At zoya, we treat your personal data with the same level of care we apply to every aspect of our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a zoya player based in Bangladesh or elsewhere.
This Privacy Policy ("Policy") is issued by zoya ("zoya", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https:// zoya.vu (the "Platform"). This Policy describes in clear, plain English how we collect, use, store, share, and protect personal data relating to visitors and registered players, with particular focus on players accessing the Platform from Bangladesh.
By registering an Account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and, if applicable, request closure of your Account.
This Policy should be read alongside zoya's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding data handling matters, this Policy shall take precedence.
Plain Language Commitment: We have written this Policy in plain English. We believe every player has the right to understand exactly what happens to their data. If any section is unclear, please contact us at [email protected] and we will be happy to explain.
zoya is an internationally licensed online casino and sports betting platform. The Platform is operated by zoya and is accessible globally, with primary service delivery targeted at players in Bangladesh. Our Platform offers a range of gaming products including cricket betting, live casino games, slot machines, virtual sports, and crash games, all denominated in Bangladeshi Taka (৳ BDT).
For the purposes of data protection law, zoya is the data controller in respect of the personal data of its registered players and website visitors. This means that zoya determines the purposes for which personal data is collected and processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
The primary contact point for all data-related enquiries is our support team, reachable at [email protected]. We aim to respond to all data-related correspondence within five (5) business days.
zoya collects personal data from you in a variety of ways throughout your relationship with the Platform. The categories of personal data we collect are described below.
When you register an Account, complete our Know Your Customer (KYC) verification process, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:
When you access the Platform, we automatically collect certain technical and behavioural data through our servers, cookies, and similar tracking technologies:
zoya may receive personal data about you from the following third-party sources:
Sensitive Data: zoya does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions). If you voluntarily disclose sensitive data to our support team — for example, when explaining a problem gambling concern — we will process it solely for the purpose for which it was provided and with appropriate safeguards in place.
The following table summarises the principal purposes for which zoya uses your personal data, along with the legal basis for each use (see also Section 5).
| Purpose | Categories of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Contract performance |
| Identity verification (KYC) | Identity, verification documents | Legal obligation; legitimate interest |
| Processing deposits and withdrawals | Financial, identity | Contract performance |
| Delivering and improving gaming products | Usage, device, game session | Contract performance; legitimate interest |
| Fraud prevention and AML compliance | Identity, financial, device, usage | Legal obligation; legitimate interest |
| Customer support | Identity, contact, communications | Contract performance; legitimate interest |
| Responsible gaming monitoring | Usage, responsible gaming, financial | Legal obligation; legitimate interest |
| Bonus and promotion administration | Identity, financial, usage | Contract performance; legitimate interest |
| Marketing communications (with consent) | Identity, contact, usage | Consent |
| Legal proceedings and regulatory compliance | Any relevant data | Legal obligation; legitimate interest |
| Platform analytics and performance optimisation | Device, usage, location (approximate) | Legitimate interest |
We do not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you, except in limited circumstances such as automated fraud detection. Where automated decision-making of this kind does occur, you have the right to request human review of the decision. Please contact us at [email protected] to exercise this right.
zoya processes personal data on the following legal bases, each of which is briefly explained below:
zoya does not sell your personal data to third parties for commercial gain. We share your data only where it is necessary for the operation of the Platform, required by law, or otherwise permitted under this Policy. The categories of third parties with whom your data may be shared are as follows:
Data Processing Agreements: All third parties that process personal data on zoya's behalf are required to enter into a formal data processing agreement obliging them to process data only on our documented instructions, maintain appropriate security measures, and comply with applicable data protection laws.
The Platform uses cookies and similar technologies (such as pixel tags and local storage) to enable core functionality, improve performance, and understand how players use the Platform. The categories of cookies we use are described below.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens. Required for the Platform to function. These cookies are set when you log in and expire when your session ends. | No — disabling these will prevent you from using the Platform. |
| Functional | Remembers your language preference, balance display settings, and recently played games to personalise your experience. | Yes — disabling may reduce personalisation features. |
| Analytics | Collects pseudonymous data on page views, session durations, and game engagement to help us improve the Platform. No personally identifiable information is transmitted. | Yes — disable via your browser settings. |
| Marketing / Affiliate Tracking | Attributes your visit to a referring affiliate partner using a pseudonymous click identifier. Used for commission calculation only. | Yes — disable via your browser settings. |
You can manage and disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, manage, and delete cookies stored on your device via the browser's privacy or security settings menu.
zoya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including the following retention periods:
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
zoya takes the security of your personal data seriously and has implemented a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
Your Responsibility: While zoya takes all reasonable steps to protect your data, you also have a role to play. Keep your Account password strong and unique. Do not share your login credentials with any third party. Log out of your Account after each session, particularly on shared or public devices. If you suspect your Account has been compromised, contact [email protected] immediately.
