zt99 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how zt99 ("zt99", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of users ("Player", "You", "Your") who access or use the online betting and casino platform operated at https://zt99.io (the "Platform"). This Policy applies to all services available on the Platform, including sports betting, live casino, slots, payment processing, customer support, and promotional activities.

zt99 is designed for and directed at players physically located in Bangladesh. All Platform communications and support services are provided in English. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the Platform and are incorporated by reference into this Policy.

This Policy was last reviewed and updated on 1 January 2026. The most current version is always available at https://zt99.io/privacy-policy.

2. Data Controller

For the purposes of this Policy, zt99 acts as the data controller in respect of all personal information collected from players who register and use the Platform. As data controller, zt99 determines the purposes for which and the means by which personal data is processed. If you have any questions about how zt99 handles your data, or wish to exercise any of your data rights, you may contact our Data Protection team at:

• Email: [email protected]
• Platform: https://zt99.io
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

3. Personal Data We Collect

zt99 collects personal data in order to provide, maintain, and improve the Platform and to comply with our legal and responsible gaming obligations. The categories of personal data we collect are set out in the table below.

Category	Examples	Why We Collect It
Identity Data	Full legal name, date of birth, national ID number, passport number	Account registration, age verification, KYC compliance
Contact Data	Mobile phone number, email address, residential address in Bangladesh	Account communication, support, notifications, two-factor authentication
Financial Data	bKash / Nagad / Rocket / Upay account numbers, transaction history, deposit and withdrawal amounts	Payment processing, fraud prevention, anti-money laundering compliance
Account Data	Username, account balance, betting history, bonus usage, game activity logs	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, operating system, browser type, session timestamps	Security, fraud detection, technical troubleshooting
Usage Data	Pages visited, features used, time spent on Platform, click paths	Platform improvement, user experience optimisation
Communications Data	Live chat transcripts, email correspondence, support ticket content	Support quality, dispute resolution, training
Document Data	Copies of national ID, utility bills, mobile financial service statements	KYC identity verification, source of funds verification

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, or data concerning sexual orientation, except where strictly required by law and with your explicit consent.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of the personal data zt99 holds about you is provided directly by you during the following interactions with the Platform:

• Completing the account registration form;
• Submitting identity verification documents during KYC;
• Making a deposit or requesting a withdrawal;
• Contacting our customer support team via live chat or email;
• Participating in promotions, surveys, or competitions;
• Updating your account profile or preferences.

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically through cookies, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser settings, pages visited, and the time and duration of your sessions. This automatic data collection helps zt99 maintain Platform security, detect fraudulent activity, and improve the overall user experience.

4.3 Data From Third Parties

zt99 may receive personal data about you from third-party service providers where this is necessary for the lawful operation of the Platform. These third parties include payment processors (bKash, Nagad, Rocket, Upay), identity verification services, fraud prevention agencies, and game content providers. Any data received from third parties is handled in accordance with this Privacy Policy.

5. Purposes and Legal Basis for Processing

zt99 processes your personal data only where there is a valid legal basis for doing so. The primary purposes for which we process your data, and the corresponding legal basis for each, are as follows:

• Account creation and management: Processing is necessary for the performance of our contract with you (the Terms & Conditions you accepted at registration).
• Payment processing: Processing is necessary for the performance of our contract with you and to comply with our legal obligations relating to financial transactions.
• Identity verification (KYC): Processing is necessary to comply with our legal obligations, including age verification and anti-money laundering requirements.
• Fraud detection and platform security: Processing is necessary for the purposes of our legitimate interests in preventing financial crime and protecting the integrity of the Platform.
• Responsible gaming monitoring: Processing is necessary to comply with our legal and ethical obligations to protect players from gambling-related harm.
• Customer support: Processing is necessary for the performance of our contract with you and for the purposes of our legitimate interests in providing a high-quality support service.
• Platform improvement and analytics: Processing is based on our legitimate interests in improving the Platform experience for all users. Usage data is aggregated and anonymised wherever possible.
• Marketing communications: Where you have given explicit consent, zt99 may send you promotional emails or in-Platform notifications about offers, bonuses, and new features. You may withdraw this consent at any time by contacting [email protected] or adjusting your account notification preferences.

