Your Privacy Matters
to zc66

1 Introduction

This Privacy Policy (the "Policy") describes how zc66 ("zc66", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the zc66 platform at https://zc66.io and all associated services (collectively, the "Service").

This Policy applies to all players, registered account holders, and visitors to the zc66 website. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall framework governing your use of the Service.

By registering an account, depositing funds, placing bets, or otherwise using the Service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Service immediately.

2 Data Controller

For the purposes of this Policy, zc66 acts as the data controller in respect of the personal data collected through the Service. As data controller, zc66 determines the purposes for which, and the manner in which, your personal data is processed.

Where zc66 engages third-party service providers (such as payment processors or game studios) to process personal data on its behalf, those providers act as data processors and are bound by written data processing agreements that require them to process your data only in accordance with zc66's documented instructions and to implement appropriate security measures.

Any questions regarding zc66's role as data controller, or any requests to exercise your data rights, should be directed to our support team at [email protected].

3 Data We Collect

zc66 collects and processes the following categories of personal data:

3.1 Identity & Contact Data

This data is collected at registration and during KYC (Know Your Customer) verification. It is required to verify your identity, confirm your age (21+), prevent fraud, and comply with anti-money laundering obligations.

3.2 Financial & Transaction Data

This includes records of deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, as well as all withdrawal requests and their processing status. Financial data is retained to enable transaction processing, resolve disputes, and satisfy AML reporting requirements.

3.3 Gaming & Behavioural Data

Gaming data enables us to personalise your experience, detect problem gambling behaviours, administer bonuses and promotions, resolve game disputes, and produce anonymised statistical reporting.

3.4 Technical & Device Data

Technical data is collected automatically when you visit the zc66 website and is used for fraud prevention, platform security, compliance with jurisdiction restrictions, and service optimisation.

3.5 Communications Data

When you contact zc66 via Live Chat, email, or WhatsApp support, we retain records of those communications, including the content of messages, timestamps, and any attachments. This data is used to resolve your queries, improve our support service, and maintain an audit trail.

4 How We Collect Your Data

zc66 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated Technologies: Data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the zc66 website. See Section 8 (Cookies & Tracking) for full details.
• Third-Party Sources: In limited circumstances, zc66 may receive data from third-party identity verification providers, fraud detection services, or payment processors to supplement the information you have provided directly. Such data is used solely for verification and compliance purposes.
• Publicly Available Sources: zc66 may cross-reference publicly available information (e.g., sanctions lists, politically exposed persons databases) as part of its AML and compliance screening processes.

5 Legal Basis for Processing

zc66 processes your personal data on the following legal bases, depending on the specific processing activity:

Where zc66 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

zc66 uses the personal data it collects for the following specific purposes:

• Account Administration: To create, manage, and maintain your zc66 account, including processing login credentials, updating account details, and managing account status.
• Identity & Age Verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years. This is a non-negotiable compliance requirement for all registered players.
• Payment Processing: To facilitate deposits from and withdrawals to your chosen payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard) accurately and securely.
• Game & Platform Operation: To deliver casino games, sports betting markets, live dealer tables, and other gaming products; to record game outcomes; and to resolve disputes.
• Bonus & Promotion Administration: To track eligibility, credit bonus funds, monitor wagering requirements, and administer seasonal promotions such as those tied to Eid, BPL, and IPL seasons.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour, to enforce self-exclusion requests, deposit limits, and session time limits, and to communicate with players who may be at risk.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, including AML reporting requirements, responses to lawful authority requests, and maintenance of financial records.
• Customer Support: To respond to queries, resolve complaints, and deliver an efficient support experience via Live Chat, email, and WhatsApp.
• Service Improvement: To analyse platform usage patterns on an anonymised and aggregated basis in order to improve the functionality, content, and user experience of the zc66 platform.
• Marketing (with consent): To send promotional offers, bonus announcements, and tournament notifications to players who have opted in to receive such communications.

