Privacy Policy
67zz Online Casino & Betting Platform

This Privacy Policy sets out the practices of 67zz ("we", "us", "our") with respect to the collection, storage, processing, and disclosure of personal data relating to registered players and visitors to the 67zz platform, available at https://67zz.io (the "Platform"). 67zz is Bangladesh's premier online casino and sports betting platform, offering cricket betting, live casino games, slot titles, and related entertainment services to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

By creating a 67zz account, making a deposit, or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy should be read in conjunction with the 67zz Terms & Conditions and our Responsible Gaming Policy, both of which are available on the Platform.

67zz collects personal data from you in three primary ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party payment and verification service providers. The categories of personal data we collect are set out in the table below.

We do not intentionally collect any special categories of personal data (also referred to as sensitive personal data), including data revealing racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, unless such data is voluntarily disclosed by you in the course of a support interaction, in which case it will be handled with a higher standard of care and will not be used for any purpose other than resolving the specific issue raised.

67zz uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first seeking your consent.

• Account creation and management: To register your 67zz account, verify your identity and age (21+ policy), maintain your account settings, and process password resets and account updates.
• Financial transactions: To process BDT deposits via bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks, and to execute withdrawal requests to your registered payment method.
• Platform delivery: To provide access to cricket betting markets, live casino games, slot titles, crash games, and all other entertainment products available on the 67zz Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multiple account creation, and other prohibited conduct as described in the 67zz Terms & Conditions.
• Legal and regulatory compliance: To fulfil obligations under applicable Bangladeshi law and any other legal requirements that apply to online entertainment platforms, including record-keeping and cooperation with law enforcement where legally required.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and to deliver responsible gaming tools including deposit limits, loss limits, session time limits, and self-exclusion facilities.
• Customer support: To respond to your enquiries, complaints, and support requests submitted to [email protected] and to maintain records of our interactions for quality assurance purposes.
• Marketing communications (where consented): To send you promotional emails or SMS notifications about 67zz bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, BPL cricket offers, and other Bangladesh-relevant events), and platform updates. You may withdraw your marketing consent at any time from your account settings.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and content of the 67zz Platform.

67zz processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations under the agreement formed when you register a 67zz account and accept the Terms & Conditions — including account management, transaction processing, and game delivery.
• Legitimate interests: Processing that is necessary for the legitimate interests of 67zz, including fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where those interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable legal or regulatory obligations, including identity verification, anti-money-laundering checks, and cooperation with authorities where legally compelled.
• Consent: Processing for purposes that are not strictly necessary for the performance of the contract — principally the sending of marketing communications via email or SMS. You may withdraw your consent for marketing communications at any time without affecting the lawfulness of processing conducted prior to withdrawal.

67zz does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances set out below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: We share the financial data necessary to process your BDT deposits and withdrawals with our partner payment providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each provider operates under its own privacy and security standards.
• Identity verification services: Where required to satisfy Know Your Customer (KYC) obligations, we may share identity data with third-party verification service providers for the purpose of confirming your age and identity.
• Game software providers: Technical identifiers (such as a pseudonymous player ID and session token) may be passed to third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi to facilitate gameplay. These providers do not receive your full personal profile.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the 67zz business, your personal data may be transferred to the relevant acquirer, subject to equivalent privacy protections being in place.

67zz retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The standard retention periods applicable to each data category are set out below.

When personal data is no longer required for any of the stated purposes, 67zz will securely delete or anonymise it. Anonymised data — from which individual identification is no longer possible — may be retained indefinitely for statistical and analytical purposes.

