zv77 Privacy Policy

This Privacy Policy is issued by zv77 ("zv77", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://zv77.io (the "Platform"). zv77 is the data controller responsible for the personal information collected from users who access or register on the Platform.

This Privacy Policy applies to all visitors, registered users, and former users of the zv77 Platform, including players who access the Platform from Bangladesh via desktop browsers, mobile browsers, or any other compatible device. It governs all personal data collected through the Platform, through communications with our support team, and through any other channel through which you interact with zv77.

By registering an account on zv77, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any provision of this Privacy Policy, you must not use the Platform.

zv77 collects personal data from you through several distinct channels. The categories of data we collect are described below:

2.1 Registration and Account Data

When you create a zv77 account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you are 21 years of age or older)
• Email address and mobile phone number
• Preferred BDT payment method (e.g., bKash, Nagad, Rocket, Upay)
• Username and encrypted password
• Residential address and city (e.g., Dhaka, Chittagong, Sylhet, Khulna)

2.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer programme, we may collect:

• Copies of your National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or similar document)
• Proof of payment method ownership (screenshot of mobile banking app or card statement)
• Selfie or photograph for biometric matching purposes, where required

2.3 Transaction and Financial Data

• Deposit and withdrawal history, including amounts in BDT, timestamps, and payment method identifiers
• Bonus and promotional activity records
• Account balance history and wagering activity logs

2.4 Technical and Device Data

• IP address and approximate geolocation
• Browser type and version, operating system, and device type
• Session start and end times, pages visited, and features used
• Cookie identifiers and similar tracking technology data (see Section 6)

2.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket exchanges with the zv77 customer service team
• Feedback, survey responses, and complaints submitted to zv77

zv77 uses the personal data it collects for the following purposes:

Where zv77 wishes to use your personal data for direct marketing communications (including promotional offers, bonus alerts, and seasonal campaigns such as Eid or Pohela Boishakh promotions), we will seek your express consent at the time of registration or subsequently. You may withdraw marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing communication.

zv77 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing is necessary to perform our contract with you — including creating your account, processing bets, and handling deposits and withdrawals in BDT.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, age verification obligations, and financial record-keeping duties.
• Legitimate interests: Processing is necessary for the legitimate interests of zv77, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your data protection rights.
• Consent: Where you have given clear and informed consent for a specific processing activity, such as receiving direct marketing communications or the use of non-essential cookies.

zv77 does not sell, rent, or otherwise transfer your personal data to third parties for commercial or marketing purposes. We share personal data only in the limited circumstances described below:

5.1 Payment Processing Partners

To facilitate deposits and withdrawals in BDT, zv77 shares necessary financial data with authorised payment processing partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and card network operators such as Visa and Mastercard. These partners are contractually obligated to process data solely for the purpose of completing your transactions and are prohibited from using it for any other purpose.

5.2 Game and Technology Providers

zv77 works with licensed international game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Hacksaw Gaming. These providers may receive limited technical data (such as player session identifiers) necessary to deliver and audit game functionality. They do not receive your full personal profile.

5.3 Identity Verification Services

To fulfil our KYC and age verification obligations, zv77 may engage third-party identity verification service providers. These providers process KYC documents on our behalf under strict data processing agreements and applicable data protection law.

5.4 Legal and Regulatory Authorities

zv77 may disclose personal data to law enforcement agencies, regulatory authorities, tax authorities, or courts where we are required to do so by law, or where disclosure is necessary to protect the legal rights of zv77, its employees, or its users.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zv77's business, personal data held by zv77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and its implications for your personal data in advance, where required by applicable law.

zv77 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used by zv77:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your logged-in session, remember your language preference, and enable security features. These cookies cannot be disabled without affecting core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve the Platform experience.
• Functionality Cookies: These cookies remember your preferences such as display settings, game history, and deposit method selections, so that you do not need to re-enter them on each visit.

zv77 does not use advertising cookies or cross-site tracking cookies. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the Platform, including maintaining a logged-in session.

zv77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account and any applicable statutory retention periods thereafter. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from zv77's systems, or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

zv77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:

• Encryption in transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Our Platform enforces HTTPS across all pages and resources.
• Encryption at rest: Sensitive personal data stored in zv77's databases, including KYC documents and payment method details, is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal access is governed by role-based access control (RBAC) policies, and all access events are logged and audited.
• Password security: Account passwords are hashed using industry-standard one-way hashing algorithms. zv77 does not store passwords in plaintext and cannot retrieve your password — only a reset is possible.
• Security monitoring: Our infrastructure is subject to continuous intrusion detection monitoring. We conduct regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: In the event of a confirmed data breach affecting your personal information, zv77 will notify affected users promptly and take all necessary remedial steps in accordance with applicable law.

As a user of the zv77 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data categories, you may update your information directly within your Account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Note that certain data (such as KYC and transaction records) must be retained for legally mandated periods and cannot be erased on request.
• Right to Restriction: You may request that the processing of your personal data be restricted in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

The zv77 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or store personal data relating to any individual under the age of 21. Registration by persons under 21 is prohibited, and any attempt to circumvent our age verification controls is a material breach of our Terms and Conditions.

If zv77 discovers or has reason to believe that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant account, void any transactions associated with it, and delete the personal data in question as promptly as possible, subject only to any mandatory legal retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered on the zv77 Platform or provided personal data to us without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours.

The zv77 Platform may contain references to third-party services, game providers, or payment partners. These references are provided solely for informational convenience and do not constitute an endorsement of any third-party privacy practices.

This Privacy Policy applies exclusively to the zv77 Platform at https://zv77.io. zv77 is not responsible for the privacy practices, data collection methods, or security measures employed by any third-party services or platforms. We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your zv77 account (such as your bKash or Nagad mobile banking application).

zv77 reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will be reflected in an updated version of this document, with the "Last Updated" date revised accordingly. The most current version of this Privacy Policy will always be accessible at https://zv77.io/privacy-policy.

Where changes are material — for example, where we introduce a new purpose for processing personal data or a new category of data sharing — we will notify registered users by email to the address on file, or by a prominent notice displayed upon login to the Platform, prior to the changes taking effect.

Your continued use of the zv77 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zv77 handles your personal data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries within 30 days of receipt.

For urgent matters relating to suspected unauthorised access to your account, data breaches, or child safety concerns, please mark your email subject line as "URGENT" and our team will prioritise your request accordingly.

For questions related to responsible gaming, deposit limits, self-exclusion tools, or problem gambling support, please visit our Responsible Gaming page or contact our dedicated support team at [email protected]. Our 24/7 English-speaking support team is available to assist players across all regions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.