Privacy Policy — How cz8009 Collects, Uses, and Protects Your Personal Data

How We Collect This Data

cz8009 collects personal data through the following means:

• Direct submission: Information you provide when registering an account via the cz8009 Login page, completing your profile, making a deposit or withdrawal request, submitting KYC documents, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you interact with the cz8009 platform, including via cookies, log files, and session tracking technologies.
• Third-party sources: Identity verification data received from KYC service providers; fraud-risk signals from payment processors; and, where applicable, publicly available information used to verify the accuracy of the details you have provided.

Special Category Data

cz8009 does not intentionally collect special category data (for example, data concerning health, religion, ethnicity, or political opinions) from its players. If you voluntarily disclose such information — for example, in the context of a responsible gaming support request — it will be handled with the highest level of care and used solely for the purpose for which it was shared. It will not be combined with your general profile data for marketing or any other purpose.

cz8009 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which we rely are: contractual necessity (processing required to deliver the cz8009 service to you), legal obligation (processing required to comply with applicable laws, including anti-money-laundering and age-verification requirements), and legitimate interests (processing that serves a genuine business need which does not override your privacy rights).

Operational Uses

• Creating and managing your cz8009 player account, including processing your cz8009 Login credentials securely.
• Verifying your identity and age in accordance with our Terms & Conditions and applicable legal obligations.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods in BDT.
• Providing customer support and resolving disputes, account queries, and transaction discrepancies.
• Applying and managing bonuses, promotional credits, and free bets credited to your account.

Security and Compliance Uses

• Detecting, investigating, and preventing fraud, collusion, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Conducting Know Your Customer (KYC) and anti-money-laundering (AML) checks as required by our platform policies.
• Monitoring account activity to identify signs of problem gambling and enabling our responsible gaming team to intervene where necessary.
• Enforcing self-exclusion orders and account closure decisions in accordance with player requests or regulatory requirements.

Platform Improvement Uses

• Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the cz8009 platform.
• Testing new features, game integrations (including from providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe), and platform updates before full deployment.

Marketing Uses

With your consent, cz8009 may send you promotional communications about new games, seasonal offers (such as BPL cricket season promotions or Eid special bonuses), and platform updates via email or SMS to your registered contact details. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

In the course of delivering the cz8009 service, your personal data may be shared with the following categories of third parties:

Payment Service Providers

To process your BDT deposits and withdrawals, cz8009 shares necessary financial data with payment processors operating bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway integrations. Each payment service provider operates under its own privacy policy and data protection obligations. cz8009 shares only the minimum data required to execute the requested transaction.

Identity Verification Providers

To fulfil its KYC and age-verification obligations, cz8009 may share identity documents and personal details with third-party identity verification service providers. These providers are contractually bound to use your data solely for the purpose of completing the verification check requested by cz8009 and to delete or return the data upon completion of that purpose.

Game Technology Providers

Games on the cz8009 platform are supplied by certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game, limited session data (such as a pseudonymous player token and game session identifier) is passed to the relevant provider's servers to deliver the game. No full identity data is shared with game providers as part of normal gameplay.

Legal and Regulatory Disclosure

cz8009 may disclose your personal data to law enforcement authorities, financial intelligence units, or other government bodies where required to do so by applicable law, by a valid legal order, or where cz8009 reasonably believes such disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, cz8009 will share only the data specifically requested and will notify you of the disclosure where legally permitted to do so.

Business Transfers

In the event that cz8009 undergoes a business acquisition, merger, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. cz8009 will take reasonable steps to ensure that any such transfer is subject to appropriate data protection safeguards, and registered players will be notified of any material change to the data controller's identity prior to the transfer taking effect.

cz8009 uses cookies and similar tracking technologies (collectively, "cookies") on the cz8009.net website. Cookies are small text files placed on your device by your web browser when you visit a website. They serve a range of functions, from keeping your session active while you navigate the platform to helping us understand how players interact with different parts of the site.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only certain types of cookies, or delete cookies already stored on your device. Please be aware that disabling strictly necessary cookies will impair the functionality of the cz8009 platform — in particular, you may not be able to maintain a logged-in session or access your account balance. Disabling functional cookies will mean the platform cannot remember your preferences between visits. Analytics and security cookies do not affect core platform functionality if disabled, but their deactivation may reduce our ability to detect and respond to security threats promptly.

