zp999 Privacy Policy — How We Protect Your Data

When you register an account, make a deposit, request a withdrawal, or contact customer support, zp999 collects personal information that you provide directly. This includes:

• Full name and date of birth (for account registration and age verification purposes).
• Email address and mobile phone number (used for account communications and two-factor authentication where enabled).
• Identity verification documents submitted in response to a KYC request (for example a national ID card, passport copy, or utility bill showing your residential address in Bangladesh).
• Financial information necessary to process deposits and withdrawals, including the mobile wallet number (bKash, Nagad, Rocket) or bank account details associated with your payment method.

When you access the zp999 platform, certain technical and behavioural data is collected automatically by our systems. This is standard practice for all online platforms and is used to maintain platform security and improve your experience:

• IP address and device type (mobile, tablet, desktop), operating system, and browser version — used for fraud prevention and regional compliance.
• Session data including login timestamps, game activity logs, bet amounts, and session duration — used for responsible gaming monitoring and dispute resolution.
• Cookie data — see Section 5 of this Policy for full details on the types of cookies zp999 uses and how you can manage your cookie preferences.

zp999 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing your name, contact details, and payment information is necessary to perform the contract between you and zp999 — i.e., to allow you to register, deposit, play, and withdraw.
• Legal obligation: Processing for KYC, anti-money laundering checks, age verification, and regulatory reporting is carried out to comply with applicable legal and regulatory requirements.
• Legitimate interests: Processing session data, device information, and game logs to detect fraud, prevent cheating, and maintain platform security serves the legitimate interests of zp999 and its player community.
• Consent: Where zp999 sends optional promotional communications (for example, bonus offers or tournament announcements), this is done on the basis of your consent, which you may withdraw at any time by contacting support.

zp999 processes financial data — including your bKash, Nagad, or Rocket wallet number, transaction amounts in BDT, and deposit and withdrawal histories — solely for the purpose of facilitating your requested transactions on the platform. This financial data is stored securely and is never shared with third parties for any purpose other than completing your requested transaction or complying with anti-money laundering obligations. zp999 does not store full card numbers for Visa or Mastercard transactions — card payments are handled by PCI-DSS compliant payment processors who transmit only a masked token to our systems. All financial data in transit is protected by SSL encryption. Withdrawal requests are processed exclusively to the payment method from which the corresponding deposit was made, consistent with standard AML practice.

zp999 uses cookies and similar tracking technologies on the zp999.ws platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players interact with the site. zp999 uses three categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They enable you to log in, maintain your session, and use core features such as the game lobby and cashier. These cookies cannot be disabled.
• Functional cookies: These remember your preferences, such as language settings and interface customisations, so that your experience is consistent across sessions.
• Analytics cookies: These collect aggregated, anonymised data about how players navigate the platform. This helps us identify areas for improvement and optimise the user experience for Bangladesh players. No personally identifiable information is contained in analytics cookies.

You may manage functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the performance of some platform features. Strictly necessary cookies are required for the platform to operate and cannot be turned off.

• Payment service providers (including bKash, Nagad, Rocket, Upay, and card payment processors): We share the minimum financial data necessary to complete your deposit or withdrawal transaction. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification and KYC service providers: Where a third-party KYC provider is used to verify your identity documents, the relevant documents are shared with that provider solely for verification purposes and are not retained by them beyond what is required for the verification process.
• Technology and platform infrastructure providers: Companies that provide hosting, security, and technical infrastructure services to zp999 may process certain data as part of their service delivery. These providers are contractually bound to process data only on zp999's instructions.
• Law enforcement and regulatory authorities: Where zp999 is required by applicable law or a lawful order to disclose player data to a government authority, regulatory body, or law enforcement agency, we will comply with such requirements. Where legally permissible, we will notify the affected player of such a disclosure.

zp999 retains your personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. As a general guide: account data (name, contact details, KYC documents) is retained for the duration of your active account and for a period of five years following account closure, in line with standard financial record-keeping requirements. Transaction records are retained for a minimum of five years from the date of the transaction to comply with anti-money laundering record-keeping obligations. Session logs and game activity data are retained for a period of up to two years for dispute resolution and responsible gaming audit purposes. After the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

• Right of access: You may request a copy of the personal data zp999 holds about you, including account details, KYC records, and transaction history.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request deletion of your personal data. This right is subject to our legal data retention obligations — for example, we cannot delete transaction records that we are legally required to retain for AML purposes.
• Right to restrict processing: In certain circumstances, you may request that we limit the way we process your personal data while a dispute or correction request is outstanding.
• Right to withdraw consent: Where processing is based on your consent (for example, promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

zp999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit between your device and our servers; access controls that restrict internal access to personal data to authorised personnel only on a need-to-know basis; regular security reviews of our platform infrastructure and third-party service providers; and prompt incident response procedures in the event of a suspected data security breach. While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your data secure — please use a strong, unique password for your zp999 account and never share your login credentials with anyone.

The zp999 platform is strictly intended for adults aged 21 and above. zp999 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If at any point during the account lifecycle zp999 determines or has reasonable grounds to suspect that an account holder is under 21 years of age, the account will be suspended immediately and any personal data collected will be handled in accordance with applicable data protection requirements. If you are a parent or guardian and believe that a minor in your care has registered an account with zp999, please contact us immediately at [email protected] so that we can take the appropriate action without delay.

zp999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the platform. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the zp999 platform for a reasonable period following the change, and where appropriate, by sending a notification to the email address registered to your account. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent amendment. We encourage you to review this Policy periodically. Your continued use of the zp999 platform after any amendment constitutes your acceptance of the updated Policy.