zoya9 Privacy Policy — How We Protect Your Personal Data

1. Who We Are

This Privacy Policy applies to zoya9, the online gaming and sports betting platform operated at zoya9.club. When we refer to "zoya9", "we", "us", or "our" in this policy, we mean the entity responsible for operating the zoya9 platform and processing your personal data.

zoya9 is the data controller for all personal data collected through the platform. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is carried out lawfully and transparently.

This Privacy Policy forms part of the zoya9 Terms and Conditions. By registering an account or using the zoya9 platform, you confirm that you have read and understood this policy and that you consent to the processing of your personal data as described here.

2. Data We Collect

zoya9 collects personal data in several categories. The table below outlines what we collect and why each category is needed to operate the platform properly.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is directly relevant to a responsible gaming assessment and you have provided explicit consent.

3. How We Collect Your Data

zoya9 collects your personal data through several channels. Understanding how your data reaches us helps you stay in control of what you share.

• Direct registration: When you create a zoya9 account, you provide your name, contact details, and date of birth directly through the registration form.
• Account activity: Every time you deposit, withdraw, place a bet, or interact with the platform, we record the relevant transaction and activity data.
• Identity verification: When you submit documents for KYC verification, we collect and store copies of those documents securely.
• Device and browser data: Our servers automatically log technical information such as your IP address, device type, and browser version each time you access zoya9.
• Cookies and tracking: zoya9 uses cookies and similar technologies to remember your preferences and monitor platform performance. See Section 8 for full details.
• Support interactions: When you contact our support team via live chat or email, we retain records of those conversations to improve service quality.
• Payment providers: When you make a deposit or withdrawal, our payment partners may share transaction confirmation data with us to reconcile your account balance.

4. Why We Use Your Data

Every piece of data zoya9 collects is used for a specific, legitimate purpose. We do not process your data in ways that are incompatible with the reasons it was originally collected. Here is how we use your personal data:

• To create and manage your zoya9 account and verify your identity.
• To process deposits, withdrawals, and bonus payments accurately and on time.
• To detect and prevent fraud, money laundering, and other illegal activity on the platform.
• To comply with our legal and regulatory obligations, including anti-money-laundering (AML) requirements.
• To provide customer support and respond to your queries and complaints.
• To send you important account notifications, such as deposit confirmations and security alerts.
• To monitor your gaming activity and identify signs of problem gambling so we can offer appropriate support.
• To improve the zoya9 platform based on how players use it.
• To send you promotional communications about bonuses and offers, where you have opted in to receive them.

If you have opted in to marketing communications, you can opt out at any time by contacting our support team or using the unsubscribe link in any marketing email we send you.

5. Legal Basis for Processing

zoya9 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing your data is necessary to provide the zoya9 service you have signed up for, including managing your account and processing transactions.
• Legal obligation: We are required by law to collect and retain certain data, including identity verification records and transaction histories, for AML and regulatory compliance purposes.
• Legitimate interests: We process some data — such as technical and usage data — to protect the security of the platform, prevent fraud, and improve our service. We only do this where our interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, to send marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Third Parties

zoya9 does not sell your personal data. We share data only where it is necessary to operate the platform, comply with legal requirements, or protect the security of our players. The categories of third parties we may share data with are:

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. They operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: We use third-party KYC services to verify your identity documents. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• IT and security providers: Our hosting, security monitoring, and fraud detection partners may process technical data as part of their services. All such providers are bound by data processing agreements.
• Legal and regulatory authorities: We may be required to disclose your data to law enforcement agencies, regulators, or courts where we are legally obligated to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection law. We do not allow our third-party service providers to use your data for their own purposes.

7. Payment Data Security

zoya9 takes the security of your financial data extremely seriously. When you make a deposit or withdrawal using bKash, Nagad, or Rocket, your payment credentials are processed directly by the payment provider and are never stored on zoya9 servers in full.

• Payment account numbers are stored in a tokenised format — we retain a reference, not the full account number.
• All payment data is transmitted over encrypted connections using TLS 1.2 or higher.
• zoya9 staff cannot view your full payment account number at any time.
• Withdrawals are only processed to payment accounts that have been verified as belonging to you.
• Any suspicious transaction activity triggers an automatic security review before processing continues.

If you believe your payment details have been compromised, contact our support team immediately. We will place a temporary hold on your account while the situation is investigated.

8. Cookies and Tracking Technologies

zoya9 uses cookies and similar tracking technologies to make the platform work properly, remember your preferences, and understand how players use the site. Here is a breakdown of the types of cookies we use:

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the zoya9 platform. We do not use cookies to serve third-party advertising.

9. Data Retention

zoya9 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your account and for 5 years after account closure, in line with standard AML record-keeping requirements.
• Transaction records: Retained for 7 years from the date of the transaction to comply with financial record-keeping obligations.
• Identity verification documents: Retained for 5 years after account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for 2 years from the date of the last interaction.
• Technical and usage data: Retained for 12 months on a rolling basis, after which it is anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus 1 year for compliance purposes.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

10. Your Data Rights

As a zoya9 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team at [email protected].

We will respond to all data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for handling a data rights request unless it is manifestly unfounded or excessive.

11. Children's Privacy

zoya9 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age verification step, and we carry out additional checks where we have reason to suspect that a player may be underage.

If we discover that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on zoya9, please contact our support team at [email protected] so we can investigate and take appropriate action.

12. Security Measures

zoya9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for sensitive data including payment references and identity documents.
• Role-based access controls that limit which staff members can access which categories of data.
• Regular security audits and penetration testing of our platform infrastructure.
• Automated fraud detection systems that monitor for unusual account activity in real time.
• Two-factor authentication options for player accounts to prevent unauthorised access.
• Staff training on data protection and security best practices.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect your zoya9 account has been compromised, change your password immediately and contact our support team.

13. Updates to This Privacy Policy

zoya9 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you by email or by displaying a prominent notice on the zoya9 platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this policy periodically so you stay informed about how zoya9 protects your personal data. Continued use of the platform after any update constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please get in touch with the zoya9 support team. We are available 24 hours a day, 7 days a week.