zbz8 Privacy Policy

1 Who We Are

zbz8 ("zbz8", "we", "us", "our") operates the online casino and sports betting platform accessible at zbz8.io (the "Platform"). zbz8 is the data controller responsible for your personal data collected through the Platform.

This Privacy Policy applies to all personal data collected from users ("you", "Player", "User") who register an account with, access, or interact with the zbz8 Platform, including via desktop and mobile browsers. It covers all products and services offered through the Platform, including casino games, live dealer tables, sports betting markets, promotional programmes, and customer support interactions.

If you have any questions or concerns about how zbz8 handles your personal data, you may contact our Data Protection team at: [email protected]

2 Data We Collect

2.1 Registration & Identity Data

When you create a zbz8 account, we collect the personal information you provide during the registration process, including:

• Full legal name;
• Date of birth (to verify that you are 21 years of age or older);
• Email address;
• Bangladesh mobile phone number;
• Residential address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, we may collect copies of identity documents including your National ID card, passport, driving licence, and proof of address documents such as utility bills or bank statements.

2.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your zbz8 account, including:

• Deposit amounts, dates, and payment method details (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank);
• Withdrawal requests, amounts, and destination payment account details;
• Account balance history;
• Bonus credits received and wagering history.

2.4 Gaming & Betting Activity Data

We maintain detailed records of your activity on the Platform, including game sessions played, bet amounts and outcomes, sports markets wagered on, session durations, and responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion requests).

2.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within the Platform.

2.6 Communications Data

We retain records of all communications between you and the zbz8 support team, including email correspondence, live chat transcripts, and any dispute or complaint records.

2.7 Summary of Data Types

3 How We Collect Your Data

3.1 Directly From You

The majority of the personal data zbz8 holds about you is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.

3.2 Automatically

When you visit or use the zbz8 Platform, we automatically collect technical and behavioural data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected whether or not you are logged in to your account.

3.3 From Third-Party Service Providers

We may receive personal data about you from third-party service providers in the following contexts:

• KYC/AML verification partners: Identity verification results and risk screening data;
• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners;
• Fraud prevention services: Device fingerprinting and fraud risk scoring data;
• Game providers: Game session data from Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi.

4 Lawful Basis for Processing

zbz8 processes your personal data only where a valid lawful basis exists under applicable data protection law. The primary lawful bases we rely on are:

• Contract performance: Processing necessary to register and maintain your zbz8 account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with KYC identity verification, anti-money laundering (AML) obligations, record-keeping requirements, and any applicable regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose for which we have specifically sought and obtained your consent. You may withdraw consent at any time.

5 How We Use Your Data

zbz8 uses your personal data for the following specific purposes:

• To create, manage, and maintain your zbz8 account;
• To verify your identity and age (21+ requirement) as part of KYC compliance;
• To process deposits and withdrawals via your chosen payment method;
• To provide access to casino games, live dealer tables, and sports betting markets;
• To administer bonus offers, free spins, and promotional credits applicable to your account;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To monitor your gaming activity for responsible gaming purposes and apply protective tools where required;
• To respond to customer support queries and resolve disputes;
• To send you account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts;
• To send you marketing communications about zbz8 promotions and seasonal offers — only where you have opted in to receive such communications;
• To improve the Platform through analysis of aggregated, anonymised usage data;
• To comply with all applicable legal and regulatory obligations.

6 Sharing Your Data

zbz8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share your personal data only in the following limited and necessary situations:

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the zbz8 Platform. These include identity verification (KYC) providers, payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, Dutch-Bangla Bank, BRAC Bank), game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), IT infrastructure providers, fraud prevention services, and customer support platform operators. All such providers are contractually bound to process your data only on our documented instructions and to maintain appropriate security standards.

6.2 Legal & Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of zbz8, our players, or the public. This includes reporting suspicious transactions to relevant financial intelligence units in accordance with AML obligations.

6.3 Business Transfers

In the event that zbz8 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the identity of the data controller as a result.

6.4 With Your Consent

We may share your data with additional third parties where you have given us your explicit prior consent to do so. You may withdraw such consent at any time by contacting [email protected].

