gz777 Privacy Policy

gz777 is an online betting and casino platform operated primarily for players based in Bangladesh. We are committed to handling the personal data of every player responsibly, transparently, and in accordance with applicable data protection principles. This Privacy Policy sets out the full detail of our data practices in plain, professional English so that every gz777 player — whether they are based in Dhaka, Chittagong, Sylhet, Khulna, or anywhere else in Bangladesh — can make an informed decision about sharing their data with us.

This Policy applies to all personal data collected through the gz777 website (gz777.io), any mobile-optimised pages, customer support channels (including email correspondence sent to [email protected] and [email protected]), and any other interaction you have with the gz777 Platform. It applies equally to all registered Account holders and to visitors who browse gz777.io without registering.

The gz777 Privacy Policy should be read alongside the gz777 Terms & Conditions, which are available at gz777.io/terms-conditions, and our Responsible Gaming Policy, available at gz777.io/responsible-gaming. Together, these three documents form the primary governance framework for your relationship with the gz777 Platform.

gz777 collects personal data in several categories, depending on how you interact with the Platform. The following table summarises the categories of data we collect, the specific data elements within each category, and the primary source of that data:

gz777 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for identity verification purposes. Where identity verification requires review of a document that incidentally contains such information (for example, a National ID card that includes religion), that information is used solely for verification purposes and is not processed for any other purpose.

gz777 uses the personal data we collect for the following specific purposes. We identify the applicable legal basis for each use in Section 4 of this Policy.

• Account Creation and Management: Processing your registration, maintaining your gz777 Account, authenticating your identity at login, and managing Account settings and preferences.
• Transaction Processing: Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard channels; recording transaction history; and resolving payment disputes.
• Identity Verification (KYC): Verifying your identity and age (21+) in accordance with our Know Your Customer obligations before processing withdrawals or as otherwise required for regulatory compliance.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns to detect and report suspicious financial activity to the appropriate authorities in fulfilment of our legal obligations.
• Platform Operation and Improvement: Delivering the betting and casino services you request; maintaining Platform stability and security; diagnosing technical errors; and improving the Platform based on aggregated usage data and player feedback.
• Customer Support: Responding to your queries, complaints, and support requests submitted via [email protected] or live chat; maintaining records of support interactions for quality assurance and dispute resolution.
• Responsible Gaming: Monitoring gaming behaviour to identify indicators of problem gambling; administering self-exclusion, deposit limit, and cooling-off requests; and providing proactive responsible gaming interventions where warranted.
• Marketing and Promotions: Sending you promotional offers, bonus notifications, and relevant platform updates via email, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting [email protected].
• Fraud Prevention and Security: Detecting and investigating fraudulent, abusive, or prohibited activity on your Account; taking enforcement action where breaches of our Terms & Conditions are identified.
• Legal and Regulatory Compliance: Complying with applicable laws, regulations, court orders, and lawful requests from competent authorities.

gz777 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing is necessary for the performance of the player-platform contract established when you register a gz777 Account. This covers Account creation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and cooperation with lawful authority requests.
• Legitimate Interests: Processing is necessary for gz777's legitimate interests, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security monitoring, responsible gaming oversight, and analytical improvements to the Platform's performance and content.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — most notably for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent may be exercised by contacting [email protected].

gz777 does not sell, rent, or commercially trade your personal data to third parties. We share personal data only in the following strictly defined circumstances:

• Payment Service Providers: We share the minimum necessary financial and identity data with payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard) to process your deposits and withdrawals. All payment partners are contractually bound to handle your data securely and exclusively for the stated transaction purpose.
• Identity Verification Providers: Where we use third-party KYC service providers to verify player identity and age, we share identity documents and personal details with those providers under strict data processing agreements that prohibit secondary use of your data.
• Game Technology Providers: Game studios and platform technology providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session and account reference data necessary to deliver their games through the gz777 Platform. These providers are bound by their own data protection commitments and are not permitted to use player data for purposes beyond game delivery.
• Regulatory and Legal Authorities: gz777 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in connection with a lawful investigation. We will notify you of such disclosures where we are legally permitted to do so.
• Professional Advisors: gz777 may share data with legal counsel, auditors, or other professional advisors under confidentiality obligations where necessary to obtain professional advice or to establish, exercise, or defend legal claims.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of gz777's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified in advance of any such transfer that materially affects their rights under this Policy.

