zx77 Privacy Policy

Who We Are

zx77 operates the online betting and casino platform accessible at zx77.io (the "Platform"). We are the data controller responsible for the personal information collected through the Platform and for determining how that information is used.

Our platform serves the Bangladesh market, offering a wide range of online casino games, live dealer tables, sports betting markets (including cricket BPL, T20 World Cup, and IPL fixtures), and promotional services. We are committed to handling personal data with the utmost care, in line with internationally recognised data protection principles.

For all privacy-related enquiries, requests, or complaints, you may contact our dedicated support team at [email protected]. We aim to acknowledge all privacy-related communications within 48 hours of receipt.

Data We Collect

zx77 collects personal data that is necessary to provide a safe, fair, and compliant gaming environment. The categories of data we collect are described in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data (other than what is contained in identity documents submitted for KYC purposes), or health data, except where this is strictly necessary for responsible gaming interventions and only with your explicit consent.

How We Collect Data

zx77 collects personal data through the following channels and mechanisms:

• Direct registration: When you create an account on zx77, you provide identity and contact data directly through the registration form.
• Account activity: As you use the Platform — placing bets, playing casino games, making deposits or withdrawals, and interacting with features — usage and financial data are generated and recorded automatically.
• Identity verification submissions: When we request KYC documentation, you provide identity data by uploading government-issued documents through the secure verification interface.
• Customer support interactions: When you contact our support team via live chat or email, communications data is collected and stored as part of our customer service record-keeping.
• Automated technologies: Technical data is collected automatically through cookies, server logs, and similar tracking technologies when you access and navigate the Platform. See Section 7 for full details on our use of cookies.
• Third-party payment processors: When you conduct a transaction using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, limited financial data necessary to confirm and reconcile the transaction is shared between the payment provider and zx77.
• Fraud and risk screening services: We may receive data from third-party identity verification and fraud prevention services as part of our account opening and ongoing monitoring procedures.

Why We Use Your Data

zx77 uses personal data for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. Our primary purposes are as follows:

• Account management: To create, maintain, and administer your player account, including managing your balance, processing transactions, and ensuring account security.
• Identity and age verification: To verify that you are who you say you are and that you are at least 21 years of age, as required by our eligibility policy and responsible gaming commitments.
• Payment processing: To process your deposits and withdrawals securely and accurately, and to maintain accurate financial records of all transactions on the Platform.
• Fraud prevention and anti-money laundering (AML): To detect and prevent fraudulent activity, money laundering, and other financial crimes. This includes ongoing monitoring of transaction patterns and account behaviour.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-imposed limits, and to apply interventions where our responsible gaming obligations require it.
• Platform security: To protect the Platform and its users from unauthorised access, cyberattacks, and other security threats by analysing technical data and usage patterns.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have consented to receive such communications. You may withdraw your marketing consent at any time.
• Platform improvement: To analyse usage data in aggregate (anonymised or pseudonymised form) to understand how players use the Platform and to improve its features, performance, and user experience.
• Legal and regulatory compliance: To meet our obligations under applicable laws and to cooperate with lawful requests from regulatory and law enforcement authorities.

Legal Basis for Processing

zx77 processes your personal data on the following legal bases, in line with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary to provide the services you have contracted for when registering an account — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of a contract between you and zx77.
• Legal obligation: Processing carried out to comply with applicable laws — including identity verification, AML reporting, and record-keeping requirements — is carried out on the basis that it is required by law.
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and Platform improvement is carried out on the basis of zx77's legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications is carried out on the basis of your explicit consent. You have the right to withdraw this consent at any time by contacting support or updating your account preferences, without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

zx77 does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: We share necessary financial data with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) to process your transactions. These providers are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
• Identity verification services: We may share identity data with regulated third-party KYC and age verification providers to complete your account verification. These providers act as data processors under our instruction.
• Fraud prevention services: We share limited technical and identity data with fraud screening services to assess the risk profile of account activity. This is done to protect you and the Platform.
• Game providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming) may receive a pseudonymised player identifier to facilitate game sessions. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or a lawful legal order. We will inform you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of the Platform, personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

All third-party service providers who process personal data on our behalf are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our documented instructions.

