zeta77 Privacy Policy

zeta77 uses the personal data we collect for the following purposes, each of which has a lawful basis:

• Account registration and management. To create, maintain, and administer your player account, including processing login requests, updating account preferences, and communicating important account notices.
• Identity verification (KYC). To verify that you are who you say you are, that you are aged 21 or over, and that your payment methods belong to you. This is a legal and operational requirement before withdrawals are processed.
• Payment processing. To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate financial records of all transactions in your account.
• Customer support. To respond to your enquiries, complaints, and support requests in a timely and effective manner.
• Responsible gaming. To monitor gaming patterns, detect signs of problem gambling, enforce self-exclusion and deposit limit requests, and comply with our responsible gaming obligations.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, collusion, and other forms of abuse on the Platform.
• Promotions and marketing. To send you promotional offers, bonus notifications, and seasonal campaigns (such as BPL season offers, Eid promotions, or Pohela Boishakh specials) that we believe may interest you, where you have opted in to receive such communications. You may opt out at any time by contacting support.
• Legal and regulatory compliance. To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records as required by law.
• Platform improvement. To analyse usage patterns, identify technical issues, and improve the overall performance and user experience of the zeta77 Platform.

zeta77 uses cookies and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

• Essential cookies. Required for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies. Remember your preferences such as language settings and notification choices so you do not need to re-enter them each time you visit.
• Analytics cookies. Collect anonymised data about how players navigate the Platform — for example, which game categories are most popular or which pages have the highest exit rate. This data is used to improve the Platform and is not linked to individual identities.
• Marketing cookies. Used to measure the effectiveness of promotional campaigns and, where you have consented, to show you relevant offers during your session. We do not use third-party advertising networks.

You may control cookie settings through your browser preferences. Please note that disabling essential cookies will prevent the Platform from functioning correctly. Continued use of the Platform without changing your cookie settings constitutes consent to the use of cookies as described in this section.

zeta77 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and only for the purposes described in this Policy:

• Payment processors. bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners receive only the transaction data necessary to process your deposit or withdrawal. They do not receive your full player profile or gaming history.
• Game providers. Third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their games. They do not receive your name, NID, or contact details.
• Identity verification services. Where automated KYC tools are used, your identity documents may be processed by a third-party verification provider operating under strict data processing agreements and confidentiality obligations.
• Legal and regulatory authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Professional advisors. Our legal counsel, auditors, and accountants may have access to personal data where necessary to provide their professional services, subject to professional confidentiality obligations.

All third parties with whom we share personal data are required to handle it securely, in accordance with applicable data protection standards, and strictly for the purpose for which it was shared.

zeta77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following general retention periods apply:

• Active accounts. Personal data associated with an active player account is retained for the duration of the account's existence plus a minimum period of 5 years following account closure, in order to comply with financial record-keeping and anti-money-laundering obligations.
• KYC documents. Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records. Financial transaction records are retained for a minimum of 7 years from the date of the transaction.
• Support communications. Customer support records are retained for 3 years from the date of the last interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for the duration of that matter plus 2 years.
• Marketing data. Where you have opted in to receive marketing communications, we retain your contact preferences until you opt out. Once you opt out, marketing preferences are updated immediately and no further promotional communications will be sent.
• Technical logs. Server logs and analytics data are typically retained for 12 months in identifiable form, after which they may be anonymised and retained for longer periods for statistical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

zeta77 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including passwords (which are stored as salted hashes and never in plain text) and KYC document files.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
• Regular security assessments and vulnerability testing of the Platform's infrastructure.
• Staff training on data protection obligations and secure data handling practices.
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

While we take all reasonable steps to protect your data, no system is completely immune to risk. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you without undue delay and take all necessary remedial steps.

As an online platform serving players in Bangladesh, zeta77 may process and store data on servers located outside of Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include data processing agreements with receiving parties, standard contractual clauses, or other legally recognised transfer mechanisms.

By using the zeta77 Platform, you acknowledge and consent to the transfer of your personal data outside of Bangladesh where necessary for the operation of the services described in these terms.

The zeta77 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a minor has registered an account or provided personal data to us, we will immediately suspend that account, delete the associated data, and — where applicable — notify the relevant authorities. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

The zeta77 Platform does not contain links to third-party websites for commercial purposes. However, certain game content is delivered by third-party providers (see Section 3). These providers operate under their own privacy policies, and zeta77 is not responsible for their data practices beyond what is specified in our data processing agreements with them. We encourage you to review the privacy policies of any third-party service you interact with.

zeta77 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify registered players by email or via an in-platform notice. We encourage you to review this Policy periodically to stay informed about how we are protecting your data. Your continued use of the Platform after any changes are published constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zeta77 handles your personal data, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — do not send sensitive documents via unencrypted email)
• Subject line: "Privacy Enquiry — [Your Registered Username]"
• Response time: We aim to respond to all privacy enquiries within 10 business days.

For formal data subject access requests (requesting a copy of your personal data), please submit your request in writing to the same email address, clearly stating "Data Subject Access Request" in the subject line. We will verify your identity before processing such requests and will respond within 15 business days.