🔐 Legal Document

zd77 Privacy Policy

Your privacy matters to us. This policy explains exactly what personal data zd77 collects, why we collect it, how we store it securely, and the rights you hold over your information.

Last Updated: January 2026

Privacy at a Glance

🔒
256-bit SSL Encryption
All data in transit is protected by industry-standard encryption.
🚫
No Data Sold
We never sell or rent your personal information to third parties.
📱
Minimal Collection
We collect only the data necessary to operate your account and comply with regulations.
✏️
Your Right to Edit
Request correction of inaccurate data held about you at any time.
🛡️
Secure Storage
Personal data is stored on secured servers with access controls and audit logging.
📧
Contact Us Anytime
Email our data protection team with any privacy concern or data request.

1. Introduction

This Privacy Policy ("Policy") describes how zd77 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "User", "Player") who access or use the zd77 website and its associated gaming and betting services. This Policy forms part of our Terms and Conditions and should be read alongside them.

By registering an account or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please do not use the platform and contact us to request deletion of any data we may hold about you.

Scope: This Policy applies to all personal data collected through the zd77 website, whether provided during registration, during gameplay, during financial transactions, or through customer support interactions. It covers data collected about users located in Bangladesh and other jurisdictions where zd77 is accessed.

2. Data We Collect

zd77 collects personal data in several categories, depending on how you interact with the platform. The table below summarises the key categories of data we collect, examples of specific data points within each category, and the primary purpose for which each category is collected.

Category Examples Purpose
Identity Data Name, date of birth, nationality, photo ID (for KYC) Account creation, age verification, KYC compliance
Contact Data Mobile phone number, email address Account authentication, support communications, security alerts
Financial Data bKash/Nagad/Rocket mobile wallet numbers, transaction IDs, deposit/withdrawal history Payment processing, fraud prevention, AML compliance
Technical Data IP address, device type, browser type, operating system, session logs Platform security, fraud detection, service improvement
Usage Data Games played, bets placed, session duration, bonus activity, responsible gaming tool usage Personalisation, responsible gaming monitoring, platform analytics
What we do NOT collect: zd77 does not collect or store full card numbers or CVV codes. Payment card transactions are processed by PCI-DSS-compliant payment processors and zd77 receives only a tokenised reference. We do not collect biometric data, health data, or political/religious affiliation data.

3. How We Use Your Data

zd77 uses personal data only for the purposes described in this Policy. We do not process your data for purposes that are incompatible with those originally stated without first obtaining your consent or establishing a new legal basis.

USE 1
Account Management and Service Delivery
To create and maintain your account, authenticate your identity at login, process deposits and withdrawals via bKash, Nagad and other supported methods, and deliver the gaming and betting services you have requested.
USE 2
Compliance and Fraud Prevention
To carry out KYC identity verification, conduct anti-money-laundering (AML) checks, detect and prevent fraudulent account activity, investigate suspicious transactions, and comply with applicable legal obligations.
USE 3
Responsible Gaming
To monitor gameplay patterns and identify signs of problem gambling, enforce deposit limits and self-exclusion settings you have activated, and comply with our responsible gaming obligations. Usage data is processed to flag accounts that may need responsible gaming intervention.
USE 4
Customer Support
To respond to your support enquiries, resolve account disputes, investigate complaints, and communicate with you about changes to your account, the platform, or these policies. Support communications are logged and retained for quality assurance and dispute resolution purposes.
USE 5
Platform Improvement and Analytics
To analyse aggregated and anonymised usage patterns to improve the platform's performance, game selection, user experience, and security infrastructure. We do not use individually identifiable data for these analytics purposes — data is aggregated and anonymised before analysis.

zd77 processes your personal data only where a valid legal basis exists. The primary legal bases on which zd77 relies are as follows.

  1. Contract performance: Processing that is necessary to deliver the services you have contracted for — including account management, payment processing, and bet settlement.
  2. Legal obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering regulations, KYC requirements, and responsible gaming mandates.
  3. Legitimate interests: Processing for fraud prevention, platform security, and analytics where our legitimate business interests override your data protection rights, provided appropriate safeguards are in place.
  4. Consent: Where we rely on consent — for example, for optional promotional communications — you may withdraw consent at any time by contacting us at [email protected] or by updating your account preferences.

5. Payment Data and KYC Verification

Because zd77 accepts real-money transactions via bKash, Nagad, Rocket, Upay and other payment providers, we are required to collect and verify financial data to process your deposits and withdrawals, and to comply with anti-money-laundering (AML) requirements. The mobile wallet numbers you provide are used exclusively for payment processing and are not shared with third parties for marketing purposes.

KYC (Know Your Customer) verification may be required before we can process withdrawal requests exceeding applicable thresholds. KYC documents — which may include a national ID card, passport, or other government-issued photo identification — are processed and stored securely. We retain KYC documents for the period required by applicable AML regulations, after which they are securely deleted.

