z2777 Privacy Policy
Your privacy matters to z2777. This Privacy Policy explains in plain English exactly what personal data z2777 collects from Bangladeshi players, why it is collected, how it is stored and protected, who it may be shared with, and what rights you have over your own information. Please read this document carefully before registering or using any z2777 service.
Our Privacy Principles
Before the detailed policy text, these six cards summarise the core principles that govern how z2777 handles every piece of player data.
Minimum Necessary Collection
z2777 collects only the personal data that is strictly necessary for account management, identity verification, payment processing, and fraud prevention. We do not collect data speculatively or for purposes unrelated to operating the z2777 platform.
Security by Design
All data transmitted between your device and z2777 is protected by SSL/TLS encryption. Stored personal data is access-controlled, and passwords are hashed using industry-standard algorithms. z2777 does not store raw payment credentials on its own servers.
No Sale of Personal Data
z2777 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your name, mobile number, and account activity are never monetised outside the direct operation of the z2777 platform.
Player Control
You have the right to access, correct, and request deletion of your personal data. You may also object to certain processing activities. Requests are handled by the z2777 support team and are responded to within 15 business days of receipt.
Defined Retention Periods
z2777 retains personal data only for as long as it is needed to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Account data for closed accounts is retained for a maximum of five years for compliance purposes, after which it is deleted or anonymised.
Transparent Processing
This Privacy Policy is written in plain English and published prominently on the z2777 platform. We notify players of material changes to this policy before those changes take effect, giving players the opportunity to review their continued consent to data processing.
1. Data We Collect
When you interact with z2777 — whether by visiting the website, registering an account, making a deposit, placing a bet, or contacting support — z2777 may collect and process the following categories of personal data:
Registration Data
When you create a z2777 account, you are required to provide your full legal name, date of birth, and a valid Bangladeshi mobile number. This information is used to create and identify your account, to enforce the 18+ age restriction, and to support identity verification at the withdrawal stage. You may also be asked to choose a username and password; passwords are stored in hashed form and are never visible to z2777 staff.
Identity Verification Data
Before processing a withdrawal, z2777 may request copies of identity documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate, together with confirmation of the mobile financial service account (bKash, Nagad, Rocket, or Upay) used for your deposit. This data is collected solely for the purpose of age and identity verification and anti-money laundering compliance. Copies of identity documents are stored securely and are not used for any purpose other than account verification.
Transaction Data
z2777 records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and processing times, bonus credits and wagering activity, and game wager amounts and outcomes. This data is necessary for the operation of the cashier, the resolution of transaction disputes, and compliance with responsible gaming obligations.
Technical and Device Data
When you access z2777, our servers automatically record certain technical information: your IP address, browser type and version, device type (mobile or desktop), operating system, referring URL, and session timestamps. This information is used for platform security (identifying unusual login patterns), fraud prevention (detecting multi-account behaviour), and performance monitoring (identifying pages or features that generate high error rates).
Support Communications
If you contact z2777 support by email at [email protected], the content of that communication — including any personal data you include in the message — is retained as part of the support ticket record. Support records are used to track the resolution of issues, to train support staff, and to provide a communication history if you raise the same issue again in the future.
Sensitive Data: z2777 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily include such information in a support communication, z2777 will handle it with additional care and will not use it for any purpose beyond resolving the specific support ticket.
Data Categories at a Glance
| Category | When Collected |
|---|---|
| Name & DOB | Registration |
| Mobile number | Registration |
| NID / Passport | Withdrawal verification |
| Transaction records | Each transaction |
| IP address | Each session |
| Device / browser | Each session |
| Support messages | When you contact us |
2. How We Use Your Data
z2777 processes your personal data only for the purposes listed below. Each purpose is supported by a lawful basis for processing. z2777 does not repurpose data collected for one function for unrelated activities without providing prior notice and, where required, obtaining your consent.
Account Operation
The core purpose of collecting your registration data is to create and maintain your z2777 account. This includes: verifying your identity at account creation and at the withdrawal stage; processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and the supported bank transfer channels; calculating and applying bonus credits to your account; and displaying your account balance, transaction history, and bonus wallet in the player dashboard. Without this processing, z2777 cannot operate the platform for you as an individual player.
Fraud Prevention and Security
z2777 uses technical data — including IP addresses, device fingerprints, and login timestamps — to detect and prevent fraudulent activity. This includes identifying players who attempt to open multiple accounts to claim duplicate bonuses, detecting unusual deposit-and-withdrawal patterns that may indicate money laundering, and flagging login attempts from IP addresses associated with previously suspended accounts. This processing is carried out in the legitimate interest of z2777 and its player community in maintaining a secure and fair platform.
