Privacy Policy — zezbd Online Casino

1 Introduction and Scope

zezbd ("the Platform", "we", "us", "our") operates the online casino and sports betting website at zezbd.net. We are committed to protecting the personal data of every individual who visits, browses, registers on, or interacts with our platform. This Privacy Policy sets out in plain English what data we collect, why we collect it, how we store and protect it, who we may share it with, how long we keep it, and what rights you have as a data subject.

This Privacy Policy applies to all users of zezbd.net, including registered account holders, visitors who browse without registering, and individuals who contact our customer support team. It covers all data collected through the website, through mobile-responsive browser sessions, and through any communication channels operated by zezbd including email correspondence to and from [email protected].

By accessing zezbd.net and creating an account, you acknowledge that you have read this Privacy Policy and that you consent to the collection, processing, and storage of your personal data as described herein. If you do not agree with any part of this policy, you must not register an account or continue to use the platform.

This Privacy Policy should be read together with our Terms and Conditions, which are published at /terms-conditions, and our Responsible Gaming policy at /responsible-gaming. Taken together, these three documents form the complete governance framework for your relationship with zezbd.

2 Personal Data We Collect

zezbd collects personal data through several distinct channels: during account registration, through the KYC (Know Your Customer) verification process, during payment transactions, through your active use of the platform, and through automated technical means such as server logs and cookies. The categories of personal data we collect are described in detail below.

2.1 Registration Data

When you create an account on zezbd, we collect the following information that you provide directly:

• Full legal name (first name and last name as they appear on your government-issued ID).
• Date of birth (used to verify you are 18 years of age or older).
• Residential address, including district, division, and postal code within Bangladesh.
• Mobile phone number (used for account verification and two-factor authentication via OTP).
• Email address (used for account communications, promotional messages where opted in, and support correspondence).
• Chosen username and hashed password (passwords are never stored in plain text).

2.2 Identity Verification (KYC) Data

As part of our anti-money laundering (AML) compliance obligations and age verification requirements, we collect documentary evidence during the KYC process:

• Copy of government-issued photo identification: National ID Card (NID), passport, or birth registration certificate.
• Proof of address document dated within the last three months (utility bill, bank statement, or official government correspondence).
• Proof of payment method ownership (for example, a screenshot of the bKash or Nagad account interface showing the account holder's name and mobile number).
• Selfie photograph or live facial verification image, where requested for enhanced identity confirmation.

2.3 Payment and Transaction Data

Each time you make a deposit or request a withdrawal, zezbd records the following transactional data:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank).
• Mobile wallet number or bank account identifier used for the transaction.
• Transaction reference number provided by your payment provider.
• Transaction amount in Bangladesh Taka (৳ BDT) and timestamp.
• Transaction status (pending, completed, failed, reversed).

2.4 Gameplay and Betting Activity Data

We record a full audit trail of your activity on the platform to support fair play verification, dispute resolution, responsible gaming monitoring, and AML compliance:

• Games played, bet amounts, outcomes, and session timestamps.
• Sports betting markets selected, odds accepted, stake amounts, and settlement results.
• Bonus and promotional offers claimed, wagering progress, and conversion outcomes.
• Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests).

2.5 Technical and Device Data

When you access zezbd.net, our servers and analytics systems automatically collect certain technical information:

2.6 Communications Data

If you contact our customer support team via email or live chat, we retain the content of those communications, including your messages, attachments, and the timestamp of each interaction. This data is used to resolve your enquiry, to train and improve our support team, and to maintain an audit trail of account-related communications.

3 How We Use Your Data

zezbd processes your personal data only for specific, legitimate purposes. We do not process data speculatively or sell it to third-party marketers. The legal bases and operational purposes for our data processing activities are as follows:

3.1 Account Management and Service Delivery

The primary basis for processing your personal data is the performance of the contract between you and zezbd — namely, the provision of online casino and sports betting services. Under this basis we use your data to:

• Create, maintain, and manage your player account.
• Authenticate your identity each time you log in to your account.
• Process your deposits and withdrawals via your chosen payment methods.
• Deliver game content, betting markets, and promotional offers you have enrolled in.
• Provide customer support and resolve disputes or complaints.
• Enforce responsible gaming tools you have activated, including deposit limits and self-exclusion periods.

