Privacy Policy — How z2bet Handles Your Data

z2bet operates an English-language online gaming platform serving players in Bangladesh. In the course of providing cricket betting, live casino games, slots, and related services, z2bet necessarily collects, processes, and stores personal data belonging to its registered players and site visitors.

This Privacy Policy sets out, in plain English, the categories of personal data z2bet collects, the purposes for which that data is processed, the legal basis for each processing activity, the parties with whom data may be shared, and the rights available to individuals whose data z2bet holds. This policy applies to all data processing activities carried out by z2bet in connection with the z2bet platform at z2bet.app and any associated subdomains or services operated under the z2bet brand.

This Privacy Policy should be read alongside the z2bet Terms & Conditions and the z2bet Responsible Gaming Policy, both of which are incorporated by reference and together form z2bet's full suite of player-facing policies. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data processing, this Privacy Policy shall prevail on data-related questions.

z2bet is committed to data minimisation — collecting only the personal data genuinely necessary for the purposes described in this policy — and to retaining that data for no longer than is required to fulfil those purposes or to comply with applicable legal obligations.

z2bet collects personal data from players through several channels: directly from players during registration and account use, automatically through the platform's technical systems, and in some cases from third-party verification or payment service providers. The categories of personal data collected are described below.

z2bet does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion request. Such information is handled with heightened care and used solely for the purpose for which it was provided.

Where z2bet collects data from third parties — for example, from identity verification service providers — z2bet ensures that such third parties have lawful grounds for disclosing that data to z2bet and that the transfer is handled securely.

z2bet uses the personal data it collects for the following purposes, each of which has a defined legal basis:

• Account creation and management: To create, maintain, and administer your z2bet player account, verify your identity, and provide access to the platform's features. Legal basis: performance of a contract.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard, and to maintain accurate financial records of all transactions. Legal basis: performance of a contract and legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage access, and other prohibited conduct. Legal basis: legitimate interests and legal obligation.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal obligations to which z2bet is subject. Legal basis: legal obligation.
• Customer support: To respond to queries, complaints, and support requests submitted by players via email or the z2bet support system. Legal basis: performance of a contract and legitimate interests.
• Responsible gaming: To implement and manage responsible gaming tools including deposit limits, time-outs, and self-exclusion requests, and to monitor account activity for signs of problem gambling. Legal basis: legal obligation and legitimate interests.
• Platform improvement: To analyse usage data in aggregate in order to improve the z2bet platform's performance, stability, game offering, and user experience. Legal basis: legitimate interests.
• Marketing communications: To send promotional emails, bonus notifications, and platform updates to players who have opted in to marketing communications. Legal basis: consent. Players may withdraw consent at any time by contacting z2bet support.

z2bet does not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review. Where automated processes are used — for example, in fraud screening — a member of the z2bet team reviews any outcome that results in account restriction before that restriction is finalised.

z2bet does not sell, rent, or trade personal data to third parties for their own marketing purposes under any circumstances. z2bet may share personal data with third parties only in the circumstances described below.

• Payment service providers: z2bet shares financial transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners solely for the purpose of completing deposit and withdrawal transactions. These providers are contractually required to handle your data securely and may not use it for any independent purpose.
• Identity verification providers: Where z2bet engages a third-party KYC or identity verification service to confirm a player's identity, the minimum necessary personal data is shared with that provider for verification purposes only.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive technical session data (such as session tokens and game history) required to deliver and support their game content on the z2bet platform. No additional personal data is shared beyond what is required for game delivery.
• Analytics and technology partners: z2bet may share anonymised or aggregated usage data with technology partners for platform analytics and performance monitoring. No individually identifiable data is included in such disclosures.
• Legal and regulatory authorities: z2bet may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where required to do so by law, or where z2bet determines in good faith that such disclosure is necessary to protect the rights and safety of z2bet, its players, or third parties.

All third parties with whom z2bet shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with z2bet's instructions and for the purposes specified. z2bet conducts due diligence on third-party data processors before engaging their services.

z2bet uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to remember player preferences, and to gather aggregate data about how the platform is used. A cookie is a small text file stored on your device by your web browser when you visit a website.

You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impair your ability to log in and use the z2bet platform. Disabling analytics or functional cookies will not prevent you from accessing games or managing your account but may result in a reduced personalised experience.

z2bet does not use third-party advertising or retargeting cookies. No player data collected via cookies on the z2bet platform is shared with advertising networks or used to serve targeted advertisements on third-party websites.

