zk44 Privacy Policy

01 Who We Are

zk44 (referred to in this Privacy Policy as "zk44", "we", "us", or "our") operates the online betting and casino platform accessible at zk44.io. The platform provides sports betting, live casino games, slot games, and card games primarily to players located in Bangladesh. zk44 acts as the data controller in respect of personal data collected through the platform.

For all data-related enquiries, you may contact us at [email protected]. Our support team handles data access requests, correction requests, deletion requests, and complaints regarding the handling of your personal information.

02 Data We Collect

zk44 collects personal data through several channels during your interaction with the platform. The primary collection points and corresponding data categories are described below:

• Registration: When you create a zk44 account, we collect your full name, date of birth, contact email, phone number, and district/city of residence. This information is required to establish your account and verify your eligibility.
• Identity Verification (KYC): To comply with anti-money laundering requirements and confirm that you are aged 21 or above, we may request copies of government-issued identity documents such as a National ID Card (NID) or passport.
• Payment Transactions: When you make a deposit or request a withdrawal, we collect your mobile financial service account details (bKash, Nagad, Rocket, or Upay number) and a record of the transaction amount, date, and method. We do not store full payment credential data beyond what is required for processing.
• Platform Usage: We automatically collect technical and usage data when you interact with the platform, including your IP address, device identifiers, browser type, operating system, pages viewed, games played, bet amounts, session start and end times, and click-stream data.
• Communications: If you contact our support team via email or live chat, we retain a record of that correspondence including any documents or screenshots you share with us.
• Cookies: We use cookies and similar session-tracking technologies as described in Section 8 of this policy.

We do not collect sensitive personal data such as biometric information, health data, religious beliefs, or political opinions unless specifically required and disclosed in advance for a particular purpose.

03 How We Use Your Data

Personal data collected by zk44 is used exclusively for the following defined purposes:

• Account management: Creating, maintaining, and administering your zk44 user account, including processing login authentication and managing account settings.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by responsible gaming and financial compliance obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining accurate financial records of all transactions.
• Fraud prevention and security: Monitoring account activity for signs of fraud, collusion, multi-accounting, money laundering, or other prohibited conduct. Investigating and acting on confirmed violations.
• Responsible gaming: Monitoring your usage patterns to identify indicators of problem gambling behaviour, and enabling or enforcing deposit limits, cool-off periods, and self-exclusion as required.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated usage data to understand how players navigate and use the platform, and to improve game offerings, user interface design, and technical performance.
• Legal and regulatory compliance: Fulfilling our obligations under applicable financial, anti-money laundering, and data protection laws and regulations.
• Promotional communications: Where you have provided explicit consent, sending you information about promotions, bonuses, and platform updates relevant to your account. You may withdraw this consent at any time.

04 Legal Bases for Processing

zk44 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract we have with you as a registered user — including account creation, payment processing, game provision, and customer support.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and financial record-keeping mandates.
• Legitimate interest: Processing carried out for the genuine business interests of zk44 where those interests are not overridden by your rights and interests. This includes fraud detection, platform security monitoring, and internal analytics to improve service quality.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for optional marketing communications or non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

05 Data Sharing

zk44 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of third parties solely to the extent necessary to deliver and maintain our services:

• Payment processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay receive the transaction data required to execute deposits and withdrawals on your behalf.
• Identity verification services: Third-party KYC and AML compliance providers who assist us in verifying the identity and age of our users as required by our responsible gaming obligations.
• Fraud detection and security providers: Specialist technology partners who provide risk-scoring, device fingerprinting, and anomaly detection services to protect the platform and its users from fraudulent activity.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as anonymised session identifiers) required to deliver their game content through the zk44 platform.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial regulators, or government bodies where required by law or in response to a lawful request.
• Professional advisers: Legal counsel, accountants, and auditors who are bound by professional confidentiality obligations and require access to certain data to provide their services.

All third parties with whom we share personal data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was disclosed.

06 International Data Transfers

Some of the third-party service providers with whom zk44 shares data may operate servers or processing facilities located outside Bangladesh. Where personal data is transferred internationally, zk44 takes reasonable steps to ensure that such transfers are conducted under appropriate safeguards, including:

• Contractual data processing agreements that require the recipient to apply a standard of data protection equivalent to that applied by zk44.
• Limiting data transfers to jurisdictions or service providers recognised as maintaining adequate data protection standards.
• Ensuring that transferred data is limited to what is strictly necessary for the third party to perform the contracted service.

If you have questions about the international transfer of your data, please contact our support team at [email protected].

07 Data Retention

zk44 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following permanent account closure, in compliance with financial and AML record-keeping obligations.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of seven (7) years in accordance with financial regulation requirements.
• KYC and identity documents: Retained for the duration of the account relationship plus five (5) years after closure, unless a longer retention period is required by regulation.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if related to an open dispute or legal matter.
• Usage and technical data: Typically retained in aggregated or anonymised form for analytical purposes after the relevant account is closed. Raw session logs are generally retained for twelve (12) months.
• Cookie data: Session cookies expire when you close your browser. Persistent analytical cookies are retained for up to twelve (12) months.

When data is no longer required for any legitimate purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

08 Cookies & Tracking Technologies

zk44 uses cookies and similar technologies to maintain platform functionality and understand how users interact with our services. The types of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the platform to function correctly. They manage user authentication sessions, maintain your login state, and enable core security features. These cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: We use first-party analytical cookies to collect aggregated data on page views, user journeys, game engagement rates, and session durations. This data helps us identify areas of the platform that can be improved. This data is not used to identify individual users.
• Functional cookies: These cookies remember your preferences such as language settings, display preferences, and previously used payment methods to streamline your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, including device fingerprint tokens and CSRF (cross-site request forgery) protection tokens.

zk44 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to use the platform.

09 Your Rights Over Your Data

As a user of the zk44 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with a clear description of your request and sufficient identification information to allow us to locate your account:

• Right of access: You may request a copy of the personal data we hold about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Supporting documentation may be required for certain changes.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data must be retained to comply with financial and legal obligations and cannot be deleted on request.
• Right to restrict processing: You may request that we suspend the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent — for example, marketing communications — you may withdraw that consent at any time by contacting support or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data where it is conducted on the basis of legitimate interest. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

10 Children & Minors

The zk44 platform is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will immediately suspend the associated account, void any transactions, and delete the data in question.

If you are a parent or guardian and believe that a minor in your care has registered an account on the zk44 platform or provided us with personal data, please contact us immediately at [email protected] so that we can take prompt remedial action. We strongly encourage parents and guardians to make use of parental control software to prevent underage access to online gambling platforms.

11 Security Measures

zk44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the zk44 platform is encrypted using SSL/TLS protocols, preventing interception by unauthorised third parties.
• Access controls: Personal data is accessible only to zk44 staff members who require it in the performance of their job functions. Access is governed by role-based permissions and is subject to logging and audit.
• Secure data storage: User data is stored on secured servers with restricted physical and logical access. Database systems are protected by firewalls and intrusion detection systems.
• Password hashing: Account passwords are stored only in cryptographically hashed form. zk44 does not store or have access to your plaintext password at any time.
• Fraud monitoring: Automated systems monitor account activity continuously for patterns that may indicate unauthorised access, credential stuffing, or account takeover attempts.
• Incident response: In the event of a confirmed data security incident affecting your personal data, zk44 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

While zk44 takes all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect unauthorised access to your account.

12 Third-Party Links

The zk44 platform may from time to time contain references to third-party services, including payment providers such as bKash and Nagad, and game studio platforms. This Privacy Policy applies exclusively to data collected by zk44 directly. Third-party platforms and services operate under their own privacy policies, which we encourage you to review independently. zk44 accepts no responsibility for the data practices of third-party operators whose services are accessed through or in conjunction with the zk44 platform.

13 Marketing Communications

With your explicit consent, zk44 may send you promotional emails or platform notifications regarding bonuses, new games, seasonal promotions, and other offers relevant to your account. The following terms apply to marketing communications:

• Marketing communications are opt-in only. You will not receive promotional messages unless you have actively agreed to receive them during registration or subsequently through your account settings.
• You may opt out of marketing communications at any time by updating your notification preferences within your account settings or by contacting [email protected] with an unsubscribe request.
• Opting out of marketing communications does not affect the delivery of essential service communications such as deposit confirmations, withdrawal notifications, account security alerts, and support responses.
• zk44 does not share your contact details with third-party marketers for the purpose of sending you unsolicited communications on their behalf.

14 Changes to This Privacy Policy

zk44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. When material changes are made, the revised policy will be published at zk44.io/privacy-policy with an updated "Last Updated" date. Where changes are significant, we will endeavour to notify registered users via email or in-platform notification prior to the changes taking effect.

Continued use of the zk44 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. It is your responsibility to review this policy periodically to remain informed of how we handle your personal data. If you do not agree with any update to this policy, you may request account closure by contacting our support team.

15 Contact & Complaints

For any queries, requests, or concerns related to this Privacy Policy or the handling of your personal data by zk44, please contact us using the details below. We aim to respond to all data-related requests within 30 calendar days of receipt:

• Email: [email protected] — for data access requests, correction requests, deletion requests, and privacy complaints.
• Subject line: Please use "Privacy Request — [Your Username]" as the email subject line to ensure prompt routing to our data team.
• Response time: We aim to acknowledge all data-related requests within 5 business days and provide a full response within 30 calendar days. Complex requests may require an extension of up to an additional 30 days, in which case we will notify you of the delay and the reason for it.
• Identity verification: To protect your privacy and prevent unauthorised access to your data, we may ask you to verify your identity before processing any data access, correction, or deletion request.