Privacy Policy — ze666

Data We Collect

1.1 Information You Provide Directly

When you register an account, complete identity verification, or contact our support team, ze666 collects personal data that you provide voluntarily. This includes:

• Identity data: Full legal name, date of birth, nationality, and a copy of your government-issued identification document (National Identity Card, passport, or driving licence).
• Contact data: Email address, registered Bangladeshi mobile number, and residential address (including city, district, and postal code).
• Financial data: Payment method details associated with your deposits and withdrawals — for example, the mobile wallet number linked to your bKash, Nagad, Rocket, or Upay account, or the masked card number associated with a Visa or Mastercard transaction. ze666 does not store full card numbers or mobile banking PINs.
• Account credentials: Your chosen username and encrypted password hash. ze666 never stores your password in plain text.
• Support communications: Any messages, attachments, or records exchanged between you and ze666's customer support team via live chat or email.

1.2 Information Collected Automatically

When you access ze666, our platform and its technical infrastructure automatically collect certain data about your device and session. This data is collected to maintain platform security, detect fraud, and improve service performance. It includes:

• Device and technical data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and time zone setting (Bangladesh Standard Time, UTC+6, where applicable).
• Usage and activity data: Pages visited, games launched, bet history, session start and end times, deposit and withdrawal events, bonus claims, and navigation paths through the ze666 platform.
• Log data: Server-side access logs recording requests made to ze666's systems, including timestamps, response codes, and referrer URLs. These logs are used for security monitoring and are retained for a limited period as described in Section 5.

1.3 Information from Third Parties

ze666 may receive limited personal data about you from trusted third-party sources in the following circumstances:

• Identity verification providers: Where ze666 uses a third-party KYC service to verify the authenticity of identity documents you submit, that provider may return a verification result, risk score, and document summary to ze666.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data, reference numbers, and limited account status information with ze666 to facilitate deposits and withdrawals.
• Fraud prevention services: ze666 may cross-reference your account data against third-party fraud and AML screening databases to meet its compliance obligations. No data is shared with these services beyond what is strictly necessary for the screening purpose.

How We Use Your Data

ze666 processes your personal data only for specific, legitimate purposes. The table below summarises each processing purpose and the legal basis on which ze666 relies:

2.1 Marketing Communications

ze666 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, tournaments, and offers if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your ze666 account dashboard, or by contacting our support team. Withdrawal of marketing consent does not affect ze666's ability to send you transactional and service-related communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contract performance rather than consent.

2.2 Responsible Gaming Monitoring

ze666 analyses player activity data — including betting frequency, session length, deposit patterns, and self-exclusion history — to identify potential signs of problem gambling. This processing is carried out in furtherance of our responsible gaming obligations and is in the interests of player welfare. Insights from this analysis may be used to trigger automated alerts, proactively reach out to players with responsible gaming resources, or restrict account activity where necessary. For full details of the responsible gaming tools available to you, please visit the Responsible Gaming page.

Data Sharing & Disclosure

3.1 We Do Not Sell Your Data

ze666 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is not shared with advertising networks, data brokers, or marketing affiliates without your explicit, informed consent.

3.2 Service Providers

ze666 engages a limited number of carefully vetted third-party service providers to help operate the platform. These providers are granted access to personal data only to the extent necessary to perform their contracted services. They are contractually prohibited from using your data for any purpose other than delivering those services. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing partners who facilitate BDT transactions.
• KYC and identity verification providers: Third-party services that assist with document verification and AML screening.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios whose games are hosted on ze666. These providers may receive anonymised session tokens to authenticate game launches but do not receive your full personal profile.
• Cloud infrastructure and hosting providers: Secure, enterprise-grade cloud providers that host ze666's servers, databases, and CDN infrastructure.
• Customer support platforms: Software tools used to manage live chat and email support communications.

3.3 Legal and Regulatory Disclosure

ze666 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. ze666 will endeavour to notify you of any such disclosure request unless prohibited from doing so by law or where notification would compromise the purpose of the disclosure (for example, in connection with an active fraud or money laundering investigation).

3.4 Business Transfers

In the event that ze666 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. ze666 will notify affected players of any such transfer and the privacy practices of the successor entity via the registered email address on file, no less than thirty (30) days before the transfer takes effect.

Cookies & Tracking

4.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. ze666 uses cookies and similar tracking technologies (including local storage objects and session tokens) to make the platform function correctly, keep your session secure, and understand how players interact with the site so that we can improve it.

4.2 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the ze666 platform to function. They manage your login session, maintain your account state during a game, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These remember your preferences, such as your preferred language setting, last-visited game category, and display preferences. They persist across sessions to improve your experience.
• Analytics cookies: ze666 uses first-party analytics tools to understand aggregate page traffic, feature adoption rates, and platform performance. Analytics data is anonymised and used solely to improve ze666's services.
• Security cookies: Short-lived cookies used to detect and mitigate suspicious activity, including automated login attempts, account takeover attempts, and unusual transaction patterns.