67zz implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security practices include the following:

• SSL/TLS encryption in transit: All data transmitted between your browser or device and the 67zz Platform is encrypted using current-generation TLS protocols. This ensures that your login credentials, payment information, and personal details cannot be intercepted during transmission.
• Encryption at rest: Sensitive stored data, including password hashes and financial identifiers, is encrypted using industry-standard encryption algorithms. Plain-text storage of passwords is strictly prohibited within 67zz systems.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All 67zz team members with access to personal data are subject to confidentiality obligations and receive data protection training.
• Penetration testing and audits: 67zz commissions regular security assessments to identify and remediate potential vulnerabilities in our platform infrastructure.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, 67zz will notify affected users and take all reasonable steps to contain and remediate the incident as quickly as possible.

67zz uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the 67zz website. The categories of cookies used by 67zz are described below.

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and display preferences, and ensure the security of your account. These cookies cannot be disabled without impairing the functionality of the Platform.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the 67zz Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data helps us improve platform performance and user experience. No individually identifiable information is stored in these cookies.
• Functional cookies: These cookies allow the Platform to remember choices you have made — such as your preferred game category or responsible gaming settings — to provide a more personalised experience.

67zz does not use third-party advertising cookies or place cookies on your device for the purpose of targeting you with advertisements on other websites. You can manage your cookie preferences through your browser settings; however, please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform.

As a 67zz player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account email address. 67zz will respond to all valid requests within five business days at Bangladesh Standard Time (BST, UTC+6).

• Right of access: You have the right to request a copy of the personal data 67zz holds about you, including a summary of how it is being used and with whom it has been shared.
• Right to rectification: If any personal data held by 67zz is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected — you may request that 67zz delete your personal data. Note that this right may be limited where retention is required by law (e.g., KYC and financial records).
• Right to restriction of processing: You may request that 67zz temporarily restrict the processing of your personal data while a dispute regarding its accuracy or lawfulness is being resolved.
• Right to data portability: You may request that 67zz provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Marketing opt-out can be managed directly from your account settings.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. 67zz will consider your objection and cease the relevant processing unless compelling legitimate grounds exist to continue.

The 67zz Platform is strictly intended for adults aged 21 and above. 67zz does not knowingly collect or process the personal data of any person under the age of 21. During registration, all users are required to confirm that they meet the age requirement. 67zz conducts identity and age verification checks on accounts where there is reasonable doubt as to whether the account holder satisfies the 21+ age requirement.

If 67zz discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the collected data without undue delay, and refund any balance held in that account to the extent practicable. If you are a parent or guardian and believe that a minor in your care has registered a 67zz account, please contact us immediately at [email protected] so that we can take appropriate action.

Some of the third-party service providers that 67zz works with — including certain game software providers and platform infrastructure suppliers — may process or store personal data outside of Bangladesh. Where such international transfers of personal data occur, 67zz takes appropriate steps to ensure that your data receives an equivalent level of protection to that which it would receive within Bangladesh.

These steps include ensuring that contractual data protection obligations are imposed on third-party processors located in other jurisdictions, and conducting due diligence on the data security practices of all third-party partners before engaging their services. By using the 67zz Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh for the limited purposes described in this Policy.

67zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by posting a prominent notice on the 67zz Platform and, where reasonably practicable, by sending a notification to your registered email address. The revised Privacy Policy will display the updated effective date at the top of the document.

Your continued use of the 67zz Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and may request account closure by contacting [email protected]. 67zz recommends that you review this Privacy Policy periodically to stay informed of how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 67zz handles your personal data, our support team is available 24 hours a day, 7 days a week at Bangladesh Standard Time (BST, UTC+6). All data-related enquiries are handled with priority by our dedicated team.

• Email: [email protected] — For data rights requests, use the subject line "Data Rights Request" and include your registered account email. We aim to respond within five business days at BST.
• Complaints: If you are not satisfied with how 67zz has handled your personal data or responded to a data rights request, you may submit a formal complaint by emailing [email protected] with the subject line "Privacy Complaint". 67zz will acknowledge your complaint within 48 hours and provide a substantive response within 10 business days.
• Marketing opt-out: To withdraw your consent for marketing communications, log in to your 67zz account and update your notification preferences in the account settings section, or include an unsubscribe request in any email to [email protected].