7 Sharing Your Data

zc66 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their respective processing networks to facilitate deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial data regulations.
• Game Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical identifiers necessary to initialise and operate game sessions. These providers do not receive your full identity or financial profile.
• Identity Verification Partners: Third-party KYC and AML screening providers may receive identity documents and data points necessary to complete verification checks on behalf of zc66.
• Fraud Prevention Services: We may share device fingerprints, IP addresses, and behavioural signals with fraud detection platforms to identify and block prohibited activity across the platform.
• Legal & Regulatory Authorities: zc66 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving zc66, personal data held by zc66 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8 Cookies & Tracking Technologies

zc66 uses cookies and similar tracking technologies on its website to enhance your browsing experience, maintain session state, and gather analytical data. The following types of cookies may be set when you visit the zc66 platform:

zc66 does not use third-party advertising cookies or behavioural retargeting pixels. Strictly necessary cookies are placed without consent as they are essential for the Service to function. Functional and analytical cookies are placed on the basis of your consent where required.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the zc66 platform and may prevent you from logging in or completing transactions.

9 Data Retention

zc66 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable legal and compliance obligations:

• Account & Identity Data: Retained for a minimum of five (5) years following the closure or termination of your account, to comply with AML record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for the duration of the account relationship plus five (5) years following account closure.
• Gaming History: Retained for a minimum of three (3) years to support dispute resolution and responsible gaming monitoring.
• Customer Support Communications: Retained for two (2) years from the date of the last communication in a thread, unless the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of the consent period plus two (2) years to demonstrate consent and opt-out history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

10 Data Security

zc66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the zc66 servers is encrypted using 256-bit SSL/TLS protocols. The zc66 website operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Our team members undergo role-based access control reviews, and all administrative access is logged and audited.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems. Suspicious activity triggers automated alerts and manual review.
• Regular Security Audits: zc66 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All personnel with access to personal data receive data privacy and security training as part of their onboarding and on an ongoing basis.

11 Your Data Rights

As a player whose personal data is processed by zc66, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that zc66 holds about you, together with information about how that data is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by zc66. You may also update certain account details directly via your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no other legal basis for processing applies. Note that this right is subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may request that zc66 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a structured, machine-readable copy of the personal data you have provided to zc66.
• Right to Object: You have the right to object to processing of your personal data where zc66 relies on legitimate interests as its legal basis, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

zc66 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.

12 Children & Minors

The zc66 platform is strictly intended for adults aged 21 years and above. zc66 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you are under 21, you are not permitted to register an account or use any part of the Service.

zc66 conducts mandatory age verification checks as part of the registration and KYC processes. Any account found to have been registered by a person under the age of 21 will be immediately closed, all funds held in the account will be refunded to the verified payment source (where possible), and any winnings generated will be voided.

13 Marketing Communications

zc66 may, subject to your explicit consent, send you promotional communications relating to bonuses, new game launches, seasonal promotions (such as Eid offers, Pohela Boishakh specials, BPL and IPL tournament promotions), and other marketing content. Such communications may be delivered via:

• Email to the address registered on your Account
• SMS to the mobile number registered on your Account
• In-platform notifications displayed upon login

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Replying "STOP" to any marketing SMS
• Adjusting your communication preferences in your Account settings
• Contacting our support team at [email protected]

Please allow up to 5 business days for opt-out requests to be fully processed across all communication channels. Transactional and account-management communications (such as deposit confirmations, withdrawal notifications, and security alerts) are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your Account.

14 Changes to This Privacy Policy

zc66 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new processing purpose, a new category of data, or a new type of third-party sharing — we will provide reasonable advance notice by posting a prominent notice on the zc66 platform and, where appropriate, by sending a notification to your registered email address.

Minor changes (such as clarifications of existing language, corrections of typographical errors, or updates to contact details) may be made without prior notice. The effective date displayed at the top of this Policy will be updated each time a change is made.

Your continued use of the Service following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must cease using the Service and may close your Account by contacting [email protected]. We recommend reviewing this Policy periodically.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which zc66 processes your personal data, please contact our support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the zc66 platform
• WhatsApp Support: Available 08:00 – 24:00 Bangladesh Standard Time (BST, UTC+6)
• Response Time: Email responses within 4–12 hours; formal complaints within 7 business days

Formal privacy complaints should be submitted in writing to [email protected] with the subject line "Privacy Complaint — [Your Account ID]". z c66 will acknowledge receipt of your complaint within 2 business days and aim to provide a full written response within 7 business days. Where a complaint cannot be resolved within that timeframe, we will keep you informed of progress and provide an expected resolution date.

zc66 is committed to resolving all privacy concerns fairly and transparently. We treat every complaint as an opportunity to improve our data handling practices and to reinforce the trust that our players place in us.