zzok Privacy Policy

Introduction

zzok ("we", "us", "our") operates the online casino and sports betting platform accessible at zzok.asia (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered Player, a prospective user, or a visitor browsing our pages.

This Privacy Policy sets out in clear and formal terms the types of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, and the rights available to you as a data subject. It applies to all personal data collected through the zzok Platform, our customer support channels, and any other means by which you interact with zzok.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to data protection matters.

Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for the personal data you provide to, or that is collected by, the zzok Platform is the legal entity operating zzok under its international offshore gaming licence.

All data protection enquiries, subject access requests, and consent withdrawal requests should be directed to zzok's designated data protection contact:

• Email: [email protected] (mark your subject line "Data Protection Enquiry")
• Live Chat: Available 24/7 on the zzok Platform — reference "Privacy" in your opening message
• Response Time: Within five (5) business days, aligned with Bangladesh Standard Time (BST, UTC+6)

Data We Collect

zzok collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Registration Data

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify you are aged 21 or above)
• Nationality and country of residence
• Username chosen at registration
• Account password (stored in hashed, salted form — never in plain text)

3.2 Contact Data

• Email address
• Bangladeshi mobile phone number (used for SMS OTP two-factor authentication)
• Residential or mailing address (required for KYC verification)

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar document dated within three months)
• Proof of payment method ownership where required by anti-money-laundering procedures
• Selfie or liveness-check image where required for enhanced KYC verification

3.4 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, reference IDs)
• Payment method identifiers (bKash wallet number, Nagad account reference, bank account details — note: full card/account numbers are not stored on zzok's servers)
• Running Account balance history
• Bonus and wagering activity records

3.5 Gaming & Betting Activity Data

• Full betting and gaming history, including game titles, bet amounts, outcomes, and timestamps
• Session duration, session frequency, and session start/end times
• Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

3.6 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• HTTP referrer and entry page data
• Pages visited, click paths, and time spent on individual pages

3.7 Communications Data

• Records of live chat conversations with zzok support agents
• Email correspondence with zzok's support and compliance teams
• Feedback, complaint, or dispute submissions

How We Collect Data

zzok collects personal data through the following primary channels:

4.1 Directly From You

The majority of personal data we hold is provided directly by you during the registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting our support team, or when responding to optional surveys or promotional communications.

4.2 Automatically Through Platform Use

When you access the zzok Platform, our servers and analytics systems automatically collect technical and behavioural data. This includes your IP address, browser type, device information, pages visited, time spent on the Platform, and click-through paths. This data is collected via server logs, cookies, and similar tracking technologies (see Section 7 for full cookie details).

4.3 From Third-Party Service Providers

zzok may receive personal data from trusted third-party partners in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment providers may share transaction confirmation data and wallet/account identifiers with us to facilitate deposit and withdrawal processing.
• Identity Verification Providers: Where zzok uses an automated KYC service, that provider may return verification status data (pass/fail/refer) and flagged risk indicators to us based on the documents you submit.
• Fraud Prevention Services: Third-party fraud detection tools may provide risk scores, device fingerprint data, and behavioural anomaly alerts to help protect the integrity of the Platform.
• Game Providers: Licensed game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session and outcome data with zzok for dispute resolution, RTP auditing, and responsible gaming monitoring purposes.

Legal Basis for Processing

zzok processes your personal data only where a valid legal basis exists for doing so. The following legal bases apply to the data processing activities described in this Privacy Policy:

Where zzok relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your fundamental rights and freedoms. You may request a copy of our legitimate interests assessment for any specific processing activity by contacting [email protected].

How We Use Your Data

zzok uses the personal data it holds for the following specific purposes:

• Account Creation and Operation: To register your account, verify your identity, maintain your balance, and deliver the core gaming and betting services offered on the Platform.
• Payment Processing: To credit deposits to your account and process withdrawal requests via bKash, Nagad, Rocket, Upay, or bank transfer, and to maintain an accurate transaction history.
• Age and Identity Verification: To confirm that you are at least 21 years of age and that the identity you have registered matches the payment methods you use, as required by our gaming licence conditions.
• Fraud and Security Monitoring: To detect, investigate, and prevent unauthorised access, multiple-account creation, bonus abuse, identity fraud, and other prohibited conduct as defined in our Terms & Conditions.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns for indicators of money laundering or other financial crime, to file reports with relevant authorities where required, and to maintain the financial integrity of the Platform.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling behaviour, to deliver responsible gaming interventions where appropriate, and to enforce self-exclusion and deposit limit settings applied by the Player.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate with you regarding account-related matters via live chat or email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and content of the zzok Platform.
• Marketing (with consent): To send promotional emails and SMS messages regarding zzok bonuses, seasonal promotions, and new game launches, where you have provided explicit consent to receive such communications. See Section 14 for full details.
• Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and the conditions of zzok's gaming licence.

