0kzz Privacy Policy — Your Data, Your Rights

0kzz ("0kzz", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 0kzz platform located at https://0kzz.vip ("the Platform"). This Privacy Policy ("Policy") sets out, in clear and transparent terms, what personal data we collect from you, the purposes for which that data is processed, the legal bases upon which we rely, how long we retain your data, and the rights available to you in connection with your personal information.

This Policy applies to all users of the Platform, including registered players, prospective players who browse without registering, and any individual who contacts our support team. It covers all services offered through 0kzz, including casino games, live dealer tables, sports betting, crash games, virtual sports, promotional programmes, and the VIP loyalty scheme.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and 0kzz. Where this Policy conflicts with any other document, this Policy shall take precedence on matters relating to personal data.

For the purposes of this Privacy Policy, 0kzz operates as the data controller in respect of all personal data collected through the Platform. As data controller, 0kzz determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

All enquiries, requests, and complaints relating to the processing of your personal data should be directed to our dedicated data protection contact:

• Contact Method: [email protected]
• Subject Line: "Data Privacy Request" or "Data Protection Enquiry"
• Response Time: We aim to acknowledge all data-related requests within 48 hours and provide a substantive response within 30 days of receipt.
• Platform: https://0kzz.vip

0kzz collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party identity and payment verification partners. The categories of personal data we collect are as follows:

0kzz processes your personal data for the following defined purposes. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

• Account Registration and Management: To create, maintain, and administer your player account, including storing your login credentials, account preferences, and communication history.
• Identity Verification (KYC): To verify your identity and age in compliance with our age verification obligation (21+ only) and applicable anti-money laundering requirements. This may involve sharing your identity documents with trusted third-party KYC verification partners.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer), to reconcile transactions, and to detect and prevent payment fraud.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, crash games, and all other Platform features that form part of the 0kzz service offering.
• Customer Support: To respond to your enquiries, resolve account issues, process complaints, and provide technical assistance.
• Fraud Prevention and Security: To monitor account activity for signs of fraudulent behaviour, collusion, money laundering, unauthorised access, or other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns in support of our responsible gaming obligations, to apply player-requested deposit limits or self-exclusion requests, and to proactively identify players who may be displaying signs of problem gambling.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and maintain financial records as required by anti-money laundering regulations.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve Platform performance, optimise game selection, and enhance the overall user experience.
• Promotional Communications: Where you have consented, to send you personalised offers, bonus notifications, and promotional updates relevant to your gaming preferences. You may opt out of promotional communications at any time by contacting [email protected].

0kzz relies on the following legal bases to process your personal data, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 0kzz — including account creation, payment processing, game access, and customer support. Without this processing, we would be unable to provide the services you have requested.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC identity verification, anti-money laundering record retention, age verification, and responding to lawful requests from authorities.
• Legitimate Interests: Processing carried out to pursue our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud detection, security monitoring, platform improvement, and responsible gaming oversight.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for promotional and marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

0kzz does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. We may share your personal data with the following categories of third parties only where strictly necessary and under appropriate data protection safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the transactional data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable financial regulations.
• KYC and Identity Verification Partners: Third-party identity verification services may process your identity documents to confirm your age, identity, and address as part of our KYC compliance obligations.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive session identifiers and game participation data necessary to deliver their game content through the 0kzz Platform. These providers do not receive your full identity or financial data.
• IT and Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who support the technical operation of the Platform. These providers act as data processors under binding data processing agreements with 0kzz.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, 0kzz will disclose personal data to the extent necessary to comply with such requirements. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and financial advisors engaged by 0kzz may have access to personal data on a strictly need-to-know basis and under binding confidentiality obligations.

0kzz uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the Platform effectively, maintain your login session, support security functions, and understand how players interact with our services. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your preferences, support secure payment processes, and enable core Platform features. These cookies cannot be disabled without breaking the Platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the Platform — such as which pages are visited most frequently, average session duration, and navigation paths — to help us identify and resolve performance issues and improve the overall experience.
• Functional Cookies: These cookies remember your language preference, display settings, and game history to provide a more personalised experience on return visits.
• Security Cookies: These cookies support our fraud detection and account security systems by helping us identify suspicious login patterns or anomalous device behaviour associated with your account.

Non-essential cookies (performance and functional) require your consent before being placed on your device. You may manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality. 0kzz does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

0kzz retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply as a general guide:

• Account Data and Transaction Records: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later, to satisfy anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of submission, in line with AML regulatory obligations.
• Customer Support Communications: Retained for 2 years from the date of the final communication in the relevant support thread, to support dispute resolution and service improvement.
• Gaming Activity Logs: Retained for 5 years from the date of each gaming session, for regulatory compliance and responsible gaming monitoring purposes.
• Marketing Consent Records: Retained for the duration of your account and for 3 years after account closure, to demonstrate consent compliance.
• Technical and Security Logs: Retained for 12 months on a rolling basis, for fraud detection and security incident investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis and platform development purposes.

0kzz implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that your credentials and financial information are protected in transit.
• Encrypted Data Storage: Sensitive data fields — including identity documents, payment account details, and authentication credentials — are encrypted at rest within our secure database infrastructure.
• Access Controls: Access to personal data within the 0kzz organisation is restricted on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: Our systems are continuously monitored for suspicious activity. Automated intrusion detection tools alert our security team to anomalous access patterns in real time.
• Penetration Testing: 0kzz engages independent security specialists to conduct periodic penetration testing of our Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Secure Payment Integration: Payment processing integrations with bKash, Nagad, Rocket, and banking partners are implemented using their official, certified APIs under secure channel protocols.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 0kzz will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the breach.

As a player on the 0kzz platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise. We will respond within 30 days.

0kzz will not charge a fee for processing legitimate data rights requests. We reserve the right to request additional information to verify your identity before fulfilling a request, in order to protect your data from unauthorised third-party access. Where a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee or decline to act on it, providing written reasons for our decision.

The 0kzz platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from any individual under the age of 21. Age verification is a mandatory step in our account registration process, and we use third-party KYC tools to support the accuracy of this verification.

If we become aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data from our systems, close the associated account, and refund any deposits made, in accordance with our Responsible Gaming policy. Any winnings accrued by an underage player will be forfeited.

0kzz reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data practices, Platform features, applicable laws, or regulatory requirements. When material changes are made to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The date of the most recent revision is always displayed at the top of this document. We encourage you to review this Policy periodically to stay informed about how 0kzz protects your personal data. Continued use of the Platform following the posting of any updated version of this Policy constitutes your acceptance of those changes.

Where changes to this Policy require fresh consent from you under applicable data protection principles, we will obtain that consent before applying the updated processing activities to your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 0kzz processes your personal data, please contact our team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" for general questions, or "Data Rights Request" for rights exercises
• Acknowledgement: Within 48 hours of receipt
• Full Response: Within 30 calendar days of receipt (complex requests may require up to 60 days, in which case we will notify you of the extension)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)