gz777 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform effectively, maintain your authenticated session, remember your preferences, and gather aggregated analytical data about how players use the Platform. The following categories of cookies are used on gz777.io:

• Strictly Necessary Cookies: These cookies are essential for the gz777 Platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. The Platform cannot be used without these cookies, and they do not require your consent.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming configuration. They improve your experience but are not strictly required for Platform operation.
• Analytical Cookies: gz777 uses first-party analytical tools to understand how players navigate the Platform, which pages attract the most engagement, and where technical issues arise. This data is aggregated and anonymised before being used for Platform improvement decisions. Individual player betting or financial data is never included in analytical reports.
• Marketing Cookies: Where you have consented, gz777 may use cookies to deliver relevant promotional content on the Platform and measure the effectiveness of promotional campaigns. You may withdraw consent for marketing cookies at any time via your Account settings or by contacting [email protected].

You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the gz777 Platform, including logging into your Account. Disabling functional or analytical cookies will not prevent Platform access but may reduce the quality of your experience.

gz777 takes the security of your personal data seriously and has implemented a layered security architecture designed to protect against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your browser or mobile device and gz777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our SSL certificate is maintained and renewed on a strict schedule to prevent lapses in encryption coverage.
• Encryption at Rest: Sensitive personal data stored on gz777 servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within gz777's systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. gz777 does not store plain-text passwords and cannot retrieve your password — only reset it through verified channels.
• Intrusion Detection: gz777's infrastructure is monitored continuously for anomalous access patterns, potential intrusion attempts, and security vulnerabilities. Any detected threat triggers an immediate security response protocol.
• Incident Response: In the event of a data security incident that poses a risk to your rights, gz777 will notify affected players and, where required by applicable law, notify the relevant authorities promptly upon becoming aware of the incident.

gz777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention guidelines apply to the principal categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your active gz777 Account plus a minimum of 5 years following Account closure. This extended retention period supports our legal obligation to maintain records for AML compliance and to respond to any post-closure regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements and AML obligations.
• Betting and Gaming Records: Retained for a minimum of 3 years from the date of the bet or game session, supporting dispute resolution and regulatory compliance.
• Customer Support Records: Retained for 3 years from the date of the support interaction, supporting quality assurance review and dispute escalation.
• Marketing Consent Records: Retained for the duration of your Account plus 1 year following Account closure, or until consent is withdrawn, whichever is earlier, to provide evidence of consent management compliance.
• Technical and Analytical Data: Anonymised and aggregated data (from which individual players cannot be identified) may be retained indefinitely for platform improvement purposes. Non-anonymised technical data (e.g., IP address logs) is retained for a maximum of 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised through processes designed to prevent reconstruction of the original data. You may request early deletion of your personal data (subject to any overriding legal retention obligations) in accordance with your rights described in Section 9 of this Policy.

As a gz777 player, you hold the following rights in relation to your personal data. gz777 will respond to all valid rights requests within 10 business days of receipt. To exercise any of these rights, contact [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of the personal data that gz777 holds about you. We will provide this in a structured, commonly used format. The first access request within any 12-month period is provided at no charge; subsequent requests in the same period may incur a reasonable administrative fee.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Many account details (email address, contact number, address) can be updated directly via your gz777 Account settings. Identity data corrections may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you have objected to processing and gz777 has no overriding legitimate interests. This right is subject to any mandatory legal retention obligations that require gz777 to retain data for a fixed period.
• Right to Restrict Processing: You have the right to request that gz777 limits its processing of your personal data in certain circumstances, for example while the accuracy of data is being contested, or pending a determination of an objection to processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to request that we transmit it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on gz777's legitimate interests (including profiling for responsible gaming purposes) and to processing for direct marketing purposes. On receipt of a valid marketing objection, gz777 will cease marketing processing immediately.
• Rights Related to Automated Decision-Making: gz777 does not make solely automated decisions that produce legal or similarly significant effects on players without human review. Where automated tools are used to flag accounts for responsible gaming or AML review, a human review process is conducted before any consequential action is taken.

gz777 is strictly an adult platform. Access to and use of the gz777 Platform is prohibited for individuals under 21 years of age. gz777 does not knowingly collect, store, or process personal data from individuals under 21 years of age.

Age verification is conducted during the Account registration process and reinforced through our KYC identity verification procedures. Where gz777 discovers or has reasonable grounds to believe that an Account has been registered by or on behalf of an individual under 21 years of age, we will immediately suspend the Account, initiate an investigation, and — where the age concern is confirmed — permanently close the Account and forfeit any Balance in accordance with our Terms & Conditions.

Parents and guardians who believe that a person under 21 in their household has registered a gz777 Account should contact [email protected] immediately. gz777 will treat all such notifications as urgent and respond within 1 business day. We encourage households in Bangladesh with minors to implement internet parental control tools to prevent access to online gambling platforms.

gz777 operates a platform for Bangladeshi players and processes personal data primarily within the jurisdictions in which its platform and game technology providers are hosted. In some cases, the delivery of casino games and live dealer content through third-party studios (such as Evolution Gaming, Pragmatic Play, and other licensed providers) may result in personal data being processed on servers located outside Bangladesh.

Where personal data is transferred to countries or territories that do not provide a level of data protection equivalent to Bangladesh's applicable standards, gz777 implements appropriate safeguards to protect that data, including:

• Contractual data protection clauses incorporated into agreements with all third-party data processors that receive personal data from gz777.
• Due diligence assessments of the data protection practices of all significant third-party providers before engagement and on an ongoing basis.
• Restrictions on the categories and volumes of personal data shared with any third party to the minimum necessary for the stated purpose.

If you would like further information about the international transfers that gz777 undertakes and the safeguards in place, please contact [email protected].

The gz777 Platform may from time to time contain references to third-party game providers, payment processors, or informational resources. gz777 does not control the privacy practices of any third-party website or service, and this Privacy Policy does not extend to any third-party platforms accessed via or referenced by gz777.io.

gz777 strongly recommends that players review the privacy policies of any third-party service they interact with in connection with their gz777 Account — particularly the privacy policies of their chosen payment provider (bKash, Nagad, Rocket, Upay, or their bank). gz777 is not responsible for any data practices of those third parties.

gz777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or Platform features. The updated Policy will be published at gz777.io/privacy-policy with a revised "Effective Date" at the top of the page.

Where a material change to this Policy affects your rights or the way in which we process your personal data, gz777 will notify you via on-platform notification or email to your registered address at least 7 calendar days before the change takes effect. Your continued use of the gz777 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should discontinue use of the Platform and contact [email protected] to request Account closure in accordance with Section 12.1 of the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which gz777 handles your personal data, please contact us using the details below. All privacy-related communications should be directed to our support team, who will escalate data protection matters to the appropriate internal reviewer.

• General Support & Privacy Requests: [email protected]
• Business & Partnership Enquiries: [email protected]
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Timeframe: Privacy rights requests are handled within 10 business days of receipt of a valid, complete request.

When contacting gz777 regarding a privacy matter, please include your registered Account username or email address, a clear description of your request or concern, and any supporting documentation where relevant. This will allow us to locate your records efficiently and respond with precision.

gz777 is committed to resolving all privacy concerns promptly and in good faith. If you are not satisfied with our response to your privacy request, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.