Privacy Policy — zoya 99

01 Data We Collect

When you register for an account with zoya 99, use our gaming services, or simply browse our website, we collect certain categories of personal information. The nature and volume of data collected depends on your level of interaction with the platform — a visitor who never registers will share far less data than a fully verified, active player. Below we outline every category of personal data that zoya 99 may collect, along with the context in which it is gathered.

Registration and Identity Data

When you create a zoya 99 account, we collect your full legal name, date of birth, mobile phone number, preferred payment method details (such as your bKash, Nagad, or Rocket number), and the password you choose for your account. This foundational data is required to establish your player profile and cannot be waived.

Identity Verification (KYC) Data

As part of our Know Your Customer process, you may be asked to submit copies of government-issued identity documents, such as your National Identity Card (NID), passport, or driving licence. We may also collect a selfie photograph for biometric matching purposes, and documentary evidence of your residential address. KYC data is handled with the highest level of care and is stored in an encrypted document repository with access restricted to our compliance team.

Financial and Transaction Data

We record all deposits, withdrawals, bonus claims, and wager transactions associated with your account, including the amounts, timestamps, payment channels used (bKash, Nagad, Rocket, Upay), and transaction reference numbers. This financial data is retained for audit and anti-money laundering purposes.

Technical and Device Data

Each time you access the zoya 99 platform, our servers automatically log your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, session duration, and timestamps of activity. This technical data is used to maintain platform security and improve user experience.

Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and any attachments submitted. This allows our support team to track the history of your interactions and resolve queries efficiently.

02 How We Use Your Data

zoya 99 uses the personal data described in Section 1 for the following specific, lawful purposes. We do not use your data for any purpose beyond those listed below, and we do not sell your personal information to third-party marketers under any circumstances.

03 Data Sharing

zoya 99 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, in order to operate the platform safely and legally, we do share specific categories of data with certain trusted partners and authorities under carefully controlled conditions.

Categories of Recipients

• Payment processors: Your mobile wallet number and transaction data are shared with bKash, Nagad, Rocket, and Upay solely for the purpose of processing deposits and withdrawals. These providers operate under their own regulatory obligations and privacy policies.
• Identity verification providers: KYC documents may be processed by a third-party identity verification service. Such providers are bound by contractual data processing agreements that prohibit use of your data for any purpose beyond verification.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive only the minimum technical data required to deliver game content — typically a session token and anonymised player identifier. They do not receive your name, NID, or payment details.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, zoya 99 may be obligated to disclose player data to law enforcement agencies, anti-money laundering units, or financial intelligence authorities. We will only disclose the minimum data necessary to satisfy the specific legal requirement.
• Fraud prevention networks: In cases of suspected fraud or multi-accounting, zoya 99 may share relevant account identifiers with trusted industry fraud prevention partners. No sensitive financial or document data is shared in this context.

International Data Transfers

Some of our technology partners and service providers may process data outside Bangladesh. In such cases, zoya 99 takes all reasonable steps to ensure that appropriate contractual safeguards are in place before any cross-border data transfer occurs. Where possible, we prefer to work with providers that store data within the region.

04 Cookies & Tracking

The zoya 99 website uses cookies and similar tracking technologies to deliver a personalised, secure, and high-performance experience. A cookie is a small text file placed on your device by a website you visit. Cookies allow the platform to remember your preferences, maintain your login session, and understand how users interact with the site.

Types of Cookies We Use

Managing Cookies

You may control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the zoya 99 platform and may prevent you from logging in or completing transactions. Analytics and marketing cookies can be disabled without affecting core platform access. Refer to your browser's help documentation for instructions on managing cookie preferences.

05 Data Retention

zoya 99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Different categories of data are subject to different retention periods, as detailed below.

When a data retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. zoya 99 conducts periodic internal data audits to ensure compliance with these retention schedules.

06 Your Privacy Rights

As a player using the zoya 99 platform, you hold specific rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact our data team via the support email or live chat. We aim to respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that zoya 99 holds about you. This includes your account information, KYC records, transaction history, and communication logs.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Contact live chat support or update your account profile directly.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to our legal retention obligations — data we are required to keep for AML or regulatory purposes cannot be deleted upon request until the mandatory retention period has elapsed.
• Right to Restrict Processing: In certain circumstances — for example, if you contest the accuracy of your data or object to its processing — you may request that we restrict how your data is used while the matter is under review.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request a machine-readable copy of the personal data you provided to us, suitable for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case we will assess whether our interests override your rights in the specific context.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, bonus notifications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

07 Data Security

zoya 99 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. While no system can claim absolute immunity from all threats, we maintain industry-standard security controls and continuously review and improve our defences.

Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the zoya 99 servers is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception during transmission.
• Encrypted data storage: Sensitive data — including KYC documents, payment records, and identity information — is stored in encrypted form at rest. Access to encrypted data stores requires multi-factor authentication from authorised personnel only.
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for suspicious access patterns in real time.
• Access controls: Internal access to player data is governed by the principle of least privilege. Staff members can only access the data categories required to perform their specific role. All internal access is logged and auditable.
• Regular security audits: zoya 99 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our platform and data handling processes.

Reporting a Security Concern

If you believe your zoya 99 account has been accessed without your authorisation, or if you discover a security vulnerability on the platform, please contact our support team immediately via live chat. Do not attempt to exploit any discovered vulnerability — responsible disclosure is always welcomed and will be handled promptly and confidentially.

08 Policy Updates & Contact

zoya 99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the revised policy will be published on this page with an updated effective date. For significant changes that affect your rights in a material way, we will endeavour to notify active players via the contact details registered on their account.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the zoya 99 platform following the publication of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated practices described therein.

Contact Our Data Team

For all privacy-related enquiries — including data rights requests, questions about how your information is used, or concerns about a potential data breach — please contact the zoya 99 data team using the details below. Our team is available to respond to privacy enquiries during standard business hours (Bangladesh Standard Time, UTC+6), with urgent security matters escalated 24/7.