zxwin Privacy Policy

1. Who We Are

zxwin is an online casino and sports betting platform operating at https://zxwin.io, designed and built for players across Bangladesh. References in this Privacy Policy to "zxwin", "we", "us", or "our" refer to the zxwin platform and its operating entity, responsible for the collection and processing of personal data described in this document.

For all data-related enquiries, including requests to exercise your data rights, the primary point of contact is our support team, reachable via live chat on the platform or by email. We operate on Bangladesh Standard Time (BST, UTC+6) and our support team is available 24 hours a day, 7 days a week.

This Privacy Policy applies to all personal data collected through: the zxwin website and any associated mobile-optimised interfaces; the account registration and zxwin Login process; deposits, withdrawals, and all financial transactions; gameplay and sports betting activity; communications with our customer support team; and any promotional, bonus, or loyalty programme participation.

2. Data We Collect

The categories of personal data that zxwin collects are set out below. The specific data points collected from any individual player will depend on the features they use and the verification steps they have completed.

3. How We Collect Your Data

zxwin collects personal data through the following means:

• Direct provision by you: Data you enter directly into the zxwin platform, including during account registration, the zxwin Login process, deposit and withdrawal forms, KYC document uploads, support ticket submissions, and any promotional entry forms.
• Automated technical collection: Data collected automatically as you browse and use the platform, including through server logs, session tracking systems, device fingerprinting technologies, and first-party cookies. See Section 7 for full details on cookies and tracking.
• Third-party payment providers: Confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners following the processing of deposit and withdrawal transactions. This data is limited to transaction status, reference numbers, and anonymised account identifiers.
• Identity verification providers: Data received from third-party KYC and identity verification services during the document verification process. These services process the identity documents you upload and return a verification result to zxwin, along with verified data fields.
• Game studio providers: Aggregated gameplay data received from licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) in relation to game sessions played through the zxwin platform. Individual game studios process only the data necessary to run game sessions and do not receive your full profile data.
• Publicly available sources: In limited circumstances, for AML compliance purposes, zxwin may consult publicly available records — such as sanction lists or politically exposed persons (PEP) registers — to cross-reference account holder identity. This is a compliance obligation, not a general data collection practice.

4. How We Use Your Data

zxwin uses your personal data exclusively for the following defined purposes. We do not use your data in any manner that is incompatible with the purposes listed below without first obtaining your explicit consent or establishing a new legal basis.

• Account creation and management: Processing your registration, creating and maintaining your zxwin account, verifying your identity, and managing your account settings and preferences.
• Platform service delivery: Enabling you to play casino games, place sports bets on cricket (BPL, Bangladesh Tigers, IPL, T20), access live dealer tables, participate in Megaways and slots titles, and use all other platform features available after zxwin Login.
• Financial transaction processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and card methods; processing withdrawal requests; maintaining accurate BDT balance records; and issuing transaction confirmations.
• KYC and AML compliance: Verifying your identity and age (21+ requirement), conducting source-of-funds checks where required, and maintaining the compliance records mandated by applicable anti-money laundering obligations.
• Responsible gaming: Monitoring gambling patterns for indicators of problem gambling, enforcing self-exclusion and limit settings you have applied, and — where our responsible gaming systems flag a concern — proactively reaching out to offer support resources.
• Fraud prevention and platform security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, unauthorised login attempts, and any other conduct in breach of our Terms & Conditions.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and training purposes.
• Marketing communications (consent-based): Sending you promotional offers, bonus notifications, seasonal campaigns (e.g., Pohela Boishakh promotions, Eid special offers, Ramadan deposit bonuses, BPL tournament promotions), and platform news — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform improvement and analytics: Analysing aggregated, anonymised usage data to improve the zxwin platform's design, game offering, and user experience. This analysis uses anonymised data and does not create individual player profiles for these purposes.
• Legal compliance and dispute resolution: Retaining records necessary to comply with applicable legal obligations, respond to lawful requests from competent authorities, and defend or pursue legal claims.

5. Legal Basis for Processing

Every instance of personal data processing at zxwin is grounded in one of the following recognised legal bases:

Where zxwin relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. If you wish to obtain a copy of any legitimate interests assessment relevant to the processing of your data, please contact our support team.