Responsible Gaming Compliance
z2777 monitors player activity patterns — including session duration, deposit frequency, and wagering velocity — for indicators of problem gambling behaviour. Where such indicators are identified, z2777 may proactively contact the player with information about responsible gaming tools, apply account-level deposit limits, or refer the case to the responsible gaming team for a manual review. This processing is carried out to fulfil z2777's duty of care obligations and to comply with responsible gaming best practices.
Customer Support
Personal data included in support communications is used to investigate and resolve the specific issue raised by the player. Support records are retained to provide context for future interactions and to monitor the quality and consistency of the support team's responses. z2777 does not use support communication data for marketing purposes without the player's explicit consent.
Platform Improvement
Aggregated and anonymised technical data — from which individual players cannot be identified — is used to analyse platform performance, identify pages with high error rates, optimise load times, and evaluate which game categories are most popular among Bangladeshi players. This analysis does not involve any processing of individually identifiable personal data.
Legal Compliance
z2777 may process and retain personal data where required to comply with applicable legal obligations, including responding to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction. In such cases, z2777 will disclose only the minimum personal data necessary to satisfy the legal obligation and will, where permitted by law, notify the affected player of the disclosure.
3. Data Sharing and Disclosure
z2777 does not sell, rent, or trade personal data. Personal data is shared with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processing Partners
To process deposits and withdrawals, z2777 shares the minimum necessary transaction data — including your mobile number and transaction amount — with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank). These providers process your data in accordance with their own privacy policies and applicable financial regulations. z2777 does not share your full NID details with payment processors; identity documents are retained solely by z2777.
Game Technology Providers
The casino games and sports data feeds on z2777 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive a unique anonymous player identifier (not your name or mobile number) to deliver personalised game sessions, track game round outcomes, and calculate RTP compliance. No directly identifiable personal data is shared with game studios beyond what is necessary to establish and maintain the game session.
Fraud and Security Services
z2777 may share technical identifiers — such as IP addresses and device fingerprints — with specialist anti-fraud and security service providers for the purpose of detecting multi-accounting, payment fraud, and other prohibited conduct. These providers are contractually prohibited from using the shared data for any purpose other than fraud detection on behalf of z2777.
Legal and Regulatory Disclosure
z2777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a lawful order, subpoena, or legal obligation. z2777 will not voluntarily disclose personal data to any government body without a lawful basis for doing so.
No Third-Party Marketing: z2777 does not share your personal data with advertising networks, social media platforms, or third-party marketers for the purpose of serving you targeted advertising outside of the z2777 platform. Any promotional communications you receive from z2777 are sent directly by z2777 to the mobile number or email address registered on your account.
Who Receives Your Data
| Recipient | Purpose |
|---|---|
| bKash / Nagad / Rocket | Payment processing |
| Bank partners | Bank transfer processing |
| Game studios | Game session delivery |
| Anti-fraud providers | Security & fraud detection |
| Law enforcement | Legal obligation only |
| Marketers / brokers | Never |
5. Data Security
z2777 applies technical and organisational security measures appropriate to the nature of the personal data it processes. The following measures are in place to protect your data against unauthorised access, disclosure, alteration, or destruction.
Encryption in Transit
All data exchanged between your browser or mobile device and the z2777 platform is encrypted using Transport Layer Security (TLS) with a minimum key strength of 256-bit. The z2777 website is served exclusively over HTTPS. Connections attempted over plain HTTP are automatically redirected to HTTPS. This ensures that your login credentials, payment details, and account activity cannot be intercepted by third parties on the network path between your device and z2777's servers.
Password Security
Player passwords are never stored in plain text. z2777 uses a cryptographic hashing algorithm with a unique salt per account to store password representations. Even in the unlikely event of a data breach affecting the password storage system, hashed passwords cannot be reversed to recover the original password. z2777 strongly recommends that players choose a unique password not used on any other website or application.
Access Controls
Access to player personal data within z2777's internal systems is restricted to authorised personnel on a need-to-know basis. Support staff can access account information necessary to resolve a support ticket, but do not have access to payment credential data or identity document images beyond what is required for their specific role. All internal access to personal data is logged and subject to periodic audit.
Incident Response
In the event of a confirmed data security incident that affects the confidentiality of player personal data, z2777 will notify affected players by email or mobile notification within 72 hours of becoming aware of the incident, explaining what data was affected, what z2777 is doing to contain the incident, and what steps players can take to protect themselves. z2777 will also notify relevant authorities as required by applicable law.
Security Measures Summary
- TLS 256-bit encryption in transit
- Salted password hashing
- Role-based internal access controls
- Access logging and periodic audit
- 72-hour breach notification
- No raw payment credentials stored
6. Data Retention
z2777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or compliance obligations. The following retention periods apply to the main categories of personal data processed by z2777.
Active Account Data
Personal data associated with an active z2777 account — including your name, date of birth, mobile number, and account preferences — is retained for the lifetime of the account. This data is necessary for the ongoing operation of your account and cannot be deleted while the account remains open. You may request account closure at any time by contacting support, which will initiate the process described in the Terms & Conditions.
