65zz Privacy Policy

This Privacy Policy ("Policy") describes how 65zz ("65zz", "we", "us", or "our") collects, processes, stores, and protects the personal information of individuals who access or use the 65zz online betting and casino platform, accessible at https://65zz.io ("Platform"). It applies to all registered players, visitors, and any other individuals whose personal data we handle in connection with the operation of the Platform.

The Platform is operated for and primarily targeted at players located in Bangladesh. By accessing the Platform, creating an account, making a deposit, placing a wager, or otherwise engaging with any feature of the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal information as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are published on the Platform and are incorporated into the overall agreement between you and 65zz.

For the purposes of this Policy, 65zz acts as the data controller in respect of the personal information collected from players and visitors through the Platform. As data controller, 65zz determines the purposes for which personal data is processed and the means by which that processing takes place.

Where 65zz engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or game content suppliers — those parties act as data processors and are bound by contractual obligations that restrict them from using your data for any purpose other than the specific service they are providing to 65zz.

If you have any questions or concerns about how your personal data is handled, or if you wish to exercise any of the rights described in Section 11 of this Policy, please contact us using the details provided in Section 15.

65zz collects personal information from players and visitors through several channels. The categories of data we collect and the contexts in which they arise are described below.

3.1 Registration Data. When you create an account on the Platform, we collect information that you provide directly, including your full legal name, date of birth, email address, mobile phone number, and your preferred payment method details (such as your bKash or Nagad registered number). This information is necessary to create and administer your account.

3.2 Identity Verification (KYC) Data. In order to comply with our anti-money-laundering obligations and to confirm that players meet the minimum age requirement of 21 years, we collect identity verification documents when you request a withdrawal or where our risk monitoring systems flag an account for review. These documents may include a national identification card (NID), passport, driving licence, or other government-issued identity document, as well as a photograph or selfie where required by our verification partner.

3.3 Financial and Transaction Data. We collect details of all deposits, withdrawals, and wagers placed on the Platform. This includes payment method identifiers (e.g., the registered mobile number associated with your bKash, Nagad, Rocket, or Upay account), transaction amounts expressed in Bangladeshi Taka (BDT), transaction timestamps, and any reference numbers provided by the payment processor.

3.4 Technical and Device Data. When you access the Platform, our servers automatically record certain technical information about your device and connection, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, pages visited within the Platform, and session duration. This data is collected via server logs and, where applicable, via cookies and similar tracking technologies described in Section 7.

3.5 Communications Data. If you contact the 65zz support team via email or live chat, we retain records of that correspondence, including the content of your messages, your email address, and the date and time of the communication. These records are kept to enable us to respond to enquiries, resolve disputes, and maintain quality standards in our support service.

3.6 Behavioural and Gaming Data. We collect data about your activity on the Platform, including the games you play, the frequency and duration of your gaming sessions, the value and number of wagers placed, and any self-imposed limits or responsible gaming tools you activate on your account. This data is used to personalise your experience, monitor for problem gambling indicators, and fulfil our responsible gaming obligations.

65zz uses the personal information we collect for the following purposes:

• Account administration: Creating, managing, and securing your player account, including processing deposits and withdrawals and maintaining accurate records of your balance and transaction history.
• Identity verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our KYC obligations before processing withdrawal requests.
• Platform operation: Delivering the games, sports betting markets, and other features of the Platform, including real-time odds feeds, live score data, and game outcomes supplied by third-party providers such as Pragmatic Play, Evolution Gaming, and Spribe.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, money laundering, multi-accounting, bonus abuse, or other conduct prohibited by our Terms & Conditions. This includes automated monitoring and, where necessary, manual review by our compliance team.
• Responsible gaming: Identifying and responding to indicators of problem gambling behaviour, implementing player-requested deposit limits and self-exclusion requests, and contacting players where our monitoring systems suggest their gambling may have become harmful.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of support interactions to enable consistent and informed assistance.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money-laundering frameworks, retaining transaction records for the periods required by law, and cooperating with lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Marketing messages are only sent to players who have given their explicit consent at the time of registration or through their account preferences.
• Platform improvement: Analysing aggregated, anonymised usage data to identify areas where the Platform's performance, design, or game selection can be improved. This analysis does not involve decisions made about individual players.

65zz processes personal data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and 65zz — specifically, the account registration, deposit processing, wagering, and withdrawal services you have requested.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering requirements and identity verification standards.
• Legitimate interests: Processing is necessary for the legitimate interests of 65zz, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the Platform's services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

65zz does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

6.1 Payment Processors. In order to process your deposits and withdrawals, we share relevant financial and account identification data with the payment processors you select, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers operates under its own privacy and data security standards.

6.2 Identity Verification Partners. We engage third-party KYC and identity verification service providers to assist with document review and age verification. These providers process your identity documents solely for the purpose of verifying your identity and age on our behalf and are prohibited from retaining or using your data for any other purpose.

6.3 Game Content Providers. The games available on the 65zz Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a pseudonymous player identifier and wager amounts) to facilitate game round delivery. They do not receive your full identity or financial data.

