Privacy Policy — zz666

zz666 ("we", "us", "our") operates the online betting and casino platform accessible at https://zz666.xyz (the "Platform"). We are committed to protecting the privacy and personal data of every user ("you", "your") who accesses or registers on the Platform.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the legal basis on which processing is carried out, and the rights available to you in relation to your personal data. This Policy applies to all personal data collected through the Platform, including data collected when you create an Account, make a deposit or withdrawal, contact our support team, or interact with any feature of the zz666 Platform.

By registering an Account on zz666, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an Account or use the Platform.

We collect personal data in the following categories. The specific data points collected may vary depending on how you interact with the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. If we need to collect any additional category of sensitive data, we will seek your explicit consent at the time of collection and explain the specific purpose for which it is required.

zz666 collects personal data through the following methods:

• Direct interactions: Data you provide when registering an Account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your Account settings.
• Automated technologies: Technical and usage data collected automatically when you visit or use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment providers: Financial transaction data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners when you process a deposit or withdrawal.
• Identity verification partners: Where we use a third-party KYC (Know Your Customer) service to assist with document verification, that partner may return verified identity data to us as part of the verification process.
• Fraud prevention and security tools: Technical signals and risk scores provided by fraud detection partners to help us identify and prevent account abuse, money laundering, and unauthorised access.

We use the personal data we collect for the following specific purposes:

• Account creation and management: To register your Account, authenticate your login sessions, and manage your Account settings and preferences.
• Identity verification (KYC): To verify your identity and age in compliance with our responsible gaming obligations and to prevent the use of the Platform by persons under 21 years of age.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other supported payment methods, and to maintain accurate transaction records.
• Game and betting services: To deliver the core Platform functionality including sports betting markets, live casino games, slot titles, and associated features.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other forms of Platform misuse.
• Responsible gaming compliance: To monitor gaming activity for signs of problem gambling, to apply and enforce any deposit limits, self-exclusion periods, or loss limits you have set, and to contact you where our responsible gaming tools indicate a potential risk.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and deliver assistance via live chat, email, and WhatsApp.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and news about new games or features by email or messaging. You may withdraw this consent at any time via your Account settings or by contacting support.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the design, features, and performance of the Platform.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations, and to respond to lawful requests from authorities.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise required by law.

Every instance of personal data processing carried out by zz666 rests on at least one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and zz666 — i.e., to operate your Account, process payments, and deliver betting and gaming services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out on the basis of zz666's legitimate business interests, including fraud prevention, security monitoring, Platform analytics, and responsible gaming compliance, provided those interests are not overridden by your rights and interests.
• Consent: Processing activities for which we have obtained your explicit prior consent, including sending marketing communications and, where applicable, certain uses of cookies. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

zz666 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients in the circumstances described below:

• Payment processors and mobile financial service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — to process deposits and withdrawals on your behalf. These providers receive only the financial transaction data necessary to complete the payment.
• Identity verification providers: Third-party KYC service providers engaged by zz666 to verify identity documents submitted during Account verification. These providers process identity data solely for verification purposes.
• Game and technology providers: Game studios and software providers (including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive pseudonymised session and technical data necessary to deliver game services. These providers do not receive your full identity or financial data.
• Fraud prevention and security partners: Specialist fraud detection and cyber-security providers who assist us in identifying and responding to Account abuse, unauthorised access, and other security incidents.
• Analytics providers: Platform analytics tools used to analyse aggregated, anonymised usage data for the purposes of improving Platform performance and user experience. Individual identity data is not shared with analytics providers.
• Legal and regulatory authorities: Where required by applicable law, a court order, or a lawful request by a government or regulatory authority, we may disclose personal data without prior notice to you.
• Professional advisers: Lawyers, auditors, and compliance consultants who are subject to strict confidentiality obligations and engage with your data only to the extent necessary to provide their professional services to zz666.

The zz666 Platform uses cookies and similar tracking technologies to deliver core functionality, remember your preferences, and understand how users interact with the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable authentication, maintain your session while logged in, remember your language preference, and support security features. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember choices you have made on the Platform, such as your preferred payment method, deposit limit settings, and responsible gaming configurations.
• Analytics cookies: Used to collect anonymised information about how visitors interact with the Platform, including which pages are visited most frequently and where users encounter errors. This data helps us improve the Platform.
• Marketing and targeting cookies: Used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may withdraw this consent at any time via your Account settings or by contacting support.

You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect your ability to use some features of the Platform. Strictly necessary cookies cannot be disabled via browser settings without impacting core Platform functionality.

zz666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your Account relationship with zz666, plus a minimum of five (5) years following Account closure, to meet anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing preference records: Retained for the duration of your Account, plus two (2) years following Account closure, to demonstrate consent compliance.
• Technical and usage logs: Retained for up to twelve (12) months in active systems, after which they may be archived in anonymised or aggregated form for analytics purposes.

Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, we will securely delete or anonymise that data in a timely manner.

zz666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the zz666 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive personal data stored in our systems — including identity documents and financial data — is encrypted at rest using AES-256 encryption or equivalent.
• Access controls: Access to personal data is restricted to zz666 staff and authorised third-party processors who require it to perform their job functions. Role-based access controls and authentication requirements are enforced.
• Regular security assessments: The Platform undergoes regular security audits and vulnerability assessments to identify and remediate potential risks before they can be exploited.
• Incident response: zz666 maintains an incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable law.

While we apply rigorous security standards, no data transmission over the internet or electronic storage system is entirely immune to risk. You also have a role in keeping your Account secure — please refer to Section 3 of the Terms & Conditions for your obligations regarding Account credential security.

As a data subject, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how that data is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For basic Account data, you may also update information directly in your Account settings.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right does not apply where we are required to retain data by law (for example, anti-money laundering record-keeping obligations).
• Right to restriction of processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, and by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

We will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The zz666 Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21. Registration by or on behalf of a minor is strictly prohibited under our Terms & Conditions.

If we discover or are notified that an Account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend the Account, delete any associated personal data to the extent permitted by law, and return any deposits to the registered payment method following identity verification of the responsible adult, where applicable.

If you believe that a minor may have registered an Account on the Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action. We take the protection of underage individuals extremely seriously and maintain robust age verification procedures during Account registration.

The zz666 Platform may contain references to or integrations with third-party services, including payment processors and game providers. Where you interact with a third-party service provider's interface — for example, when completing a bKash or Nagad transaction through their respective payment gateway — that provider's own privacy policy governs the handling of your data within their system.

zz666 is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party payment or service provider whose interface you interact with in connection with your use of the zz666 Platform.

zz666 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made — particularly changes that affect how we use your personal data or the rights available to you — we will notify registered users by email and by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date shown at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and close your Account before the effective date of the revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the zz666 Data Support team using any of the following channels:

• Email: [email protected] — responses within 4 hours during Bangladesh Standard Time (BST, UTC+6). Please include "Privacy Request" in your subject line for data rights enquiries.
• Live Chat: Available 24/7 via the live chat widget on the Platform — the fastest channel for general questions about your data or Account.
• WhatsApp Support: Available 09:00–24:00 BST daily for Account-related privacy queries.

When contacting us about a data rights request, please provide your registered username and the email address associated with your Account to help us locate your records and respond promptly and securely.