Privacy Policy — za77 Data Commitment

1. Data Controller

za77 ("we", "us", "our") operates the online casino and sports betting platform accessible at za77.io (the "Platform"). For the purposes of applicable data protection principles, za77 acts as the data controller in respect of all personal data collected from players who register and use the Platform.

As data controller, za77 determines the purposes for which and the means by which your personal data is processed. All processing activities described in this Privacy Policy are carried out by za77 or by carefully selected third-party processors acting under za77's instructions and bound by strict data processing agreements.

If you have any questions about how za77 processes your personal data, or if you wish to exercise any of the data rights described in Section 9 of this policy, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week in English, operating on Bangladesh Standard Time (UTC+6).

2. Personal Data We Collect

za77 collects personal data from you at different stages of your interaction with the Platform. The categories of data we collect are described below. We collect only the data that is necessary for the specific purpose identified, consistent with the principle of data minimisation.

2.1 Registration Data

When you create a za77 account, we collect the following information which you provide directly:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify the 21+ age requirement)
• Residential address in Bangladesh (including city, district, and postal code)
• Email address
• Mobile phone number (used for account verification and 2FA where enabled)
• Chosen username and password (password is stored in hashed form — never in plain text)

2.2 Identity Verification (KYC) Data

To comply with responsible gaming standards and anti-money-laundering (AML) obligations, za77 may request the following documents at any stage of your account lifecycle:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (bio-data page)
• Driving licence issued by Bangladeshi authorities
• Proof of address: recent utility bill, bank statement, or mobile wallet statement dated within 90 days
• Selfie photograph taken at time of KYC submission (for liveness verification)

KYC documents are processed securely and retained only for as long as required under our data retention policy (see Section 6).

2.3 Financial Transaction Data

When you make deposits or withdrawals, za77 records the following financial data to operate your account and satisfy AML compliance requirements:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet number or bank account details associated with the transaction
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history
• Account balance history

2.4 Gaming Activity Data

We record the gaming and betting activity conducted through your za77 account, including:

• Bets placed, games played, and wager amounts
• Game session duration and frequency
• Bonus credits claimed and wagering progress
• Win and loss records

Gaming activity data is used to manage your account, detect problem gambling patterns, and comply with responsible gaming obligations.

2.5 Technical & Device Data

When you access the Platform, our servers and analytics tools automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Screen resolution and language settings
• Pages visited, time spent on each page, and click-path data
• Referral source (the URL from which you arrived at za77.io)

2.6 Communications Data

When you contact za77 support, submit a complaint, or respond to a survey, we retain a record of the communication, including:

• The content of messages exchanged with our support team via email or live chat
• The date, time, and subject of each communication
• Complaint or dispute records and their resolution outcomes

3. How We Use Your Personal Data

za77 uses the personal data it collects for the following purposes. Each use is tied to a specific legal basis described in Section 4.

za77 does not use your personal data for any purpose that is incompatible with the purposes listed above. If we intend to use your data for a new purpose, we will update this Privacy Policy and notify you in advance.

4. Legal Basis for Processing

Each processing activity carried out by za77 is grounded in one or more of the following legal bases:

• Contractual necessity: Processing is required to fulfil the contract between you and za77 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: za77 is required by applicable anti-money-laundering standards, responsible gaming obligations, and age-verification requirements to process certain categories of your data.
• Legitimate interests: za77 has a legitimate interest in detecting and preventing fraud, protecting the security of the Platform, and improving the user experience, provided these interests are not overridden by your rights and freedoms.
• Consent: Where za77 sends you promotional marketing communications, we do so only on the basis of your explicit consent. You may withdraw your consent to marketing at any time by contacting support or updating your account preferences.

5. Sharing Your Personal Data

za77 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Payment Processors

To process your deposits and withdrawals, za77 shares the minimum necessary financial data with our approved payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard. Each payment provider operates under its own privacy policy and is independently responsible for data it processes in its own capacity.

5.2 Game Software Providers

Some game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) may receive limited technical identifiers (such as a session token or anonymised player ID) to load and authenticate game sessions. These providers do not receive your name, address, or payment details.

5.3 KYC & Identity Verification Partners

Where za77 uses third-party KYC verification services to check the authenticity of identity documents, your KYC data may be passed to that verification partner under a strict data processing agreement. These partners are contractually prohibited from using your data for any purpose beyond the specific verification task.

