nz777 Privacy Policy

1Introduction

This Privacy Policy ("Policy") sets out how nz777 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "you", "your") who access or use the nz777 platform available at https://nz777.bio, including all associated sub-domains and mobile-browser interfaces operated by nz777.

By accessing the Platform and creating a player account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with the nz777 Terms and Conditions, which are available at https://nz777.bio/terms-conditions. If you do not agree with any part of this Policy, please do not use the Platform.

nz777 takes data privacy seriously. We operate a strict internal data governance framework that limits access to personal data to only those members of staff and approved third-party processors who require it for the purposes described in this Policy. We do not sell player data and we do not use player data for any purpose outside the scope of this Policy.

2Personal Data We Collect

nz777 collects the following categories of personal data from players. We collect only the data that is necessary to operate the Platform safely, process transactions, comply with legal obligations, and provide a high-quality gaming experience for Bangladesh players:

• Identity data: full name, date of birth, and where required for KYC verification, a copy of a government-issued photo identification document (e.g. National ID card, passport).
• Contact data: mobile phone number (required for OTP verification on all withdrawals), and optionally an email address where the player chooses to provide one for account correspondence.
• Financial data: deposit and withdrawal transaction history, payment method type (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), and masked payment identifiers (e.g. last four digits of a card or a masked mobile wallet number). We do not store full card numbers or full mobile banking PINs.
• Gameplay data: session logs, game history (including game titles, bet amounts, win/loss records), betting preferences, and responsible gaming settings (deposit limits, session limits, self-exclusion status) configured by the player.
• Technical data: IP address (recorded at login and significant account events for security and fraud-prevention purposes), device type, mobile browser version, and operating system. We do not use this data to build cross-site advertising profiles.
• Communications data: records of support interactions submitted via the support email address, including the content of enquiries and our responses, retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3How We Collect Personal Data

nz777 collects personal data through the following channels. We do not purchase personal data lists from brokers, and we do not collect data from social media profiles without your explicit consent:

• Directly from you: when you complete the account registration form on nz777, when you submit KYC verification documents, when you initiate a deposit or withdrawal, and when you contact the support team with an enquiry.
• Automatically through the Platform: session data, login timestamps, IP addresses, device identifiers, and gameplay logs are recorded automatically when you use the Platform, as is standard practice for all regulated online gaming platforms.
• From payment processors: when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processor partners confirm transaction status and provide masked payment identifiers to allow us to reconcile your account balance correctly.
• From identity verification services: where required to satisfy KYC obligations, nz777 may use third-party identity verification service providers to cross-check identity documents submitted by players. These providers operate under strict data processing agreements and may not retain data beyond the period required to complete verification.

4How We Use Your Personal Data

nz777 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that has not been disclosed in this Policy:

• Account creation and management: to register your player account, maintain accurate account records, authenticate your identity at login, and process account-level settings such as responsible gaming limits and self-exclusion requests.
• Transaction processing: to process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to process withdrawal requests to the same payment methods; to maintain accurate transaction histories; and to resolve any transaction disputes.
• KYC and age verification: to verify that you are at least 21 years of age, to confirm your identity matches the payment methods registered on your account, and to comply with anti-money laundering obligations applicable to online gaming platforms operating in Bangladesh.
• Customer support: to respond to enquiries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes. Support interactions are handled by trained staff and are kept confidential.
• Fraud prevention and platform security: to detect and investigate suspicious account activity, identify potential bonus abuse, money laundering, or collusion, and to protect the integrity of the Platform and the fairness of the gaming environment for all Bangladesh players.
• Service improvement and personalisation: to analyse aggregated, anonymised usage patterns to improve the Platform's performance, navigation, and game selection; and where you have opted in to marketing communications, to send you relevant promotional offers tailored to your game preferences and the Bangladesh market (e.g. BPL season promotions, Eid bonuses).

5Legal Basis for Processing

nz777 processes personal data only where a valid legal basis exists for doing so. The following table summarises the primary legal basis applicable to each processing activity:

6Sharing Your Personal Data

nz777 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: we share the minimum data required to process your deposit or withdrawal with our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors). These partners are contractually bound to use your data only to complete the transaction and are prohibited from using it for any other purpose.
• Identity verification providers: where KYC verification requires document checking, we share identity documents with our approved verification partner. The verification partner is bound by a data processing agreement that prohibits retention of documents beyond the period required to complete verification.
• Law enforcement and regulatory authorities: where we are required by applicable law, court order, or regulatory direction to disclose personal data to a law enforcement agency, financial intelligence unit, or regulatory authority, we will do so. We will notify affected players of such disclosures where we are legally permitted to do so.
• Game studio providers: aggregate, anonymised gameplay statistics may be shared with our game studio partners (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) for platform optimisation and game performance monitoring purposes. No individually identifiable player data is shared with game studios.

All third parties with whom nz777 shares personal data are required to implement appropriate technical and organisational security measures to protect that data, and are contractually prohibited from using it for any purpose beyond the stated scope. nz777 remains responsible for the data processing activities of its authorised third-party processors and maintains data processing agreements with all such parties.