Cookies & Tracking Technologies

The zzok Platform uses cookies and similar tracking technologies to ensure the correct functioning of the site, to maintain your logged-in session, and to collect analytical data about how the Platform is used. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your authenticated session, store your language and currency preferences, and enable the secure cashier function. These cookies cannot be disabled without impairing core Platform functionality. No consent is required for strictly necessary cookies.

7.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymised information about how visitors use the Platform — which pages are visited most frequently, how long users spend on each page, and from which entry points users arrive. This data is used solely to improve the Platform's performance and user experience. These cookies are set only where you have provided consent.

7.3 Functional Cookies

These cookies remember your preferences — such as your chosen display settings, game category filters, and responsible gaming reminder intervals — so that you do not have to reconfigure them on each visit. They do not track your activity across third-party websites.

7.4 Managing Cookies

You may manage, restrict, or delete cookies at any time through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect your experience of the Platform — for example, you may be required to re-enter your preferences on each visit. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

Data Sharing & Disclosure

zzok does not sell, rent, or otherwise commercially disclose your personal data to third parties. Personal data is shared only in the following limited circumstances, and always subject to appropriate contractual data protection obligations:

8.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners you select. These providers act as independent data controllers for their own services and are subject to their own privacy policies and regulatory obligations.

8.2 Identity Verification & KYC Providers

Where an automated KYC verification service is used, your identity documents and biometric data (if applicable) are shared with our contracted KYC provider solely for the purpose of verifying your identity and age. KYC providers are engaged under data processing agreements that prohibit the use of your data for any other purpose.

8.3 Game Technology Providers

Licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive your Player ID and relevant session data to deliver game content, resolve game disputes, and meet their own regulatory audit requirements. No additional personal data beyond what is technically necessary is shared with game providers.

8.4 Fraud Prevention & Security Services

To protect the integrity of the Platform and safeguard all Players, zzok may share technical identifiers (IP address, device fingerprint, transaction risk signals) with contracted fraud prevention and cybersecurity service providers. These providers are engaged solely for the purposes of fraud detection and are prohibited from using shared data for any other purpose.

8.5 Legal and Regulatory Authorities

zzok will disclose personal data to law enforcement agencies, financial intelligence units, gaming regulators, or other competent authorities where required to do so by applicable law, court order, or regulatory direction — including in relation to the investigation or reporting of suspected money laundering, fraud, or underage gambling activity.

8.6 Business Transfers

In the event that zzok undergoes a corporate reorganisation, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered Players of any such transfer and the identity of the new data controller via a platform announcement or email to your registered address, in advance of the transfer taking effect.

Data Retention

zzok retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. The specific retention periods applicable to each data category are set out in the table in Section 3 of this Privacy Policy.

As a general principle, zzok retains account data and KYC documentation for a period of five (5) years following permanent account closure. Financial and transaction records are retained for seven (7) years from the date of the relevant transaction, in accordance with international anti-money-laundering record-keeping requirements. Technical and device data is typically retained for no longer than thirteen (13) months from collection.

Where zzok is required to retain data beyond the standard retention periods — for example, in connection with an ongoing legal dispute, regulatory investigation, or self-exclusion enforcement — the data will be retained until the relevant matter is fully resolved and any applicable statutory limitation period has expired.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Data Security

zzok implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and zzok's servers is encrypted using industry-standard TLS 1.2 or higher protocols. This ensures that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic hashing algorithm with a unique per-user salt, meaning that even in the event of a data breach, passwords cannot be recovered from stored hashes.
• Two-Factor Authentication (2FA): zzok offers SMS OTP two-factor authentication for all registered accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access.
• Access Controls: Access to personal data held by zzok is restricted to authorised personnel who require access in the course of their duties (such as compliance, customer support, and finance teams). All staff with data access undergo regular data protection training.
• Infrastructure Security: zzok's Platform infrastructure is hosted in secure, access-controlled data centres. Regular security assessments, penetration testing, and vulnerability scanning are conducted to identify and remediate potential weaknesses.
• Payment Data Isolation: Full payment account numbers, bKash wallet credentials, and banking details are not stored on zzok's systems. Payment transactions are processed directly through the respective payment providers' secure infrastructure.

