cz420 Privacy Policy

Section 1

Personal Data We Collect

cz420 collects personal data in three broad categories: information you provide directly when you register and use the platform, information generated automatically by your use of the platform, and information received from third-party service providers where necessary to operate the Services.

Information you provide directly:

• Registration details: your name, date of birth, mobile number registered in Bangladesh, and a chosen username and password.
• Identity verification (KYC) documents: National Identity Card (NID), passport, driving licence, or other government-issued photo identification.
• Payment method details: the mobile number associated with your bKash, Nagad, Rocket, or Upay account, or the card details associated with your Visa or Mastercard (card number, expiry, billing address).
• Communications you send us: support queries, complaint details, and any other messages you send to [email protected].

Information generated automatically by your use of the platform:

• Device and technical data: IP address, device type, operating system, browser type and version, and network operator.
• Usage data: pages visited, games played, bets placed, session start and end times, deposit and withdrawal history, bonus claims, and in-game activity logs.
• Cookie data: session cookies, persistent preference cookies, and analytics cookies as further described in Section 5 of this Policy.

Information received from third-party service providers:

• Payment processors: transaction reference numbers, payment status, and fraud-check results from bKash, Nagad, Rocket, Upay, or card payment processors.
• Identity verification providers: confirmation of identity document validity and age verification results from KYC service partners.
• Fraud prevention services: risk scores and fraud indicators supplied by third-party security and anti-fraud partners used to protect the integrity of the platform.

Section 3

Legal Basis for Processing

cz420 processes your personal data on the basis of one or more of the following legal grounds:

• Contractual necessity: processing is required to perform our agreement with you — including operating your account, processing payments, and delivering the Services you have registered for.
• Legal obligation: processing is required to comply with applicable anti-money-laundering laws, KYC obligations, responsible gaming regulations, and other legal or regulatory requirements applicable to cz420's operations.
• Legitimate interests: processing is necessary to pursue cz420's legitimate interests in operating a secure and fraud-free platform, preventing account abuse, and improving our Services — provided that these interests are not overridden by your data-protection rights.
• Consent: where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent, which you may withdraw at any time.

Section 4

Sharing Your Personal Data

cz420 does not sell your personal data. We may share your personal data with the following categories of third parties, but only to the extent necessary for the stated purpose:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard and their processing partners): to authorise and settle deposit and withdrawal transactions on your account.
• KYC and identity verification providers: to verify your identity documents and confirm your age as part of our legal compliance obligations.
• Fraud prevention and security services: to run fraud-risk checks and to protect the platform against abuse, money laundering, and other financial crime.
• Law enforcement and regulatory authorities: where cz420 is required by law, court order, or regulatory instruction to disclose personal data, we will comply with such obligations and, where permitted, will notify you of the disclosure.

All third parties with whom cz420 shares personal data are required by contract to maintain appropriate technical and organisational measures to protect the data, to use the data only for the specified purpose, and to comply with applicable data protection requirements. cz420 does not transfer your personal data to third parties for their own marketing purposes.

Section 7

Data Retention

cz420 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account data and transaction records are retained for a minimum of 5 years from the date of account closure or the date of the last transaction (whichever is later), to meet anti-money-laundering and financial record-keeping obligations; KYC documents are retained for the same 5-year minimum period from the date of account closure; communications with customer support are retained for 3 years from the date of the communication; and analytics and usage data is retained for 24 months in aggregate form.

Upon expiry of the applicable retention period, cz420 will securely delete or anonymise your personal data. If you request deletion of your account before the minimum retention period has expired, cz420 will close your account and cease active processing of your data, but will retain the data in a restricted archive for the duration of the legally required retention period.

Section 8

Your Data Protection Rights

As a user of cz420, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered mobile number. We will respond within 30 days of receipt of your request.

• Right of access: you may request a copy of the personal data cz420 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to rectification: you may request that cz420 correct any inaccurate or incomplete personal data it holds about you.
• Right to erasure: you may request that cz420 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful — subject to our legal retention obligations.
• Right to restriction: you may request that cz420 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: where processing is based on your consent or on a contract, you may request a copy of the personal data you have provided to cz420 in a structured, commonly used, machine-readable format.
• Right to object: you may object to the processing of your personal data where it is based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, cz420 will cease processing your data for that purpose immediately.

cz420 will not charge a fee for handling a data rights request and will respond within 30 days. If the request is complex or if you have submitted multiple requests, cz420 may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window.

Section 11

Marketing Communications

cz420 may send you marketing communications about bonuses, promotions, and new features by SMS to your registered mobile number, where you have consented to receive such communications at the time of registration or subsequently. Each marketing SMS will include clear instructions on how to opt out of future marketing messages.

You may withdraw your consent to marketing communications at any time by replying STOP to any marketing SMS, by adjusting your notification preferences in your account settings, or by contacting [email protected]. Withdrawal of marketing consent will not affect the lawfulness of processing carried out before the withdrawal, and will not prevent cz420 from sending you service-related communications (such as account security alerts or transaction confirmations) that are necessary for the performance of our agreement with you.

Section 12

Changes to This Privacy Policy

cz420 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, cz420 will post a notice on the platform and, where practicable, will send a notification to the mobile number registered to your account. The updated Policy will be effective from the date stated in the notice.

Your continued use of the cz420 platform after the effective date of any amended Policy constitutes your acceptance of that amended Policy. If you do not agree with the changes, you should cease using cz420 and may request account closure by contacting [email protected].

Section 13

Contact Us About Your Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cz420 holds about you, please contact our support team by email at [email protected] with the subject line "Privacy Query". Our team operates in Bangladesh Standard Time (BST, UTC+6) and aims to respond to all privacy-related enquiries within 5 business days. Please do not include your account password or full payment details in any email to cz420 support.