Legal

xz77 Privacy Policy — How We Handle Your Personal Data

Transparency is a core value at xz77. This policy explains exactly what data we hold, why we hold it, and what rights you have over it.

📅 Last Updated: January 2026. This Privacy Policy applies to all xz77 users in Bangladesh.
1 Overview

Introduction

xz77 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all players who use the xz77 website, mobile interface, games, sportsbook and related services ("the Services"). This Privacy Policy describes how xz77 collects, uses, stores, shares and protects personal data in connection with the Services. It applies to all users based in Bangladesh and any other jurisdiction from which xz77 is accessed. By registering on or using xz77, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside our Terms and Conditions, which form the complete agreement between you and xz77. If you have any questions about this policy or wish to exercise any of your data rights, please contact our support team at any time. xz77 takes data privacy seriously and will respond to all legitimate privacy requests promptly.

2 Data Collection

What Information We Collect

xz77 collects personal data across several categories when you register, use the Services, make deposits or withdrawals, interact with customer support, or participate in promotions. The specific data collected depends on how you use the platform. Below are the primary categories of personal data xz77 processes:

🪪

Identity Data

Full name, date of birth, nationality, Bangladesh National ID number or passport number, and a photograph or scan of the identity document submitted during KYC verification.

💳

Financial Data

Mobile wallet identifiers used for transactions (bKash, Nagad, Rocket, Upay), transaction reference numbers, deposit and withdrawal history, account balance history, and any details related to payment disputes or chargebacks. xz77 does not store full card numbers or wallet PINs.

📱

Contact Data

Bangladesh mobile number used for account registration, OTP verification and account notifications. If a player voluntarily provides an email address, it is stored as a secondary contact method for account communications.

🎮

Gaming and Activity Data

Complete record of games played, bets placed (including sports markets, bet type, stake, and outcome), session timestamps, bonus claims and wagering history, and in-platform communication logs with the support team.

🌐

Technical and Device Data

IP address, device type and model, operating system version, browser type and version, mobile network operator, approximate geographic location derived from IP, and cookie identifiers. This data is used for fraud prevention, responsible gaming monitoring, and platform performance optimisation.

3 Data Use

How We Use Your Information

xz77 uses personal data only for legitimate, clearly defined purposes that are necessary to operate the platform and provide the Services. We do not use your data for purposes that go beyond what is described in this policy without first obtaining your explicit consent. The following describes the specific purposes for which we use your data:

  • Account Management: To create, verify and maintain your xz77 account, including processing KYC documents, sending OTP authentication codes, and managing account-level communications such as password resets and account status notifications.
  • Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket and other supported channels; to settle bets and games correctly; to apply bonuses and promotional credits to your account; and to operate the responsible gaming tools you have enabled.
  • Fraud and Security: To detect and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse and other prohibited behaviours. Device and session data are used alongside account activity patterns to identify and investigate suspicious accounts.
  • Responsible Gaming: To monitor your gaming behaviour against responsible gaming thresholds, apply deposit limits or self-exclusions you have set, and proactively contact you if your activity patterns suggest problem gambling behaviour.
  • Legal Compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC) and data protection obligations. This includes retaining records as required by law and disclosing information to relevant authorities when legally compelled to do so.
  • Marketing Communications: To send you promotional offers, seasonal bonuses (such as Eid, BPL and Pohela Boishakh promotions), and platform updates via SMS to your registered mobile number. You may opt out of marketing communications at any time by contacting our support team, without affecting your ability to use the Services.
4 Legal Basis

Legal Basis for Processing

xz77 processes personal data on the following legal grounds, depending on the specific purpose of each processing activity:

  • Contractual Necessity: Processing your identity, contact and financial data is necessary to fulfil our obligations under the Terms and Conditions and to provide the Services you have registered for. Without this processing, xz77 cannot operate your account or process your transactions.
  • Legal Obligation: KYC verification, AML monitoring and transaction record-keeping are processed on the basis of legal obligations applicable to platforms operating in the online gaming and financial services space.
  • Legitimate Interest: Fraud prevention, platform security, responsible gaming monitoring and analytics-based platform improvement are processed on the basis of xz77's legitimate interest in operating a safe, fair and sustainable platform.
  • Consent: Marketing communications are sent on the basis of your consent, implied by your acceptance of these Terms at registration. You may withdraw consent for marketing at any time without affecting any other aspect of your account or the Services.
5 Data Sharing

How We Share Your Data

xz77 does not sell, rent or trade your personal data to any third party for their own marketing purposes. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for each purpose.

All third parties with whom xz77 shares data are required to handle it securely and in accordance with applicable data protection obligations. xz77 does not authorise its service providers to use your personal data for their own purposes.

  • Payment Processors: Transaction data is shared with payment service providers (bKash, Nagad, Rocket, Upay and banking partners) strictly to the extent necessary to process your deposits and withdrawals. These providers operate under their own regulatory frameworks and data privacy obligations.
  • Identity Verification Providers: During the KYC process, identity documents and associated data may be shared with third-party identity verification service providers who assist xz77 in confirming player identity and age. These providers are contractually bound to handle the data securely.
  • Technology and Platform Partners: Game providers (such as Pragmatic Play, Evolution Gaming, Spribe) receive session and bet data as part of the technical delivery of their games. This is limited to data that is operationally required to run the game and settle results.
  • Regulatory and Law Enforcement: xz77 may disclose personal data to government bodies, regulators, law enforcement agencies or courts when legally required to do so — for example, in connection with a formal AML investigation, a court order, or a regulatory audit. xz77 will only disclose what is strictly required by the applicable legal process.
🚫 We Do Not Sell Your Data

xz77 will never sell, lease or exchange your personal data to any third party for commercial gain. Your personal information is not a product. It is held by xz77 solely for the operational and compliance purposes described in this Privacy Policy.

