Privacy Policy — zs999 Online Casino Bangladesh

1 Introduction & Scope

zs999 is Bangladesh's trusted online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh. We are committed to handling your personal information with care, transparency, and in accordance with applicable data protection principles.

This Privacy Policy applies to all personal data collected through the zs999 website (zs999.im), our mobile-optimised platform, customer support communications, promotional activities, and any other interactions you have with zs999 as a registered player or a visitor. It does not apply to third-party websites or services that may be linked to from our platform; those services operate under their own privacy policies.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the full framework governing your relationship with zs999.

2 Data We Collect

We collect personal data through several channels: directly from you when you register or interact with our services, automatically through your use of the platform, and in limited cases from third-party verification providers. The categories of data we collect are as follows:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID number, passport number	Registration form; KYC document upload
Contact Data	Email address, mobile phone number, residential address	Registration form; account settings updates
Financial Data	bKash / Nagad / Rocket account numbers, bank account details, transaction history, deposit and withdrawal amounts	Payment processing; transaction records
Verification Data	Copies of NID / passport / utility bill / bank statement submitted for KYC	KYC document upload portal
Account & Gaming Data	Username, password (hashed), game history, bet amounts, win/loss records, session durations, responsible gaming settings	Automatically generated during platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (BST UTC+6)	Automatically collected via server logs and cookies
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support interactions
Marketing Preferences	Opt-in/opt-out status for promotional emails and SMS notifications	Account settings; registration preferences

3 How We Use Your Data

zs999 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. Our primary uses are as follows:

• Account Management: Creating, maintaining, and securing your zs999 player account; verifying your identity and age (21+); processing password resets and account updates.
• Transaction Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfers; processing withdrawal requests; maintaining financial records for audit and compliance purposes.
• KYC & AML Compliance: Verifying your identity and the source of funds as required by anti-money-laundering obligations; reporting suspicious transactions to relevant authorities where legally required.
• Platform Delivery: Providing access to casino games, live dealer tables, sports betting (including BPL, IPL, T20, ICC cricket markets), virtual games, and all other platform features.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing live chat and email support in English and Bengali.
• Responsible Gaming: Monitoring gambling behaviour for signs of problem gaming; enforcing deposit limits, cooling-off periods, and self-exclusion requests; complying with responsible gaming obligations.
• Security & Fraud Prevention: Detecting and investigating fraudulent activity, account abuse, bonus abuse, bot usage, and other violations of our Terms and Conditions; protecting the integrity of the platform and the interests of legitimate players.
• Service Improvement: Analysing aggregated, anonymised usage data to identify areas for platform improvement, game performance optimisation, and user experience enhancements.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal promotions (such as Eid, Pohela Boishakh, BPL tournament offers) to players who have opted in to receive marketing communications. You may opt out at any time via your account settings or by contacting support.
• Legal Obligations: Retaining records as required by applicable law; responding to lawful requests from regulatory authorities or law enforcement agencies.

4 Legal Basis for Processing

For each category of personal data processing, zs999 relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to at registration — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML verification, age verification (21+), tax record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests do not override your fundamental rights — including fraud prevention, platform security, service improvement, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — principally, sending marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

zs999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit our website. They help us recognise your browser, remember your preferences, keep your session active, and analyse how the platform is used.

The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the platform to function. These enable you to log in, navigate between pages, and keep your session secure. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming limit configurations, so you do not have to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how visitors use the platform — including which pages are visited most frequently, where users drop off in registration flows, and general performance metrics. This data is used in aggregated form to improve the platform.
• Security Cookies: Help detect and prevent fraudulent activity, bot access, and account takeover attempts by correlating session behaviour with known risk patterns.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core platform features including login and payment processing. zs999 does not currently use third-party advertising or retargeting cookies.

6 Sharing Your Data

zs999 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Processors: We share transactional data (account identifiers and amounts) with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, and Mastercard strictly to process deposits and withdrawals.
• Identity Verification Providers: In certain cases, KYC document verification may be handled by a third-party identity verification service. These providers process your documents solely for verification purposes under strict data processing agreements with zs999.
• Game Software Providers: Game session data (player ID, bet amounts, game outcomes) is shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver game services and resolve game disputes. These providers do not receive your name, contact details, or payment information.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.
• Professional Advisors: In the context of legal proceedings, audits, or corporate transactions, we may share limited personal data with lawyers, auditors, or financial advisors who are bound by professional confidentiality obligations.
• Fraud Prevention Networks: We may share data with industry fraud prevention services where we have identified or suspect fraudulent activity, account abuse, or money laundering, to protect the platform and other players.