6. Sharing Your Data

zxwin does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. We share your data only with the following categories of recipients, and only to the extent necessary for the specific purpose stated:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Data shared is limited to what is necessary to process your requested financial transaction. Each of these partners operates under its own privacy policy and regulatory obligations.
• Identity verification and KYC providers: Third-party services that process the identity documents you submit during account verification. These providers receive only the data necessary to perform the verification task and are contractually prohibited from using it for any other purpose.
• Licensed game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios whose games are available on the zxwin platform. Game studios receive only the session-level data necessary to deliver and settle individual game rounds. They do not receive your full player profile.
• Fraud prevention and security services: Specialist third-party providers that assist zxwin in detecting suspicious account activity, multi-accounting, and bonus abuse. These providers process technical data (IP addresses, device fingerprints) under strict contractual data processing agreements.
• Legal and regulatory authorities: Competent government bodies, law enforcement agencies, or courts where zxwin is legally required to disclose data in connection with an investigation, legal proceeding, or regulatory compliance obligation. zxwin will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance advisors who are bound by professional confidentiality obligations, where disclosure is necessary for us to obtain professional advice or to defend or pursue legal claims.

7. Cookies & Tracking Technologies

zxwin uses cookies and similar tracking technologies on its platform for the purposes described in this section. A cookie is a small text file placed on your device by the zxwin platform when you visit or complete zxwin Login. Cookies enable the platform to recognise your device, maintain your session, and remember your preferences across visits.

The categories of cookies used by zxwin are as follows:

• Strictly Necessary Cookies: These cookies are essential for the basic operation of the zxwin platform. They enable core functions including zxwin Login session management, account balance display, deposit form functionality, and security measures such as CSRF protection tokens. These cookies cannot be disabled without breaking fundamental platform features.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate and use the platform — including which pages are visited most frequently, how long sessions last, and where players encounter technical errors. This data is used in aggregate form to improve the platform and cannot be used to identify you individually.
• Functional Cookies: These cookies remember your platform preferences — such as language settings (English), display options, and responsible gaming reminder settings — so that you do not need to re-enter them on each visit.
• Security Cookies: These cookies support zxwin's fraud detection and account security systems. They contribute to device fingerprinting processes that help identify suspicious login attempts or unusual account activity patterns.

zxwin does not use third-party advertising cookies or behavioural tracking cookies that share your data with advertising networks for the purpose of serving targeted advertisements on other websites.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the zxwin platform, including completing zxwin Login. Disabling other cookie categories will not prevent you from using the platform but may reduce the quality of your experience.

8. Data Security

zxwin has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and the zxwin platform is encrypted in transit using industry-standard TLS protocols, preventing interception by any third party.
• Password hashing: Account passwords are never stored in plain text. zxwin uses a strong one-way cryptographic hashing algorithm (bcrypt) to store password credentials. Even in the unlikely event of a database compromise, raw passwords cannot be recovered from stored hashes.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their zxwin accounts via the security settings page, available after zxwin Login. 2FA adds a second layer of verification — in addition to your password — that must be completed before account access is granted.
• Role-based access controls (RBAC): Internal zxwin staff access to player data is governed by a strict role-based access control system. Staff members can access only the data categories relevant to their specific job function. All internal data access is logged and subject to regular audit review.
• Encrypted data storage: Personal data held in zxwin's databases — including financial data and KYC documents — is encrypted at rest using AES-256 encryption.
• Regular security assessments: zxwin conducts periodic internal security reviews and works with specialist security professionals to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to player rights and freedoms, zxwin has a documented incident response procedure. Affected players will be notified promptly in plain English, describing the nature of the breach, the data affected, and the steps being taken to contain and remediate it.

9. Data Retention

zxwin retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or as required by applicable law and our compliance obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is either securely and permanently deleted from zxwin's systems or anonymised such that it can no longer be attributed to any individual player. Anonymous, aggregate data (e.g., statistical analysis of game popularity or deposit volume trends) may be retained indefinitely for platform improvement purposes.

10. Your Data Rights

As a registered player on the zxwin platform, you hold the following rights in relation to the personal data we process about you. These rights are not absolute and are subject to applicable legal limitations — in particular, data that we are legally obligated to retain for AML or KYC compliance purposes cannot be deleted on request during the mandatory retention period.

