72 hours of the breach being confirmed, where technically feasible.

Your Responsibility

While zz55 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. You are responsible for keeping your zz55 login credentials confidential, using a strong and unique password, and logging out of your account when using shared or public devices. If you suspect your account credentials have been compromised, contact [email protected] immediately.

6 Data Retention

zz55 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data (registration details, transaction history, KYC documents) is retained for the lifetime of your zz55 account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Communications data (support chat logs, email correspondence) is retained for up to three years from the date of the most recent interaction in the relevant support case.
• Technical and usage data (server logs, session data) is retained for up to 12 months, after which it is anonymised or deleted.
• Marketing consent records are retained for the duration of your marketing opt-in plus three years following any withdrawal of consent, as evidence of your preference.
• Self-exclusion records are retained for a minimum of five years following the end of a self-exclusion period to prevent re-registration during or after exclusion.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Players may request details of the specific retention period applicable to their account data by contacting [email protected].

7 Your Privacy Rights

zz55 respects your rights over your personal data. The following rights are available to all players. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

Right of Access

You have the right to request a copy of the personal data that zz55 holds about you. We will provide this in a structured, machine-readable format (such as CSV or PDF) where technically feasible.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through the account profile settings. For information that cannot be self-edited (such as KYC-verified name or date of birth), please contact our support team.

Right to Erasure

You may request that zz55 delete your personal data. This right is not absolute — we are required to retain certain categories of data for compliance with legal obligations (such as anti-money laundering record-keeping) even after your account is closed. Where deletion is not possible for legal reasons, we will inform you of the specific obligation that prevents deletion and the expected retention period.

Right to Restrict Processing

You may request that zz55 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or where you have objected to processing and we are assessing the legitimacy of that objection.

Right to Object

Where zz55 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

8 Contact & Policy Updates

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have concerns about how zz55 handles your personal data, please contact our privacy team at:

Email: [email protected] (plain text — not a clickable link)

Please include "Privacy" in the subject line of your message so it is directed to the appropriate team. Our support team operates 24 hours a day, 7 days a week.

Policy Updates

zz55 reviews this Privacy Policy at least once every 12 months and updates it whenever our data practices change materially. When we make material changes to this Policy, we will notify registered players by email to the address on file at least 14 days before the changes take effect. The updated Policy will also be published at zz55.club/privacy-policy with a revised effective date at the top of the document.

For minor, non-material updates — such as clarifications of existing practices, corrections of typographical errors, or additions of new illustrative examples — we may update the Policy without advance notice, but will always update the effective date.

Your continued use of the zz55 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your account by contacting [email protected] before the effective date of the changes.