6 Cookies

Cookies and Tracking Technologies

xz77 uses cookies and similar tracking technologies to deliver and improve the Services. A cookie is a small text file placed on your device when you visit xz77. Cookies allow the platform to recognise your device, maintain your session, remember your preferences, and collect analytics data used to improve the platform experience for all players.

xz77 does not use advertising cookies or share cookie data with advertising networks. All tracking on xz77 is first-party and used exclusively for platform operation, security, analytics and responsible gaming monitoring purposes.

  • Essential Cookies: Required for the platform to function correctly. They maintain your login session, remember your language preference, and enable secure transactions. These cannot be disabled without breaking core platform functionality.
  • Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This data helps xz77 identify performance issues, improve page layouts and optimise the mobile experience for Bangladesh players.
  • Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity and suspicious login patterns. Security cookies are an integral part of the platform's fraud detection infrastructure and cannot be disabled.
7 Security

Data Security Measures

xz77 implements a layered approach to data security designed to protect your personal information from unauthorised access, disclosure, alteration or destruction. Our security measures are reviewed and updated on a regular basis to address evolving threats and to reflect current best practices in online platform security.

Despite our best efforts, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, xz77 will take prompt action to contain the breach, assess its scope and notify affected users in a timely manner in accordance with applicable obligations.

🔐

SSL Encryption

All data transmitted between your device and xz77 is encrypted using industry-standard SSL/TLS protocols. This ensures that your login credentials, payment details and personal information cannot be intercepted in transit.

🛡️

Access Controls

Access to player personal data within xz77's systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to regular audit. Staff who handle personal data are trained in data protection obligations.

🔎

Monitoring and Testing

xz77's platform infrastructure is monitored continuously for anomalous activity, intrusion attempts and vulnerability exposure. Security testing is conducted periodically to identify and remediate potential weaknesses before they can be exploited.

8 Retention

Data Retention Policy

xz77 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The standard retention period for active account data is the duration of the account plus a minimum post-closure period as required by AML and KYC obligations, which typically requires transaction records and identity documents to be held for a defined number of years after the business relationship ends.

When data is no longer required, xz77 will securely delete or anonymise it. Anonymised analytical data that can no longer be linked to any individual player may be retained indefinitely for platform improvement purposes. If you request account closure, your personal data will be handled in accordance with this retention policy — it will not be deleted on demand where legal retention obligations remain in force.

9 Your Rights

Your Data Rights

As a player on xz77, you have a number of rights in relation to your personal data. xz77 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To exercise any of the rights below, contact the xz77 support team with your account details and a clear description of your request.

👁️ Access Request a copy of the personal data xz77 holds about you
✏️ Rectification Request correction of inaccurate or incomplete personal data
🗑️ Erasure Request deletion of your data where retention is no longer legally required
Restriction Request restriction of processing in certain circumstances
📦 Portability Request a structured, machine-readable export of your personal data
↩️ Withdraw Consent Withdraw consent for marketing communications at any time

Please note that some requests — particularly erasure requests — may not be fulfilled immediately or in full where xz77 has a legal obligation to retain the data. In such cases, xz77 will explain the specific legal basis that prevents immediate deletion and provide a timeline for when deletion will occur once the legal obligation has expired.

10 Child Safety

Minors and Age Restrictions

xz77 enforces a strict minimum age of 21 years for all players in Bangladesh. The platform is not directed at, designed for, or intended to be used by anyone under the age of 21. xz77 does not knowingly collect personal data from anyone under 21. If xz77 becomes aware that personal data has been collected from a person under 21, that account will be suspended immediately, the data will be reviewed, and appropriate action taken including secure deletion of the data where no legal retention obligation applies. If you are a parent or guardian and believe a person under 21 has registered on xz77, contact our support team immediately.

11 External Links

Third-Party Links and Services

The xz77 platform may reference third-party services such as payment providers (bKash, Nagad, Rocket) and game studios (Pragmatic Play, Evolution Gaming). These third parties operate independently and under their own privacy policies. xz77 is not responsible for the privacy practices or data handling of any third party. When you interact with a third-party payment interface or game environment, that third party's own privacy policy governs how your data is handled within their system. We encourage you to review the privacy policies of any third-party services you interact with in connection with your xz77 account.

12 Updates

Changes to This Privacy Policy

xz77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, the Last Updated date at the top of this page will be revised. Where the changes are significant — for example, a new category of data is collected or a new type of third-party sharing is introduced — xz77 will notify active players via their registered mobile number.

Your continued use of xz77 after any posted revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must stop using xz77 and may request account closure by contacting support. xz77 recommends bookmarking this page and reviewing it whenever you see that the Last Updated date has changed.

13 Contact

Privacy Contact Information

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xz77 has handled your personal data, our support team is available 24 hours a day, 7 days a week in both English and Bangla. All privacy requests will be acknowledged within 2 business days and resolved within a reasonable timeframe.

xz77 Privacy Support

For all privacy-related enquiries, data access requests, and data deletion requests, contact us at:

Continue Exploring xz77

Your data is protected. Now explore everything xz77 has to offer — casino games, cricket betting, slots and more. 21+ only.

21+ only. Terms & Conditions apply. Gamble responsibly.