Your Privacy Matters — zg777 Privacy Policy

1 Introduction and Data Controller Identity

This Privacy Policy ("Policy") describes how zg777 — operating the platform accessible at zg777.io — collects, uses, stores, and protects the personal data of individuals who visit, register on, or otherwise interact with the zg777 platform ("the Platform").

For the purposes of applicable data protection law, zg777 acts as the data controller in respect of the personal data you provide to us or that we collect about you in connection with your use of the Platform. As data controller, zg777 determines the purposes and means of processing your personal data and is responsible for ensuring that your data is handled lawfully, fairly, and transparently.

By creating an account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy. If you have any questions about how we handle your data, please contact us using the details set out in Section 14.

2 Scope and Application

This Policy applies to:

• All visitors to the zg777.io website, whether or not they hold a registered account.
• All registered account holders, including those who have applied for an account but have not yet completed verification.
• All individuals who contact the zg777 support team via email or live chat, regardless of whether they hold an account.
• All individuals who participate in promotions, tournaments, or bonus programmes operated by zg777.

This Policy does not apply to third-party websites, services, or platforms linked to or from zg777.io. zg777 is not responsible for the privacy practices of external providers, including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming. Players who interact directly with embedded third-party game content may be subject to those studios' own data practices.

This Policy should be read together with the zg777 Terms & Conditions, which govern your overall use of the Platform and incorporate this Policy by reference.

3 Personal Data We Collect

zg777 collects the following categories of personal data:

zg777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is present in government-issued identity documents submitted for KYC purposes.

4 How We Collect Your Data

zg777 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you visit the Platform, including IP address, device identifiers, browser type, operating system, and session activity logs. This data is collected via server logs, cookies, and similar technologies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, and Rocket when you initiate a deposit or withdrawal. zg777 does not receive your full mobile wallet PIN or password from these providers.
• KYC and identity verification partners: In some cases, zg777 may use third-party identity verification services to cross-reference the documents you submit. These partners provide a verification result but do not retain your documents on zg777's behalf beyond the verification process.
• Fraud detection systems: Automated systems that analyse behavioural patterns, IP addresses, and device fingerprints to identify potentially fraudulent activity.

zg777 does not purchase data about you from third-party data brokers. We do not collect your data from social media platforms.

5 Purposes and Legal Basis for Processing

The table below sets out the purposes for which zg777 processes your personal data and the legal basis applicable to each processing activity:

Where zg777 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms, taking into account the nature of the data processed and the reasonable expectations of players on a regulated gaming platform.

Where processing is based on your consent — for example, for receiving promotional emails — you may withdraw that consent at any time by adjusting your communication preferences in your account settings or by contacting the support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

6 Disclosure and Sharing of Personal Data

zg777 does not sell your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: bKash, Nagad, and Rocket receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to the data protection obligations applicable to licensed mobile financial service providers operating in Bangladesh.
• KYC and identity verification partners: Third-party services used to verify the authenticity of identity documents receive only the specific documents and data required for that verification. These partners are bound by strict confidentiality and data security obligations.
• Fraud prevention and security services: Anonymised or pseudonymised behavioural data may be shared with fraud detection platforms to identify suspicious activity patterns across the industry. No directly identifiable personal data is shared in this context without a legal basis.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming may receive a pseudonymised player identifier to enable fair game operation, real-time game state tracking, and the calculation of returns. Your full personal identity details are not shared with game studios.
• Legal and regulatory authorities: zg777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or other legal obligation. Where lawfully permitted to do so, zg777 will notify affected users of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of zg777's business operations, personal data may be transferred to the acquiring entity as part of the transaction. Affected users will be notified in advance of any such transfer and informed of any changes to data handling that result from the transfer.

All third parties with whom zg777 shares personal data are required by contract to maintain appropriate technical and organisational security measures and to process personal data only for the specified purposes for which it was shared.

7 International Data Transfers

zg777 operates a platform primarily serving players located in Bangladesh. Some of our third-party service providers — including game content studios, cloud infrastructure providers, and fraud detection services — may be located or operate servers outside of Bangladesh.

Where personal data is transferred to a country that does not provide an equivalent level of data protection, zg777 ensures that appropriate safeguards are in place, including:

• Contractual clauses that obligate the receiving party to protect personal data to a standard equivalent to that applied within the zg777 platform.
• Selection of service providers that hold internationally recognised security certifications (e.g., ISO 27001) and comply with globally accepted data protection frameworks.
• Encryption of all personal data in transit and at rest, regardless of the jurisdiction in which it is stored or processed.

By using the zg777 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh in connection with the services described in this Policy. zg777 takes all reasonable steps to ensure that such transfers are conducted securely and lawfully.

