Privacy Policy – How z555 Collects, Uses, and Protects Your Personal Data

1. Information We Collect

z555 collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

Registration and Identity Data — When you create a z555 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address (used for account communications, verification emails, and support responses).
• Mobile phone number (used for account security, OTP verification, and support contact).
• Residential address, including city, district, and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Username and hashed password (passwords are never stored in plain text).

Identity Verification (KYC) Data — As part of our Know Your Customer process, we may collect:

• Copies of government-issued photo identification (national ID card, passport, or driving licence).
• Proof of address documentation (utility bill, bank statement, or official correspondence).
• Proof of ownership of your payment method (e.g., a screenshot of your bKash or Nagad account showing your registered number).
• Selfie photographs taken alongside your identification document, where requested.

Financial and Transaction Data — To process deposits and withdrawals, we collect:

• Payment method details, including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account references where applicable.
• Transaction history, including deposit amounts, withdrawal amounts, timestamps, and transaction reference numbers.
• Wagering and game activity history, including bet amounts, game titles, outcomes, and bonus usage.

Technical and Usage Data — When you use the z555 platform, we automatically collect:

• IP address and approximate geolocation data derived from that IP.
• Device type, operating system, browser type, and browser version.
• Session duration, pages visited, features used, and click-path data.
• Referral source (how you arrived at z555, e.g., direct URL, search engine, or partner link).
• Cookie identifiers and similar tracking technology data (see the Cookies section below).

Communications Data — When you contact z555 support or respond to surveys, we collect:

• The content of all messages, emails, and live chat transcripts exchanged with our support team.
• Survey responses and feedback submissions.
• Details of any complaints or disputes raised, including supporting evidence you provide.

2. How We Use Your Data

z555 uses the personal data we collect exclusively for the purposes described in this Privacy Policy. We do not sell personal data to third parties. The primary purposes for which z555 processes your data are as follows:

Where z555 relies on your consent as the legal basis for processing (for example, sending you promotional emails about BPL season cricket offers, bonus campaigns, or seasonal promotions such as Eid or Pohela Boishakh specials), you may withdraw that consent at any time by updating your communication preferences in your account settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

z555 does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on players, except in the context of fraud detection systems, which may automatically flag accounts for manual review based on risk signals. Where an automated system results in an account action, you have the right to request a manual review by a z555 compliance team member.

3. Cookies and Tracking Technologies

z555 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate and improve the platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow z555 to recognise your device on subsequent visits, maintain your session, and remember your preferences.

The categories of cookies used by z555 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the z555 platform to function. They maintain your login session, handle security tokens, and enable the core features of the platform (for example, keeping your game session active while you play). These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language, display settings, and notification preferences. They improve your experience by reducing the need to re-enter preferences on each visit.
• Analytics Cookies: z555 uses analytics tools to understand how players interact with the platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymised where possible. It is used solely to improve the platform, not to identify individual players.
• Marketing Cookies: With your consent, z555 may place marketing cookies to track which promotional campaigns led you to the platform and to present you with relevant bonus offers. These cookies are only placed if you have opted in to marketing communications.

You can manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will impair or prevent your ability to use z555. z555 does not currently respond to browser "Do Not Track" signals, but we respect explicit cookie preference choices made through our platform settings.

4. Data Sharing and Third Parties

z555 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with carefully selected third parties in the following limited circumstances:

• Payment Processors: To process your deposits and withdrawals, z555 shares the necessary financial data with payment service providers such as bKash, Nagad, Rocket, Upay, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the minimum data required to complete the transaction.
• Identity Verification Providers: z555 works with third-party KYC verification services to validate identity documents and confirm player ages. These providers process your identification documents on z555's behalf and are contractually prohibited from using that data for any other purpose.
• Fraud Prevention and Security Services: z555 may share technical data (such as IP addresses, device fingerprints, and transaction patterns) with fraud detection service providers to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Authorities: z555 will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh when required to do so by applicable law, court order, or when we have a good-faith belief that disclosure is necessary to prevent serious harm or illegal activity.
• Platform Technology Partners: z555 uses third-party technology to operate elements of the platform, including game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session tokens and game round IDs) to deliver their games. They do not receive your full identity data.
• Business Successors: In the event of a merger, acquisition, or sale of z555's business assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address registered to your account.

