zzko Privacy Policy

Who We Are

zzko (referred to in this document as "zzko", "we", "us", or "our") operates the online casino and sports betting platform accessible at zzko.io and all associated subdomains and mobile interfaces. zzko acts as the data controller in respect of personal data collected from players registered on or visiting the platform.

For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person — including your name, email address, mobile number, payment details, device identifiers, and behavioural data generated through your use of the platform.

If you have any questions regarding our data practices or wish to exercise any of the rights described in this policy, you may contact our dedicated data support team at any time:

Data We Collect

zzko collects personal data in three principal ways: directly from you when you register or interact with the platform, automatically as you navigate and use platform features, and from trusted third-party partners where necessary to verify your identity or process payments.

Data You Provide Directly

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the 21+ age requirement.
• Email address and mobile phone number registered in your own name.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Payment method details — for bKash, Nagad, Rocket, and Upay this means your registered mobile wallet number; for bank transfers this means your account number and bank name.
• Copies of identity documents (national ID, passport, or driving licence) and proof of address submitted during the verification process.
• Communications you send to our customer support team via live chat or email.

Data Collected Automatically

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Pages visited, features used, time spent on each page, and navigation paths through the platform.
• Game session data — games played, wager amounts, session duration, and outcomes — retained for responsible gaming monitoring, dispute resolution, and fraud prevention.
• Login timestamps, session tokens, and authentication events.
• Cookie identifiers and similar tracking technologies as described in Section 7 of this policy.

Data from Third Parties

• Identity verification results from third-party KYC (Know Your Customer) service providers used to confirm the authenticity of documents you submit.
• Transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank) confirming the status of deposits and withdrawals.
• Fraud and risk signals from anti-fraud service providers used to protect the integrity of the platform and all players on it.

How We Use Your Data

zzko processes your personal data for specific, defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

Where zzko relies on your consent to send marketing communications, you may withdraw that consent at any time without penalty by updating your preferences in your account settings or by contacting support at [email protected].

Legal Basis for Processing

zzko processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to register your account, execute transactions, and deliver the gaming services you have contracted for when you accepted our Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering requirements, age verification obligations, and any other applicable legal duty.
• Legitimate interests: Processing necessary to protect the security and integrity of the platform, prevent fraud, improve our services through anonymised analytics, and manage our business operations — where such interests are not overridden by your rights.
• Consent: Processing of your data for direct marketing communications, where you have affirmatively opted in to receiving such communications.

Data Sharing and Disclosure

zzko does not sell or rent your personal data to third parties. We share your data only in the following defined circumstances, and only to the extent necessary for the stated purpose:

Payment Processors

To process your deposits and withdrawals, zzko shares the minimum necessary payment and identity information with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or City Bank. Each of these providers operates under its own privacy policy and applicable financial regulation.

Game Studio Providers

Games on the zzko platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios receive only the session data necessary to deliver game functionality. They do not receive your full personal profile, payment details, or identity documents.

Identity Verification Partners

zzko uses accredited KYC service providers to verify the identity documents you submit during account verification. These partners process your document data solely for verification purposes and are contractually prohibited from using it for any other purpose.

Legal and Regulatory Disclosure

zzko may disclose your personal data to law enforcement agencies, courts, or other government authorities where required to do so by applicable law, court order, or regulatory directive — including in connection with anti-money laundering investigations. In such cases, zzko will disclose only the data specifically required and will, where legally permitted, notify you of the disclosure.

International Data Transfers

Some of the third-party service providers that zzko works with — including game studio servers and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, zzko ensures that appropriate contractual safeguards are in place to protect the security and confidentiality of your data to a standard equivalent to that applied within Bangladesh.

By registering an account with zzko and accepting these terms, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, subject to the safeguards described above.

Cookies and Tracking

zzko uses a limited set of cookies and similar local storage technologies to maintain the functionality and performance of the platform. We do not deploy third-party advertising cookies or cross-site tracking pixels.

You may manage or disable cookies through your browser settings at any time. Disabling essential session cookies will prevent you from logging in to your zzko account. Disabling the analytics cookie will not affect your ability to use any platform feature.

Data Retention

zzko retains your personal data for as long as is necessary to fulfil the specific purpose for which it was collected, subject to the following minimum retention periods driven by legal and operational requirements:

• Account registration data and identity verification documents: retained for a minimum of five years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, wager history): retained for a minimum of five years from the date of each transaction.
• Customer support communication logs: retained for three years from the date of the last communication in a given thread.
• Game session data: retained for three years from the date of each session for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records: retained for the duration of your account and for two years following account closure or withdrawal of consent, whichever is later.
• Anonymised analytics data: retained indefinitely in aggregated, non-identifiable form.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex, zzko ensures that the data in question is quarantined from active processing systems until deletion can be completed.

Your Rights

As a player registered on the zzko platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and specify the right you wish to exercise:

• Right of access: You may request a copy of the personal data zzko holds about you, together with information on how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that zzko restrict the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is pending resolution.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests where you have grounds specific to your situation.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

zzko will respond to all verifiable data rights requests within fifteen business days of receipt. In cases of complexity or high volume of requests, this period may be extended by a further fifteen business days, and you will be notified of the extension accordingly.

Security Measures

zzko employs a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and zzko's servers.
• AES-256 encryption for sensitive data fields stored in our databases, including identity document images and payment account numbers.
• Role-based access controls ensuring that only authorised personnel with a documented need can access player records.
• Comprehensive audit logging of all administrative access to player data, with anomaly detection alerts for unusual access patterns.
• Regular third-party penetration testing and vulnerability assessments of the platform's infrastructure.
• Two-factor authentication available for player accounts and mandatory for all internal administrative accounts.

Third-Party Links

The zzko platform does not contain links to third-party websites outside of the domains necessary to deliver the services described in these policies. In the event that any third-party content is displayed within the platform — for example, game interfaces provided by studio partners — those interfaces are governed by the relevant studio's own privacy practices in addition to the contractual obligations the studio holds with zzko.

zzko is not responsible for the privacy practices of third-party game studios, payment providers, or any other external services. We encourage you to review the privacy documentation of any service provider you interact with as part of your use of the zzko platform.

Changes to This Policy

zzko reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will post the revised policy on this page with an updated effective date and version number, and we will notify registered players via the email address on record at least seven days before the changes take effect.

Your continued use of the zzko platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change, you may request closure of your account before the revised policy takes effect by contacting support at [email protected].

We encourage you to review this page periodically to stay informed of how zzko is handling your personal data. The version number and effective date at the top of this document will always reflect the most current iteration of our Privacy Policy.