5.4 Legal & Regulatory Disclosure

za77 may disclose your personal data to competent authorities, law enforcement bodies, or regulatory agencies where required by law or where such disclosure is necessary to protect the rights, property, or safety of za77, its players, or the public. Any such disclosure will be strictly limited to the data required and will be documented internally.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of za77's assets, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and the data protection terms applicable to your information under the new entity.

6. Data Retention

za77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its recovery. Where anonymisation is applied, the anonymised data may be retained indefinitely for statistical analysis without identifying individual players.

7. Cookies & Tracking Technologies

za77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure stable Platform performance. No personal data collected by these cookies is used for marketing.

7.2 Functional Cookies

Functional cookies remember your preferences such as your chosen language setting and display preferences, allowing za77 to provide a more personalised experience. These cookies do not track your browsing activity across third-party websites.

7.3 Analytics Cookies

With your consent, za77 uses analytics cookies to understand how players use the Platform — which pages are visited most frequently, where users navigate from, and which features generate the most engagement. This data is used in aggregate form to improve the Platform. Analytics data is not used to identify individual players.

7.4 Managing Cookies

You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from logging in or completing transactions. Instructions for managing cookies in common browsers are available in your browser's help documentation.

8. Security Measures

The security measures za77 employs include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and za77 servers, ensuring that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Password hashing using industry-standard one-way hashing algorithms. za77 staff cannot see your password and it is never stored in recoverable form.
• Two-factor authentication (2FA) available on all za77 accounts as an additional layer of login security. Players are encouraged to enable 2FA via their account settings.
• Access controls restricting internal access to personal data on a need-to-know basis, with all access logged and audited.
• Regular security audits and penetration testing carried out by qualified independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems monitoring the Platform infrastructure for anomalous activity in real time, with automated alerts and response protocols.
• Data backup and disaster recovery procedures ensuring that player data can be recovered following any system failure without data loss.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, za77 will notify affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach.

9. Your Data Rights

As a player on the za77 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact za77 support at [email protected]. za77 will respond to all data rights requests within a reasonable timeframe and at no cost to you.

9.1 Right of Access

You have the right to request a copy of all personal data za77 holds about you. Upon receipt of a valid access request, za77 will provide you with a summary of the data categories held, the purposes for which they are processed, and the retention periods that apply.

9.2 Right to Rectification

If any of the personal data za77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data, many fields can be updated directly through your account settings. For changes to your name or date of birth, a KYC document may be required to verify the correction.

9.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Please note that za77 may be required by law to retain certain data (particularly financial transaction records and KYC data) for specified periods even following an erasure request. In such cases, za77 will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason for retention.

9.4 Right to Restrict Processing

You may request that za77 restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a processing restriction, za77 may store your data but will not actively process it.

9.5 Right to Object

You have the right to object to processing based on za77's legitimate interests, and to processing for direct marketing purposes. If you object to marketing, za77 will cease all promotional communications immediately. Objections to other processing activities will be assessed on a case-by-case basis.

9.6 Right to Withdraw Consent

Where za77 processes your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, contact support or update your preferences in account settings.

9.7 Right to Data Portability

You have the right to receive the personal data you have provided to za77 in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible. This right applies to data processed on the basis of contract or consent.

10. Children's Privacy

za77 enforces its 21+ age requirement through mandatory age verification at account registration and through periodic KYC checks. If za77 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, za77 will:

• Immediately suspend the account in question pending investigation.
• Delete all personal data associated with the account as soon as the under-age status is confirmed, subject only to any legal obligation to retain certain records.
• Return any deposits made to the source payment method and void any winnings accrued during the period of under-age use.

If you have reason to believe that a person under the age of 21 has registered an account on za77, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. Changes to This Privacy Policy

za77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent update is displayed in the hero section at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — za77 will notify registered players by email to the address on file and by displaying a prominent notice on the Platform. The notification will be issued at least 7 days before the updated policy takes effect, giving you adequate time to review the changes.

Your continued use of the za77 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you may close your account and request deletion of your data as described in Section 9.3 above.

We encourage you to review this Privacy Policy periodically so that you remain informed about how za77 protects your personal data.

12. Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or za77's handling of your personal data, please reach out to our support team. We take privacy enquiries seriously and are committed to responding promptly and transparently.

Email: [email protected]
Availability: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
Language: English

When submitting a data rights request or a privacy concern, please include your registered account username and a clear description of your request. This helps us locate your records and respond as efficiently as possible. za77 will acknowledge all privacy-related enquiries within 24 hours and aim to resolve them within 5 Business Days.