zz22 Privacy Policy
At zz22, your privacy is a responsibility we take seriously. This Privacy Policy explains precisely what personal data we collect from players across Bangladesh, how that data is used, who it may be shared with, and what rights you hold over your own information. We are committed to transparency and to protecting your data at every step.
Our Privacy Commitments
How zz22 Protects Your Data
These six principles summarise the core privacy commitments that underpin everything we do with your personal information on the zz22 platform.
SSL Encryption at All Times
Every page of the zz22 platform operates over HTTPS with industry-standard TLS encryption. All data transmitted between your device and our servers — including login credentials, financial details, and personal information — is encrypted in transit and at rest.
Minimal Data Collection
zz22 collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with anti-money laundering obligations. We do not collect data speculatively or for purposes unrelated to your use of the platform.
No Sale of Personal Data
zz22 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used exclusively to provide, improve, and secure the zz22 service — not to generate revenue through data commercialisation.
Your Rights, Your Control
You have the right to access, correct, and request deletion of your personal data held by zz22. You may also withdraw consent for marketing communications at any time. All such requests are handled by our support team within 30 calendar days of receipt.
Trusted Third-Party Partners Only
Where data sharing with third parties is necessary — for example with bKash, Nagad, or identity verification providers — we share only the minimum information required. All third-party partners are contractually required to process data securely and in accordance with applicable data protection standards.
Defined Retention Periods
We do not retain your personal data indefinitely. zz22 applies defined retention periods based on legal obligation, contractual necessity, and legitimate business interest. Account data is retained for the duration of your account and for a defined period thereafter in line with AML record-keeping requirements.
Table of Contents
1. Who We Are
1.1 zz22 is an online gaming and sports betting platform operating at https://zz22.io and serving players primarily located in Bangladesh. When we refer to "zz22", "we", "us", or "our" in this Privacy Policy, we mean the operator of the zz22 platform and any associated entities responsible for processing your personal data.
1.2 zz22 acts as the data controller in respect of all personal data collected through the platform. As data controller, zz22 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.
1.3 For all data-related enquiries, complaints, or requests to exercise your rights, you may contact us at [email protected]. Our support team is available 24/7 and will direct your query to the appropriate team member.
2. Data We Collect
2.1 Registration Data. When you create a zz22 account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This information is required to establish and manage your account.
2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to verify your age (21+), we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also request a selfie photograph or proof of address in some circumstances.
2.3 Financial Data. We collect information about your deposits, withdrawals, and transaction history on the platform. This includes payment method identifiers (for example, your bKash or Nagad mobile number) and transaction amounts in Bangladeshi Taka. We do not store full bank account numbers or full card numbers on our servers.
2.4 Gaming Activity Data. We record your betting history, game play sessions, wagering amounts, wins, losses, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud prevention, and platform improvement.
2.5 Technical and Device Data. When you access the platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and service optimisation.
2.6 Communications Data. If you contact our support team by email or live chat, we retain records of those communications. This allows us to resolve disputes, maintain service quality, and provide continuity of support.
2.7 Marketing Preferences. Where you have opted in to receive marketing communications, we record your preferences and the communications sent to you. You may update or withdraw these preferences at any time.
3. How We Use Your Data
The table below summarises the primary purposes for which zz22 processes your personal data:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, technical data |
| Age and identity verification (KYC) | KYC documents, registration data |
| Processing deposits and withdrawals | Financial data, registration data |
| Anti-money laundering (AML) compliance | Financial data, KYC data, gaming activity |
| Fraud prevention and security monitoring | Technical data, financial data, gaming activity |
| Responsible gaming monitoring | Gaming activity, registration data |
| Customer support and dispute resolution | Communications data, account data |
| Marketing communications (with consent) | Registration data, marketing preferences |
| Platform analytics and improvement | Technical data, gaming activity (aggregated) |
3.1 zz22 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.
4. Legal Basis for Processing
4.1 Contractual Necessity. The majority of data processing by zz22 is necessary for the performance of the contract between you and zz22 — specifically the Terms & Conditions you accept upon registration. This includes processing your registration data, financial data, and gaming activity data to deliver the core platform services.
4.2 Legal Obligation. Certain processing activities are required by law, in particular KYC identity verification and AML transaction monitoring. zz22 is obligated to conduct these activities regardless of consent.
4.3 Legitimate Interests. zz22 processes some data on the basis of legitimate interests, including fraud prevention, platform security, and improving the quality of our services. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
4.4 Consent. Where we send you marketing communications or use non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting support at [email protected].
5. Data Sharing and Disclosure
5.1 Payment Processors. We share necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely to facilitate your deposit and withdrawal transactions. These partners are subject to their own data protection obligations and are not permitted to use your data for any other purpose.
5.2 Identity Verification Providers. Where required for KYC compliance, we may share identity documents and personal details with regulated third-party identity verification services. These providers process your data strictly for verification purposes under contractual data processing agreements.
5.3 Game Technology Providers. Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may process certain technical and gaming activity data to deliver their games on our platform. Game providers receive only the minimum data necessary for game delivery and are prohibited from using it for independent marketing purposes.
