zz999 Privacy
Policy & Data Protection

This Privacy Policy ("Policy") describes how zz999 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Member") who visit or use the website located at zz999.io and any associated mobile applications, services, or features made available by zz999.

This Policy applies to all personal data processing activities conducted by zz999 in connection with the operation of its online betting and casino platform, including account registration, identity verification, financial transaction processing, customer support interactions, and delivery of promotional communications where consented to.

zz999 operates as an offshore online gambling platform. For the purposes of this Privacy Policy, zz999 acts as the data controller in respect of the personal data it collects directly from Members. Where zz999 engages third-party service providers to process data on its behalf, those providers act as data processors operating under contractual obligations consistent with this Policy.

For any queries relating to this Privacy Policy or the handling of your personal data, you may contact the zz999 Data Protection team via the 24/7 live chat support channel or by writing to [email protected]. All data-related enquiries will be acknowledged within five (5) business days.

zz999 collects the following categories of personal data in the course of operating its platform and providing services to Members:

zz999 collects personal data through the following channels:

• Direct collection: Data you provide when completing the registration form at zz999.io/zz999-login, submitting identity verification documents, making deposits or withdrawal requests, or contacting the support team.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you browse or interact with the platform.
• Third-party sources: Data received from identity verification service providers, fraud screening tools, and payment processors in connection with transaction processing and KYC compliance checks.
• Public sources: In limited circumstances, publicly available information (such as publicly listed sanctions lists or PEP databases) may be cross-referenced as part of our AML due diligence obligations.

zz999 processes your personal data only where a valid legal basis exists for doing so. The primary purposes for which we process personal data, and the corresponding legal bases, are as follows:

• Performance of contract: Processing your registration, managing your account, executing deposit and withdrawal transactions, and delivering the betting and gaming services you have requested.
• Legal obligation: Conducting identity verification (KYC), performing anti-money-laundering (AML) and counter-terrorism financing (CTF) checks, retaining transaction records as required by applicable law, and reporting to relevant authorities where mandated.
• Legitimate interests: Fraud detection and prevention, platform security monitoring, responsible gaming oversight, resolving disputes, improving platform performance, and analysing aggregate usage patterns to enhance the Member experience.
• Consent: Sending promotional emails, SMS notifications, or personalised bonus offers where you have explicitly opted in to receive marketing communications. You may withdraw this consent at any time by contacting support or updating your account preferences.

zz999 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipients solely to the extent necessary to deliver our services or fulfil legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive the minimum transaction data required to execute your deposits and withdrawals.
• Identity verification providers: Specialist KYC and document verification services process identity documents on our behalf under strict data processing agreements.
• Fraud and risk management services: Third-party fraud screening tools may receive technical and transactional data to assist in detecting suspicious activity and protecting the integrity of the platform.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game software within the platform and may receive session-level data necessary to deliver and certify game outcomes.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, zz999 may disclose personal data to competent authorities without prior notice to the Member.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis under appropriate confidentiality obligations.

zz999 uses the following categories of cookies and similar technologies when you access the platform:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and session state. These improve the convenience of your experience but are not essential to core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members use the platform — including pages visited, session duration, and navigation paths — to help us improve the product. These do not identify you personally.

zz999 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies may prevent you from logging in or using certain platform features.

zz999 implements a layered, defence-in-depth approach to personal data security. Our technical and organisational security measures include, but are not limited to:

• 256-bit TLS encryption for all data in transit between Member devices and zz999 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment credentials.
• Multi-factor authentication (MFA) options available for Member accounts.
• Continuous 24/7 monitoring of platform infrastructure for anomalous activity and intrusion attempts.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Strict access controls ensuring that internal staff can only access personal data on a documented need-to-know basis.
• Incident response procedures in place to detect, report, and remediate data security incidents within defined timeframes.

zz999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction in accordance with standard financial record-keeping obligations.
• Identity verification documents: Retained for the period required to comply with applicable KYC and AML regulations, which is typically five (5) years from the date of verification or account closure, whichever is later.
• Support and communication records: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of your marketing consent or opt-out are retained for as long as necessary to demonstrate compliance with applicable consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data (from which you cannot reasonably be identified) may be retained indefinitely for statistical and product improvement purposes.

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your personal data held by zz999:

• Right of access: You may request a copy of the personal data zz999 holds about you, together with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests where your particular circumstances justify such an objection.

To exercise any of these rights, please contact the zz999 support team via the 24/7 live chat facility or at [email protected]. We will acknowledge your request within five (5) business days and endeavour to respond in full within thirty (30) calendar days. Where a request is complex or we have received a high volume, we may extend this period by a further thirty (30) days with written notice to you.

The zz999 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. If zz999 becomes aware that personal data has been collected from a person under 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has provided personal data to zz999 or has registered an account on the platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

zz999 reserves the right to update or revise this Privacy Policy at any time. Any changes will be published on this page with an updated "Last Updated" date. Where amendments are material — meaning they significantly affect how we collect or use your personal data — we will notify registered Members via the email address associated with their account prior to the changes taking effect.

Your continued use of the zz999 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to remain informed about how your data is being handled. If you do not agree with any changes to this Policy, you should cease using the platform and contact support to initiate account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by zz999, please contact our support team at [email protected] — available 24 hours a day, 7 days a week, including all public holidays observed in Bangladesh. Support is conducted entirely in English.