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or selectively manage cookies by domain. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the ze666 platform. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and the browsers built into Android and iOS devices widely used across Bangladesh.

4.4 No Third-Party Advertising Trackers

ze666 does not embed third-party advertising pixels, retargeting scripts, or social media tracking SDKs on its platform. Your browsing activity on ze666 is not shared with Facebook, Google Ads, or any other advertising network for the purpose of serving you targeted advertisements on external websites.

Data Retention

5.1 Retention Periods

ze666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with standard AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction to support financial compliance, dispute resolution, and audit requirements.
• KYC and identity verification documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years following the resolution of the relevant query or dispute.
• Server access logs: Retained for ninety (90) days for security monitoring purposes, after which they are purged or anonymised.
• Marketing consent records: Retained for the period during which consent is active, and for three (3) years following withdrawal of consent to evidence compliance.

5.2 Deletion and Anonymisation

Upon expiry of the applicable retention period, personal data is either permanently and securely deleted from ze666's systems, or anonymised such that it can no longer be attributed to any identified or identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis. If you request deletion of your personal data before the natural expiry of a retention period, ze666 will comply with your request to the extent permitted by law — noting that certain data must be retained to satisfy legal obligations regardless of a deletion request.

Your Privacy Rights

As a player on ze666, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team with your account details and a clear description of your request.

6.1 Right of Access

You have the right to request a copy of the personal data that ze666 holds about you. ze666 will provide this information in a structured, commonly used format within thirty (30) days of receiving a verified access request. The first copy is provided free of charge; subsequent copies within a twelve-month period may be subject to a reasonable administrative fee.

6.2 Right to Rectification

If any personal data that ze666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your email address, mobile number, and residential address — directly through your ze666 account dashboard. For corrections to identity data, you will need to contact support and provide supporting documentation.

6.3 Right to Erasure

You may request that ze666 delete your personal data. ze666 will honour such requests where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. ze666 is not required to delete data that must be retained to comply with a legal obligation — for example, KYC records and transaction histories required for AML compliance.

6.4 Right to Restrict Processing

You may request that ze666 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being assessed. During a restriction period, ze666 will store but not actively process the relevant data.

6.5 Right to Data Portability

Where ze666 processes your personal data by automated means on the basis of your consent or to perform a contract, you have the right to receive that data in a structured, machine-readable format and to transmit it to another service provider. A data portability request will be fulfilled within thirty (30) days of verification.

6.6 Right to Object

You have the right to object to ze666's processing of your personal data where that processing is based on legitimate interest. ze666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes — in which case ze666 will immediately cease all marketing communications to you.

Data Security

7.1 Technical Safeguards

ze666 implements industry-standard technical security controls to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Core technical measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and ze666's servers.
• Encrypted data storage for sensitive fields including passwords (bcrypt hashing with salt), payment details, and identity document copies.
• Two-factor authentication (2FA) available for all player accounts, adding an additional layer of verification on top of username and password.
• Network-level security including firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation tools.
• Access controls restricting access to personal data to ze666 staff and systems that have a verified operational need — enforced through role-based access control (RBAC) policies.

7.2 Organisational Safeguards

Beyond technical controls, ze666 maintains organisational measures to protect data privacy. All staff with access to player data are subject to confidentiality obligations and receive regular training on data protection practices. Access to production systems containing personal data is logged, monitored, and reviewed. ze666 conducts periodic internal security assessments to identify and remediate potential vulnerabilities before they can be exploited.

7.3 Your Role in Security

Data security is a shared responsibility. To protect your ze666 account, you should use a strong, unique password that is not used on any other platform. Enable two-factor authentication if available. Never share your login credentials with anyone. Log out of your account when using a shared or public device. If you believe your account has been accessed without your authorisation, contact ze666 support immediately so that we can suspend the account and investigate the incident.

7.4 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ze666 will notify affected players without undue delay — and in no case later than seventy-two (72) hours after becoming aware of the breach — via the registered email address on your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps ze666 has taken or will take to address it. ze666 maintains a documented incident response plan that is tested and reviewed on a regular basis.

Policy Updates & Contact

8.1 Changes to This Policy

ze666 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Where a change is material — meaning it affects the nature of the data collected, the purposes for which it is used, or the rights available to players — ze666 will notify registered players via their registered email address at least fourteen (14) days before the change takes effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Continued use of ze666 following the effective date of a revised Privacy Policy constitutes acceptance of the changes.

8.2 Minors

ze666 is strictly an 18+ platform and does not knowingly collect personal data from individuals under the age of eighteen. If ze666 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be permanently closed. Parents or guardians who believe that a minor has registered on ze666 should contact support at [email protected] without delay.

8.3 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ze666's data processing practices, please contact the ze666 Privacy team. All privacy-related inquiries are handled confidentially and responded to within five (5) business days.

Email (plain text — not a clickable link): [email protected]

Please include "Privacy Inquiry" in the subject line of your message, along with your registered account username, so that your query can be directed to the appropriate team member promptly.