zita7 Privacy Policy — How We Handle Your Data

zita7 collects personal data through the following channels: (a) directly from you when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion; (b) automatically when you use the zita7 platform, through server logs, cookies, session tracking, and analytics tools that record how you interact with the platform; (c) from third-party sources, including payment processors such as bKash, Nagad, and Rocket when you initiate a transaction, identity verification providers when you submit KYC documents, and fraud detection services that help zita7 identify suspicious account activity.

zita7 does not knowingly collect personal data from individuals under the age of 21. If zita7 becomes aware that personal data has been submitted by a person under 21, that data will be deleted and the associated account will be closed. If you believe that a person under 21 has submitted personal data to zita7, please contact [email protected] immediately.

zita7 processes your personal data only for the following lawful purposes:

• Account creation and management: to register your account, verify your identity, maintain your account balance, and process your login sessions on the zita7 platform.
• Payment processing: to process deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other supported payment methods, and to process withdrawal requests back to your designated payment instrument.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as defined in the zita7 Terms & Conditions.
• Customer support: to respond to your enquiries, complaints, and requests submitted to the zita7 support team at [email protected] or through any other supported contact channel.
• Platform improvement and analytics: to analyse usage patterns, identify bugs, optimise game loading performance on 4G networks in Bangladesh, and improve the overall player experience on mobile devices in Dhaka, Chittagong, Sylhet, and other cities.

zita7 does not sell your personal data to third parties for their own commercial or marketing purposes. zita7 may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and supported banks receive transaction data to the minimum extent required to process your deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers may receive a session token and account identifier to authenticate your game sessions. Game providers do not receive your full identity or financial data.
• Identity verification providers: when you submit KYC documents, those documents are processed by a third-party identity verification service operating under a data processing agreement with zita7. Verified identity data is stored by zita7 and is not re-shared with other third parties.
• Legal and regulatory authorities: zita7 may disclose personal data to courts, regulators, law enforcement agencies, or other government bodies where required by applicable law or by a binding legal order. zita7 will use reasonable efforts to notify you of any such disclosure to the extent permitted by law.

All third-party service providers that receive personal data from zita7 are required to process that data solely in accordance with zita7's instructions and in compliance with applicable data protection law. zita7 enters into data processing agreements with all such providers before any data transfer takes place.

zita7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include: SSL/TLS encryption on all data transfers between your device and the zita7 servers; password hashing so that plaintext passwords are never stored or transmitted; access controls limiting internal access to personal data to authorised personnel only; regular security reviews of platform infrastructure and third-party integrations; and monitoring for suspicious activity patterns that may indicate account compromise or data breach attempts.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you believe your zita7 account has been compromised or that your personal data has been accessed without authorisation, you must notify zita7 immediately at [email protected]. zita7 will investigate all reported security incidents promptly and will take appropriate remediation steps.

zita7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: retained for the full duration of your account being active on the zita7 platform plus a post-closure period required for legal, regulatory, and dispute-resolution purposes.
• Transaction records: financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction to meet anti-money laundering (AML) record-keeping requirements.
• KYC and identity verification documents: retained for a minimum of five (5) years from the date of submission, or for the duration required by applicable law if longer.
• Marketing preferences and communication logs: retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligation.

The zita7 platform serves players primarily in Bangladesh. Some of zita7's third-party service providers — including game providers such as Pragmatic Play and Evolution Gaming, and technical infrastructure providers — may process data in jurisdictions outside Bangladesh. Where personal data is transferred outside Bangladesh, zita7 takes steps to ensure that appropriate safeguards are in place, including entering into data processing agreements that incorporate standard contractual clauses or equivalent protections recognised under applicable data protection frameworks.

Bangladesh players' account data and financial transaction records are stored on servers that meet industry-standard security requirements. zita7 does not transfer your payment credentials (such as your bKash PIN or Nagad account password) — those credentials are entered directly into the payment provider's own interface and are never transmitted to or stored by zita7.

As a zita7 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered mobile number for account verification:

• Right of access: you may request a copy of the personal data zita7 holds about you, including your account data, transaction history, and any KYC records on file.
• Right to rectification: if any personal data zita7 holds about you is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require re-submission of KYC documents.
• Right to erasure: in certain circumstances, you may request that zita7 delete your personal data. This right is subject to zita7's legal obligations — for example, transaction records subject to AML retention requirements cannot be erased before the mandatory retention period expires.
• Right to restriction: you may request that zita7 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you do not want the data erased.
• Right to withdraw consent: where zita7 processes your personal data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The zita7 platform is strictly intended for adults aged 21 and above. zita7 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process. If a player is found to be under 21 at any point, their account will be immediately suspended, any balance will be reviewed in accordance with the Terms & Conditions, and all personal data associated with that account will be deleted to the extent permitted by law.

Parents and guardians who believe that a minor has registered an account on zita7 or submitted personal data to zita7 should contact [email protected] immediately. zita7 will investigate the report, close the account if confirmed, and delete associated personal data in accordance with this Policy.

With your consent at registration, zita7 may send you promotional messages about bonuses, daily offers, new game launches, cricket betting markets for BPL, T20 World Cup, IPL, and other Bangladesh-relevant sporting events, and other zita7 promotions. These messages may be delivered by SMS to your registered mobile number or by email to your registered email address. You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications will not affect your ability to use the zita7 platform, log in to your account, make deposits and withdrawals, or receive transactional communications (such as deposit confirmations and withdrawal notifications) that are necessary for the operation of your account. zita7 will process all unsubscribe requests within ten (10) business days.

zita7 reserves the right to update or amend this Privacy Policy at any time. The updated Policy will be published at zita7.app/privacy-policy with the revised effective date clearly displayed at the top of the page. Where changes are material — for example, where zita7 begins processing a new category of personal data or shares data with a new category of third party — zita7 will use reasonable efforts to notify registered players of the change via SMS or platform notification before the change takes effect.

Your continued use of the zita7 platform after an updated Policy has been published constitutes your acceptance of the revised Policy. It is your responsibility to review this Policy periodically. The most current version of this Policy is always available at zita7.app/privacy-policy.

This Privacy Policy is governed by applicable law. Any dispute arising out of or in connection with this Policy that cannot be resolved informally through zita7 customer support will be subject to the dispute resolution process set out in the zita7 Terms & Conditions. If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions will continue in full force and effect.