Your Privacy Matters at zetbaz

Welcome to the zetbaz Privacy Policy. zetbaz ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at zetbaz.club. We are committed to safeguarding the privacy and personal data of every individual who visits, registers with, or transacts on our Platform, whether they are located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or elsewhere in Bangladesh.

This Privacy Policy ("Policy") describes in clear and accessible terms: the categories of personal data we collect; the purposes for which we process that data; the legal grounds on which we rely to process it; the circumstances in which we may share it with third parties; how long we retain it; the security measures we employ to protect it; and the rights available to you as a data subject.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By creating a zetbaz account or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood its contents.

zetbaz collects personal data in the following categories. We collect only what is necessary for the specific purposes set out in this Policy and do not engage in speculative data collection.

zetbaz collects personal data through the following channels:

• Direct Interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you provide data to us directly.
• Automated Technologies: As you navigate and interact with the zetbaz Platform, we automatically collect technical and usage data through server logs, session tracking, and similar technologies. See Section 8 (Cookies) for more detail.
• Payment Processors: When you use bKash, Nagad, Rocket, or Upay to fund your account, those payment providers share with us the transaction confirmation data necessary to credit your account and to verify your payment source.
• Identity Verification Partners: Where we use third-party KYC service providers to verify the authenticity of documents you submit, those partners may return verification results to us. We do not receive raw copies of your documents from those partners — only verification outcomes.
• Publicly Available Sources: In limited circumstances, such as fraud investigation, we may consult publicly available databases to verify information you have provided.

zetbaz processes your personal data for the following specific purposes. We do not use your data in any way that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing an alternative legal basis.

• Account Registration and Management: To create and maintain your zetbaz account, authenticate your identity at login, and manage your account preferences and settings.
• Age and Identity Verification (KYC): To verify that you are aged 18 or above and that the identity you have provided is genuine, as required by our responsible gaming and anti-fraud obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, reconcile transactions, and enforce the same-source withdrawal rule.
• Bonus and Promotion Administration: To determine your eligibility for bonuses, track wagering progress, and prevent bonus abuse.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of your support interactions for quality assurance purposes.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests you have set, and proactively reach out if we identify concerning patterns.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Legal and Regulatory Compliance: To comply with applicable laws, including anti-money laundering (AML) obligations, to respond to lawful requests from competent authorities, and to maintain records as required by law.
• Platform Improvement: To analyse usage patterns and player feedback in aggregate form to improve the design, performance, and game offering of the zetbaz Platform.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates), security alerts (e.g., new login detected), and, where you have opted in, promotional communications about new games or offers.

For each category of processing activity, zetbaz relies on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and zetbaz — including account registration, payment processing, game access, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC/AML verification, record-keeping obligations, and responding to lawful requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing necessary for zetbaz's legitimate interests, provided those interests are not overridden by your rights — including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics.
• Consent: Where we rely on your consent — such as for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

zetbaz does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share the transaction data necessary to process your deposits and withdrawals with bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and is responsible for data processed within its own systems.
• Identity Verification Providers: We may share your KYC documents with authorised third-party identity verification partners to confirm the authenticity of documents you submit. These partners process data solely under our instruction and are contractually prohibited from using it for any other purpose.
• Game Providers: When you play a game hosted by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your username and game session data are shared with that provider's systems to deliver the game. No payment or detailed identity data is shared with game providers.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, regulatory bodies, or other competent public authorities when required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of zetbaz, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of zetbaz's business or assets, your personal data may be transferred to the acquiring entity, provided that the recipient agrees to treat your data in a manner consistent with this Policy.

All financial transactions on the zetbaz Platform are denominated in Bangladeshi Taka (BDT, ৳) and processed exclusively through bKash, Nagad, Rocket, and Upay. The following specific rules apply to the handling of your payment data:

• zetbaz stores only the data necessary to reconcile transactions and enforce the same-source withdrawal rule — specifically, the last four digits of your registered mobile payment account number and your transaction history on the Platform. We do not store full mobile banking PINs or passwords.
• All payment data is transmitted over encrypted channels. No payment credentials are ever transmitted in plain text.
• zetbaz enforces a strict same-source rule: withdrawal funds may only be returned to the same bKash, Nagad, Rocket, or Upay account used to make the deposit. This rule exists to prevent money laundering and to protect players from unauthorised withdrawals.
• Transaction records are retained for a minimum of five years in compliance with anti-money laundering legislation.
• If a transaction is flagged as suspicious, zetbaz may temporarily freeze the associated account pending investigation and, where required by law, report the transaction to the relevant authority.