7Cookies and Tracking Technologies

nz777 uses cookies and similar session-tracking technologies on the Platform. We use only strictly necessary cookies that are essential to the operation of the Platform. We do not use third-party advertising cookies, behavioural tracking pixels, or cross-site tracking technologies. The following types of cookies are used:

• Session cookies: temporary cookies that keep you authenticated during your active Platform session. These cookies are deleted automatically when you close your mobile browser or log out of your nz777 account. They contain no personally identifiable information beyond a session token.
• Security cookies: used to detect and prevent fraudulent or unauthorised access attempts. These cookies record a hashed device fingerprint that allows our security systems to flag logins from unfamiliar devices and prompt additional verification.
• Preference cookies: used to remember your in-Platform preferences such as your selected language rendering and responsible gaming display settings. These cookies improve your experience by preventing you from having to reconfigure your preferences on every visit.

You may disable cookies by adjusting the settings in your mobile browser. Please note that disabling session cookies will prevent you from logging into your nz777 account, as session authentication relies on cookie-based token storage. Security cookies cannot be disabled as they are essential to the Platform's fraud prevention systems.

8Data Retention

nz777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply: account data and KYC verification records are retained for a minimum of five years from the date of account closure to satisfy anti-money laundering record-keeping requirements; transaction records are retained for a minimum of five years from the date of the transaction; gameplay logs are retained for two years for dispute resolution purposes; support correspondence is retained for two years from the date of the last interaction in a support thread.

Where a player requests deletion of their personal data, nz777 will delete or anonymise all data that is not subject to a mandatory retention obligation. Data subject to a legal retention requirement (e.g. AML records, transaction logs) will be retained for the legally mandated period and then securely deleted. Players will be informed of the expected retention period for any data that cannot be immediately deleted upon request.

9Data Security

nz777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include: SSL/TLS encryption on all connections to the Platform; encrypted storage of sensitive personal data fields; strict role-based access controls limiting staff access to personal data on a need-to-know basis; OTP-based authentication for all withdrawal requests; automated anomaly detection systems that flag unusual login patterns and account activity for manual review; and regular internal security reviews of our data handling procedures.

While nz777 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. Players are advised to use strong, unique passwords for their nz777 accounts, to avoid accessing their accounts from shared or public devices, and to log out of their account after each session. If you believe your account security has been compromised, contact [email protected] immediately.

10Your Data Rights

As a player on nz777, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to all data rights requests within 5 working days of receipt:

• Right of access: you have the right to request a copy of the personal data nz777 holds about you. We will provide this in a structured, machine-readable format within the response period.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. This includes updating your registered mobile number, correcting a name spelling, or updating your date of birth if it was entered incorrectly at registration.
• Right to erasure: you have the right to request that nz777 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any mandatory retention obligations. We will delete all data that we are legally permitted to delete within a reasonable period following receipt of a valid erasure request.
• Right to restrict processing: you have the right to request that nz777 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of data we hold, or where you have objected to our processing of your data pending verification of whether our legitimate interests override your rights.
• Right to data portability: you have the right to receive a copy of the personal data you provided to nz777 in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact [email protected].

nz777 will not charge a fee for processing data rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, nz777 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with written reasons provided to the player.

11Children's Privacy

nz777 operates a strict minimum age policy. The Platform is intended solely for adults aged 21 years and above. nz777 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will immediately close the associated account, delete all personal data collected from that individual, and reverse any transactions processed on that account where technically possible.

If you are a parent or guardian and believe that a minor under your supervision has created an account on nz777 or submitted personal data to the Platform, please contact us immediately at [email protected]. We will take immediate action to close the account and delete all associated data.

12Third-Party Links and Services

The nz777 Platform may reference or integrate with third-party services including payment processors and game studio platforms. nz777 does not control the privacy practices of these third parties and is not responsible for their data handling. Where you interact with a third-party service through the Platform (e.g. initiating a bKash transaction), the privacy policy of that third-party provider will also apply to data processed directly by that provider. We encourage players to review the privacy policies of payment providers before initiating transactions.

13International Data Transfers

nz777 is a platform serving the Bangladesh market. Where personal data is processed by our approved third-party service providers, some of those providers may process data on servers located outside Bangladesh. In such cases, nz777 ensures that appropriate contractual safeguards (such as data processing agreements incorporating standard contractual clauses) are in place to protect your personal data in accordance with applicable data protection principles.

nz777 does not transfer personal data internationally for commercial purposes. Any international transfers that occur as part of payment processing or game platform operations are governed by the data processing agreements between nz777 and the relevant third-party processor and are subject to appropriate safeguards.

14Changes to This Privacy Policy

nz777 reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes that significantly affect how we process your personal data or your rights as a data subject, we will endeavour to notify you via the registered email address on your account or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the publication of any update to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes made to this Policy, please stop using the Platform and contact [email protected] to request account closure and data deletion.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data nz777 holds about you, or your data rights, please contact our privacy and data protection team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 5 working days.

Privacy enquiries email: [email protected]. Please include your registered mobile number and a brief description of your enquiry so we can locate your account records efficiently. nz777 will never ask you to provide your account password, full payment card number, or OTP code via email — any communication claiming to be from nz777 that requests such information should be treated as fraudulent.