As an internationally licensed online gaming platform, zoya may transfer personal data to third-party service providers and game technology partners located in countries outside Bangladesh. Some of these countries may not have data protection laws equivalent in scope to those of your home jurisdiction.
Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect the security and integrity of your data. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. All third-party processors receiving international transfers of personal data are required to maintain security standards equivalent to those described in Section 9 of this Policy.
If you would like further information about the specific safeguards applied to a particular international transfer of your data, please contact us at [email protected].
Depending on the applicable data protection laws in your jurisdiction, you may have some or all of the following rights in relation to your personal data held by zoya. We honour these rights in respect of all our players globally, regardless of local legal requirements.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days of receipt. We may ask you to verify your identity before fulfilling your request, to ensure we are responding to the correct individual.
Note on Account Closure and Erasure: If you request erasure of your data and we are required by law or regulation to retain certain records (e.g., KYC documents and transaction records for AML purposes), we will close your Account and restrict processing of your data to only those purposes required by law. We will inform you of any such limitation at the time of your request.
The Platform is strictly intended for adults aged 18 years and above. zoya does not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18, you are not permitted to register an Account, access the Platform, or engage with any of the gaming products or services we offer. 18+ only.
If zoya becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data, close the associated Account, void any related transactions, and, where applicable, report the matter in accordance with our regulatory obligations.
If you are a parent or guardian and believe that a person under your care has registered an Account or provided personal data to zoya without your consent, please contact us immediately at [email protected].
With your explicit consent, zoya may send you promotional communications about new games, bonus offers, seasonal promotions (including Eid, Pohela Boishakh, and major cricket tournament promotions such as BPL and T20 World Cup events), and platform updates. We may deliver these communications via email, SMS, WhatsApp, or push notification, depending on your contact preferences.
You may withdraw your consent to receive marketing communications at any time by:
Please note that withdrawing consent to marketing communications does not affect the receipt of transactional and service-related communications (such as deposit confirmations, withdrawal notifications, KYC verification requests, and security alerts), which are sent on the basis of contract performance and are not optional.
zoya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and by displaying a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.
The "Effective Date" and "Last Reviewed" dates at the top of this Policy will be updated whenever changes are made. We encourage you to review this Policy periodically so that you remain informed about how we protect your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or complaints about this Privacy Policy or about the way zoya handles your personal data, please contact our support team using any of the details below. We will make every effort to resolve your concern promptly and fairly.
Complaints: If you are not satisfied with our response to a data-related concern, you have the right to escalate your complaint to the data protection supervisory authority or relevant regulatory body in your jurisdiction. We would always prefer to resolve concerns directly and invite you to contact us first before escalating to a third party.
Six core commitments that underpin zoya's approach to data protection for every player in Bangladesh and beyond.
Every byte of data transmitted between your device and zoya's servers is encrypted using TLS 1.3 — the same standard used by global financial institutions. Your login credentials, payment details, and personal information are protected in transit at all times.
Our Know Your Customer process ensures only verified, adult players access the Platform. Identity checks protect both our players and the integrity of the zoya community against fraud and underage access.
zoya never sells your personal data to third-party advertisers or data brokers. Your information is used solely to operate your Account, process transactions, and improve your experience on the Platform.
We keep your data only for as long as legally required or operationally necessary. Once a retention period expires, data is securely deleted or anonymised in accordance with our internal destruction procedures.
Access, correct, delete, or port your data at any time. zoya honours all recognised data subject rights and responds to verified requests within 30 calendar days — no bureaucratic runaround.
Every payment partner, game studio, and service provider that handles your data on our behalf signs a formal data processing agreement and is required to maintain security standards equivalent to our own.
Now that you know how we protect your data, dive into the best cricket betting, live casino games, and slots available to players in Bangladesh — all with deposits and withdrawals via bKash, Nagad, and Rocket.
Join zoya Now Explore Cricket Betting Browse Slots Read Our FAQ