z2bet retains personal data for the minimum period necessary to fulfil the purposes outlined in this Privacy Policy or to comply with applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a period of five (5) years following permanent account closure. This period is required to comply with AML record-keeping obligations and to allow for the resolution of any post-closure disputes or regulatory enquiries.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC and identity verification documents: Retained for five (5) years from the date of account closure or the date the documents were last relied upon for verification purposes, whichever is the later.
• Customer support communications: Retained for two (2) years from the date of the most recent communication in a given support case, unless the case relates to an ongoing dispute or legal matter in which case the data is retained until that matter is fully resolved.
• Marketing consent records: Retained for the duration of consent and for one (1) year following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and usage data (anonymised): May be retained indefinitely in anonymised or aggregated form for analytical and platform improvement purposes, as anonymised data cannot be linked back to an individual.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using methods appropriate to the sensitivity of the data in question. Players may request early deletion of their personal data subject to the conditions described in the "Your Privacy Rights" section of this policy.

z2bet takes the security of player data seriously and applies a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between players' devices and the z2bet platform is encrypted using current SSL/TLS protocols.
• Password hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms. z2bet never stores passwords in plain text.
• Access controls: Access to personal data within z2bet's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role.
• Security monitoring: z2bet's platform is subject to ongoing security monitoring to detect and respond to suspicious activity, intrusion attempts, and technical vulnerabilities.
• Secure data storage: Personal data is stored on secure servers with physical and logical access controls in place. Data at rest is protected using appropriate encryption measures.
• Third-party security standards: z2bet requires all third-party data processors to maintain security standards at least equivalent to those applied by z2bet itself.

While z2bet takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data security incident that poses a material risk to players' rights and freedoms, z2bet will notify affected players as soon as practicable and take all appropriate remediation steps without delay.

Players are also responsible for maintaining the security of their own account credentials. z2bet recommends using a strong, unique password and never sharing login details with anyone. If you suspect your account has been compromised, contact z2bet support immediately at [email protected].

As a player whose personal data is processed by z2bet, you hold the following rights with respect to your information:

• Right of access: You may request a copy of the personal data z2bet holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data z2bet holds about you is inaccurate or incomplete, you may request that it be corrected or updated. For minor corrections such as contact details, you may also update information directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to z2bet's legal data retention obligations — data that must be retained by law cannot be deleted on request alone.
• Right to restrict processing: In certain circumstances, you may request that z2bet restricts its processing of your personal data — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request a copy of the personal data you provided to z2bet in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where z2bet relies on legitimate interests as its legal basis, including the use of your data for marketing communications. z2bet will assess your objection and cease processing unless compelling legitimate grounds can be demonstrated.
• Right to withdraw consent: Where z2bet processes your data on the basis of consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The z2bet platform integrates third-party services necessary for its operation, including payment processors, game software providers, and platform analytics tools. Each of these third parties operates under its own privacy policy and terms of service. While z2bet takes reasonable steps to ensure that third-party partners maintain appropriate data protection standards, z2bet cannot accept responsibility for the privacy practices of third-party services that operate independently of the z2bet platform.

The following categories of third-party service provider are integrated into the z2bet platform and may process limited player data as described:

• Mobile payment processors (bKash, Nagad, Rocket, Upay): Process payment transaction data necessary to complete deposits and withdrawals. These providers are independently regulated financial services businesses operating in Bangladesh.
• International card payment processors (Visa, Mastercard): Process card transaction data for players using debit or credit cards. Card data is handled directly by the card processor and is never stored on z2bet servers.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe): Receive session and game history data required to deliver game content and resolve game-related disputes. These providers are established gaming industry businesses subject to their own data protection obligations.
• Platform analytics services: Receive anonymised, aggregated usage data to help z2bet understand platform performance. No personally identifiable data is included in analytics data transfers.

z2bet does not embed third-party social media widgets, advertising scripts, or external tracking pixels on the z2bet platform. The z2bet platform does not link to external websites except as expressly provided in z2bet's own navigation and policy links.

z2bet reviews and updates this Privacy Policy periodically to reflect changes in applicable law, in z2bet's data processing activities, or in industry best practice. The effective date at the top of this page indicates when the current version was last reviewed and published.

Where an update to this Privacy Policy materially changes how z2bet collects, uses, or shares personal data, z2bet will notify active account holders by email to the address registered on their account prior to the change taking effect. For non-material updates — such as clarifications to existing provisions or corrections of typographical errors — z2bet may update the policy without individual notification, relying instead on the publication of the revised document at z2bet.app/privacy-policy.

Your continued use of the z2bet platform following any update to this Privacy Policy constitutes your acknowledgement of the revised policy. We recommend that you review this page periodically to remain informed of how z2bet handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to z2bet's data processing practices, please contact the z2bet support team. All privacy-related enquiries will be handled with care and responded to within a reasonable time frame.

Email: [email protected]
Subject line for privacy requests: Privacy Request — [Your Username]
Response time: Within 48 hours for acknowledgement; within 30 days for full response

For general account enquiries, game support, or deposit and withdrawal assistance, please use the same email address with an appropriate subject line describing your query. z2bet's support team is available around the clock to assist players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other areas of Bangladesh.

z2bet is committed to resolving privacy-related concerns directly with players in the first instance. If you feel your concern has not been adequately addressed following contact with z2bet, you may seek further guidance from relevant consumer protection or data protection bodies applicable to your jurisdiction.