Cookies & Tracking Technologies

zx77 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account state between pages, and enable secure transactions. These cookies cannot be disabled without impairing core Platform functionality.
• Performance cookies: These cookies collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently and whether error messages are received. The data is used in aggregate to improve Platform performance and reliability.
• Functional cookies: These cookies enable personalised features such as remembering your preferred language, currency display settings, and previously viewed games. Disabling these cookies may affect your experience but will not prevent you from using the Platform.
• Analytics cookies: We use privacy-respecting analytics tools to understand traffic patterns on the Platform. Analytics data is processed in pseudonymised or aggregated form and is not linked back to your individual account without your consent.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including your account login session.

zx77 does not use third-party advertising cookies or sell cookie data to advertising networks.

Data Retention

zx77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Our retention practices are as follows:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account's active lifecycle.
• Closed accounts: Following account closure, we retain identity and financial records for a minimum period of five (5) years to comply with applicable AML and financial record-keeping requirements.
• Transaction records: Individual transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support records are retained for a period of three (3) years from the date of the most recent interaction, unless a longer retention period is required for ongoing dispute resolution.
• Marketing data: Marketing consent records and associated contact data are retained until you withdraw your consent, plus an additional period of two (2) years to maintain a record of your consent history.
• Dormant accounts: Accounts that have been inactive for twelve (12) months or more will be flagged as dormant. We will contact you at the registered email address before applying any further dormancy procedures. Data associated with dormant accounts continues to be retained in accordance with applicable legal requirements.

Once the applicable retention period has expired and there is no legal or regulatory basis for continued retention, personal data is securely deleted or anonymised.

Data Security

zx77 takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the zx77 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This is the same level of encryption used by major Bangladeshi financial institutions including Dutch-Bangla Bank and BRAC Bank.
• Data encryption at rest: Sensitive personal and financial data stored in our systems is encrypted at rest to prevent unauthorised access in the event of a system compromise.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business purpose are permitted to access identifiable personal data, and all such access is logged and monitored.
• Intrusion detection: Our systems are monitored continuously for suspicious activity, attempted breaches, and unusual access patterns. Automated alerts are configured to flag anomalies for immediate review.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments of our Platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All zx77 personnel who handle personal data receive regular training on data protection obligations and security best practices.

While we implement robust security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you promptly in accordance with our breach notification obligations.

You also play an important role in protecting your data. Please ensure that your account password is strong, unique, and not shared with any third party. If you suspect that your account has been compromised, contact our support team at [email protected] immediately.

Your Privacy Rights

As a user of the zx77 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe, typically within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent (for consent-based processing). This right is subject to any overriding legal or regulatory obligations that require us to retain certain records.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate the accuracy of data you have disputed, or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
• Right to object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Please note that certain rights are not absolute and may be subject to exceptions. Where we are unable to fulfil a request in whole or in part, we will explain the reason and advise on any available alternatives.

Children's Privacy

zx77 is an adult-only gambling platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and we conduct age verification as part of our standard KYC procedures.

If you are a parent or guardian and you believe that a person under the age of 21 has registered an account or provided personal data to zx77 without your knowledge, please contact us immediately at [email protected]. Upon confirmation, we will take prompt steps to delete the relevant data and close the associated account.

We also recommend that parents and guardians use parental control tools and internet filtering software to prevent minors from accessing gambling websites. Responsible gaming starts at home, and we support all efforts to protect young people from gambling-related harm.

Policy Updates

zx77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The following process governs updates to this policy:

• Material changes to this Privacy Policy — including changes that affect how your personal data is used, who it is shared with, or your privacy rights — will be communicated to registered users via email to the registered address, or via a prominent notice displayed upon login, no less than 7 calendar days before the change takes effect.
• Non-material changes (such as corrections to typographical errors, formatting improvements, or clarifications that do not alter the substance of the policy) may take effect immediately without advance notice.
• The effective date displayed at the top of this document reflects the date of the most recent substantive revision. We recommend reviewing this page periodically to stay informed of how your data is handled.
• Continued use of the Platform after the effective date of any material amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the revised policy, you must discontinue use of the Platform and may request account closure by contacting support.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zx77 handles your personal data, please reach out to our dedicated privacy and support team using the contact details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the Platform
• Response Time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a full response within 30 calendar days
• Operating Hours: Our support team operates on Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy request, please include your registered username or email address, a clear description of your request, and any relevant supporting information. This will help us locate your records and process your request as efficiently as possible.

zx77 is committed to resolving all privacy concerns promptly and fairly. If you remain dissatisfied following our response to your complaint, you retain the right to seek further recourse through appropriate channels in your jurisdiction.