z2bet Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") describes how z2bet ("Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "user") who register for or use the z2bet platform at z2bet.bet. This Policy forms part of the agreement between you and z2bet, together with the Terms and Conditions and the Responsible Gaming Policy.

By creating an account on z2bet or by continuing to use the platform after this Policy has been updated, you confirm that you have read and understood this Policy and that you consent to your personal data being processed in accordance with it. If you do not agree with how z2bet processes your personal data, you must not create or continue to use a z2bet account.

z2bet takes data privacy seriously. We do not sell your personal data to third parties for their own marketing purposes. We do not share your data with any party except as described in this Policy. Our data handling practices are designed to be transparent, proportionate, and consistent with the information needs of a responsible online betting operator serving players in Bangladesh.

2. What Personal Data We Collect

z2bet collects personal data in the following categories. Not all categories apply to every user — the data collected depends on how you interact with the platform:

3. How We Collect Your Data

z2bet collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, submit KYC documents, make a deposit or withdrawal request, use the live chat support function, or otherwise interact with any feature of the z2bet platform that involves entering personal information.
• Automatically — through cookies, server logs, and analytics tools that record your device information, IP address, browser characteristics, and on-platform behaviour when you visit or use z2bet.bet. This data is collected passively and does not require you to actively provide information.
• From payment service providers — when you initiate a deposit or withdrawal through bKash, Nagad, Rocket, or a bank transfer, the payment service provider confirms the transaction reference and the account identifier (wallet number or bank account number) to z2bet. z2bet does not receive your full bKash or Nagad account credentials — only the transaction confirmation data necessary to credit or debit your z2bet account.
• From identity verification partners — z2bet may use a third-party KYC service to assist with identity and age verification. Any such partner is bound by a data processing agreement that prohibits them from using your identity data for any purpose other than KYC verification for z2bet.

4. How We Use Your Personal Data

z2bet processes your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without obtaining your additional consent:

• Account creation and management — to register your z2bet account, verify your identity and age, maintain your account profile, and provide you with access to all platform features.
• Payment processing — to credit your account following a successful deposit, process withdrawal requests to your registered payment account, and maintain an accurate transaction ledger for your account.
• Responsible gaming compliance — to monitor betting patterns that may indicate problem gambling, apply deposit limits or session alerts when requested, process self-exclusion requests, and enforce age and eligibility restrictions.
• Fraud prevention and security — to detect and investigate suspicious activity, prevent money laundering, identify unauthorised account access, protect the integrity of the platform, and safeguard the funds and data of all players.
• Customer support — to respond to your support queries submitted via live chat, investigate account issues, resolve disputes, and maintain a record of your support history for quality and training purposes.
• Platform improvement and analytics — to understand how players use z2bet, identify technical issues, optimise page performance, and improve the overall betting and gaming experience for Bangladesh players.
• Promotional communications — to send you relevant bonus offers, promotions, and platform updates via SMS or on-platform notification. You may opt out of promotional communications at any time through your account settings or by requesting opt-out via live chat support.

z2bet will not process your personal data for purposes beyond those listed above without first informing you and, where required by applicable law, obtaining your explicit consent.

5. Legal Basis for Processing

z2bet processes your personal data on the following legal bases:

• Contractual necessity — processing your identity data, contact data, and payment data is necessary to perform the contract between you and z2bet (the Terms and Conditions). Without this data, z2bet cannot provide you with an account, accept deposits, process withdrawals, or settle bets.
• Legal obligation — processing KYC documentation, maintaining transaction records, and monitoring for money laundering indicators is required by applicable laws and regulations governing online financial services and gaming operations.
• Legitimate interests — processing technical data and gaming activity data for fraud prevention, platform security, responsible gaming monitoring, and analytics serves the legitimate interests of z2bet and its players in maintaining a safe, fair, and reliable platform.
• Consent — processing your data for promotional communications (SMS, on-platform notifications) is based on your consent, given at registration or subsequently. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6. Who We Share Your Data With

z2bet shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers — bKash, Nagad, Rocket, and bank partners receive the minimum data required to process your deposit or withdrawal transaction (typically your transaction amount, reference, and account identifier). These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification service providers — if z2bet uses a third-party KYC service, that provider will receive your identity documents solely for the purpose of verifying your identity and age on z2bet's behalf. KYC providers are bound by strict data processing agreements.
• Game providers — Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other game studios receive limited technical session data (such as session tokens and bet amounts) necessary to serve game content to your device and settle game results. Game providers do not receive your identity documents, NID data, or payment account details.
• Regulatory and law enforcement authorities — z2bet may disclose your personal data to government bodies, regulators, or law enforcement agencies when required to do so by applicable law, court order, or lawful request. z2bet will only disclose the minimum data required to comply with such a legal obligation.

7. Payment Data and Financial Information

z2bet handles payment data with particular care given its sensitive nature. When you deposit funds via bKash, Nagad, or Rocket, the transaction is initiated and completed through the payment provider's own secure interface. z2bet does not store your bKash PIN, Nagad PIN, or Rocket PIN at any point. The only payment data retained by z2bet is the wallet number or bank account number associated with each transaction, the transaction amount, the transaction date and time, and the platform-generated reference number. This data is retained to maintain your account's transaction ledger and to process future withdrawal requests to the correct account.

All financial transaction records held by z2bet are stored on encrypted servers. Access to payment data is restricted to authorised z2bet personnel who require it for the specific purposes of payment processing, fraud investigation, or account dispute resolution. z2bet applies role-based access controls to ensure that payment data is not accessible to staff whose roles do not require it.

8. KYC and Identity Verification

Know Your Customer (KYC) verification is a mandatory process for all z2bet players before their first withdrawal. KYC requires you to submit a clear photograph of your Bangladesh National Identity Card (NID) — both the front and reverse sides — so that z2bet can confirm your legal name, date of birth, and Bangladesh nationality. z2bet will also cross-reference the name on your NID against the name registered on your payment account (bKash, Nagad, Rocket, or bank) to confirm that deposits and withdrawals are made by the verified account holder only.

KYC documents are stored securely and retained for the period required by applicable law and our data retention obligations. Access to KYC documents is restricted to authorised compliance personnel and is not shared with any third party except KYC service providers bound by a data processing agreement or regulatory authorities acting under a lawful request.

9. Cookies and Tracking Technologies

z2bet uses cookies and similar tracking technologies on z2bet.bet to ensure the platform functions correctly, to enhance your experience, and to collect analytics data. The following types of cookies are used:

• Strictly necessary cookies — these are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in, security cookies that protect against CSRF attacks, and cookies that store your language preference and session state.
• Analytics cookies — these cookies collect anonymised data about how users navigate z2bet, which pages are visited most frequently, and where users encounter issues. This data helps z2bet improve the platform. Analytics data is aggregated and does not identify individual users.
• Functional cookies — these cookies remember your preferences (such as your preferred deposit method or notification settings) so that you do not need to re-enter them each time you log in to z2bet.

Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies may prevent you from accessing your z2bet account or using certain platform features. z2bet does not use cross-site tracking cookies that follow you to other websites outside z2bet.bet.

10. Data Retention

z2bet retains your personal data for as long as your account remains active and for a defined period after account closure. The following retention periods apply: identity and KYC documents are retained for a minimum of 5 years after account closure to comply with applicable anti-money laundering and financial record-keeping obligations. Transaction records (deposit history, withdrawal history, bet history) are retained for a minimum of 5 years after the date of each transaction. Communications data (live chat transcripts, support ticket records) are retained for 2 years from the date of the last interaction.

After the applicable retention period has expired, z2bet will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, the anonymised data may be retained for longer periods for aggregate statistical purposes — this anonymised data does not constitute personal data and carries no privacy risk to you.

11. Data Security

z2bet implements industry-standard security measures to protect your personal data from unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and z2bet.bet, encrypted storage of sensitive data including KYC documents and payment records, role-based access controls that restrict data access to authorised personnel only, regular security audits and penetration testing of platform infrastructure, and two-factor authentication options for account access.

While z2bet takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your z2bet login credentials secure and for ensuring that your registered mobile device is not accessible to unauthorised persons. If you believe your account has been compromised, contact z2bet support via live chat immediately.

12. Your Data Rights

As a z2bet player, you have the following rights in relation to your personal data. To exercise any of these rights, contact z2bet support via live chat or by email at [email protected]:

• 01Right of access — you may request a copy of the personal data z2bet holds about you. z2bet will provide this within a reasonable timeframe and at no charge for standard requests.
• 02Right to rectification — if any personal data z2bet holds about you is inaccurate or incomplete, you may request that it be corrected. z2bet will review and correct verified inaccuracies promptly.
• 03Right to erasure — in certain circumstances, you may request that z2bet delete your personal data. This right is subject to z2bet's legal obligations to retain certain data (e.g. KYC records and transaction records required by anti-money laundering regulations), which take precedence over erasure requests.
• 04Right to restrict processing — you may request that z2bet temporarily restrict the processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being investigated.
• 05Right to object — you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though z2bet may be able to demonstrate that its legitimate interests override your objection in specific cases.
• 06Right to withdraw consent — where processing is based on your consent (e.g. promotional SMS), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

z2bet will respond to all data rights requests within a reasonable period. If z2bet is unable to fulfil a request — for example because a legal retention obligation applies — z2bet will explain the reason for refusal in writing.

13. Underage Users and Child Safety

The z2bet platform is strictly for adults aged 21 and above. z2bet does not knowingly collect or process personal data belonging to individuals under the age of 21. If z2bet discovers or is notified that a person under the age of 21 has registered an account, that account will be closed immediately, all funds will be returned to the payment account used for deposit, and all personal data associated with the underage account will be deleted in accordance with our data retention policy — except where retention is required by law (e.g. anti-money laundering record-keeping obligations).

14. Changes to This Privacy Policy

z2bet reserves the right to update or amend this Privacy Policy at any time. The most current version will always be available at z2bet.bet/privacy-policy. The "Last updated" date at the top of this page reflects the date of the most recent revision. Where a change to this Policy materially affects how z2bet processes your personal data, z2bet will make reasonable efforts to notify you via on-platform messaging or SMS before the change takes effect.

Your continued use of z2bet after any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you should stop using the z2bet platform and close your account by contacting z2bet support via live chat.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how z2bet handles your personal data, please contact the z2bet support team. Our team is available 24/7 via live chat on z2bet.bet. For written correspondence, you may also reach us at the email address below — please note this address is displayed as plain text only and is not a clickable link: