zm666 Privacy Policy – Your Data, Your Rights

Privacy at a Glance

The following summary highlights the most important aspects of how zm666 handles your personal data. This summary is provided for convenience only — please read the full policy below before using the zm666 platform.

1. Data Controller – Who We Are

zm666 (referred to in this Privacy Policy as "zm666", "we", "us", or "our") operates the online gaming platform accessible at zm666.pro. For the purposes of this Privacy Policy, zm666 is the data controller responsible for the personal data of players who register and use the zm666 platform. This means that zm666 determines the purposes for which your personal data is collected and the means by which it is processed.

This Privacy Policy applies to all personal data collected by zm666 in connection with the zm666 platform, including data collected during account registration, during gameplay, during financial transactions using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, and during interactions with zm666 customer support. By creating a zm666 account or using the zm666 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Information We Collect

zm666 collects personal data across three broad categories: information you provide directly to us, information we collect automatically when you use the platform, and information we receive from third-party payment and verification partners. We collect only the data that is necessary for the lawful purposes described in this Privacy Policy.

Information You Provide Directly

• Registration data: your full name, date of birth, mobile phone number, and any username or password you create when opening a zm666 account.
• KYC verification documents: government-issued photo identification such as a National Identity Card (NID) or passport, submitted to verify your identity and age eligibility before your first withdrawal.
• Support communications: the content of any messages, emails, or chat interactions you have with the zm666 customer support team, including any attachments you submit in connection with a dispute or complaint.
• Responsible gaming preferences: any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you apply through your zm666 account settings.
• Promotional preferences: whether you opt in or out of receiving zm666 promotional communications, and your stated preferences for specific game categories or promotional event types.

Information Collected Automatically

• Device and connection data: the type of device you use to access zm666 (e.g. Android smartphone model), your mobile operating system version, your IP address, and your mobile network carrier.
• Session and gameplay data: timestamps of your login and logout sessions, the games you play, bet amounts, win and loss records, and game session duration data.
• Navigation data: pages visited within the zm666 platform, features accessed, buttons clicked, and the sequence of your navigation through the platform. This data is collected via analytics cookies and is used in aggregate, anonymised form to improve the platform.
• Transaction records: a complete record of all deposits and withdrawals made through your zm666 wallet, including the payment method used, the transaction amount in BDT, and the transaction timestamp.

Information from Third-Party Partners

• Payment verification data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment gateways confirming the success or failure of your payment transactions. zm666 does not receive or store your full payment account credentials (e.g. full bKash PIN or full card number) from these partners.
• KYC verification results from identity verification partners, confirming whether the identity documents you submitted match the registration details you provided and whether your age eligibility has been confirmed.
• Fraud prevention signals from anti-fraud service providers, including device fingerprint data and IP reputation data, used to detect and prevent account fraud and payment fraud on the zm666 platform.

3. How We Use Your Information

zm666 uses the personal data it collects for the following specific purposes. We do not use your personal data for any purpose not listed below without first obtaining your explicit consent or unless required to do so by applicable law.

• Account creation and management: to create and maintain your zm666 account, authenticate your identity when you log in, and enable you to access all features of the platform including your wallet, game history, and account settings.
• Payment processing: to process your deposit and withdrawal transactions using your selected payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), verify the success of transactions, and maintain an accurate record of your zm666 wallet balance.
• KYC verification and age confirmation: to verify that you meet zm666's minimum age requirement of 21 years, to comply with anti-money-laundering obligations, and to confirm that the account holder is a genuine individual matching the registration details provided.
• Fraud prevention and platform security: to detect, investigate, and prevent fraudulent activity, account takeover attacks, payment fraud, bonus abuse, multi-accounting, and other conduct that violates zm666's Terms and Conditions or applicable law.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour, to apply and enforce responsible gaming tools that you have requested (such as deposit limits, session reminders, and self-exclusion), and to contact you proactively if zm666's responsible gaming monitoring identifies concerning patterns in your account activity.
• Customer support: to respond to your support enquiries, process your complaints, investigate disputes relating to transactions or game outcomes, and maintain a record of support interactions for quality assurance and training purposes.
• Platform improvement and analytics: to analyse aggregated and anonymised usage data to understand how players navigate and use the zm666 platform, identify features that can be improved, and make informed product development decisions. This analytics processing does not involve your identifiable personal data.

4. Legal Basis for Processing Your Data

zm666 processes your personal data under the following legal bases. Each processing activity described in Section 3 corresponds to at least one of the following bases:

• Contractual necessity: processing that is necessary to perform the contract between you and zm666 — that is, to provide you with the zm666 gaming service you have signed up for. This includes account creation, payment processing, KYC verification, and gameplay record-keeping.
• Legal obligation: processing that is necessary for zm666 to comply with a legal obligation, including anti-money-laundering obligations, age verification obligations, and obligations to cooperate with law enforcement or regulatory authorities upon receipt of a lawful request.
• Legitimate interests: processing for fraud prevention, platform security, and aggregated analytics, where zm666's legitimate interest in maintaining a secure and well-functioning platform outweighs any privacy impact on individual players, given the technical and anonymised nature of this processing.
• Consent: for optional processing activities such as sending you promotional communications about zm666 bonuses, new game launches, and seasonal events. You may withdraw your consent to receive promotional communications at any time by contacting zm666 support at [email protected] or by updating your account notification preferences.

5. Sharing Your Information

zm666 does not sell, rent, or trade your personal data to any third party. zm666 shares your personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

Service Providers and Data Processors

zm666 shares personal data with the following categories of third-party service providers who process data on zm666's behalf under data processing agreements that require them to protect your data and use it only for the specific purpose for which it was shared:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard): receive transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are independently regulated as financial service providers.
• KYC and identity verification partners: receive copies of identity documents and registration data you submit during the KYC process, for the sole purpose of verifying your identity and age eligibility. Verified results are returned to zm666; zm666 does not retain copies of KYC documents beyond the minimum period required by applicable law.
• Game content providers (including Pragmatic Play, Evolution Gaming, Spribe, and other licensed game studios): receive anonymised session identifiers to deliver game content to your zm666 account. These providers do not receive your name, mobile number, or payment details.
• Fraud prevention and platform security providers: receive device fingerprint signals and IP data to help zm666 detect account fraud, payment fraud, and bonus abuse. This data is processed under strict data processing agreements and is not used by these providers for any independent purpose.

Disclosure Required by Law

zm666 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where zm666 is legally required to do so by a valid court order, statutory obligation, or lawful request from a competent authority. zm666 will, where permitted by law, notify you of any such disclosure request before complying with it.

6. Payment Data and Local Payment Method Security

zm666 recognises that local mobile financial services — particularly bKash, Nagad, and Rocket — are the primary payment methods used by Bangladesh players. zm666 does not store your bKash PIN, Nagad PIN, Rocket PIN, or full card details on its servers. When you initiate a deposit or withdrawal via a mobile financial service, you complete the authentication step (PIN entry) directly within the relevant mobile banking app or USSD interface — not within the zm666 platform. zm666 receives only a payment confirmation reference number from the relevant payment gateway.

All transaction records stored by zm666 reference only the last four digits of a card number (where applicable), the registered mobile number associated with the payment account (masked for display), and the transaction reference number provided by the payment gateway. This approach ensures that even in the unlikely event of a data security incident affecting zm666's systems, your payment credentials remain protected by the security infrastructure of your chosen payment provider.

7. Cookies and Tracking Technologies

zm666 uses cookies and similar tracking technologies on the zm666 platform to ensure the platform functions correctly, to remember your session state when you navigate between pages, and to collect anonymised analytics data that helps zm666 improve the platform over time. zm666 does not use advertising cookies or third-party behavioural tracking technologies that profile you for external advertising networks.

Types of Cookies We Use

• Essential cookies: strictly necessary for the zm666 platform to function. These cookies manage your login session, maintain your zm666 wallet state during a browsing session, and enable core platform security features. Essential cookies cannot be disabled without breaking the platform's functionality.
• Analytics cookies: collect anonymised data about how players navigate the zm666 platform — including which pages are visited most frequently, which game categories receive the most engagement, and how players move between sections. This data is processed in aggregate form only and cannot be used to identify individual players.
• Preference cookies: remember your platform preferences such as your chosen language setting, so you do not need to re-select your preferences each time you access zm666.

You can manage cookie settings through your mobile browser's privacy settings. Please note that disabling essential cookies will prevent the zm666 platform from functioning correctly, and you will not be able to log in or access your zm666 wallet if essential cookies are blocked.

8. Data Retention

zm666 retains your personal data for as long as your zm666 account remains active and for a defined period after account closure, in accordance with the following retention schedule: account registration data and KYC verification records are retained for a minimum of five years from the date of account closure, in order to meet zm666's anti-money-laundering record-keeping obligations. Transaction records (deposit and withdrawal history) are retained for a minimum of five years from the date of each transaction. Support interaction records are retained for three years from the date of the interaction. Responsible gaming records (deposit limits, self-exclusion periods) are retained for five years from the date the tool was applied or removed.

After the applicable retention period has expired, zm666 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Where zm666 is required to retain data for longer than the standard retention period due to an ongoing legal proceeding, regulatory investigation, or unresolved dispute involving your account, zm666 will retain the relevant data until that matter is concluded and for the standard retention period thereafter.

9. Data Security Measures

zm666 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and the zm666 platform; encryption at rest for sensitive personal data fields stored in zm666's databases; access controls that restrict zm666 staff access to personal data on a strict need-to-know basis; regular security assessments of the zm666 platform infrastructure; and incident response procedures that ensure any data security incidents are identified, contained, and reported promptly.

While zm666 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your zm666 account by keeping your login credentials confidential and by logging out of your zm666 account when using a shared device.

10. Your Data Rights

As a zm666 player, you have the following rights in relation to your personal data held by zm666. To exercise any of these rights, please contact zm666 support at [email protected]. zm666 will respond to all verified data rights requests within a reasonable period and will not charge a fee for doing so.

• Right of access: you have the right to request a copy of the personal data zm666 holds about you, together with information about how it is being used. zm666 will provide this information in a clear, structured format.
• Right to rectification: if any personal data zm666 holds about you is inaccurate or incomplete, you have the right to request that zm666 correct or complete it. You may also update certain personal data (such as your contact preferences) directly through your zm666 account settings.
• Right to erasure: you have the right to request deletion of your personal data where zm666 no longer has a lawful basis to retain it. Please note that zm666 may be required to retain certain data (such as transaction records and KYC documents) for a minimum period under anti-money-laundering obligations, and such data cannot be deleted before the expiry of the applicable retention period.
• Right to restrict processing: you have the right to request that zm666 restrict the processing of your personal data in certain circumstances — for example, while zm666 is investigating a data accuracy dispute you have raised.
• Right to data portability: you have the right to request a copy of the personal data you have provided to zm666 in a structured, machine-readable format, where the processing is based on your consent or the performance of a contract.
• Right to withdraw consent: where zm666 processes your personal data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

zm666 will verify your identity before acting on any data rights request to ensure that zm666 does not disclose or delete data belonging to another player. Identity verification for data rights requests may require you to confirm your registered mobile number and submit a copy of your KYC identification document.

11. Children's Privacy and the 21+ Rule

The zm666 platform is strictly for adults aged 21 years and above. zm666 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the zm666 account registration and KYC process. If zm666 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration of age during registration or for any other reason — zm666 will immediately close the relevant account, void any transactions associated with that account, and securely delete the personal data associated with it to the extent permitted by zm666's legal obligations. If you are a parent or guardian and believe your child may have registered on zm666, please contact zm666 support immediately at [email protected].

12. Changes to This Privacy Policy

zm666 reserves the right to update this Privacy Policy at any time. Where zm666 makes a material change to this Privacy Policy, zm666 will notify registered players by posting a prominent notice on the zm666 platform or by sending a notification to your registered mobile number. The revised Privacy Policy will be published on this page with an updated "Last Updated" date.

Your continued use of the zm666 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any material change to this Privacy Policy, you should stop using the zm666 platform and may request account closure by contacting zm666 support at [email protected].

13. How to Contact Us About This Policy

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data rights, or want to report a data privacy concern, please contact the zm666 data support team. Our team is available 24/7 and is familiar with the needs of Bangladesh players.