zbzbat Privacy Policy

1 Who We Are

zbzbat operates zbzbat.vip, Bangladesh's premier online casino and sports betting platform. For the purposes of this Privacy Policy, zbzbat acts as the data controller in respect of all personal information collected from players, visitors, and prospective members who interact with the zbzbat platform.

As the data controller, zbzbat determines the purposes and means by which personal data is processed. We are committed to handling your personal data with the highest standards of care, transparency, and security, consistent with the principles set out in this Privacy Policy and with globally recognised data protection best practices.

If you have any questions about how zbzbat processes your personal data, or if you wish to exercise any of your data rights, you may contact our Data Support team at any time. Contact details are provided in Section 14 of this policy.

2 Information We Collect

zbzbat collects personal information from you in a number of contexts. The categories of personal data we collect and hold are set out below:

2.1 Identity & Contact Information

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification purposes)
• Residential address, city, and postal code
• Email address (used as your primary account identifier and communication channel)
• Mobile telephone number (for account security and two-factor authentication)
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued photo identity documents (National ID card, passport, or driving licence)
• Proof of address documentation (utility bills, bank statements, or official government correspondence dated within three months)
• Proof of payment method ownership (screenshots or statements confirming that the bKash, Nagad, Rocket, Upay, or bank account used for deposits is registered in your name)

2.3 Financial & Transaction Information

• Deposit transaction records, including amounts, timestamps, and payment method details
• Withdrawal request records, including amounts, processing status, and destination payment method identifiers
• Account balance history and wagering transaction logs
• Bonus and promotional credit records, including wagering requirement progress

2.4 Gaming Activity Information

• Game session logs, including games played, stakes placed, and outcomes recorded
• Sports betting market selections, odds accepted, and settlement data
• Session duration and frequency of play data (used for responsible gaming monitoring)
• Self-imposed responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

2.5 Technical & Device Information

• IP address and geolocation data derived from your IP address at the time of login and during active sessions
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referral source and landing page data (how you arrived at zbzbat.vip)
• Cookie identifiers and session tokens (see Section 7 for full cookie details)

2.6 Communications Data

• Customer support correspondence, including emails, live chat transcripts, and any attachments you submit to our support team
• Survey responses and player feedback submissions
• Records of any complaints formally raised with zbzbat

3 How We Collect Your Data

zbzbat collects personal data through the following primary channels:

• Directly from you — when you register an Account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, respond to surveys, or interact with any feature of the zbzbat platform that requires you to submit information.
• Automatically during your use of the platform — through server logs, cookies, and similar tracking technologies that record your device information, IP address, session activity, and browsing behaviour on zbzbat.vip. See Section 7 for full details on our use of cookies.
• From payment service providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, zbzbat receives transaction confirmation data, including payment method identifiers and transaction reference numbers, from these providers.
• From identity verification partners — zbzbat may engage third-party KYC and anti-fraud service providers to assist with document verification and identity authentication. These partners return verification results to zbzbat but do not retain your identity documents on our behalf beyond the period required for the verification process.
• From publicly available sources — zbzbat may supplement your profile with publicly available information where this is relevant to our fraud prevention or responsible gaming obligations, such as checking self-exclusion registers or publicly available sanctions and watchlist databases.

4 Legal Basis for Processing

zbzbat processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

5 How We Use Your Data

zbzbat uses the personal data we collect for the following specific purposes:

• Account Registration & Management: To create, maintain, and administer your zbzbat Account, including managing your login credentials, account preferences, and responsible gaming settings.
• Identity Verification (KYC): To verify your identity and age in compliance with our platform's age-gate requirements and anti-money-laundering obligations. Players under 18 are not permitted to use zbzbat Services.
• Payment Processing: To process deposit and withdrawal transactions through bKash, Nagad, Rocket, Upay, and connected banking and card channels securely and accurately.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other platform integrity threats. This includes automated risk-scoring of login events and transaction patterns.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, enforce self-imposed player limits and cooling-off periods, and proactively contact players where our responsible gaming framework identifies a potential welfare concern.
• Customer Support: To respond to your enquiries, process formal complaints, provide technical assistance, and maintain records of our support interactions for quality and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and feature set of the zbzbat platform. Individual player data is not used for this purpose without anonymisation.
• Marketing Communications: To send you promotional offers, bonus notifications, seasonal campaign information (e.g., BPL season promotions, Eid specials, Pohela Boishakh offers), and platform news — where you have provided explicit consent to receive such communications. You may opt out at any time.
• Legal Compliance & Reporting: To meet our obligations under applicable law, including responding to lawful requests from regulatory bodies, law enforcement agencies, and courts of competent jurisdiction.

6 Data Sharing & Disclosure

zbzbat does not sell, rent, or trade your personal data. We share personal information only in the following limited and controlled circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, zbzbat shares transaction-relevant data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the data necessary to execute and confirm your transaction and are bound by their own privacy and data security obligations.

6.2 Identity Verification Partners

zbzbat works with specialist third-party KYC and identity verification providers to authenticate player identity documents. These partners process your identity data solely on zbzbat's instruction, under data processing agreements, and may not use that data for any independent purpose.

6.3 Game Content Providers

Our casino and sportsbook content is supplied by licensed third-party game studios and platform providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data to support game delivery and RNG integrity auditing. They do not receive your identity or financial data.

6.4 Fraud Prevention & Anti-Money-Laundering Services

To fulfil our legal obligations under applicable AML and KYC frameworks, zbzbat may share relevant data with specialist fraud screening and financial crime prevention services. This sharing is conducted on a strictly need-to-know basis.

6.5 Legal & Regulatory Disclosure

zbzbat will disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of zbzbat, its players, or the general public.

7 Cookies & Tracking

zbzbat uses cookies and similar tracking technologies on the zbzbat.vip website to ensure the platform functions correctly, to support security measures, and to provide a personalised experience where you have given consent to do so.

Types of Cookies We Use

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the zbzbat platform.

8 Data Retention

zbzbat retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your Account's active status, plus a minimum period of five (5) years following Account closure, to meet our anti-money-laundering record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with standard AML compliance requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of seven (7) years to support financial audit and regulatory compliance requirements.
• Customer Support Correspondence: Retained for three (3) years from the date of last contact, or longer if the correspondence relates to a formal dispute or legal claim.
• Marketing Consent Records: Retained for the duration of your consent, plus two (2) years following withdrawal of consent, as evidence of your consent history.
• Technical Log Data (IP, Session): Retained for twelve (12) months from the date of collection, unless required for longer retention in connection with a specific fraud or security investigation.

When retention periods expire, data is securely deleted, anonymised, or archived in a non-retrievable format. Players may request early deletion of their personal data — subject to our legal retention obligations — by submitting a formal data deletion request to [email protected].

9 Data Security

zbzbat takes the security of your personal data seriously and maintains a comprehensive suite of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser and the zbzbat.vip servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The presence of HTTPS in the browser address bar confirms this encryption is active during your session.
• AES-256 Encryption at Rest: Sensitive data stored on zbzbat servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within zbzbat's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required for their specific operational role, and all access events are logged and auditable.
• Two-Factor Authentication: zbzbat recommends and supports two-factor authentication (2FA) for player accounts. Internal administrative systems operate under mandatory multi-factor authentication for all staff.
• Regular Security Audits: zbzbat conducts periodic internal security reviews and engages third-party security specialists to conduct penetration testing and vulnerability assessments of the platform infrastructure.
• Incident Response: zbzbat maintains a data breach response protocol. In the event of a confirmed personal data breach that poses a risk to player rights, affected players will be notified promptly with details of the nature of the breach and the steps being taken to address it.

10 Your Data Rights

As a zbzbat player, you hold a number of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact our Data Support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all personal data zbzbat holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any of the personal data zbzbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that zbzbat delete your personal data. This right is subject to our legal retention obligations — for example, we are required to retain certain financial and KYC records for a minimum period regardless of a deletion request. We will advise you of any such limitations when processing your request.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that zbzbat restrict the processing of your personal data while a dispute is being resolved or a request is being assessed.
• Right to Data Portability: You have the right to receive personal data you have provided to zbzbat in a structured, machine-readable format, and to have that data transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to zbzbat processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Objections to marketing are acted upon immediately; other objections are assessed within 30 days.
• Right to Withdraw Consent: Where zbzbat processes your data on the basis of your consent (e.g., for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

All data rights requests are handled confidentially. We may need to verify your identity before processing a request to ensure we are releasing or modifying data only at the direction of the genuine Account holder.

11 Third-Party Services

The zbzbat platform integrates with a number of third-party services to deliver its full range of casino games, sportsbook markets, and payment functionality. While zbzbat takes care to engage only reputable, contractually bound partners, we wish to make clear that once you interact with a third-party service (for example, a game interface delivered by Pragmatic Play or Evolution Gaming), that third party's own privacy practices also apply to data generated within their environment.

zbzbat is not responsible for the privacy practices of third-party game providers, payment processors, or any external services linked from the zbzbat platform. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with your zbzbat Account.

zbzbat does not embed third-party social media plugins, advertising networks, or cross-site tracking scripts on zbzbat.vip. All analytics and tracking tools used on the platform are operated under zbzbat's direct control and data processing agreements.

12 Children's Privacy

zbzbat is strictly an adults-only platform. No person under the age of 18 may register an Account, deposit funds, place wagers, or access any zbzbat Service under any circumstances.

zbzbat does not knowingly collect, store, or process personal data relating to individuals under the age of 18. Age verification is a mandatory step in the zbzbat registration process, and accounts where age cannot be confirmed to our satisfaction are suspended pending verification.

If zbzbat becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated Account permanently closed. If you believe a minor has registered on zbzbat, please notify us immediately at [email protected] so that we can investigate and act without delay.

13 Changes to This Policy

zbzbat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform Services. When material changes are made to this policy, zbzbat will publish the updated version on this page with a revised effective date.

Where changes are significant — for example, where we introduce a new purpose for processing your personal data that requires your consent — zbzbat will notify active Account holders by email prior to the change taking effect, and will seek fresh consent where required by law.

We encourage you to review this Privacy Policy periodically to stay informed about how zbzbat protects your data. The effective date displayed at the top of this page indicates when the current version was last reviewed and published. Your continued use of the zbzbat platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

14 Contact & Enquiries

If you have any questions, concerns , or requests relating to this Privacy Policy or the personal data zbzbat holds about you, please contact our Data Support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" to ensure your message is directed to the correct team member.
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days of receipt.
• Support Hours: Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

All privacy and data rights requests are handled with strict confidentiality. To protect your account security, we may ask you to verify your identity before we action any request to access, modify, or delete personal data associated with your zbzbat Account.

zbzbat is committed to resolving all privacy concerns promptly and fairly. If you feel your concern has not been adequately addressed, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.