zeta7 Privacy Policy
Your Data, Your Rights, Our Commitment

zeta7 collects personal data from you in several ways — directly through registration and account use, automatically through your interactions with the platform, and occasionally from third-party sources such as payment processors. The table below summarises the categories of data we collect and the circumstances under which each is gathered.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless you voluntarily provide such information in the context of a responsible gaming support request. Any such information provided in that context is handled with the highest level of care and is not used for any other purpose.

zeta7 processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely on are: (a) performance of our contract with you as a registered player; (b) compliance with legal obligations; (c) our legitimate business interests where these do not override your fundamental privacy rights; and (d) your consent, in the limited circumstances where we rely on it. The following table sets out the specific purposes for which we use your data and the legal basis for each.

Marketing communications. If you have opted in to receive promotional emails or SMS notifications from zeta7, we will send you information about new games, special offers, seasonal promotions (such as Eid bonuses, BPL cricket promotions, and Pohela Boishakh specials), and deposit incentives. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism included in any marketing email. Opting out of marketing communications does not affect your ability to use the zeta7 platform.

Automated decision-making. zeta7 uses automated tools to assist with fraud detection, responsible gaming monitoring, and bonus eligibility assessments. Where an automated process results in a decision that significantly affects you — such as an account suspension — you have the right to request human review of that decision by contacting our support team.

zeta7 uses cookies and similar tracking technologies to make the platform work properly, to remember your preferences, and to understand how players use the site so we can continue to improve it. A cookie is a small text file stored on your device when you visit a website. The cookies used by zeta7 fall into the following categories:

zeta7 does not use advertising cookies or cross-site tracking cookies. We do not allow third-party advertising networks to set cookies on our platform.

You can manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling certain cookies may affect your ability to log in to your zeta7 account or use certain platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

zeta7 does not sell, rent, or trade your personal data. We share your data only with third parties that are essential to delivering the zeta7 platform services, and only to the extent necessary for that purpose. All third-party data processors engaged by zeta7 are bound by contractual data protection obligations that require them to protect your information and use it only for the specified purpose.

The categories of third parties with whom zeta7 shares personal data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, and other banking partners — to process your deposit and withdrawal transactions in BDT.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — limited technical data (such as player session ID) is passed to game platforms to enable gameplay. These providers do not receive your full identity or payment data.
• Identity verification services: Third-party KYC providers used to verify your identity documents and confirm your age during account verification. These providers are bound by strict confidentiality obligations.
• Fraud prevention and security: Specialist providers that help zeta7 detect account takeovers, fraudulent transactions, and money laundering attempts. These providers receive technical and transactional data, not sensitive identity documents.
• Analytics providers: Aggregated, anonymised usage data is shared with analytics tools to help us understand platform performance. No personally identifiable information is included in these data transfers.
• Legal and regulatory authorities: Where required by applicable law or by a lawful request from a competent authority in Bangladesh or another jurisdiction, zeta7 may be required to disclose specific player data. We will notify you of such a disclosure where legally permitted to do so.

When data is transferred to third-party processors located outside Bangladesh, zeta7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh, including contractual protections and, where applicable, compliance with international data transfer frameworks.

zeta7 retains your personal data for as long as your player account remains active and for a defined period after account closure, in order to meet our legal, regulatory, fraud-prevention, and dispute-resolution obligations. The table below outlines our standard retention periods by data category.

After the applicable retention period has elapsed, zeta7 will either securely delete your personal data or anonymise it so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for aggregate statistical and analytical purposes.

If you request deletion of your account and personal data under your right to erasure (see Section 6 below), we will action that request promptly. However, please be aware that we may be required to retain certain data categories — particularly financial and transaction records — for the full retention period set out above, regardless of an erasure request, in order to meet our legal obligations.

As a user of the zeta7 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of Access. You have the right to request a copy of the personal data that zeta7 holds about you, along with information about how it is being used. We will provide this in a clear, structured format.
• Right to Rectification. If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details — such as your contact number and address — can be updated directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"). You may request that zeta7 delete your personal data. We will comply with this request where we are not required by law to retain the data. As noted in Section 5, certain financial and transaction records must be retained for a defined statutory period.
• Right to Restrict Processing. You may request that zeta7 limit the way in which we use your personal data — for example, while a dispute about accuracy is being resolved — without requiring full deletion.
• Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider, where technically feasible.
• Right to Object. You may object to zeta7 processing your data on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
• Rights Related to Automated Decision-Making. Where a decision with significant effect on you is made by automated means alone, you have the right to request human review of that decision and to contest the outcome.

zeta7 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, and destruction. Key security measures in place at zeta7 include the following:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the zeta7 platform — the same standard used by major banks in Bangladesh and internationally.
• Encryption at rest for all sensitive personal and financial data stored in zeta7's secure database infrastructure.
• Access controls ensuring that personal data is accessible only to zeta7 staff members who have a legitimate need to access it in the course of their role. Access is logged and audited.
• Multi-factor authentication available for player accounts and mandated for all internal administrative systems.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.
• Secure payment integrations with bKash, Nagad, and card processors — zeta7 does not store full card numbers or mobile banking PINs.
• Incident response procedures designed to detect, contain, and notify affected users of any data security incident promptly.

While zeta7 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure. We strongly recommend that you use a strong, unique password for your zeta7 account, enable two-factor authentication where available, and never share your login credentials with anyone. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

8.1 Data Controller. The data controller responsible for your personal data is the zeta7 platform, operated at zeta7.vip. For all privacy-related enquiries, including requests to exercise your rights as described in Section 6, please contact our dedicated privacy support channel:

Email: [email protected]
Subject line: Privacy Policy Enquiry or Privacy Rights Request
Response time: Within 5 business days for acknowledgement; within 30 days for full response
Support hours: 24 hours a day, 7 days a week, 365 days a year (Bangladesh Standard Time, UTC+6)

8.2 Complaints. If you believe that zeta7 has handled your personal data in a manner that does not comply with this Privacy Policy or applicable data protection law, we encourage you to raise the matter with us directly in the first instance by emailing [email protected]. We take all privacy complaints seriously and will investigate thoroughly and respond with our findings.

8.3 Policy Updates. zeta7 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make a material change to this policy, we will notify registered players via email and display a prominent notice on the zeta7 platform for a minimum of 30 days before the change takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how zeta7 protects your data. Continued use of the zeta7 platform following notification of a policy update constitutes your acceptance of the revised terms.