Your Privacy Matters
to z77

1 Introduction

z77 is committed to safeguarding the privacy and personal data of every player who uses our online casino and sports betting platform. We recognise that trust is the foundation of any long-term relationship with our players, and we believe that transparency about our data practices is essential to earning and maintaining that trust.

This Policy applies to all personal data collected through the z77 website at https://z77.lol, including data collected during account registration, identity verification, financial transactions, customer support interactions, and general browsing of the platform. It applies to all users regardless of their location, though z77's primary market is Bangladesh.

z77 operates this platform as an online entertainment service. We collect and process personal data only for legitimate, clearly defined purposes, and only to the extent necessary to fulfil those purposes. We do not engage in data practices that we would not be comfortable explaining openly to our players, which is why we have published this Policy in full.

2 Personal Data We Collect

z77 collects personal data in several ways: directly from you when you register, verify your identity, or contact support; automatically through your use of the platform; and from third-party payment providers when you make a deposit or withdrawal. The categories of personal data we collect are described below.

z77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of unique identification, except where a player voluntarily provides such information in a support communication.

3 How We Use Your Personal Data

z77 uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected, and we do not engage in behavioural advertising profiling using your personal data.

• Account Management: To create, maintain, and administer your z77 player account, including authentication, password recovery, and account preference management.
• Identity Verification (KYC): To verify your age and identity in accordance with our responsible gaming obligations and anti-money laundering commitments. This includes reviewing documents you submit and, where necessary, conducting checks against third-party verification databases.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks. Financial data is used to match incoming and outgoing payments to your account and to detect and prevent fraudulent transactions.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance. Support communications are retained to ensure quality and accountability.
• Responsible Gaming Compliance: To apply deposit limits, loss limits, self-exclusion statuses, and other responsible gaming tools you activate, and to identify patterns of play that may indicate problem gambling so that appropriate intervention can be offered.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Platform Improvement: To analyse aggregate usage patterns — such as popular game categories, peak login times, and navigation flows — in order to improve the z77 user experience. This analysis is conducted on anonymised or aggregated data wherever possible.
• Legal and Regulatory Obligations: To comply with applicable legal obligations, including responding to lawful requests from relevant authorities.

4 Legal Basis for Processing

z77 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil the contract between you and z77 — specifically, to operate your account, process bets and transactions, and deliver the gaming services you have registered to use.
• Legal Obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering checks, and the retention of transaction records for the legally prescribed period.
• Legitimate Interests: Processing carried out for z77's legitimate business interests, such as fraud detection, platform security, and aggregate analytics, provided those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the basis for processing — such as for non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect processing carried out on other legal bases.

5 Data Sharing & Disclosure

z77 does not sell your personal data. We share your data only in the circumstances described below, and only to the extent necessary to accomplish the stated purpose.

• Payment Processors: Your financial data is shared with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) solely for the purpose of processing your deposits and withdrawals. These providers maintain their own privacy and security standards.
• Identity Verification Providers: Where required for KYC compliance, your identity documents may be shared with contracted third-party verification services. These providers are bound by confidentiality agreements and may not use your data for any purpose other than verification.
• Game Software Providers: Technical game session data (e.g., player session tokens, bet amounts, round outcomes) is shared with our licensed game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent required to deliver game content and resolve disputes. These providers do not receive your identity or contact data.
• IT and Platform Service Providers: z77 uses contracted technology providers for cloud hosting, email delivery, customer support software, and analytics. These providers act as data processors under z77's instructions and are contractually prohibited from using your data for their own purposes.
• Legal and Regulatory Disclosure: z77 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where necessary to protect the rights, property, or safety of z77, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of z77's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

All third parties with whom z77 shares personal data are required to handle that data in accordance with applicable privacy standards and are permitted to use it only for the specific, contracted purpose for which it was shared.

6 Cookies & Tracking Technologies

z77 uses cookies and similar technologies (including local storage and session tokens) to operate the platform effectively and to improve your experience. The types of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session authentication, maintain your login state, and remember your in-session preferences. These cookies cannot be disabled without disrupting core platform functionality.
• Performance Cookies: These cookies collect anonymised information about how visitors use the z77 platform — such as which pages are visited most often and how long users spend on each section. This data helps us identify areas for improvement. No personally identifiable information is stored in performance cookies.
• Functional Cookies: These cookies remember choices you make — such as your preferred language and display settings — and personalise your experience accordingly. They do not track your activity on other websites.
• Security Cookies: These cookies support z77's fraud prevention and account security systems by detecting unusual login patterns, flagging suspicious device signatures, and preventing cross-site request forgery.

z77 does not use third-party advertising cookies or cross-site tracking cookies. Your browsing activity on z77 is not shared with advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the platform.

7 Data Retention

z77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal and financial data associated with an active player account is retained for the duration of the account's existence and for a minimum of five years following account closure, to comply with financial record-keeping obligations.
• KYC and Identity Documents: Copies of identity documents provided during verification are retained for a minimum of five years after the relevant account relationship ends, in accordance with anti-money laundering record retention standards.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five years to support audit, dispute resolution, and regulatory compliance requirements.
• Customer Support Records: Support correspondence and live chat transcripts are retained for two years following the closure of the relevant support ticket, or longer where the subject of the communication relates to an ongoing or unresolved matter.
• Technical and Usage Data: Server logs and anonymised usage analytics are retained for up to 12 months, after which they are deleted or irreversibly anonymised.
• Self-Exclusion Records: Where a player has requested self-exclusion, a record of that exclusion is retained for a minimum of the exclusion period plus five years to prevent circumvention.

Once the applicable retention period has expired, personal data is securely deleted or anonymised. Where deletion is technically impractical in the short term (e.g., in backup archives), data is isolated and protected from active use until routine deletion processes are completed.

8 Security Measures

z77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following safeguards:

• Transport Encryption: All data transmitted between your device and the z77 platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. This protects your login credentials, financial data, and personal information from interception in transit.
• Access Controls: Access to personal data stored on z77 systems is restricted to authorised personnel on a strict need-to-know basis. Administrative access is protected by multi-factor authentication and is subject to comprehensive audit logging.
• Secure Data Storage: Personal and financial data is stored on servers that operate within secure, access-controlled environments. Database encryption is applied to sensitive data fields at rest.
• Fraud Detection Systems: z77 operates automated systems that continuously monitor account activity for patterns indicative of fraudulent behaviour, unauthorised access attempts, or unusual transaction activity. Suspicious activity triggers immediate review by our security team.
• Penetration Testing: z77 conducts periodic security assessments and penetration testing exercises to identify and remediate vulnerabilities in our systems before they can be exploited.
• Incident Response: z77 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected players, we will notify impacted users without undue delay and take immediate steps to contain and remediate the incident.

While z77 takes reasonable and appropriate steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your z77 login credentials and for ensuring that the device you use to access the platform is adequately secured.

9 Your Privacy Rights

As a z77 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account username and a description of your request. We will respond within a reasonable period, and in any case within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that z77 holds about you, along with information about how it is used, where it is stored, and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please note that corrections to identity data may require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — we may not be able to delete data that we are legally required to retain.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict our use of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where z77 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

10 Children's Privacy

z77 is strictly an adult platform. Our services are not directed at, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.

As part of our registration and KYC processes, z77 takes active steps to verify that all players meet the minimum age requirement of 18 years. Where we have reason to suspect that a registered account belongs to a person under 18, we will immediately suspend the account pending age verification and will delete any personal data collected if the suspicion is confirmed.

If you believe that a minor has accessed z77 or provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11 Third-Party Links

The z77 platform may contain references to or integrations with third-party service providers — such as payment platforms (bKash, Nagad) and game content providers — whose own privacy practices are governed by their respective privacy policies. z77 is not responsible for the privacy practices of third-party services and encourages you to review the relevant policies before providing personal data to any third party.

z77 does not include advertising links, affiliate banners, or other outbound links to unrelated third-party websites. Any third-party integrations present on the platform are exclusively those necessary to deliver the gaming and payment services you use as a registered player.

12 Updates to This Privacy Policy

z77 reserves the right to update this Privacy Policy at any time. When material changes are made — such as the introduction of a new category of data collection, a new third-party data sharing arrangement, or a significant change to how data is used — we will notify registered users by email or via a prominent notice on the platform at least 7 days before the changes take effect.

Minor updates that do not materially affect your rights or our data practices (such as formatting corrections or clarifications) may be published without advance notice. The "Last updated" date at the top of this document will always reflect when the Policy was most recently revised.

Your continued use of the z77 platform following the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should contact support to request account closure before the revised Policy takes effect.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way z77 handles your personal data, please contact our dedicated support team. We take all privacy enquiries seriously and will respond as promptly as possible.

For privacy-related requests and general support, contact us at: [email protected]

When contacting us regarding a privacy matter, please include your registered account username, a clear description of your request or concern, and any relevant reference numbers. This will allow us to locate your records quickly and respond efficiently. z77 aims to acknowledge all privacy requests within 48 hours and to resolve them within 30 days of receipt.