All third parties with whom z555 shares personal data are required to maintain appropriate technical and organisational security measures. z555 enters into data processing agreements with service providers to ensure that your data is handled lawfully and in accordance with the standards set out in this Privacy Policy.

5. Data Retention and Storage

z555 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The general retention periods applied by z555 are as follows:

• Active Account Data: Personal data associated with an active z555 account is retained for the full duration of the account's existence, plus a minimum period of five years following permanent account closure to satisfy anti-money-laundering record-keeping obligations.
• KYC Verification Documents: Identity and address verification documents are retained for a minimum of five years from the date of submission, or from the date of account closure, whichever is later.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five years to comply with financial reporting requirements.
• Support Communications: Records of customer support interactions are retained for a minimum of three years following the resolution of the relevant matter.
• Marketing Preferences: Records of your consent to (or opt-out from) marketing communications are retained for as long as the underlying account exists, plus three years after closure.
• Technical and Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely, as it cannot be used to identify individual players.

All personal data held by z555 is stored on servers with appropriate physical and logical security controls. z555 takes reasonable steps to ensure that data stored in cloud infrastructure is protected by industry-standard encryption, access controls, and regular security audits. Where data is transferred outside Bangladesh for storage or processing, z555 ensures that adequate data protection safeguards are in place through contractual provisions with the relevant service provider.

Once the applicable retention period has expired, z555 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual.

6. Your Privacy Rights

As a player at z555, you have a number of rights with respect to your personal data. z555 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our support team at [email protected], clearly stating which right you wish to exercise and providing sufficient information to verify your identity.

z555 will respond to all privacy rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

7. Data Security Measures

z555 takes the security of your personal data seriously and has implemented a range of technical, organisational, and procedural controls designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. The key security measures employed by z555 include the following:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the z555 platform is encrypted using TLS 1.2 or higher. You can verify this by looking for the padlock icon in your browser's address bar when visiting z555.bio.
• Encryption at Rest: Sensitive personal data, including identity documents, payment details, and KYC records, is encrypted when stored on z555's servers. Encryption keys are managed under strict access control protocols.
• Access Controls: Access to personal data within z555 is limited on a strict need-to-know basis. Only staff members who require access to personal data to perform their job function are granted access, and all access is logged and audited regularly.
• Password Security: z555 never stores passwords in plain text. All passwords are hashed using industry-standard one-way hashing algorithms with appropriate salting before being stored. In the event of a data breach affecting password data, the hashes cannot be trivially reversed.
• Two-Factor Authentication (2FA): z555 supports two-factor authentication for player accounts. Players are strongly encouraged to enable 2FA via their account security settings to add an additional layer of protection against unauthorised login.
• Regular Security Reviews: z555 conducts periodic internal and third-party security reviews of its infrastructure, application code, and data handling processes to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of players, z555 will notify affected players via the email address registered to their account without undue delay, and will take immediate steps to contain and remediate the breach.

While z555 applies rigorous security controls, no digital system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their z555 account, to enable two-factor authentication, and to never share login credentials with any third party. If you suspect that your account has been compromised, contact [email protected] immediately.

8. Changes to This Privacy Policy

z555 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to our platform and services. The effective date displayed at the top of this policy indicates when the current version came into force.

Where we make material changes to this Privacy Policy — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — z555 will notify registered players via the email address associated with their account at least 14 days before the changes take effect. Non-material changes (such as clarifications of existing language or corrections of typographical errors) may be made without advance notice, though the effective date will always be updated to reflect the revision.

Your continued use of the z555 platform after any update to this Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should cease using z555 and contact [email protected] to close your account and request deletion of your personal data, subject to any legal retention obligations that prevent immediate deletion.

All previous versions of this Privacy Policy are archived and may be requested from [email protected] if you wish to review what the policy said at a specific earlier date.