Third-Party Analytics

cz8009 may use third-party analytics tools to collect anonymised, aggregated data on platform usage. Any such tools are configured to anonymise IP addresses before data is stored and are used solely for internal platform improvement purposes. No individual player identity is disclosed to analytics service providers.

cz8009 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no system can guarantee absolute security, cz8009's security infrastructure is maintained to a standard consistent with industry best practice for online gaming platforms.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and cz8009.net is encrypted using SSL/TLS protocols, ensuring that your personal information and payment details are protected in transit.
• Password Hashing: cz8009 Login passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored in our systems. Even cz8009 staff cannot retrieve your password — only a reset can be issued.
• Access Controls: Access to personal data within cz8009's internal systems is restricted on a need-to-know basis. Staff members can only access the minimum data necessary to perform their specific role.
• Fraud Monitoring: Automated fraud detection systems continuously monitor account activity for patterns associated with unauthorised access, account takeover, and suspicious financial transactions.

Data Storage Location

Personal data collected from players in Bangladesh is stored on secure servers. cz8009 takes reasonable steps to ensure that data processed on its behalf by third-party service providers is subject to equivalent security standards, including through contractual data processing agreements.

Data Breach Response

In the unlikely event of a data security breach that affects your personal information, cz8009 will take immediate steps to contain the breach and assess its scope. Where the breach is likely to result in a risk to your rights or interests, cz8009 will notify affected players as promptly as practicable, providing a clear description of the nature of the breach, the data involved, and the steps you should take to protect yourself. Please ensure your registered email address is always kept up to date so that breach notifications can reach you without delay.

Your Responsibility

The security of your cz8009 Login credentials — your username, password, and any OTPs sent to your registered mobile number — is your personal responsibility. Do not share these details with anyone, including individuals who claim to represent cz8009. Our staff will never ask for your password or full OTP via any channel. If you suspect that your account credentials have been compromised, contact [email protected] immediately so that your account can be secured without delay.

As a player whose personal data is processed by cz8009, you hold the following rights in relation to that data:

Right of Access

You have the right to request a copy of the personal data that cz8009 holds about you. This includes your registration information, KYC data, transaction history, and any communications records. cz8009 will provide this information in a clear, readable format within 30 days of receiving a valid access request.

Right to Rectification

If any personal data held by cz8009 is inaccurate or incomplete, you have the right to request that it be corrected or updated. For minor corrections such as a misspelled name or outdated address, please contact our support team directly. Changes to identity information may require documentary evidence to be submitted before the correction is applied.

Right to Erasure

You may request that cz8009 delete the personal data it holds about you, subject to certain conditions. cz8009 is not able to erase data that it is legally required to retain — for example, transaction records required for anti-money-laundering compliance purposes must be retained for a minimum defined period regardless of an erasure request. Where erasure is not possible in full, cz8009 will inform you of the specific data that must be retained and the reason for its retention.

Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being investigated — you may request that cz8009 restrict the processing of your personal data. During a restriction period, cz8009 will continue to store your data but will not carry out further active processing beyond what is necessary to maintain the restriction itself.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. If you exercise this right, cz8009 will cease all marketing communications to your registered contact details as promptly as practicable and in any event within 14 days of receiving your objection.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, you may request that cz8009 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service if you wish. This right applies to data you have directly provided to cz8009 and does not extend to data that has been derived or inferred from your behaviour on the platform.

cz8009 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is used in preference to deletion, the anonymised data may be retained indefinitely for statistical or analytical purposes without further notice to the individual concerned.

Retention Following Account Closure

When a cz8009 player account is closed — whether voluntarily by the player or by cz8009 following a breach of Terms & Conditions — certain personal data will be retained for the periods specified in the table above, primarily to satisfy anti-money-laundering record-keeping requirements and to enable the resolution of any disputes that may arise following closure. The retention of data after account closure does not imply any ongoing contractual relationship between the player and cz8009.

cz8009 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, to comply with new legal requirements, or to improve the clarity and transparency of the information we provide to players. When material changes are made, the effective date shown at the top of this document will be updated accordingly.

Where a change materially affects how we process your personal data — for example, if we begin sharing data with a new category of third party, or if we extend a data retention period — we will take reasonable steps to notify registered players via the email address held on their account prior to the change taking effect. For minor or administrative changes that do not materially alter your privacy position, a notice on the cz8009.net website may be the sole form of notification.

Your continued use of the cz8009 platform after any updated Privacy Policy has been published constitutes your acknowledgement of the updated terms. If you disagree with any material change to this policy, you should cease using the cz8009 platform and contact our support team to discuss the closure of your account and the handling of your personal data going forward.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cz8009 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6). Contact email: [email protected]. Please note that this email address must be used as plain text — we do not accept or process data subject requests submitted via social media or third-party messaging platforms.

We aim to respond to all privacy-related enquiries within 5 business days and to resolve all formal data rights requests within 30 calendar days of receipt. Where a request is complex or where we receive a high volume of requests simultaneously, we may extend the response period by a further 30 days, in which case we will notify you of the extension within the initial 30-day window.