Transaction Records
Records of deposits, withdrawals, wagers, and bonus transactions are retained for a minimum of five years following the date of the transaction, regardless of whether the associated account remains active. This retention period reflects anti-money laundering compliance obligations and the need to be able to resolve retrospective transaction disputes.
Identity Verification Documents
Copies of identity documents submitted for account verification are retained for five years following the closure of the associated account. After this period, they are securely deleted. During the retention period, access to identity documents is restricted to authorised personnel conducting verification or compliance reviews.
Support Communications
Support ticket records are retained for three years following the resolution of the ticket. After this period they are deleted, except where the communication forms part of a transaction dispute record or a legal hold, in which case the longer relevant retention period applies.
Technical Log Data
Server logs containing IP addresses and session data are retained for a maximum of 90 days, after which they are automatically purged. Aggregated and anonymised analytics derived from log data — from which individual players cannot be identified — may be retained indefinitely for platform improvement purposes.
Post-Closure Retention: If you close your z2777 account, z2777 will retain the minimum personal data necessary to comply with legal obligations and to resolve any outstanding matters (such as a pending withdrawal or an open dispute) for the periods specified above. You will not receive marketing communications after account closure.
7. Your Privacy Rights
As a z2777 player, you have the following rights with respect to the personal data z2777 holds about you. To exercise any of these rights, contact the z2777 support team at [email protected] with the subject line "Privacy Rights Request" and clearly state which right you wish to exercise and, where applicable, what specific data the request concerns.
Right of Access
You have the right to request a copy of the personal data z2777 holds about you. z2777 will provide this information in a structured, readable format within 15 business days of receiving a valid request. The response will include a description of the categories of data held, the purposes for which each category is processed, and the retention period applicable to each category.
Right to Rectification
If the personal data z2777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered name contains a typographical error, you may request a correction by submitting a copy of your NID or passport showing the correct spelling. z2777 will process rectification requests within 10 business days.
Right to Erasure
You may request the deletion of your personal data where: you no longer have an active account with z2777; the data is no longer necessary for the purpose for which it was collected; or you withdraw consent on which the processing was based. Please note that z2777 cannot delete data that it is legally required to retain — for example, transaction records subject to the five-year anti-money laundering retention obligation. In such cases, z2777 will explain which data cannot be deleted and why.
Right to Object
You have the right to object to the processing of your personal data for purposes based on legitimate interest — for example, the use of your account activity data for responsible gaming monitoring. z2777 will review the objection and, where the objection is upheld, will cease the specific processing activity. Objecting to certain processing activities (such as fraud detection) may result in restrictions being placed on your account for security reasons.
Right to Data Portability
You may request that z2777 provide you with a copy of your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider. This right applies to data you have provided directly to z2777 and that is processed on the basis of your consent or a contractual obligation.
Response Timeframe: z2777 responds to all privacy rights requests within 15 business days of receipt. In cases where the request is complex or where a large volume of data is involved, z2777 may extend the response period by a further 15 business days, and will notify the requesting player of the extension before the initial 15-day period expires.
Rights at a Glance
| Right | Response Time |
|---|---|
| Access your data | 15 business days |
| Correct inaccurate data | 10 business days |
| Request deletion | 15 business days |
| Object to processing | 15 business days |
| Data portability | 15 business days |
Contact: [email protected]
Subject line: "Privacy Rights Request"
8. Policy Updates and Contact
z2777 reviews this Privacy Policy periodically and will update it when changes to the platform, applicable law, or data processing practices make an update necessary. The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision.
Notification of Material Changes
Where a change to this Privacy Policy is material — for example, where z2777 introduces a new category of data processing, shares data with a new category of third party, or changes the retention period for a significant data category — z2777 will notify registered players via the mobile number on file at least seven calendar days before the change takes effect. For minor clarifications or editorial updates that do not affect the substance of how data is processed, z2777 may update the policy without prior notification, relying on the updated effective date as sufficient notice.
Continued Use as Acceptance
Continued use of the z2777 platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must cease using the platform and contact support to request account closure before the revised policy takes effect.
Contact the Privacy Team
For any questions, concerns, or requests relating to this Privacy Policy or to z2777's data processing practices, please contact the z2777 support team. Our team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6).
Email: [email protected] — please use the subject line "Privacy Policy Enquiry" for privacy-related correspondence to ensure your message is routed to the appropriate team member.
z2777 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with the response you receive, you retain the right to escalate the matter through applicable legal channels available in your jurisdiction.
Continue Exploring z2777
Now that you have reviewed our Privacy Policy, explore the full z2777 platform — from live cricket betting and casino games to slots and more, all in BDT.
18+ only. Please gamble responsibly. z2777 operates as an entertainment platform.