Privacy Policy — zx999

When you interact with the zx999 platform — whether by creating an account, making a deposit, placing a bet, contacting support, or simply browsing the site — we may collect a range of personal and technical information about you. The categories of information we collect, and the circumstances in which we collect them, are described in detail below.

Registration data: When you open a zx999 account, you are required to provide your full legal name, date of birth, a valid mobile phone number registered in Bangladesh, and a password of your choosing. This information is collected to verify your identity, confirm that you meet the minimum age requirement of 18 years, and to establish your account on our platform.

Identity verification documents: In order to comply with our know-your-customer (KYC) obligations, zx999 may request copies of identity documents at various points during the account lifecycle — most commonly before your first significant withdrawal. Documents we may request include your Bangladesh National Identity Card (NID), passport, or driver's licence. We may also request proof of address or proof of payment method ownership. These documents are processed and stored in accordance with this Privacy Policy.

Financial data: When you make a deposit or withdrawal, we collect information relating to the payment method used — for example, the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account, or the bank account number for bank transfer transactions. We do not store full card details for card transactions; card payments are handled directly by our payment processing partners using PCI-DSS compliant systems.

Transaction history: We maintain a record of all financial transactions associated with your zx999 account, including deposits, withdrawals, bonus credits, bet placements, and game results. This data is necessary for account management, dispute resolution, anti-fraud operations, and regulatory compliance.

Device and technical data: When you access zx999 via a web browser or mobile device, we automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, and connection type. This information is used to optimise platform performance for your device, detect suspicious activity, and maintain platform security.

Usage and behavioural data: We collect data about how you interact with the zx999 platform — including the pages you visit, the games you play, how long you spend on each section, and the features you use most frequently. This data helps us improve the platform experience and identify areas for enhancement.

Communications data: If you contact the zx999 customer support team via live chat, email, or any other channel, we retain records of those communications including the content of your messages, the time and date of contact, and any resolutions provided. This data is used for support quality assurance and dispute resolution purposes.

zx999 does not sell, rent, or trade your personal data to any third party. However, in order to operate the platform and deliver the services you have signed up for, we do share certain categories of data with trusted third-party partners and service providers. All such sharing is governed by contractual data processing agreements that require recipients to handle your data with the same level of care and security that zx999 applies internally.

Payment processors: When you make a deposit or request a withdrawal, your financial data is shared with the relevant payment service provider — for example, bKash, Nagad, Rocket, Upay, or the relevant bank's processing infrastructure. This sharing is necessary to execute the transaction. Payment processors are required to handle your data in accordance with their own privacy policies and applicable financial regulations.

Game providers: The casino games available on zx999 are developed and operated by third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game provided by one of these studios, certain technical data (such as session identifiers, bet values, and game outcomes) may be transmitted to and processed by the game provider's systems. This data sharing is necessary for the game to function correctly and for results to be independently verified.

Identity verification partners: To fulfil our KYC obligations, we may use third-party identity verification services to check the authenticity of documents you submit. These partners process your identity document data solely for verification purposes and are prohibited from using it for any other purpose.

Analytics providers: We use privacy-conscious analytics tools to understand how players interact with the zx999 platform. Analytics data is typically aggregated and anonymised wherever possible. Where individual-level data is processed by analytics providers, it is done under a data processing agreement that restricts use to the stated analytical purpose.

Legal and regulatory disclosure: zx999 may be required to disclose personal data to competent authorities or regulatory bodies in response to a valid legal request, court order, or regulatory investigation. We will only disclose the minimum data necessary to comply with such requirements, and where legally permissible, we will notify the affected player of any such disclosure.

Business transfers: In the event that zx999 undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred as part of that transaction. In such circumstances, we will endeavour to notify affected players in advance and ensure that the receiving entity agrees to honour the commitments set out in this Privacy Policy.

zx999 takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly to reflect evolving security best practices.

Encryption: All data transmitted between your device and the zx999 servers is encrypted using 256-bit SSL/TLS technology. This ensures that your personal information, login credentials, and financial data cannot be intercepted by unauthorised parties during transmission. Data stored on our servers is also encrypted at rest using industry-standard encryption protocols.

Access controls: Access to personal data within the zx999 organisation is strictly limited to personnel who require it to perform their job functions. All staff with access to personal data undergo background screening and receive regular data protection training. Access rights are reviewed periodically and revoked immediately upon change of role or departure from the organisation.

Infrastructure security: The zx999 platform is hosted on secure infrastructure with multi-layered firewall protection, intrusion detection systems, and regular penetration testing by independent security specialists. Our servers are located in data centres with physical access controls, redundant power systems, and 24/7 monitoring.

Account security: Your zx999 account is protected by the password you set at registration. We strongly recommend using a strong, unique password that is not used on any other platform. zx999 offers two-factor authentication (2FA) via SMS OTP as an additional layer of account protection. We strongly encourage all players to activate 2FA in their account security settings.

Incident response: In the event of a data security incident that affects your personal data, zx999 will take immediate steps to contain the incident, assess the scope and severity of the breach, and notify affected players without undue delay where required. We will provide clear information about what data was affected, what steps we have taken in response, and what you can do to protect yourself.

Your responsibilities: While zx999 takes extensive measures to protect your data, you also play an important role in maintaining the security of your account. You must keep your login credentials confidential, never share your password with anyone, and contact support immediately if you suspect unauthorised access to your account. zx999 cannot be held responsible for data breaches that result from your failure to maintain the security of your login credentials.

As a user of the zx999 platform, you hold a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact the zx999 support team via live chat or by sending a written request to the email address provided in Section 8. We will respond to all valid requests within a reasonable period, typically within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that zx999 holds about you. We will provide this information in a structured, commonly used, and machine-readable format. There is no fee for a standard access request, though we reserve the right to charge a reasonable administrative fee for manifestly repetitive or excessive requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — such as your mobile number and email address — can be updated directly in your Account Settings. For other corrections, please contact the support team.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Erasure requests are subject to any overriding legal retention obligations as described in Section 6.
• Right to restriction of processing: In certain circumstances, you have the right to request that we restrict our processing of your personal data — for example, while an inaccuracy dispute is being resolved, or where you have objected to processing and we are considering that objection.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, portable format and to request that it be transferred directly to another service provider where technically feasible.
• Right to object: You have the right to object to our processing of your personal data where that processing is based on legitimate interest. You also have the right to object at any time to the use of your data for direct marketing purposes, and this objection will be honoured immediately without requiring any justification.
• Right to withdraw consent: Where our processing of your personal data is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights described above, please contact the zx999 support team and clearly state which right you wish to exercise and the specific data or processing activity your request relates to. We may need to verify your identity before processing your request to ensure that data is not disclosed to or altered at the request of an unauthorised third party.