zz22 Privacy Policy

zz22 collects personal information from you in the course of providing its online casino and sports betting services. The categories of information we collect, and the circumstances in which each category is collected, are set out below.

Information You Provide Directly

When you register for an account on zz22, you provide us with certain personal information that is necessary to create and manage your account. This includes:

Information Collected Automatically

When you visit and interact with the zz22 platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• Device and Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and timezone settings.
• Usage Data: Pages visited, links clicked, games played, bets placed, session start and end times, and navigation paths through the platform.
• Location Data: Approximate geographic location derived from your IP address, used solely to enforce jurisdictional access restrictions.
• Cookie Data: Data stored in browser cookies and similar local storage mechanisms as described in the Cookies section of this policy.

Information from Third Parties

We may receive limited personal data about you from third-party service providers in specific circumstances. For example, payment processing partners such as bKash or Nagad may confirm the status of a transaction. Identity verification service providers may return the result of a document authenticity check. In all cases, third-party data received by zz22 is used only for the specific purpose for which it was shared and is subject to the same data protection standards that apply to data you provide directly.

zz22 processes your personal data only for specific, legitimate purposes and only to the extent necessary for each purpose. The following table summarises the primary purposes for which we use your data and the legal basis for each processing activity.

Marketing Communications

zz22 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (such as Eid offers or BPL cricket specials), and platform updates if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect communications that are necessary for the operation of your account, such as security alerts or transaction confirmations.

Automated Decision-Making

Some of zz22's fraud detection and responsible gaming monitoring processes involve automated analysis of transaction patterns and gameplay behaviour. Where an automated process results in a significant decision affecting your account — such as a transaction being flagged for review or an account being temporarily restricted — you have the right to request a manual review of that decision by contacting our support team. We will respond to such requests within five business days.

zz22 does not sell or rent your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial and identity information with our payment processing partners, which include bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners are contractually bound to use your information solely for the purpose of executing the relevant transaction and to maintain data security standards consistent with our own.

Identity Verification Providers

For KYC compliance, we work with third-party identity verification specialists who process your submitted documents — such as your Bangladesh National ID card — to confirm your identity and age. These providers are data processors acting on our behalf and are prohibited from using your data for any purpose other than the verification service they provide to zz22.

Game Technology Providers

Games on the zz22 platform are powered by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical data (such as session identifiers and game event logs) necessary to deliver the game experience. They do not receive your personally identifiable information such as your name, phone number, or financial account details.

Legal and Regulatory Disclosure

zz22 may disclose your personal information to law enforcement agencies, regulatory authorities, or courts if required to do so by a valid legal process, court order, or regulatory directive. We will notify you of such a disclosure request to the extent permitted by law before complying, unless we are legally prohibited from doing so.

Business Transfers

In the event that zz22 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to data handling that would result from it.

The zz22 platform uses cookies and similar tracking technologies to ensure proper functionality, enhance your user experience, and support our security and analytics systems. This section explains what cookies we use, why, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They allow the website to remember certain information about your visit — such as your login session or your preferred language — so that you do not need to re-enter it each time you return.

Categories of Cookies We Use

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the zz22 platform. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance specific to your setup.

zz22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable AML, financial record-keeping, and fraud prevention obligations. The following retention periods apply:

When your data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Where anonymisation is not technically feasible, the data is destroyed using industry-standard secure deletion methods.

zz22 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by major international financial institutions.
• Encrypted Data Storage: Sensitive data fields — including financial account details and identity document references — are stored in encrypted form in our databases. Plain-text storage of sensitive personal data is strictly prohibited by our internal data handling policy.
• Access Controls: Access to personal data within zz22's systems is governed by role-based access controls. Staff are granted access only to the data required to perform their specific job functions. All access to personal data is logged and audited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. Internal administrative access to player data systems requires mandatory 2FA for all personnel.
• Penetration Testing: zz22's platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data security incident that affects your personal data, zz22 will notify affected players promptly and take all available remedial steps to limit the impact of the breach.

As a zz22 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 calendar days of receipt.

Right of Access

You have the right to request a copy of all personal data that zz22 holds about you. This is sometimes referred to as a Subject Access Request. We will provide your data in a structured, commonly used, machine-readable format where technically feasible. We may ask you to verify your identity before fulfilling an access request, to ensure that personal data is not disclosed to an unauthorised party.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data (such as your name or date of birth), we will require supporting KYC documentation confirming the correct information before making the amendment.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Please note that we are unable to delete data that we are legally required to retain — for example, transaction records subject to our five-year AML retention obligation. In such cases, we will inform you of the specific legal basis for continued retention.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed, or where you have objected to processing and we are considering your objection.

Right to Data Portability

Where we process your personal data on the basis of your consent or on the basis of a contract with you, and that processing is carried out by automated means, you have the right to receive your data in a portable, machine-readable format and to request that it be transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing carried out on the basis of our legitimate interests, including automated decision-making that produces significant effects on you. You also have the absolute right to object to the use of your data for direct marketing purposes at any time, without needing to provide a reason.

zz22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page to reflect the date on which the revised policy takes effect.
• Display a prominent notice on the zz22 platform informing active players that the Privacy Policy has been updated.
• Where required by law or where the changes are significant, send a direct notification to your registered email address or phone number summarising the key changes.

Your continued use of the zz22 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the platform and request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed of how zz22 is protecting your personal information. All previous versions of this policy are archived and available on request from our support team.

Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy or our data handling practices, please contact the zz22 data support team:

• Email: [email protected] (plain text — not a link)
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Response Time: Within 48 hours for general enquiries; within 30 days for formal rights requests