zz22 Privacy Policy

This Privacy Policy ("Policy") describes how zz22 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "the User") who access or register on the zz22 website at https://zz22.ws. By creating an account on zz22 or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all personal data collected through the zz22 website, account registration forms, deposit and withdrawal processes, customer support interactions, and any other channel through which you provide information to zz22. We are committed to handling your data responsibly, transparently and in accordance with applicable data protection principles.

zz22 collects only the information that is necessary to provide a secure, compliant and functional platform experience. The categories of personal data we collect are set out below.

zz22 uses the personal data we collect for the following purposes, each of which is necessary to operate the Platform or to fulfil a legal obligation:

• To create, verify and manage your registered account, including identity and age verification as required for responsible gaming compliance.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods, and to maintain accurate financial records of all transactions.
• To provide customer support and respond to your queries, complaints and account requests in a timely manner.
• To detect, investigate and prevent fraud, money laundering, account manipulation and other prohibited activities, including the use of automated fraud-detection systems.
• To monitor and improve the performance, security and reliability of the Platform, including analysing anonymised usage patterns to identify areas for improvement.
• To send transactional communications such as deposit confirmations, withdrawal notifications, account security alerts and, where you have opted in, relevant promotional offers.

zz22 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and zz22, including account management, deposit processing, withdrawal fulfilment and the delivery of gaming services.
• Legal obligation: Processing is necessary to comply with applicable anti-money laundering requirements, age verification obligations and other regulatory duties applicable to online gaming platforms operating in Bangladesh.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection and the improvement of our services, where such interests are not overridden by your data protection rights.

zz22 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. We may share limited personal data only in the following circumstances:

• Payment service providers: We share the minimum data necessary with bKash, Nagad, Rocket, Upay and other payment processors to authenticate transactions and process deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: We may share identity documents with third-party KYC verification partners for the purpose of confirming user identity and age. These partners are contractually bound to process data only as instructed by zz22.
• Game content providers: Aggregated, anonymised session data may be shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe and others for the purpose of game performance analysis. No personally identifiable information is included in this data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of zz22 or other users.

Any third-party service provider with whom we share data is required to maintain appropriate technical and organisational security measures and may only process your data in accordance with our instructions and for the specific purpose for which the data was shared.

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket or Upay, your mobile wallet number and transaction reference are transmitted to the relevant payment provider using encrypted communication protocols. zz22 does not store your full bKash PIN, Nagad PIN or any equivalent payment credential on its servers. The payment provider receives only the data that is strictly necessary to complete the transaction.

Users transacting via Visa or Mastercard should be aware that those card networks operate under their own privacy and data security frameworks. zz22 does not receive or store full card numbers. Card payment processing is handled by a PCI-DSS compliant payment gateway, and zz22 receives only a tokenised reference to confirm transaction status.

zz22 uses a limited set of cookies and similar technologies on its website. We do not use advertising cookies, third-party behavioural tracking, or social media pixel tags. The cookies we deploy fall into the following categories:

• Essential cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that preserve your language preference. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to collect anonymised data about how visitors navigate the Platform — for example, which pages are visited most frequently, how long sessions last, and where users typically exit. This data is used solely to improve the Platform and is never linked to an individual user's identity.
• Preference cookies: Store non-sensitive user interface preferences such as your selected language (English or Bengali) and any display settings you have adjusted. These cookies improve your experience by remembering your choices between sessions.

You may control cookie behaviour through your mobile browser settings. However, disabling essential cookies will prevent you from logging into your account or completing financial transactions on zz22. Disabling analytics or preference cookies will not affect Platform access but may reduce the quality of your experience.

zz22 retains your personal data for as long as your account remains active and for a period thereafter as required to fulfil legal and regulatory obligations. In practice, this means that account records, transaction histories and identity verification documents are retained for a minimum of five years following account closure. This retention period is consistent with anti-money laundering record-keeping requirements applicable to online financial platforms.

Support communication records are retained for two years from the date of the last interaction. Technical and session data used for security and fraud detection is retained for twelve months. Data that is no longer required for its original purpose and for which no legal retention obligation exists will be securely deleted or irreversibly anonymised.

As a user of the zz22 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered mobile number and a description of your request. We will respond within 48 hours.

• Right of access: You have the right to request a copy of the personal data that zz22 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that override this right.
• Right to restriction of processing: You have the right to request that we limit how we use your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

zz22 will not charge a fee for handling data rights requests submitted in good faith. We may request reasonable proof of identity before fulfilling a request to ensure we are releasing data to the correct individual.

zz22 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage for data at rest, access controls that restrict internal data access to authorised personnel only, regular security audits, and automated fraud and intrusion detection systems.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying zz22 immediately if you suspect that your account has been compromised. zz22 will never ask for your password by phone, SMS or email.

The zz22 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account is held by a person under 21, that account will be immediately closed, all associated funds will be returned to the original payment source (less any amounts required to be retained under applicable law), and the personal data of the underage individual will be deleted as soon as retention obligations permit. If you believe that a minor has registered on zz22, please contact us immediately at [email protected].

zz22 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to the way in which we collect or use personal data, we will publish the updated Policy on the Platform with a revised effective date and will endeavour to notify registered Users via their registered mobile number or by a notice displayed upon login. Your continued use of the Platform after a revised Policy has been published constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically to stay informed of how we handle your personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the way zz22 handles your personal data, please contact our support team by email at [email protected] We aim to respond to all privacy-related enquiries within 48 hours. Please include your registered mobile number and account username in your message so we can locate your account and respond accurately.