Privacy Policy — zzok

This Privacy Policy ("Policy") describes how zzok ("zzok", "we", "us", "our"), the operator of the online casino and sports betting platform at https://zzok.bio, collects, processes, stores, and protects personal data relating to individuals who visit, register on, or otherwise interact with the zzok platform.

zzok is committed to protecting the privacy and personal data of every player and visitor. This Policy is written in plain, accessible English so that you can clearly understand your rights and our obligations. Where we use technical or legal terms, we explain them in context.

By accessing the zzok website, creating an account, or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read together with our Terms & Conditions and Responsible Gaming policy.

For the purposes of this Privacy Policy, the data controller — the entity responsible for determining how and why your personal data is processed — is zzok, accessible at https://zzok.bio.

If you have any questions about how zzok processes your personal data, or wish to exercise any of your data rights described in Section 12, you may contact our dedicated privacy point of contact using the details set out in Section 15 of this Policy.

All data subject requests are handled directly by the zzok team and are typically acknowledged within 48 hours of receipt during Bangladesh Standard Time (BST, UTC+6) business hours.

zzok collects personal data in the following categories, depending on how you interact with the platform:

zzok collects personal data through several distinct channels depending on the nature of your interaction with the platform:

• Direct submission: Data you provide when registering an account, completing identity verification, submitting a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically by our servers and analytics systems whenever you access the zzok website, including your IP address, browser fingerprint, device identifiers, and session activity logs.
• Payment provider data: Transaction reference data shared with zzok by your mobile payment provider (bKash, Nagad, Rocket, Upay) upon completion of a deposit or withdrawal, including the transaction ID, timestamp, and confirmed amount. Full payment credentials are never shared with zzok by these providers.
• Identity verification services: Where required for KYC compliance, zzok may use a third-party identity verification partner to validate government-issued identification documents. The outcome of verification (pass/fail) and basic identity confirmation data are shared back to zzok.
• Cookies and tracking technologies: Session and persistent cookies, along with similar browser-based storage mechanisms, are used to maintain your login session, remember your preferences, and support platform analytics. See Section 11 for full details.

zzok uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and administering your zzok player account, including processing logins, managing your balance, and applying bonuses.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay; verifying transaction integrity; and maintaining accurate financial records.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity information you have provided is accurate, as required for responsible gaming compliance.
• Fraud and security: Detecting, investigating, and preventing fraudulent account activity, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming monitoring: Analysing account activity patterns to identify signs of problem gambling behaviour and, where necessary, intervening with protective measures such as account limits or temporary restrictions.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance when you contact our support team.
• Platform improvement: Using aggregated, anonymised usage data to understand how players interact with the platform, identify areas for improvement, and develop new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting support.
• Legal compliance: Meeting any applicable legal, regulatory, or law enforcement obligations, including record-keeping requirements and responding to valid legal requests from competent authorities.

zzok processes your personal data on the following legal grounds, depending on the purpose of the processing:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when creating your account — including account management, payment processing, and game delivery.
• Legitimate interests: Processing that serves zzok's genuine operational interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and service analytics.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Consent: Processing carried out on the basis of your explicit consent, specifically in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zzok does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share personal data with third parties only in the following defined circumstances:

• Payment processors: Transaction reference data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay) to facilitate and confirm deposits and withdrawals. Each provider operates under its own privacy terms.
• Identity verification partners: Where KYC checks are required, we may share identity documents or details with a contracted third-party verification service solely for the purpose of completing the verification process.
• Game software providers: Your account identifiers and session data are shared with licensed game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) to the minimum extent necessary to deliver game content within the zzok platform.
• Analytics and infrastructure providers: Anonymised or pseudonymised technical and usage data may be processed by contracted technology partners who support the operation and maintenance of the zzok platform.
• Law enforcement and legal authorities: zzok may disclose personal data where required to do so by a valid legal order, court direction, or regulatory authority instruction. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of zzok's business, player data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy.

zzok accepts deposits and processes withdrawals exclusively through Bangladeshi mobile financial services — bKash, Nagad, Rocket, and Upay. Because all financial transactions are handled natively through these regulated providers, zzok does not receive or store your mobile wallet PIN, full wallet number in unmasked form, or any equivalent payment credential that would enable zzok to independently initiate a transaction on your behalf.

What zzok does retain in its payment records is limited to: the masked wallet reference (e.g., last four digits), the transaction reference ID issued by the payment provider, the transaction timestamp, the amount in BDT, and the transaction status (success, pending, failed). This data is retained for financial record-keeping, dispute resolution, and anti-money laundering compliance purposes.

zzok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

zzok takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All data transmitted between your browser or device and the zzok platform is encrypted using 256-bit SSL/TLS encryption. The zzok website operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on zzok's servers is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within zzok's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific role, and all access is logged and audited.
• Password security: Account passwords are stored in hashed form using a modern cryptographic hashing algorithm. zzok does not store plaintext passwords at any point.
• Fraud monitoring: zzok operates continuous automated monitoring of account activity to detect unusual patterns that may indicate unauthorised access, fraudulent transactions, or other security anomalies.
• Incident response: In the event of a data security incident that poses a risk to your rights and interests, zzok will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

zzok uses cookies and similar browser-based storage technologies to support the operation of the platform, maintain your login session, and gather anonymous analytics data that helps us understand and improve the player experience.

The following categories of cookies are used on the zzok platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your language and display preferences, and support core security features such as CSRF protection. These cookies cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: These cookies collect anonymised data about how visitors use the platform — including which pages are most visited, how long sessions last, and where users navigate from. This data is used in aggregate form only and does not identify individual players.
• Functional cookies: These cookies remember choices you make on the platform, such as your preferred game view or display settings, to provide a more personalised experience on return visits.
• Marketing cookies: Where you have given explicit consent, marketing cookies may be used to deliver promotional content and offers relevant to your interests based on your platform activity. You may withdraw this consent at any time.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the zzok platform from working correctly.

As an individual whose personal data is processed by zzok, you have the following rights in respect of that data. To exercise any of these rights, please contact us using the details in Section 15.

• Right of access: You have the right to request a copy of the personal data zzok holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that zzok delete your personal data. This right is subject to exceptions where we are required to retain data by law (for example, financial transaction records).
• Right to restrict processing: You may request that zzok restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data while we verify it.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, and by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of zzok's legitimate interests, including profiling for responsible gaming monitoring purposes.

The zzok platform is strictly intended for adults aged 18 and above. zzok does not knowingly collect personal data from individuals under the age of 18. Age verification checks are conducted as part of the account registration and KYC process to enforce this requirement.

If zzok discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, we will immediately suspend the relevant account, delete the collected data without delay, and refund any deposit balance to the originating payment method. Any winnings accumulated by an underage player will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account on zzok, please contact us immediately at [email protected] so that we can take prompt remedial action.

zzok reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify registered players via their account contact details or a prominent notice on the platform.

We encourage you to review this Policy periodically to stay informed about how zzok is protecting your personal data. The version of this Policy bearing the most recent "Last Updated" date is the version currently in force and supersedes all prior versions.

Your continued use of the zzok platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any amendment, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zzok handles your personal data, please contact us using the following details. All contact information is provided as plain text only and is not clickable.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 via the zzok platform
• WhatsApp: +880 1700 000 000 (plain text — not a clickable link)
• Response time: Acknowledgement within 48 hours; full response within 30 days for data rights requests