KYC document security: All identity documents submitted for KYC are stored in encrypted form and are accessible only to authorised compliance team members on a strict need-to-know basis. KYC documents are never used for any purpose other than identity verification and AML compliance, and are never shared with third parties except where required by law.

6. Cookies and Tracking Technologies

zd77 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve your experience. The following types of cookies are used on the platform.

TYPE 1
Essential Cookies
These cookies are strictly necessary for the platform to function. They maintain your login session, store your language preference, and keep your bet slip and wallet state intact while you navigate the site. You cannot opt out of essential cookies without losing core platform functionality.
TYPE 2
Analytics Cookies
These cookies collect anonymised data about how users interact with the platform — such as which pages are visited most frequently and how users navigate between games. This helps us identify usability issues and prioritise improvements. Analytics data is aggregated and cannot be used to identify you individually.
TYPE 3
Security Cookies
These cookies support our fraud detection and account security systems. They help us identify unusual login patterns, detect bot activity, flag suspicious device changes, and protect your account from unauthorised access attempts.
Cookie management: You can manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your experience on the platform — for example, disabling session cookies will require you to log in again on every visit. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Sharing and Disclosure

zd77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

  1. Payment processors: We share the minimum necessary financial data with our payment processing partners (such as mobile wallet operators and card processors) to complete deposit and withdrawal transactions. These partners are contractually bound to process data only for the purpose of executing your transaction.
  2. Game providers: Game software is supplied by third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. These providers may receive anonymised session and game outcome data to support game integrity and RNG certification. No personally identifiable information is shared with game providers beyond what is technically necessary.
  3. Legal authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order, subpoena, or statutory AML reporting obligation. We will notify you of such disclosure where we are legally permitted to do so.
  4. Fraud and AML platforms: We use third-party fraud prevention and AML screening services that process technical and identity data to detect suspicious activity. These service providers operate under strict data processing agreements and may not use your data for any purpose other than fraud prevention and AML compliance on our behalf.
No marketing sharing: zd77 never shares your personal data with third-party advertisers, data brokers, or marketing platforms. We do not engage in data brokerage or sell behavioural profiles derived from your platform activity. Any promotional communications you receive from zd77 are sent directly by zd77 and are based only on data you provided to us.

8. Data Retention

zd77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of your account plus 5 years after account closure; KYC and financial records are retained for a minimum of 5 years following the last transaction, in line with standard AML record-keeping requirements; support communication logs are retained for 2 years from the date of the last interaction; technical and usage logs are retained for 12 months on a rolling basis.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where data must be retained beyond the standard period due to a legal hold, ongoing investigation, or unresolved dispute, we will retain only the minimum data necessary and will inform you where we are legally permitted to do so.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data zd77 holds about you. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request" and include your registered phone number for account verification.

👁️
Right of Access
Request a copy of the personal data zd77 holds about you and information about how it is processed.
✏️
Right to Rectification
Request correction of inaccurate or incomplete personal data held about you. We will action valid rectification requests within 30 days.
🗑️
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent. Note this right is subject to legal retention obligations — we cannot erase data we are required by law to retain.
⛔
Right to Object
Object to processing based on legitimate interests, including profiling for fraud prevention, where you believe your individual circumstances override our legitimate interest.
📦
Right to Portability
Request a structured, machine-readable copy of the personal data you provided to us, for the purpose of transferring it to another service provider.
↩️
Right to Withdraw Consent
Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Response time: zd77 will acknowledge all data rights requests within 5 business days and will endeavour to resolve them within 30 calendar days. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further 30 days, and will notify you accordingly.

10. Data Security

zd77 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our servers; encryption at rest for sensitive data fields including identity documents and financial records; strict role-based access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis; regular security audits and penetration testing of our platform infrastructure; and automated intrusion detection systems that monitor for suspicious access patterns around the clock.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, zd77 will notify affected Players without undue delay and will take immediate steps to contain the breach and mitigate its impact. You should also take steps to protect your account by choosing a strong, unique password and not sharing your login credentials with anyone.

11. Minors and Age Verification

The zd77 platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will delete that data immediately, close the associated account, and void any transactions conducted through it. If you are a parent or guardian and believe your child has registered on zd77, please contact us immediately at [email protected].

21+ enforcement: Age verification is conducted at account registration and may be repeated as part of KYC processes. zd77 uses document-based age verification and reserves the right to request proof of age at any time. Accounts where the Player's age cannot be satisfactorily verified will be suspended pending verification.

12. Changes to This Privacy Policy

zd77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of the page and, where appropriate, notify registered Players via the contact details held on their account.

Your continued use of the zd77 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically so that you remain informed about how we protect your data. The current version of this Policy is always available at zd77.ws/privacy-policy.

13. Contact and Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact our data protection team. When submitting a data rights request, please include your registered phone number and a description of your request so we can locate your account and respond efficiently.

Data protection email: [email protected]