6. Sharing Your Personal Data

6.1 Service Providers

zt99 shares personal data with a limited number of trusted third-party service providers who assist in operating the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay), identity verification services, cloud hosting providers, IT security firms, and game content suppliers (such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and Microgaming). All service providers are contractually bound to process your data only as instructed by zt99 and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

zt99 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures may include reporting suspicious financial activity or responding to official investigations into fraud, match fixing, or other criminal conduct.

6.3 Business Transfers

In the event that zt99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity before your data is transferred.

6.4 No Sale of Data

zt99 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own marketing, advertising, or commercial purposes. Your data is yours, and we treat it accordingly.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. zt99 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate and improve the Platform, maintain your login session, remember your preferences, and analyse how the Platform is used.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as your preferred language, currency display, and notification settings.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate and interact with the Platform. This data helps zt99 identify areas for improvement.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content on the Platform. These cookies track your interaction with promotional banners and offers.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For full details on cookie management, please refer to the help documentation of your preferred web browser.

8. Data Security

zt99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL 256-bit encryption on all data transmitted between your browser and the Platform;
• Encryption at rest for all stored sensitive data, including identity documents and financial records;
• Two-factor authentication (2FA) available to all registered players via their registered mobile number;
• Role-based access controls limiting internal staff access to personal data to those with a legitimate operational need;
• Regular security audits and penetration testing conducted by independent security specialists;
• Automated fraud and anomaly detection systems monitoring all account and transaction activity in real time.

While zt99 employs rigorous security practices, no system can be guaranteed to be 100% secure. You are responsible for keeping your account credentials confidential and for notifying zt99 immediately at [email protected] if you believe your account has been compromised.

9. Data Retention

zt99 retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by zt99 are as follows:

• Account and identity data: Retained for the duration of your account relationship with zt99 and for a minimum of five (5) years following account closure, to comply with anti-money laundering and record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to twelve (12) months, after which it is aggregated and anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus a further period of three (3) years for compliance record-keeping.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with zt99's data disposal procedures.

10. Your Data Rights

As a player using the zt99 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within fourteen (14) business days.

• Right of Access: You have the right to request a copy of all personal data zt99 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by zt99. You may update basic account information directly through your account settings panel.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You have the right to request that zt99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to zt99 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where zt99 relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to Withdraw Consent: Where zt99 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11. Children's Privacy

The zt99 Platform is strictly intended for adults aged 21 years and over. zt99 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If you believe that a minor has accessed the Platform or provided personal data to zt99, please contact us immediately at [email protected]. Upon confirmation, zt99 will take all necessary steps to delete the relevant data and close the associated account.

zt99 employs age verification procedures at registration and may request documentary proof of age at any point during a player's use of the Platform. Parents and guardians are encouraged to use parental control tools available on their devices and internet service providers to prevent underage access to gambling websites.

12. Third-Party Links

The zt99 Platform may from time to time contain references to third-party services, including payment processors (bKash, Nagad, Rocket, Upay) and game providers. When you interact with any third-party service, you are subject to that third party's own privacy policy and data practices. zt99 is not responsible for the privacy practices of any third party and recommends that you review the privacy policy of any third-party service you use in connection with the Platform.

13. Updates to This Privacy Policy

zt99 reserves the right to update or revise this Privacy Policy at any time. Material changes to the Policy will be communicated to registered players via the email address associated with their account or via a prominent notice on the Platform, at least seven (7) days before the changes take effect. The "Effective" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree with any changes, you should close your account and withdraw any remaining balance before the effective date.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zt99 handles your personal data, please contact our Data Protection team using the details below. All communications regarding data privacy are handled confidentially and responded to within fourteen (14) business days.

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Response Time: Under 2 minutes (live chat) / 4–12 hours (email)
• Support Language: English
• Operating Timezone: Bangladesh Standard Time (BST, UTC+6)