Privacy Policy — za999 Bangladesh

1. Introduction

za999 takes the privacy and security of its players' personal data seriously. This Policy has been prepared to give you a clear and transparent understanding of our data practices. We are committed to collecting only the data we genuinely need, using it only for the purposes described in this Policy, and protecting it using appropriate technical and organisational measures throughout its lifecycle on our systems.

This Policy applies to all personal data collected through the za999 website, mobile-optimised platform, live chat support system, and any other channel through which you interact with za999. It should be read together with the za999 Terms and Conditions and Responsible Gaming Policy, both of which are accessible from the footer of every page on the Platform.

za999 operates as a platform serving players primarily located in Bangladesh. All references to monetary amounts in this Policy use Bangladeshi Taka (BDT / ৳) as the default currency unless otherwise specified.

2. Data We Collect

2.1 Identity and Contact Data

When you register an account with za999, we collect the following identity and contact information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are 21 years of age or older)
• Residential address, including city and district (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Mobile phone number (as registered with your bKash, Nagad, Rocket, or Upay account)
• Email address, where provided voluntarily

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to confirm player eligibility, we may request copies of the following documents:

• National ID card (NID), passport, or birth certificate
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Selfie photograph or video, where required for identity confirmation

KYC documents are stored securely and used solely for identity verification purposes. They are not used for any marketing or profiling activity.

2.3 Financial and Transaction Data

To process deposits and withdrawals, za999 collects the following financial information:

• Mobile wallet identifiers associated with your bKash, Nagad, Rocket, or Upay account
• Deposit and withdrawal transaction records, including amounts (in ৳), timestamps, and transaction reference numbers
• Account balance history and wagering records

za999 does not collect or store full card numbers, bank account numbers, or any payment credential beyond what is required to identify and reconcile your mobile wallet transactions.

2.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features used
• Game session data, including games played, bets placed, and outcomes
• Referring URL (the website or link you used to reach za999)

2.5 Communications Data

If you contact za999 through live chat, email, or any other support channel, we retain a record of the communication, including your messages, any attachments, and the date and time of contact. This is used to resolve your query, improve our support service, and maintain a record of interactions for dispute resolution purposes.

3. How We Collect Data

za999 collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, via server logs, session tracking, and cookies (see Section 9).
• Third-party providers: Where you use a third-party payment service (bKash, Nagad, Rocket, Upay), those providers may share transaction confirmation data with za999 for the purpose of crediting your account. za999 receives only what is necessary to verify the transaction.
• Identity verification services: Where za999 engages a third-party KYC provider to assist with document verification, that provider may process your identity documents on our behalf under a data processing agreement.

4. Purpose of Processing

za999 processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age, and maintain your account in good standing.
• Transaction processing: To credit deposits to your account balance, process withdrawal requests to your verified wallet, and maintain accurate financial records.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering requirements, age verification obligations, and other legal duties.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised access, multiple account creation, and other breaches of the Terms and Conditions.
• Responsible gaming: To monitor account activity for signs of problem gambling, enforce self-exclusion restrictions, and administer deposit and session limit settings.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the design, performance, and content of the Platform.
• Communications: To send you account-related notifications, security alerts, and — where you have given explicit consent — promotional communications about za999 offers.

5. Legal Basis for Processing

za999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions, including account operation, transaction processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and age verification requirements.
• Legitimate interests: Processing carried out in furtherance of our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes, such as the sending of promotional communications, where we have obtained your explicit and freely given consent. You may withdraw consent at any time by contacting za999 support.

6. Data Sharing and Disclosure

6.1 Service Providers

za999 may share your personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, cloud hosting services, and customer support platform providers. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to za999.

6.2 Legal Authorities

za999 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in response to a lawful request in connection with a criminal investigation or legal proceeding.

6.3 No Sale of Data

za999 does not sell, rent, trade, or otherwise transfer your personal data to external parties for commercial or marketing purposes. Your data is not used to build advertising profiles for third-party advertisers.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of za999's business, personal data held by za999 may form part of the transferred assets. In such circumstances, za999 will take reasonable steps to ensure that the receiving entity is bound by privacy commitments consistent with this Policy.

7. Data Retention

za999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following account closure, to satisfy legal record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of verification, in accordance with anti-money laundering requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the communication.
• Technical and usage logs: Retained for up to 12 months from the date of collection, after which they are anonymised or deleted.

Where data is no longer required and no legal retention obligation applies, za999 will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data.

8. Security

za999 employs a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest within our database infrastructure
• Role-based access controls, ensuring only authorised personnel with a specific operational need may access player data
• Regular internal security reviews and vulnerability assessments
• Incident response procedures to identify, contain, and report data breaches in accordance with applicable obligations

While za999 takes all reasonable precautions, no data transmission over the internet or storage system can be guaranteed as 100% secure. You are responsible for maintaining the security of your account credentials and should notify za999 immediately if you suspect any unauthorised access to your account.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. za999 uses cookies and similar technologies (including local storage and session tokens) to keep the Platform functioning correctly and to improve your experience as a player.

9.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to operate. These include session cookies that keep you logged in, security tokens, and cookies that remember your language and display preferences. Essential cookies cannot be disabled without affecting Platform functionality.
• Performance cookies: Used to collect aggregated, anonymised data about how players use the Platform — such as which pages are visited most often — to help us improve site performance and user experience.
• Functional cookies: Used to remember your preferences and settings (such as game display preferences or responsible gaming limits) so you do not need to re-enter them on each visit.

9.3 Managing Cookies

You may control and manage non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the Platform. Detailed guidance on managing cookies is available in the help documentation of your chosen browser.

10. Your Data Rights

As a player on the za999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact za999 support via live chat or at support@za999.io. za999 will respond to all verified requests within a reasonable timeframe.

• Right of access: You may request a copy of the personal data za999 holds about you.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to za999's legal retention obligations. Note that data subject to mandatory retention periods (e.g., KYC and transaction records) cannot be deleted early.
• Right to restrict processing: You may request that za999 restricts the processing of your data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to object: You may object to za999 processing your data on the basis of legitimate interests, or object to receiving direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Children's Privacy

The za999 platform is strictly intended for individuals aged 21 years and older. za999 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account with za999, please notify us immediately via our support channels.

12. Third-Party Links

The za999 Platform does not contain links to external third-party websites for general browsing. Where payment providers (bKash, Nagad, Rocket, Upay) are referenced, the transactions are processed through those providers' own platforms, which are governed by their respective privacy policies. za999 is not responsible for the privacy practices of third-party services and encourages players to review the privacy policies of any external service they use in connection with their za999 account.

13. Updates to This Policy

za999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When a material change is made, we will notify players by displaying a prominent notice on the Platform or by sending a notification to the mobile number or email address associated with your account.

The most current version of this Policy is always available at /privacy-policy. The version number and effective date shown at the top of this document identify the revision currently in force. Continued use of the Platform following notification of an update constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by za999, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the za999 Platform
• Email: support@za999.io
• Support Hours: Around the clock, Bangladesh Standard Time (UTC+6)

za999 is committed to resolving all privacy-related queries promptly and transparently. If you are not satisfied with our response, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.