Privacy notice

• Your mobile number. This one is required: it is how a booking is confirmed, how the ground reaches you if something changes, and how you sign in. After your first played booking we may use it once to invite a review.
• Your name and email, if you give them. Both optional. A name helps the ground know who is arriving.
• Your bookings: which ground, which hours, what you paid, and any note you added for the ground.
• A random, hashed one-time review token, when an invitation is sent.
• First-party usage events: a random visit ID for the current browser tab, pages viewed, turf cards shown or opened, slots selected, checkout reached, and whether a booking was confirmed.
• Campaign tags in the link (such as utm_source) and only the referring site's hostname, not the full page you came from.
• The technical record every website keeps — IP address, browser, which pages were served and when.

Usage events do not contain your name, phone, email, note, payment details or full referring URL. We do not ask for your date of birth, your address, your NID or a photograph, and there is nowhere in this system to put them.

Payment is taken by PayStation, a payment gateway licensed in Bangladesh. You enter your card or wallet details on their page, not ours, and they are not passed back to us.

What we hold is the amount, which method you used — bKash, Nagad, a card, and so on — their transaction reference, and whether it succeeded.

We sign you in with a one-time code by SMS instead of a password, so there is no password here to be stolen.

The code is stored only as a keyed hash, is never written to any log, and expires within minutes. Once you are in, the sign-in cookie holds a random token and nothing about you, and lasts 60 days unless you sign out.

• The ground you booked is given your name and mobile number for that booking. They need it to know who is arriving and to call you if the pitch floods. They are not given anything about your other bookings.
• Our SMS provider is given your number and the message, to deliver it.
• PayStation is given the amount and the booking reference.
• When something on the site breaks, a crash report goes to our error-monitoring provider so we can find it and fix it. Your number, your name and your email are stripped out before it is sent, and it is never used for tracking or advertising.
• Usage analytics are sent only to Zenvy's own API and database. We do not load a third-party analytics script or give these events to an advertising platform.
• Our hosting, database and image providers hold this data on our behalf, under contract, and use it for nothing else. Some of their servers are outside Bangladesh, which is where that infrastructure is.

We do not sell personal data and we do not share it for advertising. If a court or regulator requires something from us we will comply, and tell you where we are allowed to.

Two cookies, both of which the site needs to work:

• a sign-in cookie, holding a random token, kept for 60 days
• a language cookie, so the site stays in the language you picked

There are no third-party cookies or advertising pixels. For product analytics, session storage holds a random visit ID and the source that brought you here. It lasts only for the current browser tab and is not shared with another site.

Your own browser also remembers the number you last looked a booking up with, so you do not have to retype it. That stays on your device and never reaches us; clearing site data removes it.

Bookings and payments are kept as accounting records, which we are required to be able to produce.

One-time codes are deleted as they expire. Expired sessions are deleted. A first-booking review link expires after 14 days and cannot be reused. A review you leave stays published under your first name only.

Ring 01300-208390 and we can tell you what is held against your number, correct your name, or close your account.

Closing an account removes your contact details. The accounting record of a booking that has been paid for has to remain, with the personal details removed where we can remove them.

No decision about you is made automatically here — there is no scoring and no profiling. If you think something is wrong with what we hold, tell us and we will fix it rather than argue about it.

Call or message 01300-208390. If it is about a specific booking, have the reference ready. Our registered address is Galleria Shopping Complex, Level 6 (Lift 5), Zindabazar, Sylhet (Trade licence 1230049893).