zd55 Privacy Policy

1Introduction

zd55 (referred to in this Privacy Policy as "we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users of the zd55 website located at zd55.app. This Privacy Policy describes in detail the categories of personal information we collect, the purposes for which that information is used, the circumstances under which it may be shared with third parties, the security measures we employ to protect it, and the rights available to you in relation to your personal data.

This Privacy Policy applies to all users of the Platform, whether you are a registered account holder or a visitor browsing the site without registering. By accessing or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the Platform.

2Information We Collect

We collect personal data from you in several ways: directly when you register an account or use Platform features, automatically when you interact with the site, and from third parties such as payment processors during the course of financial transactions. The categories of personal data we may collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for age and identity verification purposes. When we need to collect special category data for KYC, it is handled under strict access controls and is not retained longer than necessary.

3How We Use Your Information

zd55 uses the personal data we collect for the following purposes, all of which are necessary either to deliver our services to you, to comply with our legal obligations, or to pursue our legitimate interests in operating a safe and compliant platform:

• ▸Account creation and management: to register your account, verify your identity and age, maintain accurate account records, and provide you with access to Platform features.
• ▸Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks; to verify that payment methods are registered in your name; and to maintain financial transaction records as required by applicable law.
• ▸Customer support: to respond to your enquiries, resolve complaints, and communicate with you about your account, transactions, and Platform changes.
• ▸Fraud and security monitoring: to detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account takeovers, and other prohibited conduct on the Platform.
• ▸Responsible gaming compliance: to monitor gaming behaviour for indicators of problem gambling and to implement deposit limits, session reminders, or self-exclusion measures where appropriate.
• ▸Personalisation: to tailor the content, promotions, and game recommendations you see on the Platform based on your preferences and activity history, where you have consented to such personalisation.
• ▸Legal and regulatory compliance: to meet our obligations under applicable law, including anti-money laundering (AML) and know-your-customer (KYC) regulations, and to respond to lawful requests from regulatory or law enforcement authorities.

4Legal Basis for Processing

We process your personal data only where we have a valid legal basis for doing so. The legal bases on which zd55 relies are:

• ▸Contractual necessity: processing required to perform the contract between you and zd55, including account registration, deposit processing, game participation, and withdrawal processing.
• ▸Legal obligation: processing necessary to comply with applicable laws and regulations, including AML obligations, KYC verification requirements, and responses to lawful authority requests.
• ▸Legitimate interests: processing for fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your rights and freedoms.
• ▸Consent: where we rely on your consent for processing (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5Sharing Your Information

zd55 does not sell, rent, or trade your personal data to third parties. We may share your personal data with selected third parties only in the following circumstances:

• ▸Payment service providers: we share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment processors solely for the purpose of processing your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the specified purpose.
• ▸Game providers: technical session identifiers may be passed to third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming to facilitate gameplay. These providers do not receive your full identity data.
• ▸Fraud and compliance partners: we may share data with identity verification services, anti-fraud platforms, and AML screening tools as part of our compliance obligations. All such partners operate under strict data processing agreements.
• ▸Legal and regulatory authorities: we are required by law to disclose certain personal data to regulatory bodies, tax authorities, or law enforcement agencies upon receipt of a valid and lawful request. We will notify you of such disclosures where we are legally permitted to do so.

6Payment Data and Financial Information

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a card network, zd55 receives confirmation data from the payment provider including the transaction reference number, the payment method identifier (such as a masked mobile number or card suffix), the transaction amount in BDT, and the timestamp of the transaction. This data is stored securely in our transaction logs and is used exclusively for payment reconciliation, fraud detection, withdrawal verification, and regulatory record-keeping.

zd55 does not store full card numbers, CVV codes, or complete mobile wallet PINs on its servers. Card payment data is handled directly by the relevant card network processor under PCI DSS compliance standards. Mobile wallet transactions are authenticated directly through the relevant provider's (bKash, Nagad, Rocket, or Upay) own secure systems.

