zoy 9 Privacy
Policy
At zoy 9, your privacy matters. This Privacy Policy explains what personal data we collect when you use the zoy-9.com platform, how we use and protect it, and what rights you hold over your own information as a registered player in Bangladesh.
Data Minimisation
zoy 9 collects only the personal data that is strictly necessary for account operation, payment processing, identity verification, and legal compliance. We do not request information beyond what serves a clear, documented purpose.
Encrypted Storage
All personal data held by zoy 9 is stored on encrypted servers. Passwords are hashed using industry-standard algorithms and are never stored in plain text. Payment details are handled via secure, tokenised payment gateways.
Your Rights Protected
You retain full rights over your personal data. At any time you may request access to what we hold, ask for corrections, request deletion of your account data, or object to how your information is being processed. We respond to all verified requests within 30 days.
No Data Selling
zoy 9 does not sell, rent, or trade your personal data to advertising networks, data brokers, or any third party whose primary purpose is commercial profiling. Data is shared only with service partners under strict contractual data protection obligations.
Bangladesh-Focused Compliance
Our data practices are tailored to the Bangladesh market. We process mobile financial service data — including bKash, Nagad, and Rocket transaction references — only to the extent required for deposit and withdrawal reconciliation, KYC matching, and AML screening.
Transparent Cookie Use
zoy 9 uses cookies for session management and platform performance only. We do not deploy third-party advertising cookies or cross-site tracking pixels. You can review and manage your cookie preferences at any time through your browser settings.
Information We Collect
When you register for and use a zoy 9 account, we collect personal data across several categories. The table below summarises the types of data we collect, the context in which it is collected, and the legal basis for processing that data.
| Category | Data Collected | When Collected | Purpose |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number, photograph | Account registration & KYC verification | Age verification, identity confirmation, AML compliance |
| Contact Data | Mobile phone number, email address, district/division of residence | Account registration | Account communication, support, security alerts |
| Financial Data | bKash/Nagad/Rocket mobile number, bank account reference, transaction amounts | Deposit & withdrawal processing | Payment processing, AML monitoring, withdrawal reconciliation |
| Technical Data | IP address, device type, operating system, browser, session timestamps | Every platform visit | Platform security, fraud detection, session management |
| Gameplay Data | Bet history, game session logs, win/loss records, bonus redemptions | During active play | Responsible gaming monitoring, dispute resolution, game auditing |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | When you contact support | Customer service, quality assurance, dispute records |
Data We Do NOT Collect
zoy 9 does not collect your full card numbers, CVV codes, or online banking credentials. For bank card transactions, only tokenised references provided by the payment gateway are stored — the actual card data never passes through or resides on zoy 9 systems. We do not collect biometric data beyond the photograph submitted for KYC purposes, and we do not record audio of support calls.
Data from Third Parties
In limited circumstances, zoy 9 may receive data about you from third-party sources. This includes identity verification data returned by KYC processing partners, fraud-risk signals from payment processors, and account status data from responsible gaming self-exclusion registries. Data received from third parties is held under the same security and retention standards as data collected directly from you.
How We Use Your Data
zoy 9 processes your personal data only for purposes that are lawful, documented, and proportionate to the data used. We rely on the following legal bases when processing your data:
- Contract performance: Processing necessary to provide you with the services you registered for — including account management, payments, game access, and customer support.
- Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations.
- Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests do not override your rights.
- Consent: Processing for optional communications such as promotional emails and bonus notifications, where you have explicitly opted in. You may withdraw this consent at any time.
Specific Uses of Your Data
The following list describes the primary ways in which zoy 9 uses your personal data:
- Account creation and management: Setting up and maintaining your zoy 9 player account, verifying your identity, and enabling secure login.
- Payment processing: Crediting deposits to your account balance and processing withdrawal requests to your registered bKash, Nagad, Rocket, or bank account. Transaction references are retained for financial audit purposes.
- KYC compliance: Verifying that you meet the minimum age requirement of 18 years and confirming that the identity and payment details on your account belong to the same individual.
- Responsible gaming: Monitoring gameplay data for patterns that may indicate problem gambling behaviour, enforcing self-exclusion requests, and applying deposit or loss limits where instructed by you.
- Fraud and AML prevention: Screening transactions and account activity against risk profiles to detect money laundering, bonus abuse, multi-accounting, and other forms of financial crime.
- Customer support: Using your contact and communication data to respond to support requests, resolve disputes, and maintain records of interactions.
- Platform improvement: Analysing aggregated, anonymised gameplay and usage data to improve game selection, platform performance, and user experience. No individual player is identified in this analysis.
- Marketing communications: Sending promotional emails, SMS notifications about bonuses, and BPL cricket special offers — only to players who have explicitly opted in to receive such communications.
What We Do Not Do With Your Data
zoy 9 does not use automated decision-making or profiling that produces legal or similarly significant effects on you without human review. We do not use your gameplay data to personalise advertising shown to you on third-party websites. We do not share your identity or financial data with any entity that is not directly involved in operating or securing the zoy 9 platform.
Data Sharing & Disclosure
zoy 9 does not sell or rent your personal data. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Service Providers and Technology Partners
To deliver the zoy 9 platform, we engage a small number of trusted third-party service providers. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process deposits and withdrawals. These providers operate under their own regulated privacy frameworks.
- KYC verification providers: Identity documents submitted for KYC are processed by a third-party verification partner operating under strict data processing agreements with zoy 9.
- Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other providers receive a session token and a pseudonymous player ID to initialise game sessions. They do not receive your full name, NID, or contact details.
- Cloud hosting and infrastructure: zoy 9 server infrastructure is hosted on enterprise-grade cloud platforms with data centre security certifications. Hosting partners have no independent right to access or process your personal data.