3.2 Legal and Regulatory Compliance

zezbd is legally obligated to process certain categories of personal data in order to fulfil regulatory obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks. Under this legal basis we:

• Conduct identity verification (KYC) before processing withdrawals.
• Monitor transaction volumes and patterns for AML indicators.
• Retain transactional records for audit purposes for the duration required by applicable law.
• Report suspicious activity to relevant authorities where legally required to do so.
• Enforce minimum age restrictions and verify player eligibility.

3.3 Security and Fraud Prevention

zezbd has a legitimate interest in protecting the security and integrity of the platform and its player community. Under this basis we process technical and behavioural data to:

• Detect and prevent unauthorised account access, credential stuffing, and account takeover attempts.
• Identify and close duplicate accounts created to abuse promotional offers.
• Investigate chargebacks, payment fraud, and collusion between accounts.
• Detect the use of automated bots, scripts, or unfair-play software.

3.4 Marketing and Promotional Communications

Where you have provided explicit consent during registration or at a later point, zezbd may use your email address and mobile number to send you promotional communications, including bonus offers, tournament announcements, and seasonal promotions such as Eid offers, Pohela Boishakh specials, BPL cricket promotions, and T20 World Cup betting boosts.

You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing email. Withdrawing consent to marketing does not affect your account or the processing of your data for service delivery purposes.

3.5 Platform Improvement and Analytics

zezbd uses aggregated and anonymised usage data to analyse platform performance, identify popular game categories, optimise payment flow conversion rates, and improve the overall user experience for Bangladeshi players. This analytics processing does not involve making automated decisions about individual players and does not produce legal or similarly significant effects.

4 Data Sharing and Third Parties

zezbd does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or any entity whose primary purpose is to use that data for their own commercial gain. However, to deliver our services effectively and comply with legal obligations, we do share limited categories of personal data with the following categories of trusted third parties:

4.1 Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary payment details with your chosen payment provider. For example, when you deposit via bKash or Nagad, the relevant transaction reference and account identifier are passed to that provider's API to confirm and settle the transaction. Payment providers operate under their own privacy policies and are independently responsible for the data they receive.

4.2 Identity Verification and KYC Service Providers

zezbd uses third-party KYC technology providers to assist with document verification, facial comparison, and AML screening. Your KYC documentation is transmitted to these providers via encrypted connections for the sole purpose of identity verification. These providers are contractually prohibited from using your data for any other purpose.

4.3 Game Software Providers

Games on the zezbd platform are delivered by third-party software providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and others. To load a game and record your wager, a session token and bet data are transmitted to the relevant provider's game server. Game providers do not receive your full personal profile — only the session and bet data required to operate the game round.

4.4 Legal and Regulatory Authorities

zezbd will disclose personal data to law enforcement agencies, regulators, or courts where we are legally compelled to do so — for example, in response to a valid court order, a statutory information request, or as part of a formal investigation into financial crime. We will notify affected users of such disclosures where we are legally permitted to do so.

4.5 Cross-Border Data Transfers

Some of our third-party service providers — including game platform operators and cloud infrastructure vendors — may process your data on servers located outside of Bangladesh. Where such transfers occur, we take steps to ensure that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. By using zezbd, you consent to such international transfers where they are necessary to deliver our services.

5 Cookies and Tracking Technologies

zezbd uses cookies and similar tracking technologies to operate the website correctly, to maintain your login session, to remember your preferences, and to collect anonymised analytics data. Below is a summary of the cookie categories we use and their purposes.

5.1 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to set preferences for specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your account and using core platform features. Instructions for managing cookies in popular browsers are available in your browser's help documentation.

5.2 Local Storage

In addition to cookies, zezbd may use browser local storage to persist session tokens and user interface preferences on your device. Local storage data does not expire automatically when you close your browser; it is cleared when you log out of your account or when you manually clear your browser's site data. No sensitive personal data such as your password or payment details is stored in local storage.