• Right of Access: You have the right to request a copy of all personal data zxwin holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update most contact details directly through the account settings section after zxwin Login.
• Right to Erasure: You have the right to request the deletion of your personal data where: the data is no longer needed for the purpose it was collected; you withdraw consent (where consent was the legal basis); or the data has been processed unlawfully. This right is subject to overriding legal obligations — we cannot delete data that we are required to retain by applicable law.
• Right to Restrict Processing: You have the right to ask zxwin to restrict the processing of your data in certain circumstances, including while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a machine-readable format and to request that we transfer it directly to another controller where technically feasible.
• Right to Object: You have the right to object to data processing based on our legitimate interests. zxwin will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights, or the processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact our support team via live chat on the platform or by email at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Where a request is particularly complex or we receive a high volume, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to, or acted upon at the request of, an unauthorised individual. You will not be charged a fee for exercising your rights except in cases where a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

11. Children & Minors

zxwin is an adult entertainment platform. Access to and use of the zxwin platform — including registration, zxwin Login, deposits, gameplay, and sports betting — is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

During the registration process, all applicants are required to confirm that they are aged 21 or above. Where our KYC verification process raises a concern about a player's age, the account will be suspended pending receipt and verification of satisfactory proof of age documentation. Any account found to belong to a person under 21 will be closed immediately, all gameplay will be voided, and any funds held in the account will be dealt with in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account on the zxwin platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary steps to close the account and delete the minor's personal data from our systems to the fullest extent permitted by law.

12. Marketing Communications

zxwin sends marketing communications — including promotional offers, bonus announcements, seasonal campaign notifications (such as Pohela Boishakh, Eid, Ramadan, Durga Puja, Victory Day, and BPL season promotions), and platform news — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

Marketing communications from zxwin may be delivered by the following channels, subject to your stated preferences:

• Email: Promotional emails sent to the email address registered on your zxwin account.
• In-platform notifications: Notifications displayed within the zxwin platform interface upon zxwin Login or during an active session.
• SMS: Text message notifications sent to your registered mobile number, where you have provided explicit consent for SMS marketing.

You may withdraw your marketing consent and unsubscribe from all marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email we send;
• Updating your communication preferences in your account settings after completing zxwin Login; or
• Contacting our support team via live chat or at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will be actioned within 5 business days. Please note that unsubscribing from marketing communications does not affect transactional communications — you will continue to receive essential account notifications such as deposit confirmations, withdrawal updates, security alerts, and KYC verification status updates, as these are necessary for the operation of your account and are not subject to marketing opt-out.

zxwin does not purchase third-party marketing lists or send unsolicited bulk communications to individuals who have not registered an account on our platform and provided their consent.

13. Third-Party Links

The zxwin platform may, from time to time, contain references or contextual information relating to third-party services — such as licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) or payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These are referenced solely in the context of describing the services available on the zxwin platform.

zxwin does not include outbound links to external third-party websites in its main platform interface. Where any such reference appears, zxwin is not responsible for the privacy practices or content of any external website or service. This Privacy Policy applies solely to the zxwin platform at https://zxwin.io.

If you choose to access any third-party service (for example, logging into a bKash or Nagad account to complete a deposit), that interaction is governed by the privacy policy of the respective third-party provider. zxwin recommends that you review the privacy policies of all third-party services you interact with in connection with your use of the zxwin platform.

14. Changes to This Privacy Policy

zxwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. All amendments will take effect from the date on which the updated policy is published at https://zxwin.io/privacy-policy.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data, or materially reduces your rights — we will notify registered players by:

• Sending a notification email to the email address registered on your zxwin account, summarising the key changes; and
• Displaying a prominent in-platform notification upon your next zxwin Login, directing you to the updated policy.

Your continued use of the zxwin platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and contact our support team to discuss your options, including account closure.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or updates to contact information — may be made without individual notification. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which zxwin processes your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Live Chat: Available directly through the zxwin platform after completing zxwin Login. Average first response time under 5 minutes. Available 24/7, every day of the year including public holidays.
• Email: [email protected] — responses within 4 hours under normal operating conditions. For formal privacy complaints or data rights requests, please mark the subject line "Privacy — Data Rights Request" or "Privacy — Complaint" as appropriate.
• Response Time: All privacy-related enquiries will be acknowledged within 2 business days. Full responses to data rights requests will be provided within 30 calendar days of identity verification.

zxwin treats all privacy complaints with the utmost seriousness. Upon receipt of a complaint, we will:

1. Acknowledge your complaint in writing within 2 business days;
2. Conduct a thorough internal investigation of the matter raised;
3. Provide you with a substantive written response within 20 business days, setting out our findings and any remedial action taken or proposed; and
4. Where the complaint concerns a potential data breach, follow our documented incident response procedure and notify you in accordance with applicable legal requirements.

If you are not satisfied with our response to your privacy complaint, you retain the right to escalate the matter to the relevant data protection authority or supervisory body in your jurisdiction. zxwin will cooperate fully with any lawful investigation by a competent supervisory authority.