6.4 Legal and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are required to do so by law, court order, or in connection with an investigation into suspected illegal activity.

6.5 Business Transfers. In the event that 65zz undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players in advance of any such transfer and inform them of their rights in that context.

The 65zz Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, remember your account preferences, and prevent cross-site request forgery attacks. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Performance and Analytics Cookies: We use first-party analytics tools to collect aggregated, anonymised data about how players navigate the Platform — which pages are most visited, where players encounter errors, and how session lengths vary by game category. This data helps us identify and fix performance issues. No personally identifiable information is included in analytics reports.
• Functional Cookies: These cookies remember your display preferences, preferred language, and any game filters or settings you have saved in your account. They improve the overall usability of the Platform but are not strictly required for it to function.

65zz does not use third-party advertising cookies or tracking pixels from social media networks. You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

65zz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required or permitted by applicable law. The following general retention periods apply:

• Active account data (registration information, transaction history, gaming activity): Retained for the duration of the active account relationship and for a period of five (5) years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or the closure of the associated account, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the most recent communication in a given support thread, unless the correspondence relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Technical and server log data: Retained for twelve (12) months from the date of collection, after which it is automatically deleted or anonymised.
• Marketing consent records: Retained for the duration of your marketing opt-in and for three (3) years following your withdrawal of consent, to demonstrate that communications were sent lawfully.

When personal data is no longer required and the applicable retention period has expired, 65zz will securely delete or anonymise that data so that it can no longer be linked to an identifiable individual.

65zz takes the security of your personal information seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform, ensuring that your login credentials, payment details, and account data are never transmitted in plain text.
• Encrypted storage of sensitive account data, including passwords (which are stored as salted cryptographic hashes and are never readable by 65zz personnel).
• Strict access controls limiting access to personal data to only those 65zz employees and contractors who require it to perform their role, enforced through role-based permission systems and multi-factor authentication for administrative access.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform's infrastructure.
• Firewall protections, intrusion detection systems, and real-time monitoring for suspicious activity patterns on Platform servers.

While 65zz takes all reasonable precautions to protect your data, no system connected to the internet is entirely immune from security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 65zz will notify affected players without undue delay and will take all necessary steps to contain and investigate the incident.

The 65zz Platform is operated internationally. As a result, some of the personal data we collect may be processed or stored on servers located outside of Bangladesh. In particular, game content providers and identity verification partners engaged by 65zz may maintain infrastructure in countries other than Bangladesh.

Where personal data is transferred outside of Bangladesh, 65zz takes steps to ensure that adequate protections are in place to safeguard your information. These protections may include contractual clauses binding the recipient to data security standards equivalent to those described in this Policy, or the recipient's adherence to internationally recognised data protection frameworks.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh where such transfers are necessary for the provision of the Platform's services, subject to the protections described in this section.

As a player on the 65zz Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the support team using the details in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account dashboard.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — in particular, transaction and KYC records that we are required to retain under applicable law cannot be deleted on request prior to the expiry of the applicable retention period.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we investigate a dispute about the accuracy of your data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes, which we will always honour without requiring justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

We aim to respond to all rights-related requests within ten (10) business days. In complex cases, we may extend this period by an additional ten (10) business days, in which case we will notify you of the extension and the reason for it.

The 65zz Platform is strictly an adult service. The minimum age to register, deposit, and wager on the Platform is 21 years. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires players to confirm their date of birth, and our KYC verification process is specifically designed to detect and reject underage registrations.

If 65zz becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the associated account and delete or anonymise the personal data collected, in accordance with our safeguarding obligations.

If you are a parent or guardian and believe that a minor under your care has created an account on the Platform, please contact the support team immediately at [email protected] so that we can investigate and take appropriate action.

The 65zz Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) whose game interfaces are embedded within the Platform under licence. While these games are delivered through the 65zz Platform environment, the underlying game software is operated by the respective third-party studio.

65zz does not control the privacy practices of third-party game studios in respect of the pseudonymous session data they may receive during game delivery. We recommend reviewing the privacy policies of any third-party providers whose products you use, to the extent that their individual policies are accessible to players.

The Platform does not contain links to external websites or services beyond those necessary for platform functionality. 65zz is not responsible for the privacy practices or content of any external site that may be accessed via a third-party referral.

65zz reserves the right to update or revise this Privacy Policy at any time. The current version of the Policy will always be published on this page, and the effective date at the top of the document will be updated to reflect the date on which the most recent revision came into force.

Where a proposed amendment materially affects the way in which we process your personal data, we will endeavour to provide advance notice of the change to registered players via the email address associated with their account, at least fourteen (14) days before the amendment takes effect.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change to this Policy, you should close your account before the amended Policy takes effect and withdraw any remaining balance in accordance with our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 11, or need to report a concern about how your personal data is being handled, please contact the 65zz data team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Include "Data Request — [Your Registered Email]" in the subject line so your enquiry is routed correctly.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Target: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within ten (10) business days.