7 Data Retention

We retain your personal data for as long as your account remains active and for a defined period thereafter, determined by the purpose for which the data was collected and the legal obligations that apply to it. Our standard retention periods are as follows:

• Account & Identity Data: Retained for the lifetime of your account plus a minimum of five years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• KYC Verification Documents: Retained for five years following account closure or the completion of the applicable regulatory obligation, whichever is later.
• Customer Support Communications: Retained for two years from the date of the interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely as evidence of your consent or withdrawal of consent.
• Gaming History: Retained for five years to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Technical & Log Data: Server logs and IP address records are retained for 90 days for security and fraud prevention purposes, after which they are deleted or anonymised.

When the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you. Data that has been anonymised may be retained indefinitely for statistical and analytical purposes.

8 Your Rights

As a zs999 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with "Data Rights Request" in the subject line. We will respond within 30 days of receiving a valid, verified request.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update many details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, KYC and financial records required under AML law).
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally, marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9 Security Measures

zs999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data fields including passwords (stored as salted hashes), financial account identifiers, and identity document files are encrypted at rest.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication for administrative accounts.
• Regular Security Audits: We conduct periodic internal and external security assessments to identify and remediate vulnerabilities in our infrastructure.
• Intrusion Detection Systems: Automated systems monitor network traffic and system activity for anomalous patterns indicative of attempted breaches or attacks.
• Staff Training: All zs999 personnel with access to personal data receive training on data protection obligations and security best practices.
• Incident Response Plan: We maintain a documented incident response plan that governs our actions in the event of a data security breach, including containment, investigation, remediation, and player notification procedures.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. We strongly recommend that you use a strong, unique password for your zs999 account and that you do not share your login credentials with any other person.

10 Children & Minors

The zs999 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any feature of this platform.

zs999 applies age verification procedures at registration and during the KYC process to enforce this requirement. If we discover that we have inadvertently collected personal data from a person under the age of 21, we will immediately close the account, void any associated balances and activity, and delete the personal data as promptly as possible.

If you believe that a minor has registered on zs999, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Third-Party Services & External Links

The zs999 platform may contain references to third-party services including payment processors, game software providers, and customer support tools. These third parties operate under their own privacy policies, which we encourage you to review independently. zs999 is not responsible for the data practices of any third-party service provider beyond the contractual obligations we impose on them through our data processing agreements.

Game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is delivered through secure API integrations. These providers receive only the minimum data necessary to deliver their game services — typically a pseudonymous player session identifier, bet amounts, and game outcome data. They do not have access to your full identity, contact details, or payment information.

Payment service providers including bKash, Nagad, Rocket, and Upay process financial transactions independently and are subject to their own regulatory obligations and privacy policies. zs999 does not store your full mobile banking PIN or full card numbers — these are handled directly by the respective payment service providers through their own secure interfaces.

12 Policy Amendments

zs999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the platform informing players that the Privacy Policy has been updated.
• Where changes significantly affect how we process your personal data, send a notification to the email address registered to your account.

We encourage you to review this page periodically to stay informed about how we protect your personal information. Your continued use of the zs999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the platform and may request account closure by contacting our support team.

13 Contact & Data Rights Requests

If you have any questions, concerns, or complaints about this Privacy Policy or about how zs999 handles your personal data, please contact our support team through the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 from within your zs999 account dashboard — ideal for quick queries
• Response Time: Email responses within 2–5 hours during standard operating hours (Bangladesh Standard Time, UTC+6); Live Chat average response under 5 minutes
• Languages: Support available in English and Bengali

For formal data rights requests (access, rectification, erasure, portability, objection), please email [email protected] with "Data Rights Request" clearly stated in your message, along with your registered account username and a description of your request. We will acknowledge your request within 2 business days and aim to fulfil it within 30 days. Complex requests may require up to an additional 30-day extension, in which case we will notify you of the delay and the reason for it.