Privacy Policy

We collect only the information needed to operate the Service.

a) Information you provide

• Account information: your name, email address, phone number, and password (passwords are stored using one-way cryptographic hashing — we never store them in plain text).
• Profile details: any optional information you add to your profile.
• Transaction and wallet data: top-up and recharge orders, payment history, wallet balance, and wallet activity.
• Communications: messages, screenshots, and images you send through our in-app chat or support channels.
• Promotional activity: entries and results from features such as the Spin Wheel and Tournaments.

b) Information collected automatically

• Device and technical information: IP address, device model, operating system, app version, browser type, and language settings.
• Usage data: pages or screens viewed, features used, and actions taken, used to improve the Service and detect fraud.
• Cookies and similar technologies: see Section 8.

We do not knowingly collect sensitive personal data such as government IDs, biometric data, or precise GPS location.

We use your information to:

• create and manage your account;
• process and deliver your top-up, recharge, and gaming credit orders;
• manage your wallet, transaction history, and order status;
• send order confirmations, account notifications, and important Service updates (including push notifications, where enabled);
• operate promotional features such as Spin Wheel and Tournaments;
• provide customer support and respond to your messages;
• detect, prevent, and investigate fraud, abuse, and security incidents;
• comply with legal and regulatory obligations; and
• improve and maintain the Service.

For EU/EEA and UK users

Where applicable law requires it, we process your data on the following bases:

• Performance of a contract — to provide the Service you request.
• Your consent — for example, push notifications and marketing.
• Legitimate interests — security, fraud prevention, and improving the Service.
• Compliance with legal obligations.

We do not sell your personal data. We share data only in these limited cases:

• Payment processors (e.g. UddoktaPay) — solely to process your payments and complete transactions.
• Service providers who help us operate the Service, such as hosting providers and push-notification / messaging providers (e.g. Google Firebase Cloud Messaging). These providers may process limited data on our behalf under confidentiality obligations.
• Recharge and top-up partners — to fulfil your specific order.
• Law enforcement or authorities — when required by applicable law, court order, or to protect our legal rights, users, or the public.

Some of these providers may process data outside Bangladesh; where that happens, we take reasonable steps to ensure your data remains protected.

We keep your personal data only as long as your account is active or as needed to provide the Service. After you request deletion, we delete or anonymise your data, except information we are legally required or permitted to retain for purposes such as fraud prevention, security, dispute resolution, tax, accounting, or regulatory compliance. Retained transaction records are kept only for as long as required by applicable law.

You can request deletion of your account and associated personal data at any time.

How to request deletion:

• In the app: go to Profile → Settings → Delete Account
• On the web: zaratopup.com/delete-account
• By email: send a request to privacy@zaratopup.com from your registered email address.

What happens when you delete your account:

• Your profile, account credentials, chat messages, and personal identifiers are permanently deleted or anonymised.
• Your wallet balance is forfeited unless a refund is required by law.
• Certain records (e.g. completed transaction and payment records) may be retained in line with Section 5 for legal, security, and fraud-prevention reasons, after which they are deleted.

Deletion requests are normally completed within 30 days.

We use industry-standard safeguards to protect your information, including:

• HTTPS/TLS encryption for all data in transit;
• one-way hashing of passwords;
• rate limiting and fraud-detection systems to protect accounts; and
• access controls limiting who can view personal data.

No method of transmission or storage is 100% secure, but we work continuously to protect your information.

We use essential cookies for authentication and session management. We do not use third-party advertising or cross-site tracking cookies. You can disable cookies in your browser settings, but some features may not work correctly.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (see Section 6);
• object to or restrict certain processing;
• data portability (receive a copy of your data); and
• withdraw consent at any time.

To exercise any right, contact us at privacy@zaratopup.com. We will respond within the timeframe required by applicable law.

The Service is intended for users 18 years and older and is not directed to children. We do not knowingly collect personal data from children under 13 (or the minimum age in your country). If you believe a child has provided us personal data, please contact us at privacy@zaratopup.com and we will delete it promptly.

The Service may contain links to third-party websites or services (e.g. payment pages or our Telegram support channel). We are not responsible for the privacy practices of those third parties. Please review their privacy policies separately.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you within the app or by email. Continued use of the Service after changes take effect means you accept the updated Policy.

If you have any questions or requests regarding this Privacy Policy or your personal data, contact us at:

• Email: privacy@zaratopup.com
• Support: support@zaratopup.com
• Contact page: zaratopup.com/contact