7Cookies and Tracking Technologies

The zd55 Platform uses cookies and similar tracking technologies to ensure the site functions correctly, to remember your preferences, and to analyse how users interact with the Platform. The types of cookies we use are:

• ▸Essential cookies: required for core Platform functionality such as maintaining your login session, preserving your language preference, and enabling the shopping cart and payment flow. These cannot be disabled without breaking the site.
• ▸Analytical cookies: used to collect anonymised data about how visitors use the Platform, including which pages are most visited, average session duration, and common navigation paths. This data helps us improve the Platform experience.
• ▸Functional cookies: used to remember your preferences and settings across sessions, such as your preferred game category, display settings, and notification preferences.
• ▸Security cookies: used to detect and prevent fraudulent activity, including session hijacking, cross-site request forgery (CSRF), and bot traffic. These are strictly necessary for Platform security.

Most web browsers allow you to manage cookie preferences through your browser settings. You may disable non-essential cookies at any time. However, disabling essential or security cookies may impair your ability to log in or use Platform features correctly. Please note that restricting cookies does not delete any personal data already held on our servers.

8Data Security

zd55 takes the security of your personal data seriously and employs a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• ▸SSL/TLS encryption on all data transmissions between your device and our servers, ensuring that information transmitted over the internet cannot be intercepted in readable form.
• ▸Encrypted storage of sensitive account data including passwords (stored as salted hashes, never in plaintext) and financial identifiers.
• ▸Access controls limiting which zd55 staff members can view personal data, based on the principle of least privilege — staff only access the data necessary to perform their specific role.
• ▸Regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform infrastructure before they can be exploited.

While we take all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. If you suspect that your account has been compromised, please contact our support team immediately at [email protected]. We will investigate and take appropriate remedial action promptly.

9Data Retention

zd55 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The specific retention periods that apply to different categories of data are as follows: active account data is retained for the duration of your account registration plus 5 years after account closure; financial transaction records are retained for a minimum of 7 years in accordance with applicable financial record-keeping requirements; KYC verification documents are retained for 5 years from the date of account closure or from the date of the last transaction, whichever is later; customer support communications are retained for 3 years from the date of the interaction.

When your personal data is no longer required for the purpose for which it was collected, and no legal retention obligation requires us to keep it further, we will securely delete or anonymise it so that it can no longer be associated with you. Note that anonymised data (data from which all identifying elements have been removed) is not considered personal data and may be retained indefinitely for analytical and statistical purposes.

10Your Rights

As a user of the zd55 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days:

• ▸Right of access: you may request a copy of all personal data that zd55 holds about you, together with information about how it is being processed and on what legal basis.
• ▸Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• ▸Right to erasure: you may request the deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and no other legal basis applies.
• ▸Right to restrict processing: you may ask us to suspend the processing of your personal data in certain scenarios, for example while the accuracy of data is being contested or while an objection to processing is being considered.
• ▸Right to data portability: where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• ▸Right to object: you have the right to object to processing of your personal data where it is based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.

11Children's Privacy

The zd55 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data from our systems and close any associated account. If you are a parent or guardian and believe that a minor has registered an account on zd55, please contact us immediately at [email protected] so that we can take appropriate action.

12Third-Party Links and Services

The zd55 Platform may contain references to or integrations with third-party services, including game providers, payment processors, and analytics tools. This Privacy Policy applies only to data collected directly by zd55. Third-party services operate under their own privacy policies and data processing terms, for which zd55 accepts no responsibility. We encourage you to review the privacy policies of any third-party provider whose services you access through the Platform, including Pragmatic Play, Evolution Gaming, bKash, Nagad, and Rocket, to understand how they handle your data.

13Changes to This Privacy Policy

zd55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes to this policy, we will notify registered users via their registered contact details or by displaying a prominent notice on the Platform. The updated Privacy Policy will indicate the date on which it takes effect at the top of the document.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. If you have any concerns about a change to this policy, you are welcome to contact our data protection team before continuing to use the Platform.

14Contact and Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which zd55 processes your personal data, please contact our data protection team. We are committed to handling all privacy enquiries promptly, professionally, and in accordance with our obligations under applicable law. Our support team is available 24 hours a day, 7 days a week.

Please do not include sensitive information such as passwords, full payment details, or government ID numbers in your email. Our team will never ask you for your password by email or live chat.