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. zbz8 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Platform.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — for example, which pages are visited most frequently and where players encounter errors. This data is used to improve the Platform experience.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns directed at Bangladesh players. These cookies are only set with your prior consent.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from accessing your zbz8 account. For information on managing cookies in your specific browser, please refer to your browser's help documentation.

8 Data Retention

zbz8 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. Our general retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for analytical purposes.

9 Your Privacy Rights

As a zbz8 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request. We will respond within 30 days.

9.1 Right to Access

You have the right to request a copy of the personal data zbz8 holds about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR). We will provide the requested data in a structured, commonly used, and machine-readable format where possible.

9.2 Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update many account details directly via your zbz8 account dashboard; for changes that require manual verification (such as legal name corrections), please contact support.

9.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Please note that this right is subject to zbz8's legal obligations to retain certain records (such as AML and financial transaction records) for statutory minimum periods.

9.4 Right to Restriction

You have the right to request that zbz8 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing pending verification of our legitimate grounds.

9.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive the personal data you have provided to zbz8 in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.

9.6 Right to Object

You have the right to object to zbz8 processing your personal data where the processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately. Where you object on legitimate interests grounds, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

10 International Data Transfers

zbz8 is a platform serving players based in Bangladesh. Some of our third-party service providers — including game content providers such as Evolution Gaming, Pragmatic Play, and NetEnt, as well as our IT infrastructure and fraud prevention partners — may process personal data in countries outside Bangladesh.

Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in Bangladesh, zbz8 ensures that appropriate safeguards are in place to protect your data. These safeguards include contractual clauses that impose data protection obligations on the receiving party that are equivalent to the standards described in this Privacy Policy.

By using the zbz8 Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Bangladesh as described in this section.

11 Children's Privacy

The zbz8 Platform is strictly restricted to adults aged 21 years and above. zbz8 does not knowingly collect personal data from any person under the age of 21. If zbz8 becomes aware that personal data has been collected from a person under 21, the relevant account will be closed immediately, all data will be deleted, and any deposits will be returned to the source payment method in accordance with our Terms & Conditions.

If you believe that a person under 21 has registered an account with zbz8, please notify us immediately at [email protected] so that we can take prompt action.

12 Security Measures

zbz8 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and the zbz8 Platform;
• Encrypted storage of sensitive data including passwords (hashed and salted) and payment account identifiers;
• Role-based access controls ensuring that only authorised zbz8 personnel can access personal data, and only to the extent required for their specific role;
• Regular security audits and penetration testing of the zbz8 Platform infrastructure;
• Two-factor authentication (2FA) available for all zbz8 player accounts and mandatory for all internal staff accounts;
• Incident response procedures ensuring that any suspected data breach is identified, contained, and reported to affected players and relevant authorities within the legally required timeframe.

While zbz8 takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your zbz8 account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

13 Third-Party Links

The zbz8 Platform does not contain links to external third-party websites. All links on the Platform direct users to pages within the zbz8.io domain. However, some of our game content is delivered by third-party game providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) whose software may operate within an iFrame environment on the Platform. These providers have their own privacy and data protection policies that govern any data they collect directly through their game software.

zbz8 is not responsible for the privacy practices of third-party game providers or any other external parties. We encourage you to review the privacy policies of any third-party service provider whose software you interact with through the zbz8 Platform. If you have concerns about how a specific game provider handles your data, please contact our support team at [email protected] and we will assist where possible.

14 Updates to This Privacy Policy

zbz8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the zbz8 Platform. When we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on the zbz8 Platform homepage and login page;
• Sending a notification to the email address registered to your zbz8 account;
• Updating the "Last Updated" date displayed at the top of this Privacy Policy.

Your continued use of the zbz8 Platform following notification of a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Privacy Policy, you must stop using the Platform and may request closure of your account in accordance with our Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how zbz8 is protecting your personal data. The current version of this Privacy Policy supersedes all previous versions.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to zbz8's handling of your personal data, our dedicated Data Protection team is available 24 hours a day, 7 days a week.

You can reach us at: [email protected]

When submitting a data rights request or privacy complaint, please include your registered username, the nature of your request or concern, and any relevant dates or details to help us handle your query efficiently. We aim to respond to all privacy-related queries within 30 days of receipt.

zbz8 customer support handles queries in English from players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh.