zzz66 Privacy Policy —
How We Protect Your Data

1 Introduction

zzz66 operates the online betting and casino platform available at zzz66.io, serving players primarily in Bangladesh. As a platform that handles financial transactions and personal identification data, zzz66 takes its data protection responsibilities seriously. This Privacy Policy has been drafted to give you a clear, complete, and honest account of how your data is handled from the moment you first visit zzz66.io to the time you close your account.

This policy applies to all users of zzz66.io, including registered account holders, visitors who browse without registering, and anyone who contacts zzz66 via live chat, email, or any other support channel. It covers all personal data collected through the zzz66 website, mobile-optimised pages, and any associated communication channels.

This document should be read alongside the zzz66 Terms & Conditions, which govern the broader contractual relationship between you and the platform.

2 Personal Data We Collect

zzz66 collects personal data across several categories depending on how you interact with the platform. The table below provides a structured overview of the data types we process:

We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health data, or biometric data unless specifically required for identity verification purposes under applicable KYC obligations.

3 How We Collect Your Data

zzz66 collects personal data through the following channels:

• Direct submission: When you register an account, complete your player profile, submit KYC documents, make a deposit, or contact our support team.
• Automated technical collection: When you visit zzz66.io, our servers automatically log technical data including your IP address, browser fingerprint, and session activity via server logs and first-party cookies.
• Payment provider data sharing: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider shares transaction confirmation data with zzz66 for the purpose of crediting your account and recording the transaction in our audit logs.
• Third-party KYC providers: zzz66 may use a third-party identity verification service to cross-check the documents you submit. These providers return a verification result to zzz66; they do not retain your documents independently beyond their own legally required retention periods.
• Communications: Any message you send to zzz66 via live chat, email at [email protected], or any feedback mechanism is stored as part of your account record and our customer service history.

4 Purposes of Data Processing

zzz66 processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile.
• Payment processing: To process deposits and withdrawals via your chosen payment method, maintain transaction records, and detect potential payment fraud.
• Legal and regulatory compliance: To meet anti-money laundering (AML) obligations, retain records as required, and respond to lawful requests from authorities.
• Platform security and fraud prevention: To monitor for suspicious account activity, identify unauthorised access attempts, and protect the integrity of the zzz66 platform.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, apply self-imposed limits requested by players, and enforce zzz66's responsible gaming policies.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions.
• Platform analytics and improvement: To understand how players use zzz66, identify popular features, diagnose technical issues, and make product improvements. Analytics data is used in aggregated, anonymised form wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (e.g., BPL season, Eid, Pohela Boishakh) where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time.

5 Legal Basis for Processing

Every data processing activity carried out by zzz66 rests on one of the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and zzz66, including account registration, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable AML, KYC, and record-keeping obligations.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, and aggregate analytics, where our legitimate interest is balanced against and does not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given clear, freely given, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third Parties

zzz66 does not sell, rent, or trade your personal data. We share your data only in the following strictly controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data required to process your payment. They are independent data controllers subject to their own privacy policies.
• KYC and identity verification providers: Third-party verification services receive the documents you submit for identity verification. They process this data under a data processing agreement with zzz66 and may not use it for their own commercial purposes.
• Fraud detection and security services: zzz66 may use third-party services to analyse technical data (IP addresses, device fingerprints) for the purpose of identifying fraudulent account activity.
• Legal and regulatory authorities: zzz66 will disclose personal data to law enforcement, government bodies, or regulatory authorities where required to do so by applicable law, court order, or legitimate legal process.
• Business transfers: In the event of a merger, acquisition, or sale of zzz66 business assets, your data may be transferred to the successor entity. You will be notified of any such transfer via the email address on your account.

7 Cookies & Tracking Technologies

zzz66 uses first-party cookies and similar technologies to operate the platform effectively. The following cookie categories are in use:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your session state, remember your login status, and enable core platform features. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting (English) and your display settings, to improve your experience on return visits.
• Analytics cookies: zzz66 uses first-party analytics tools to track aggregated usage statistics, including page visit counts, session durations, and feature engagement rates. These cookies do not identify you personally.

zzz66 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage or delete cookies at any time through your browser settings, though disabling strictly necessary cookies will impair your ability to log in and use the platform.

8 Data Retention

zzz66 retains your personal data for as long as your account is active and for a defined period after account closure, depending on the data category and legal obligation involved:

• Account and identity data: Retained for a minimum of five (5) years after account closure to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years after each transaction date.
• Support communications: Retained for three (3) years after the last interaction unless the communication relates to a dispute or investigation, in which case it is retained until the matter is fully resolved.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and retained in aggregate form for product analytics purposes.
• Marketing consent records: Retained for five (5) years from the date of consent to demonstrate compliance with applicable consent obligations.

When data reaches the end of its retention period, zzz66 securely deletes or anonymises it in a manner that prevents recovery.

9 Data Security

zzz66 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Transport security: All data in transit is protected by TLS 1.3 with 256-bit AES encryption. Our SSL certificate is maintained and renewed proactively to prevent lapses.
• Password security: Account passwords are stored as salted bcrypt hashes. zzz66 never stores passwords in plaintext and cannot retrieve your password — only reset it.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access is logged, reviewed, and subject to regular audits.
• Infrastructure security: zzz66's server infrastructure is hosted in facilities with physical security controls, redundant power systems, and automated intrusion detection monitoring.
• Incident response: In the event of a personal data breach, zzz66 will assess the impact within 24 hours of discovery. Affected players will be notified without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

10 Your Privacy Rights

As a player on zzz66, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support at zzz66.io or via live chat. We will respond to all verified requests within thirty (30) days.

11 Children's Privacy

zzz66 is strictly an adults-only platform. Access to and use of zzz66 is prohibited for any person under the age of 21. zzz66 does not knowingly collect personal data from anyone under this age. If we become aware that an account has been created by a person under 21, that account will be immediately closed and any data associated with it will be deleted or retained only to the extent required by applicable AML obligations.

If you are a parent or guardian and believe a minor has registered an account on zzz66, please contact us immediately at support at zzz66.io so we can take prompt action.

12 International Data Transfers

zzz66 is an online platform serving players in Bangladesh. Some of the third-party service providers we use — including cloud infrastructure providers, KYC verification services, and fraud detection tools — may process data in locations outside Bangladesh. Where such transfers occur, zzz66 ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to protect your data to a standard comparable to that described in this policy.

zzz66 does not transfer player data to jurisdictions that lack adequate legal protections for personal data without first implementing appropriate contractual or technical safeguards.

13 Updates to This Privacy Policy

zzz66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via the email address on file and display a prominent update notice on the zzz66.io homepage for a minimum of seven (7) days before the changes take effect.

The date at the top of this document indicates when the policy was last revised. We encourage you to review this policy periodically. Your continued use of zzz66 after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with any changes, you should close your account before the revised policy takes effect.

14 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the zzz66 data support team through any of the following channels:

• Email: support at zzz66.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via your account dashboard at zzz66.io
• Support Hours: 00:00 – 24:00 BST (UTC+6), every day of the year

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days of receipt. For complex requests that require additional time, we will notify you of the expected timeline before the 30-day period expires.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document.