5.4 Sports Integrity Bodies. In cases where we have reasonable grounds to suspect match-fixing or betting manipulation, we may share relevant betting data with sports integrity authorities such as the ICC Anti-Corruption Unit. This disclosure is made in the public interest and in accordance with our legal obligations.
5.5 Law Enforcement. zz22 will disclose personal data to law enforcement or regulatory authorities where required to do so by law, court order, or in response to a lawful and properly documented request.
5.6 zz22 does not sell, rent, or transfer your personal data to third parties for their independent marketing or commercial purposes under any circumstances.
6. Payment Data
6.1 All financial transactions on zz22 are processed in Bangladeshi Taka (৳) through mobile financial services and bank partners operating in Bangladesh. When you initiate a deposit via bKash, Nagad, Rocket, or Upay, the transaction is authenticated directly through the respective mobile financial service provider's infrastructure.
6.2 zz22 does not store your full mobile banking PIN, bank account password, or any authentication credentials belonging to your payment provider account. We receive only a transaction reference and confirmation of the amount transferred.
6.3 For withdrawal processing, we verify that the destination payment method is registered in your legal name and has previously been used for a deposit on the platform. This verification step is a security and AML requirement, not an optional process.
6.4 Transaction records are retained for a minimum of five years from the date of the transaction in compliance with financial record-keeping requirements applicable to online gaming platforms serving Bangladesh.
7. Cookies and Tracking Technologies
7.1 zz22 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, remember your preferences, detect fraud, and analyse platform usage patterns.
7.2 Essential Cookies are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery. These cookies cannot be disabled without disrupting platform functionality.
7.3 Analytics Cookies help us understand how players navigate the platform, which games are most popular, and where technical issues occur. Analytics data is aggregated and does not identify individual players. You may opt out of analytics cookies by contacting us.
7.4 Marketing Cookies are used only where you have consented to receive personalised promotions. These cookies help us deliver relevant bonus offers based on your gaming interests. You may withdraw consent for marketing cookies at any time.
7.5 Most web browsers allow you to control cookies through their settings. Disabling all cookies may affect the functionality of the zz22 platform, including your ability to log in and access games.
8. Data Retention
8.1 zz22 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.
8.2 Account registration data is retained for the duration of your active account and for a period of five years following account closure, in compliance with AML record-keeping requirements.
8.3 KYC identity documents are retained for five years from the date of verification or from the date of account closure, whichever is later.
8.4 Financial transaction records are retained for a minimum of five years from the date of each transaction.
8.5 Support communication records are retained for three years from the date of the communication, unless a longer period is required in connection with an ongoing dispute or investigation.
8.6 Marketing preference records are retained until you withdraw your consent or close your account, whichever occurs first. Upon withdrawal of consent, your data will be removed from active marketing lists within 10 business days.
9. Your Rights
As a data subject, you hold the following rights in relation to your personal data held by zz22. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 30 calendar days.
- Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is processed.
- Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
- Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to legal retention obligations — for example, we cannot erase transaction records that we are required to retain under AML regulations.
- Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
- Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Once an objection is received, we will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
10. Security Measures
10.1 zz22 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
10.2 These measures include TLS/SSL encryption for all data in transit, encryption of sensitive data at rest, access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments, and multi-factor authentication for administrative system access.
10.3 While we apply rigorous security practices, no online platform can guarantee absolute security against all threats. In the event of a data breach that poses a risk to your rights and freedoms, zz22 will notify affected players and relevant authorities promptly and in accordance with applicable notification requirements.
10.4 You play an important role in keeping your account secure. We strongly recommend using a unique, strong password for your zz22 account, never sharing your login credentials with any third party, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
11. Protection of Minors
11.1 The zz22 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close that account and delete the associated personal data, subject to any legal retention obligations.
11.2 If you are a parent or guardian and believe that your child has registered an account with zz22, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.
11.3 We encourage parents and guardians to use parental control software to prevent underage individuals from accessing online gambling platforms. Further guidance on protecting minors and on responsible gaming tools available at zz22 is provided on the Responsible Gaming page.
12. Changes to This Privacy Policy
12.1 zz22 reserves the right to update this Privacy Policy at any time. Material changes — those that affect how we collect, use, or share your personal data in a significant way — will be communicated to registered players by email to their registered address at least 14 days before the updated policy takes effect.
12.2 Minor amendments — such as clarifications of existing practices, correction of typographical errors, or reorganisation of existing content without substantive change — may be made without advance notice. The "Last Updated" date at the top of this document will always reflect when the policy was most recently revised.
12.3 Your continued use of the zz22 platform after the effective date of any change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must close your account before it takes effect by contacting support at [email protected].
12.4 The most current version of this Privacy Policy is always available at https://zz22.io/privacy-policy.
13. Contact and Data Queries
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the zz22 support team. All data-related requests are handled with priority and will receive a substantive response within 30 calendar days.
- Email: [email protected]
- Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
- Response Time: Within 5 minutes for live chat; within 24 hours for email; within 30 days for formal data requests
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
Have Questions About Your Privacy?
Our support team is available around the clock to answer any privacy-related questions. You can also explore our Terms & Conditions, visit the Responsible Gaming page, or head back to the platform.