Privacy Policy — How zk44 Protects Your Data

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is zk44, the operator of the online casino and sports betting platform accessible at zk44.app. As data controller, zk44 determines the purposes and means by which your personal data is processed and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

All enquiries, access requests, correction requests, or complaints relating to your personal data should be directed to our dedicated privacy contact at [email protected]. We are committed to responding to all privacy-related communications within 30 calendar days of receipt.

2. Data We Collect

2.1 Data You Provide Directly

When you register for an account, complete identity verification, make a deposit, contact support, or interact with any feature of the zk44 platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and a copy of your National Identity Card (NID), passport, or driving licence;
• Contact Data: Email address, mobile phone number, and residential address (including division, district, and postal code);
• Financial Data: bKash, Nagad, Rocket, or Upay account numbers; bank account details; transaction history; deposit and withdrawal records denominated in BDT;
• Account Data: Username, hashed password, account preferences, communication preferences, and responsible gaming settings;
• Verification Documents: Scanned or photographed copies of identity and address documents submitted during Know Your Customer (KYC) checks.

2.2 Data Collected Automatically

When you access and use the zk44 platform, certain technical data is collected automatically by our servers and analytics systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage Data: Pages visited, games played, bet history, session duration, click paths, and feature interactions;
• Location Data: General geographic location derived from your IP address (country and city level only — no GPS or precise location tracking);
• Cookie Data: Session identifiers, authentication tokens, and analytics identifiers as detailed in Section 6 of this Policy.

2.3 Data from Third Parties

In limited circumstances, zk44 may receive personal data about you from third-party sources, including identity verification service providers used to validate KYC documents, payment processors who confirm the status of transactions, and fraud prevention partners who flag suspicious account activity. Data received from these sources is used solely in conjunction with the data you have provided directly and is handled with the same standard of care as first-party data.

3. How We Use Your Data

zk44 processes your personal data for the following specific purposes:

3.1 Marketing Communications

zk44 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or seasonal offers if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent at any time by updating your communication preferences in the account settings panel or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Legal Basis for Processing

zk44 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations under the account agreement with you — including account creation, payment processing, and game provision;
• Legal Obligation: Processing is required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations, and record-keeping requirements imposed by law;
• Legitimate Interests: Processing is necessary for the legitimate interests of zk44, including fraud detection, platform security, improving user experience, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms;
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without detriment.

5. Data Sharing & Third Parties

5.1 Service Providers

zk44 engages carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These providers are permitted to use your data only for the specific purpose for which they are engaged and are contractually bound to implement appropriate technical and organisational security measures. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — for the purpose of facilitating deposits and withdrawals;
• Identity Verification Providers: Third-party KYC platforms that validate the authenticity of identity documents;
• Game Studio Partners: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may collect limited technical data in the context of delivering their games;
• Analytics Providers: Anonymised usage analytics platforms used to understand how players interact with the zk44 platform;
• IT Infrastructure & Hosting: Secure cloud and server infrastructure providers who host zk44's platform and databases.

5.2 Legal Disclosures

zk44 may disclose personal data to law enforcement authorities, regulatory bodies, or other governmental organisations where required to do so by applicable law, valid legal process, court order, or where we reasonably believe that disclosure is necessary to prevent fraud, protect the safety of players, or enforce our Terms & Conditions. We will notify you of such disclosures to the extent permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zk44's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify you in advance and take reasonable steps to ensure that the acquiring entity provides equivalent privacy protections to those described in this Policy.

6. Cookies & Tracking

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. zk44 uses cookies and similar technologies (including local storage and session tokens) to keep you securely logged in, remember your preferences, detect fraudulent activity, and understand how players use the platform so we can improve it.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Please be aware that disabling strictly necessary cookies may prevent you from logging in or using core features of the zk44 platform. Instructions for managing cookies in popular browsers are available through each browser's official help documentation. Disabling analytics cookies will not affect your ability to play or transact on zk44.

7. Data Retention

zk44 retains personal data for as long as your account is active and for a period thereafter as required by legal, regulatory, and business obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. If you request account closure before a retention period has expired, your data will be retained for the remainder of the applicable period but will not be used for any active processing purpose other than legal compliance.

8. Your Privacy Rights

As a data subject, you have the following rights in relation to the personal data that zk44 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request — [Your Name] — [Right Being Exercised]". We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to legitimate-interest processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9. Data Security

zk44 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Security: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (SSL encryption), providing a secure channel for all login, deposit, and account management activity;
• Password Storage: Account passwords are never stored in plain text. We use industry-standard one-way hashing algorithms with salting to ensure that passwords cannot be recovered even in the event of an internal breach;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis among zk44 staff and is governed by role-based access control policies. All internal data access is logged and subject to audit;
• Infrastructure Security: Our server infrastructure is hosted in secure data centres with physical access controls, redundant systems, and regular security patching schedules;
• Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, or suspicious login behaviour — triggering alerts and account protection measures where anomalies are detected;
• Staff Training: All employees and contractors who handle personal data receive regular training on data protection obligations and security best practices.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security against all potential threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and take immediate remedial action to contain the breach and mitigate its impact.

10. Policy Updates

zk44 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. The "Effective Date" at the top of this page indicates when the current version came into force.

Where changes are material — meaning they significantly affect your rights or how we use your personal data — we will notify you by email to your registered address and by a prominent notice on the zk44 platform at least 14 days before the revised Policy takes effect. For minor updates such as clarifications, corrections, or additions that do not affect your core privacy rights, changes may take effect immediately upon publication.

Your continued use of the zk44 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated version. If you do not agree with any changes, you should discontinue use of the platform and request account closure before the revised Policy takes effect.

11. Contact & Complaints

11.1 Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that zk44 holds about you, please contact our privacy team using the details below. We are committed to handling all privacy enquiries with care and professionalism.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

11.2 Complaints

If you are not satisfied with how zk44 has handled your personal data or responded to a privacy rights request, you have the right to lodge a formal complaint. We encourage you to contact us directly in the first instance so that we have the opportunity to resolve your concern. If you remain dissatisfied after contacting us, you may escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.

zk44 takes all privacy complaints seriously. Each complaint is logged, investigated by a senior member of the team, and responded to in writing. We treat every complaint as an opportunity to improve our data handling practices and strengthen the trust our players place in the zk44 platform.