6 Data Retention and Deletion

zezbd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply to the main categories of data we hold:

• Account and registration data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years from the date of submission, or longer if required by a specific legal obligation or ongoing investigation.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Gameplay activity logs: Retained for a minimum of 3 years from the date of the session, to support dispute resolution and fair play audits.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Retained for as long as you remain opted in, plus 1 year following consent withdrawal, to demonstrate compliance with consent requirements.
• Analytics and technical log data: Aggregated and anonymised after 12 months; raw IP and session logs are deleted within 90 days.

When data is no longer required for any of the purposes described in this Privacy Policy or by applicable law, it is securely deleted or irreversibly anonymised. Deletion requests made by users are processed subject to the retention obligations described above — where we have a legal obligation to retain certain data, we will inform you of the applicable retention period and the legal basis for it.

7 Data Security Measures

Protecting your personal data is a core operational priority for zezbd. We implement a layered security architecture that combines encryption, access controls, monitoring, and staff training to maintain the confidentiality, integrity, and availability of the personal data we hold.

7.1 Encryption in Transit and at Rest

All data transmitted between your browser and zezbd.net is encrypted using TLS 1.2 or TLS 1.3, providing 256-bit AES encryption in transit. This ensures that any data intercepted in transit between your device and our servers is unreadable to third parties. Sensitive data stored in our databases — including passwords (stored as salted hashes), KYC document images, and payment identifiers — is encrypted at rest using AES-256.

7.2 Access Controls

Access to personal data within zezbd's systems is restricted on a strict need-to-know basis. Platform administrators, support agents, and compliance officers are granted access only to the data categories required for their specific role. All administrative access is authenticated using strong passwords and multi-factor authentication. Access logs are maintained and reviewed periodically for anomalous activity.

7.3 Account Security Features for Players

• Passwords are stored using bcrypt hashing with per-user salts — your actual password is never stored or readable by zezbd staff.
• SMS OTP two-factor authentication is available and recommended for all accounts.
• Automatic session expiry after a period of inactivity reduces the risk of unauthorised access from unattended devices.
• IP anomaly detection alerts the security team when a login occurs from an unusual location or device.
• Failed login attempt throttling and account lockout after repeated failures prevent brute-force attacks.

7.4 Incident Response

zezbd maintains an incident response plan covering the detection, containment, and notification procedures for data security incidents. In the event of a data breach that poses a risk to the rights and freedoms of affected players, we will notify affected users without undue delay, providing a description of the incident, the categories of data affected, the likely consequences, and the remedial steps taken.

8 Your Rights and Choices

As a user of the zezbd platform, you have a number of rights in relation to your personal data. zezbd is committed to facilitating the exercise of these rights promptly and transparently. All rights requests should be submitted in writing to [email protected] with the subject line "Data Rights Request" and your registered account username or email address.

8.1 Right of Access

You have the right to request a copy of the personal data that zezbd holds about you, along with information about how that data is being used. We aim to respond to access requests within 30 days. The data will be provided in a structured, machine-readable format where technically feasible.

8.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your mobile number or email address, you may be able to update these directly from within your account settings. For KYC data, updates require submission of revised documentation.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. Please note that this right is subject to legal retention obligations — for example, transactional and KYC records must be retained for at least 5 years after account closure for AML compliance purposes and cannot be deleted earlier on request alone.

8.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are evaluating whether our legitimate grounds override your objection. During a restriction, we will continue to store the data but will not actively process it beyond storage and the handling of your request.

8.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you provided to zezbd in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another controller where technically feasible.

8.6 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, zezbd will cease processing your data for marketing purposes immediately. You may exercise this right by contacting [email protected] or by using the unsubscribe link in any marketing email.

9 Contact and Data Enquiries

If you have any questions about this Privacy Policy, about the personal data zezbd holds about you, or about any aspect of how your data is collected, processed, or protected, please contact our support and data team using the details below.

All data-related enquiries should be directed to our support team at [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. We aim to acknowledge all enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days.

For urgent account security matters — such as suspected unauthorised access to your account — please use the same email address and mark the subject line as "URGENT — Account Security". Our security team monitors this inbox around the clock.

zezbd reviews and updates this Privacy Policy periodically to reflect changes in our data practices, in the services we offer, or in applicable legal requirements. The current effective version is always available at zezbd.net/privacy-policy. We recommend reviewing this page periodically. Where changes are material, we will notify registered players by email prior to the revised policy taking effect.