- Fraud detection services: Anonymised or pseudonymised risk signals may be shared with fraud prevention partners to protect the platform and its players.
Legal Disclosures
zoy 9 may disclose your personal data to law enforcement, financial intelligence authorities, or other competent bodies when required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the specific data requested and will notify you of the disclosure where legally permitted to do so.
Business Transfers
In the event that zoy 9 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, via email to your registered address, at least 30 days in advance of the transfer taking effect.
Data Security Measures
zoy 9 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our core security measures include:
- TLS/SSL encryption: All data transmitted between your device and zoy-9.com is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
- Password hashing: Account passwords are processed using a strong, salted one-way hashing algorithm. zoy 9 staff cannot view your password in plain text under any circumstances.
- Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. Staff with data access undergo background screening and operate under strict confidentiality obligations.
- Database encryption: Personal data fields — including identity documents, mobile numbers, and financial references — are encrypted at rest in the database using AES-256 encryption.
- Intrusion detection: zoy 9 operates continuous intrusion detection and anomaly monitoring on its server infrastructure. Suspicious access patterns trigger automated alerts and human review.
- Penetration testing: The zoy 9 platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
In the event of a data breach that is likely to result in a high risk to your rights or interests, zoy 9 will notify affected players without undue delay via the registered email address. The notification will describe the nature of the breach, the categories of data affected, and the steps zoy 9 is taking to mitigate the impact.
While zoy 9 takes all reasonable precautions to protect your data, no system is completely immune to risk. You are responsible for maintaining the security of your own login credentials and for notifying support immediately if you suspect your account has been compromised.
Data Retention
zoy 9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods we apply are as follows:
- Account and identity data: Retained for the duration of your account plus 5 years following account closure. This period covers potential AML investigation windows and financial audit requirements.
- Financial transaction records: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping practice.
- KYC documents: Retained for 5 years following account closure or the date of the last transaction, whichever is later.
- Gameplay and betting logs: Retained for 3 years for responsible gaming monitoring and dispute resolution purposes. Aggregated, anonymised analytics data may be retained indefinitely.
- Support communications: Retained for 2 years from the date of the interaction, unless the communication relates to a formal dispute, in which case it is retained until the dispute is fully resolved plus 1 year.
- Marketing consent records: Retained for the duration of your consent plus 2 years after withdrawal, to demonstrate compliance with consent-based marketing requirements.
When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Deletion requests submitted by players (see Your Privacy Rights below) are processed within 30 days, subject to the retention obligations described above — we cannot delete data that we are legally required to retain.
Your Privacy Rights
As a zoy 9 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days of receiving a verified request.
You may request a copy of the personal data zoy 9 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. We will provide this in a structured, readable format.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data that has already been verified via KYC, correction requests require resubmission of supporting documentation.
You may request that zoy 9 delete your personal data. We will honour this request to the fullest extent possible, subject to our legal obligation to retain certain data for AML, financial audit, and responsible gaming purposes for specified periods after account closure.
In certain circumstances — for example, while you contest the accuracy of data we hold, or while a deletion request is under review — you may ask us to restrict how we use your data, rather than delete it outright.
You may request your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service. This right applies to data you have provided to us directly and which we process on the basis of your consent or contract performance.
You have the right to object to processing of your personal data for purposes based on our legitimate interests, including internal analytics. You may also object at any time to the use of your data for direct marketing, including promotional emails and bonus notifications.
Where processing is based on your consent — such as receiving marketing emails — you may withdraw that consent at any time by clicking "Unsubscribe" in any marketing email or by emailing support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you are not satisfied with how zoy 9 has handled your personal data or responded to a rights request, you may raise a formal complaint by emailing [email protected]. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days.
Policy Updates & Contact
Updates to This Privacy Policy
zoy 9 reviews this Privacy Policy periodically and updates it as necessary to reflect changes to our data practices, platform features, or applicable legal requirements. When we make material changes, we will notify registered players via email to the address associated with their account at least 14 days before the changes take effect.
Minor updates — such as corrections to wording, formatting improvements, or clarifications that do not change the substance of the policy — may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how zoy 9 protects your data.
Your continued use of the zoy 9 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should close your account before the change takes effect. Account closure requests may be submitted to [email protected].
Children's Privacy
zoy 9 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 18. If we become aware that an account has been registered by a minor, the account will be suspended immediately, all data associated with it will be flagged for investigation, and the data will be deleted as part of the account closure process in line with our standard retention obligations. If you believe a minor has registered a zoy 9 account using your details or device, contact us immediately at [email protected].
Links to Third-Party Sites
The zoy 9 platform does not contain links to third-party websites. This Privacy Policy applies solely to data collected and processed by zoy 9 in connection with the zoy-9.com platform. If you access third-party services (such as your bKash app or mobile banking portal) in connection with a deposit or withdrawal, their own privacy policies govern the data you provide to them.
The data controller responsible for your personal data on the zoy 9 platform is the operating entity behind zoy-9.com. For all data-related enquiries, contact:
Please include "Privacy Request" in your subject line for faster routing.
- General privacy enquiries: 2–3 business days
- Access / portability requests: within 30 days
- Erasure / restriction requests: within 30 days
- Formal complaint acknowledgement: 5 business days
- Formal complaint resolution: within 30 days
- Data breach notification: without undue delay
Your Data Is Safe With zoy 9
Have questions about your privacy rights or how your data is used? Our support team is available around the clock. You can also explore our full FAQ, review our Responsible Gaming commitment, or head to the casino to start playing.
Read Our FAQ Responsible Gaming Visit zoy 9 Casino