Notwithstanding the security measures described above, no data transmission over the internet or electronic storage system is completely secure. zzok cannot guarantee absolute security and accepts no liability for losses arising from security incidents that are beyond our reasonable control, including incidents caused by your own failure to secure your account credentials.

Your Rights

As a data subject whose personal data is processed by zzok, you hold the following rights in relation to that data. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Subject Request" or via the 24/7 live chat on the Platform.

• Right of Access: You have the right to request a copy of the personal data that zzok holds about you, together with information about how that data is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You may update basic account information directly through your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of personal data that we no longer have a lawful basis to retain. Note that this right is subject to limitations where retention is required by law — for example, AML regulations require us to retain transaction records for seven years regardless of an erasure request.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that we restrict our use of your data while the matter is being resolved.
• Right to Data Portability: Where zzok processes your personal data on the basis of your consent or a contract, and that processing is carried out by automated means, you have the right to receive a copy of that data in a structured, machine-readable format (such as CSV or JSON) for the purposes of transferring it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where zzok relies on legitimate interests as the legal basis for that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where zzok processes your personal data on the basis of your consent (most commonly, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making: zzok may use automated processes for certain risk assessments (such as fraud screening or AML monitoring). Where such automated processing produces a decision that significantly affects you, you have the right to request human review of that decision.

zzok will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

Children's Privacy

The zzok Platform is strictly restricted to adults aged 21 and above. zzok does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to be held by a person under 21 years of age will be immediately suspended in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has created an account on the zzok Platform or has provided personal data to us, please contact us immediately at [email protected]. We will take prompt action to investigate, suspend the relevant account, and securely delete any personal data collected from or about the minor.

Third-Party Links

The zzok Platform may contain links to the websites of third-party game providers, payment processors, or other service partners. These links are provided solely for your convenience as a user. zzok does not operate or control these third-party websites, and this Privacy Policy does not apply to any personal data you provide to or that is collected by such third parties.

Before providing any personal data to a third-party website or service, we strongly recommend that you review that party's privacy policy independently. zzok accepts no responsibility or liability for the privacy practices of third-party websites linked from the zzok Platform.

Marketing Communications

zzok sends promotional communications — including bonus offers, seasonal promotions, new game launch announcements, and BPL / IPL cricket betting alerts — only to Players who have explicitly opted in to receive such communications during registration or at a later point through their account settings.

Marketing communications are sent via the following channels (subject to your preferences):

• Email: To your registered email address.
• SMS: To your registered Bangladeshi mobile number.
• Platform Notifications: To your account notification inbox within the zzok Platform.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by zzok;
• Updating your communication preferences in the "Account Settings" section of your zzok account;
• Contacting our support team via live chat or at [email protected] with the subject line "Unsubscribe".

Withdrawal of consent for marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates. These service communications are sent on the basis of contract performance and cannot be opted out of while your account remains active.

Changes to This Policy

zzok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or the features and services offered on the Platform. All amendments will be published on this page with a revised "Last Updated" date at the top of the document.

Where a proposed amendment is material — meaning it meaningfully changes the way in which we collect, use, or share your personal data — zzok will provide advance notice to all registered Players via a prominent in-Platform notification and/or an email to your registered address, at least fourteen (14) days before the amended policy takes effect.

Your continued use of the zzok Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any amended terms, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to remain informed about how zzok is protecting your personal data. The current version of this Privacy Policy supersedes all prior versions.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which zzok processes your personal data, please do not hesitate to reach out to our data protection team using the following contact details:

• Email: [email protected] (Subject: "Privacy Policy Enquiry" or "Data Subject Request")
• Live Chat: Available 24/7 directly on the zzok Platform — reference "Privacy" in your opening message for priority routing to our data protection team.
• Response Time: We aim to respond to all privacy-related enquiries within five (5) business days, measured in Bangladesh Standard Time (BST, UTC+6).

zzok is committed to resolving all privacy concerns promptly, transparently, and in good faith. We take every data protection enquiry seriously and will acknowledge receipt of your request within two (2) business days of it being received.