cz77 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how cz77 ("cz77", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the cz77 online betting and casino platform available at cz77.io. This Policy applies to all users of our website, mobile interface, and any related services, regardless of the device or method used to access the platform.

By registering an account, accessing the cz77 platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the overall agreement between you and cz77.

cz77 is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles. We process personal data only to the extent necessary to deliver our services, comply with our legal obligations, and continuously improve your experience on the platform.

cz77 collects personal data across several categories depending on how you interact with the platform. The table below summarises what we collect and why we need it.

We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required and permitted by applicable law (for example, in exceptional responsible gaming intervention scenarios).

cz77 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, browser fingerprints, session logs, and page interaction data gathered through our server infrastructure and analytics tools.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. We receive only the minimum data necessary to reconcile the transaction — we do not receive your full mobile banking credentials.
• Third-party game providers: Game session data (rounds played, stakes, outcomes, RTP metrics) received from our game studio partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. This data is used to credit winnings, resolve disputes, and monitor for irregular play patterns.
• Cookies and tracking technologies: See Section 7 for a detailed explanation of our cookie usage.
• Identity verification services: Where required for KYC compliance, we may use third-party identity verification providers who process a copy of your submitted identity document and return a verification result to us. We do not store raw biometric data derived from this process.

cz77 processes your personal data only where a valid legal basis exists for doing so. The following legal bases apply to our processing activities:

• Contractual necessity: Processing required to fulfil the contract between you and cz77, including creating and managing your account, processing deposits and withdrawals, settling bets, and delivering customer support.
• Legal obligation: Processing required for cz77 to comply with applicable legal requirements, including anti-money laundering (AML) obligations, identity verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing that serves cz77's legitimate operational interests and does not override your fundamental rights or freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Processing for which you have provided explicit, freely given, informed consent — primarily the delivery of marketing communications by email or SMS. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

cz77 uses the personal data we hold about you for the following specific purposes:

• Account management: To create, maintain, and administer your player account, including processing your registration, managing your wallet balance, and applying responsible gaming tools you have selected.
• Identity and age verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years. This is a prerequisite for using any real-money feature of the platform.
• Payment processing: To facilitate BDT deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, or Upay), reconcile transactions, and investigate payment discrepancies.
• Game delivery and dispute resolution: To record your game sessions, calculate and credit winnings, process bonus claims, and resolve any disputes relating to bet outcomes or casino game rounds.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, money laundering, multiple-account abuse, bonus misuse, and unauthorised account access.
• Responsible gaming oversight: To monitor your gameplay patterns for indicators of problem gambling and, where appropriate, proactively apply responsible gaming interventions in line with our Responsible Gaming policy.
• Customer support: To respond to your enquiries, handle complaints, and provide assistance with account issues.
• Legal and regulatory compliance: To meet our obligations under applicable law, including maintaining transaction records, responding to court orders or regulatory requests, and cooperating with law enforcement investigations where legally required.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve the performance, design, and content of the cz77 platform. This analysis uses anonymised or pseudonymised data where possible.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and news about new features on the cz77 platform, where you have opted in to receive such communications.

cz77 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processing partners: bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute your deposit and withdrawal requests. Each provider operates under its own privacy framework and is responsible for the data it processes on its own infrastructure.
• Game studio providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive your account identifier and session data to deliver game content, calculate outcomes, and return results to your cz77 wallet. These providers are contractually prohibited from using your data for any purpose outside of delivering the contracted service.
• Identity verification providers: Where KYC checks are conducted via a third-party service, your submitted identity documents and personal details are transmitted to that provider for verification. The provider returns a verification status to cz77 and is contractually prohibited from retaining your identity documents beyond the verification period.
• Technology and hosting infrastructure: cz77's platform is hosted on secure servers. Our infrastructure and hosting partners may process technical data (server logs, IP addresses) in the course of providing hosting, CDN, and security services. These partners are bound by data processing agreements that restrict their use of your data.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of cz77 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of cz77's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer before it takes place and explain the implications for their data.

cz77 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit a website. The following types of cookies are used on cz77.io:

You may control non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. cz77 does not use third-party advertising or retargeting cookies.

cz77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention schedules are as follows:

• Active account data: Retained for the duration of your account relationship with cz77 and for a minimum period of 5 years following account closure, in line with AML record-keeping obligations.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction to satisfy financial compliance and audit requirements.
• Identity verification documents: Copies of NID, passport, or other identity documents submitted for KYC are retained for the duration of your account and for 5 years following closure. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
• Support correspondence: Customer support tickets and live chat transcripts are retained for 2 years from the date of the last message in the conversation thread.
• Marketing opt-in records: Records of your marketing consent are retained for the duration of the consent and for 2 years after you withdraw consent, to demonstrate compliance with consent obligations.
• Technical and server logs: IP logs and server access records are retained for a maximum of 90 days unless a security investigation requires retention beyond that period.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

cz77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
• Encrypted storage of sensitive data at rest, including identity documents, financial records, and account credentials.
• Strict access controls: Personal data is accessible only to cz77 personnel who require it for their specific role. Access is governed by role-based permissions and is logged for audit purposes.
• Multi-factor authentication (MFA) for internal staff systems that contain personal data.
• Regular security assessments including vulnerability scans, penetration testing, and code reviews of the platform's security architecture.
• Incident response procedures: cz77 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the breach.

As a player on the cz77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your registered username and a description of your request.

• Right of access: You have the right to request a copy of the personal data cz77 holds about you. We will provide this within 30 days of a valid request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Some corrections (e.g., name changes) may require supporting documentation.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot erase data we are required by law to retain.
• Right to restriction of processing: You may request that we temporarily restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to object: You have the right to object to processing based on cz77's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for a legal claim.
• Right to withdraw marketing consent: Where we send you marketing communications on the basis of your consent, you may withdraw that consent at any time by contacting support or updating your account notification preferences. Withdrawal does not affect the lawfulness of prior processing.
• Right to data portability: Where technically feasible, you may request a machine-readable copy of personal data you have provided to cz77 for the purpose of transferring it to another platform.

cz77 will respond to all valid data rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

cz77 enforces a strict minimum age requirement of 21 years for all players. The cz77 platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. We use automated and manual age-verification procedures at registration to enforce this requirement.

If cz77 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the relevant account, return any deposited funds in accordance with applicable guidelines, and securely delete the associated personal data. If you believe that a minor has registered an account on cz77, please notify us immediately at [email protected].

21+ only. Please gamble responsibly.

The cz77 platform may contain references to third-party services, including our payment partners (bKash, Nagad, Rocket, Upay) and game studio providers. When you interact with these third-party services, you are subject to their own privacy policies and terms, which are independent of this Policy.

cz77 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the cz77 platform. Our inclusion of a reference to a third-party service does not constitute an endorsement of its privacy practices.

cz77 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email to the address on file, or through a prominent notice on the platform, no less than 7 calendar days before the revised Policy takes effect — except where immediate changes are required by law.

Your continued use of the cz77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The most current version of this Policy is always available at cz77.io/privacy-policy and is identified by the "Last updated" date shown at the top of this document.

We recommend reviewing this Policy periodically, particularly if you have been absent from the platform for an extended period, to ensure you remain comfortable with how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cz77 handles your personal data, our support team is available 24 hours a day, 7 days a week.

You may reach us by email at: [email protected] — please note this address is provided as plain text only and is not a clickable link.

When submitting a data rights request or privacy enquiry, please include your registered username and a clear description of your request so that we can locate your account and respond efficiently. cz77 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.

cz77 serves players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. All privacy-related support communications are conducted in English.