The zetbaz Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your experience, and to collect analytics data. The following categories of cookies are used:

zetbaz does not use third-party advertising cookies or behavioural tracking cookies that profile you across external websites. All analytics data collected via cookies is processed in aggregate and is not linked back to your individual identity where this can be avoided.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may impair the functionality of your zetbaz account.

zetbaz retains your personal data for no longer than is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following retention periods apply:

• Account Data: Retained for the duration of your active account plus five years following account closure, to support any post-closure legal, regulatory, or dispute resolution obligations.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for five years following the completion of the verification process, or five years following account closure, whichever is later.
• Support Communications: Retained for three years from the date of last interaction, to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained in identifiable form for up to 12 months, after which it is aggregated and anonymised for analytical purposes.
• Self-Exclusion Records: Retained indefinitely, to ensure that self-excluded players cannot be re-admitted to the Platform inadvertently.

Upon expiry of the applicable retention period, your personal data is securely deleted or permanently anonymised so that it can no longer be associated with you.

zetbaz employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security: All data in transit between your device and zetbaz servers is encrypted using TLS 1.2 or higher, enforced via 256-bit SSL certificates.
• Data Encryption at Rest: Sensitive personal data fields — including identity document references and financial record identifiers — are encrypted in our database using industry-standard symmetric encryption.
• Access Controls: Internal access to player data is restricted to authorised personnel on a role-based, need-to-know basis. All internal access is logged and subject to regular audit.
• Fraud Detection Systems: Automated systems monitor for unusual account behaviour, including suspicious login locations, rapid successive wagers, and anomalous withdrawal patterns, and flag these for human review.
• Penetration Testing: The zetbaz Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: zetbaz maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities as required by applicable law.

As a player on the zetbaz Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via Live Chat or by email at [email protected]. We will respond to all valid requests within a reasonable timeframe and in any event within 30 days.

• Right of Access: You have the right to request a copy of the personal data zetbaz holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations — for example, we cannot delete transaction records that we are required by law to retain.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests where you believe your rights and freedoms override those interests. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The zetbaz Platform is strictly for adults aged 18 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the zetbaz account registration and KYC process, and we actively monitor for indicators that an account may be controlled by a minor.

If we discover or have reasonable grounds to suspect that personal data has been collected from a person under the age of 18, we will:

• Immediately suspend the account and freeze all associated balances pending investigation.
• Delete the personal data of the minor from our active systems as soon as the investigation is complete, subject to any legal obligation to retain records of the incident.
• Return any deposited funds to the source payment account, less any amounts required to be withheld for legal or fraud prevention reasons.

If you are a parent or guardian and believe that your child has registered an account on zetbaz, please contact our support team immediately at [email protected] so that we can act promptly.

The zetbaz Platform is operated primarily for players based in Bangladesh. However, some of our service providers — including game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming — operate infrastructure in multiple countries. As a result, your personal data may be transferred to, stored, or processed in a country other than Bangladesh.

Where such international transfers occur, zetbaz takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Policy. These steps may include:

• Entering into data processing agreements with service providers that impose obligations equivalent to those described in this Policy.
• Selecting service providers whose data protection practices meet internationally recognised security standards.
• Limiting the scope of data shared with international partners to the minimum necessary for the service they provide.

By using the zetbaz Platform, you acknowledge that your personal data may be transferred internationally as described above. If you have concerns about any specific international transfer, please contact our support team for further information.

zetbaz reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. When we make material changes, we will take reasonable steps to notify you, which may include:

• Displaying a prominent notice on the Platform upon your next login.
• Sending an email notification to the address registered on your account.
• Updating the "Last Updated" date at the top of this Policy page.

We encourage you to review this Policy periodically to stay informed about how zetbaz protects your personal data. Your continued use of the Platform after a Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should cease using the Platform and contact our support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way zetbaz handles your personal data, please do not hesitate to reach out to our dedicated support team. All communications regarding data privacy should be directed to:

• Email: [email protected]
• Live Chat: Available 24/7 directly through the Platform
• Response Time: We aim to respond to all email enquiries within 24 hours (BST, UTC+6)
• Operating Hours: Live Chat support is available around the clock, every day of the year