zz66 Privacy Policy — Your Data, Your Rights, Our Commitment
At zz66, the privacy and security of every player in Bangladesh is a fundamental priority — not an afterthought. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you hold over your own information. We encourage you to read it in full before using our platform.
How zz66 Protects Your Information
Six core principles guide every data-handling decision we make at zz66. These commitments apply to every player across Dhaka, Chittagong, Sylhet, Khulna, and beyond.
zz66 only collects personal data that is strictly necessary to operate your account, process transactions, and comply with applicable legal obligations. We do not harvest data for its own sake.
Your personal information is never sold, rented, or traded to third-party advertisers, data brokers, or marketing companies. Your data belongs to you — we are simply its custodian.
All data transmitted between your device and the zz66 platform is protected using industry-standard 256-bit SSL encryption, ensuring that your personal and financial details remain confidential in transit.
You have the right to access, correct, and request deletion of your personal data at any time. zz66 will respond to all legitimate data requests promptly and transparently.
Data collected for one purpose — such as account registration — will not be repurposed for an unrelated activity without your explicit consent. We are transparent about why we collect every data point.
We do not retain personal data longer than necessary. Once the purpose for collection has been fulfilled and legal retention obligations have lapsed, your data is securely deleted or anonymised.
1 Scope & Data Controller
This Privacy Policy ("Policy") describes how zz66 ("zz66", "we", "us", "our") collects, stores, processes, and discloses personal data relating to individuals ("you", "your", "the Player") who visit, register on, or interact with the online gaming and sports betting platform available at https://zz66.lat and its associated mobile interfaces (collectively, "the Platform").
For the purposes of applicable data protection principles, zz66 acts as the data controller in respect of personal data collected directly through the Platform. Where data processing is carried out by third-party service providers on our behalf, those providers act as data processors and are contractually bound to handle your data in accordance with the instructions and standards set by zz66.
This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It applies regardless of the device or method used to access the Platform.
2 Personal Data We Collect
zz66 collects the following categories of personal data, depending on how you interact with the Platform:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID / Passport number | Registration & KYC verification |
| Contact Data | Mobile number, email address, residential address in Bangladesh | Registration & account management |
| Financial Data | bKash / Nagad / Rocket account numbers, transaction amounts, deposit & withdrawal history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatic collection during Platform use |
| Usage Data | Pages visited, games played, bets placed, session duration, click-path data | Automatic collection during Platform use |
| Communications Data | Support chat logs, email correspondence, complaint records | Customer support interactions |
| Verification Documents | Copies of National ID, Passport, utility bills, bank statements | KYC and withdrawal verification |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is inherent in identity verification documents submitted for KYC purposes.
3 How We Collect Your Data
zz66 collects personal data through the following channels and methods:
- Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
- Automated Technical Collection: Data collected automatically when you access and navigate the Platform, including IP address, device identifiers, browser fingerprinting data, cookies, and session logs. This collection occurs regardless of whether you are logged in.
- Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladesh bank transfer, the respective payment provider shares transaction confirmation data with zz66 for reconciliation purposes.
- Identity Verification Services: Where zz66 uses third-party KYC service providers to verify your identity documents, those providers may return a verification result and associated metadata to zz66.
- Fraud Prevention Services: zz66 may receive risk-scoring or flagging data from fraud detection partners to help protect the integrity of the Platform and its players.
- Publicly Available Sources: In limited circumstances, zz66 may cross-reference publicly available information (such as official government records) to verify the accuracy of data you have provided.
4 Purpose & Legal Basis for Processing
zz66 processes personal data only for defined, specific, and lawful purposes. The table below sets out the primary purposes for which we process your data and the legal basis on which each processing activity rests:
| Processing Purpose | Legal Basis |
|---|---|
| Creating and managing your zz66 player account | Performance of contract |
| Processing deposits and withdrawals in BDT | Performance of contract |
| Verifying your identity (KYC) and age (21+ compliance) | Legal obligation & legitimate interest |
| Preventing fraud, money laundering, and account abuse | Legal obligation & legitimate interest |
| Providing customer support and resolving disputes | Performance of contract & legitimate interest |
| Sending transactional communications (e.g., deposit confirmations) | Performance of contract |
| Sending promotional communications about bonuses and offers | Consent (opt-in basis) |
| Analysing Platform usage to improve services | Legitimate interest |
| Complying with applicable legal and regulatory obligations | Legal obligation |
| Responsible gaming monitoring and intervention | Legitimate interest & legal obligation |
Where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
5 Data Sharing & Third-Party Disclosure
zz66 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited and controlled circumstances:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other Bangladesh payment partners receive only the data necessary to process your specific transaction. These providers are bound by their own data protection obligations.
- Identity Verification Providers: Third-party KYC partners receive your identity documents and personal details solely for the purpose of verifying your identity. They are prohibited from using this data for any other purpose.
- Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session identifier and game-round data necessary to deliver game content. They do not receive your full identity or financial data.
- Fraud Prevention & Security Partners: Specialist fraud detection and cybersecurity providers may process technical and behavioural data to identify suspicious activity. All such providers operate under strict data processing agreements with zz66.
- Legal & Regulatory Authorities: zz66 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where necessary to protect the legal rights of zz66 or its players.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of zz66's business, player data may be transferred to the successor entity. You will be notified of any such transfer in advance where practicable.
6 Cookies & Tracking Technologies
The zz66 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file stored on your device by your browser. The types of cookies used on the zz66 Platform are as follows:
- Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional.
- Functional Cookies: Used to remember your preferences such as language setting, preferred game lobby view, and remembered device. These improve your experience but are not essential.
- Performance & Analytics Cookies: Used to collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This information is used solely to improve Platform performance.
- Fraud Prevention Cookies: Used to identify devices and detect anomalous behaviour patterns that may indicate fraudulent activity, multi-accounting, or automated bot usage.
zz66 does not use third-party advertising cookies or tracking pixels designed to serve targeted advertisements across external websites. Your browsing behaviour on the zz66 Platform is not shared with advertising networks.
You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Continued use of the Platform following your initial visit constitutes acceptance of our use of cookies as described in this section.
7 Data Retention
zz66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Account Data: Retained for the duration of your active account relationship with zz66, plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
- Transaction & Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
- KYC & Identity Documents: Retained for the duration of the account relationship plus five (5) years following account closure. Copies of documents are stored in encrypted form.
- Customer Support Communications: Retained for three (3) years from the date of the final communication in a support thread, or longer where the thread relates to an ongoing dispute or investigation.
- Technical & Log Data: Typically retained for twelve (12) months for performance and security monitoring purposes, after which it is anonymised or deleted.
- Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever is earlier.
Upon expiry of the applicable retention period, personal data is securely and permanently deleted from zz66's systems, or rendered irreversibly anonymous so that it can no longer be linked to an identifiable individual.
8 Data Security
zz66 employs a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the zz66 Platform is encrypted using 256-bit SSL/TLS protocols, ensuring confidentiality in transit.
- Encrypted Data Storage: Personal data at rest — including identity documents and financial records — is stored in encrypted form using AES-256 encryption standards.
- Access Controls: Access to personal data within zz66's internal systems is strictly limited to authorised personnel on a need-to-know basis. All access is logged and periodically audited.
- Multi-Factor Authentication: Internal systems housing personal data require multi-factor authentication for access by zz66 staff.
- Penetration Testing: zz66's systems are subject to periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: In the event of a confirmed data breach that poses a risk to your rights, zz66 will take prompt remedial action and notify affected players as required by applicable obligations.