8 Data Security Measures

zg777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the zg777 servers is encrypted using 256-bit TLS encryption. The platform enforces HTTPS on all pages.
• Data encryption at rest: Sensitive personal data — including identity documents and payment details — is stored in encrypted form using AES-256 encryption.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm with salt. zg777 does not store plaintext passwords and cannot retrieve your password — only reset it via a verified process.
• Access controls: Access to systems containing personal data is restricted to zg777 personnel with a documented operational need. Access logs are maintained and reviewed regularly. All internal access to player data requires multi-factor authentication.
• Intrusion detection and monitoring: The platform infrastructure is monitored 24/7 for anomalous activity. Automated alerts are triggered by patterns consistent with brute-force attacks, credential stuffing, or unauthorised data access attempts.
• Regular security audits: zg777 conducts periodic security reviews and vulnerability assessments of the platform infrastructure and codebase to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All zg777 personnel who handle personal data undergo data protection training as part of their onboarding and on an annual basis thereafter.

While zg777 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, contact the support team at [email protected] immediately.

9 Data Retention

zg777 retains personal data for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve any disputes that may arise. The following retention periods apply:

When data reaches the end of its defined retention period, it is either securely deleted or anonymised so that it can no longer be associated with any individual. zg777 reviews its retention schedules annually and adjusts them where legal or operational requirements change.

10 Cookies and Tracking Technologies

zg777 uses cookies and similar technologies to operate the platform effectively, maintain your session, prevent fraud, and improve the user experience. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device.

zg777 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, prevent cross-site request forgery (CSRF), and maintain the integrity of your account state. These cookies cannot be disabled without breaking core platform functionality. They do not require your consent.
• Security Cookies: Used to detect and respond to suspicious activity such as simultaneous logins from multiple locations, credential stuffing attempts, and unusual betting patterns. Security cookies form part of our fraud prevention infrastructure.
• Analytics Cookies: zg777 uses privacy-respecting analytics tools to understand aggregate user behaviour — such as which pages are most visited, typical session lengths, and common navigation paths. Analytics data is collected in aggregate form and is not linked to individually identifiable player profiles. These cookies are set only with your consent.
• Preference Cookies: Used to remember settings you have configured on the Platform, such as your preferred language or notification preferences. These cookies improve your experience by avoiding the need to re-configure settings on every visit.

zg777 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not share cookie data with advertising networks.

You may configure your browser to block or delete cookies at any time. Blocking strictly necessary cookies will prevent you from logging into your account. Blocking analytics cookies will not affect your ability to use the Platform but will prevent zg777 from counting your visit in aggregate usage statistics.

11 Your Privacy Rights

Subject to applicable law and certain limited exceptions, you have the following rights in respect of your personal data held by zg777:

• Right of Access: You may request a copy of all personal data zg777 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update basic account information (email address, mobile number, residential address) directly from your account dashboard at any time.
• Right to Erasure: You may request that zg777 delete your personal data. We will comply with such requests where the data is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires us to retain it. Note that zg777 is legally required to retain certain data (particularly financial records and KYC documents) for a minimum period following account closure; such data cannot be deleted ahead of schedule.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing pending our assessment — you may request that we restrict the processing of your data to storage only until the matter is resolved.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or performance of a contract, you may request that we provide your data in a portable format so that you can transfer it to another service provider.
• Right to Object: You may object at any time to the processing of your personal data where zg777 relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to the support email address listed in Section 14. We may need to verify your identity before processing your request. We will respond within 30 days; complex requests may require up to 60 days, in which case we will notify you of the extension and the reason for it.

12 Children and Minors

The zg777 Platform is strictly intended for adults aged 21 years and above. zg777 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process and is applied to all accounts before withdrawal privileges are activated.

If zg777 becomes aware that personal data has been collected from an individual under the age of 21 — whether through our own detection systems, a report from a third party, or notification from a parent or guardian — we will immediately suspend the relevant account, void all balances, and securely delete all personal data associated with the account as soon as is legally permissible.

Parents and guardians who believe that a person under 21 may have registered an account on the zg777 Platform are encouraged to contact the support team immediately at [email protected]. We take underage gambling seriously and will act on all such reports promptly.

zg777 also supports the use of parental control software for households where minors may have access to internet-enabled devices. Third-party filtering tools can be configured to block access to online gambling platforms at the device or network level.

13 Changes to This Privacy Policy

zg777 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, updates to our business operations, new data processing activities, or improvements to our security practices. The version number and effective date at the top of this Policy will be updated to reflect each revision.

Where a proposed amendment materially affects the way in which we process your personal data — for example, by introducing a new category of data sharing or changing the legal basis for a significant processing activity — we will notify registered account holders by email at least 14 days before the amendment takes effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not agree with the terms of any revised Policy, you may close your account by contacting the support team before the revised Policy takes effect. Closing your account will not affect data that zg777 is legally required to retain after account closure.

We recommend that you review this Privacy Policy periodically. The most current version is always available at zg777.io/privacy-policy.

14 Contact and Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which zg777 handles your personal data, please contact the zg777 Data Support Team using the details below:

All privacy-related enquiries are handled by our dedicated support team. When submitting a request, please include your registered username, full name, and a clear description of your enquiry or the right you wish to exercise. We may ask you to verify your identity before processing the request.

Please note that the email address above is for support and data-related enquiries only. Do not share your account password, payment credentials, or one-time PINs over email under any circumstances. zg777 will never request such information by email.