Your Privacy Matters to zoy9

1. Information We Collect

zoy9 collects personal information in several ways depending on how you interact with the platform. We collect only what is necessary to deliver a secure, compliant, and high-quality gaming experience tailored to players in Bangladesh.

Information You Provide Directly

When you register an account, make a deposit, contact support, or participate in a promotion, you may provide us with the following categories of personal data:

Information Collected Automatically

When you visit and use the zoy9 platform, certain technical data is collected automatically by our systems. This data helps us maintain platform security, optimise performance, and detect fraudulent activity:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, game sessions initiated, betting history, click paths, and features used.
• Session data: Login timestamps, session duration, logout events, and failed login attempts.
• Geolocation data: Approximate location derived from your IP address to comply with jurisdictional access controls. We do not access precise GPS location data from your device without your explicit consent.

Information from Third Parties

In some cases, zoy9 may receive personal data about you from third-party sources, including:

• Identity verification and fraud prevention agencies used as part of the KYC process.
• Payment processing partners such as bKash, Nagad, Rocket, and Upay, who may confirm transaction status or flag suspicious activity.
• Marketing and affiliate partners who refer players to zoy9, where you have consented to data sharing with those partners.

2. How We Use Your Data

zoy9 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons stated here without first obtaining your consent or establishing an alternative legal basis.

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain accurate records throughout the lifecycle of your account.
• Providing gaming and betting services: To process bets, settle winnings, operate casino games, and deliver the full range of zoy9 services including cricket betting, live casino, and slots.
• Processing payments: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer in Bangladeshi Taka (BDT).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
• Legal and regulatory compliance: To comply with applicable KYC, AML, and data retention obligations, and to respond to lawful requests from competent authorities.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via email and live chat channels.
• Responsible gaming: To monitor gambling behaviour, apply limits you have set, action self-exclusion requests, and identify patterns that may suggest problem gambling in line with our responsible gaming commitments.
• Promotions and bonuses: To administer promotions you have opted into, verify eligibility, and credit bonus funds to qualifying accounts.
• Marketing communications: To send you relevant promotional offers, newsletters, and updates about zoy9 products and features — but only where you have provided explicit consent or where a legitimate interest applies. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct A/B testing, improve the user interface, and develop new features that better serve Bangladeshi players.

3. Legal Basis for Processing

Every use of your personal data by zoy9 is underpinned by at least one of the following legal bases:

• Performance of a contract: Processing is necessary to provide the services you have signed up for — including operating your account, settling bets, and processing payments. Without this processing, we cannot deliver the zoy9 service.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and responding to lawful requests from authorities.
• Legitimate interests: Processing is necessary for purposes that zoy9 considers are in the genuine interests of operating a fair, safe, and commercially viable platform — such as fraud detection, platform security, internal analytics, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities such as sending marketing communications, placing non-essential cookies, and processing optional profile data, zoy9 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing & Third Parties

zoy9 does not sell your personal data. We share data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

To process your deposits and withdrawals, zoy9 shares the minimum necessary financial and identity data with our payment partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and domestic bank transfer partners including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers operate under their own privacy policies and security standards.

Identity Verification and Fraud Prevention

zoy9 uses third-party KYC and fraud prevention services to verify the identity of account holders and to screen for money laundering and other financial crimes. These partners process identity data on our behalf under strict data processing agreements.

Game Content Providers

Game studios whose content is available on the zoy9 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session and gameplay data necessary to operate their game software. These studios are contractually required to use this data only for game delivery purposes.

Analytics and Platform Services

zoy9 uses trusted third-party technology providers for platform hosting, analytics, customer support tooling, and email delivery. These providers act as data processors and are permitted to use your data only on our documented instructions.

Legal and Regulatory Disclosure

zoy9 may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required by law, court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of zoy9, its players, or the public.

5. Cookies & Tracking Technologies

zoy9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site usage, and — where you have consented — to deliver relevant promotional content. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent core platform functionality from operating correctly. Full details of the specific cookies used, their names, durations, and providers are available on request by contacting [email protected].

6. Data Retention

zoy9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Our general retention periods are as follows:

• Active account data: Retained for the full duration of your account and for a period of 5 years following account closure, to satisfy AML record-keeping requirements.
• Transaction records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of 5 years from the date of the transaction.
• KYC verification documents: Identity documents submitted for KYC purposes are retained for 5 years from the date of submission or from account closure, whichever is later.
• Customer support communications: Support tickets, chat logs, and email correspondence are retained for 2 years from the date of the interaction.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account plus 3 years, to evidence compliance with consent requirements.
• Website analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify individual users.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is completed.

7. Data Security

The security of your personal data is a top priority for zoy9. We implement a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

Technical Measures

• TLS 1.2 / TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including stored identity documents and financial records.
• Regular penetration testing and vulnerability scanning by independent security specialists.
• Web application firewall (WAF) and DDoS protection to defend against external threats.
• Multi-factor authentication available for all player accounts and mandatory for all internal staff access.
• Automated intrusion detection systems that alert our security team to anomalous access patterns in real time.

Organisational Measures

• Access to personal data is restricted to zoy9 staff members who require it to perform their job functions, on a strict need-to-know basis.
• All staff who handle personal data receive mandatory privacy and data security training on joining and on an annual basis.
• Third-party suppliers with access to personal data are subject to security assessments before onboarding and to ongoing contractual security obligations.
• A documented data breach response procedure is in place. In the event of a breach that is likely to result in a risk to affected individuals, zoy9 will notify affected users without undue delay.

8. Your Privacy Rights

As a zoy9 user, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.

Please note that certain rights are subject to exemptions. For example, the right to erasure does not apply where retention is required for legal compliance, such as AML record-keeping obligations. Where an exemption applies, zoy9 will explain why when responding to your request.

9. Children's Privacy

The zoy9 platform is strictly intended for adults aged 18 years and over. zoy9 does not knowingly collect, process, or store personal data relating to any person under the age of 18. Registration on the zoy9 platform requires confirmation that the applicant is at least 18 years of age, and age verification checks are conducted as part of the KYC process.

If zoy9 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the payment source. Any winnings generated on a minor's account will be forfeited.

Parents and guardians in Bangladesh are encouraged to use available parental control software to restrict minors' access to online gambling platforms. If you believe your child has registered an account on zoy9, please contact us immediately at [email protected] so we can take prompt action.

10. Changes to This Policy

zoy9 reviews and updates this Privacy Policy periodically to reflect changes in our practices, the services we offer, or applicable legal requirements. The date of the most recent revision is always displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we use your data — zoy9 will notify registered account holders via the email address on file at least 14 days before the changes take effect. For minor clarifications or corrections that do not affect the substance of the policy, we may update the page without prior notice.

Your continued use of the zoy9 platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept a revised policy, you should cease using the platform and may request account closure in accordance with the Terms and Conditions.

11. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zoy9 processes your personal data, please contact our dedicated privacy team. We are committed to responding to all privacy-related enquiries promptly and transparently.

You may reach us by email at: [email protected]

Please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your message so that it is routed to the appropriate team member without delay. We target a response time of 5 business days for general privacy enquiries and 30 calendar days for formal data rights requests.

Our support team is available 24 hours a day, 7 days a week, 365 days a year — including Eid, Pohela Boishakh, Victory Day (16 December), Independence Day (26 March), and all Bangladesh public holidays. All privacy enquiries are treated with strict confidentiality.