9 Your Data Rights
As a user of the zz66 Platform, you hold the following rights in respect of your personal data. These rights may be exercised by submitting a written request to [email protected] with the subject line "Data Rights Request":
You have the right to request a copy of all personal data zz66 holds about you. We will provide this information in a structured, commonly used format within 30 days of a verified request.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Certain corrections (e.g., name changes) may require supporting documentation for verification.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
You may request that zz66 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction to deletion.
Where processing is based on your consent or on a contractual relationship, you have the right to receive your personal data in a structured, machine-readable format and to request its direct transfer to another service provider where technically feasible.
You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interest, including profiling for direct marketing purposes. Upon receipt of a valid objection, zz66 will cease such processing unless compelling legitimate grounds exist.
All data rights requests are processed within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days, and you will be informed accordingly. There is no fee for submitting a data rights request unless the request is manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.
10 Children & Minors
The zz66 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data belonging to any person under the age of 21. If you are under 21 years of age, you are prohibited from registering an account, making a deposit, or using the Platform in any capacity.
If zz66 becomes aware that personal data has been collected from a person under the age of 21 — whether through our own detection, a parental notification, or a regulatory report — we will immediately suspend the associated account, initiate an investigation, delete the data concerned where legally permissible, and return any deposited funds in accordance with applicable anti-money laundering procedures.
Parents and guardians who suspect that a minor in their care has accessed the zz66 Platform should contact our support team immediately at [email protected]. We will treat such reports as urgent and act on them as a priority. zz66 supports the use of parental control software for households where internet access is shared with minors.
zz66 operates a strict 21+ age verification policy. All registered players must confirm their age at registration and may be required to submit government-issued identification to confirm their date of birth before accessing real-money features of the Platform.
11 Third-Party Links & External Services
The zz66 Platform does not contain links to external third-party websites for general browsing or advertising purposes. All navigation on the Platform is confined to internal pages and registered game content. However, where third-party service integrations exist — such as embedded game iframes from licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — please be aware that these studios operate their own data handling practices within the scope of their licensing agreements with zz66.
Game studio integrations are governed by contractual data processing agreements that restrict the studios to processing only the session and game-round data necessary to deliver the game experience. They do not receive your full identity or financial data from zz66 unless explicitly required for regulatory compliance purposes.
Payment gateway interfaces (bKash, Nagad, Rocket, Upay) redirect you to their own secure environments when processing transactions. Once you are within a third-party payment interface, that party's own privacy policy governs the handling of your data during that session. zz66 is not responsible for the data practices of third-party payment providers beyond the scope of the data processing agreements we hold with them.
12 Updates to This Privacy Policy
zz66 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. When material changes are made — particularly those that affect your rights or the way your data is processed — we will notify registered players by email to the address associated with their account, and by displaying a prominent notice on the Platform for a period of not less than 14 days prior to the changes taking effect.
Non-material changes, such as corrections of typographical errors, clarifications of existing provisions, or updated contact details, may be made without formal advance notice. The date of the most recent revision is displayed at the top of this page alongside the version number.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.
13 Contact & Data Requests
For all privacy-related enquiries, data rights requests, or concerns about how zz66 handles your personal data, please contact our dedicated privacy support channel using the details below:
- Email: [email protected] — use subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal access, correction, or deletion requests
- Response Time: Privacy enquiries acknowledged within 24 hours; substantive responses provided within 30 calendar days
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
- Language: All privacy communications are handled in English
- Verification: For data rights requests, you will be asked to verify your identity before any personal data is disclosed or modified
zz66 is committed to resolving all privacy concerns promptly and transparently. If you believe your data rights have not been adequately addressed after contacting us, you retain the right to escalate the matter to the appropriate regulatory authority in your jurisdiction.
Email us at [email protected] for any privacy-related matter. Our support team is available around the clock, every day of the year, including Eid, Pohela Boishakh, and all public holidays.
Ready to Experience Bangladesh's Premier Casino?
Your data is protected. Your experience is secure. Browse our games, explore our cricket betting markets, or log in to your account and start playing today.