zbazi Privacy Policy

1 Information We Collect

zbazi collects personal data from players in Bangladesh through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and occasionally from third-party verification or payment providers. We collect only information that is genuinely necessary for the purposes described in this policy.

1.1 Information You Provide Directly

When you register a zbazi account, make a transaction, or communicate with our support team, you may provide the following categories of personal data:

1.2 Information Collected Automatically

When you access zbazi through a browser or mobile device, certain technical data is collected automatically by our systems. This is standard practice across all online platforms and is necessary for the platform to function correctly and securely:

• Device and browser data: Device type, operating system, browser type and version, screen resolution
• Network data: IP address, approximate geographic location (country/city level), internet service provider
• Usage data: Pages visited, games played, session duration, click patterns, bet history
• Session data: Login timestamps, session tokens, authentication events
• Cookie and tracking data: See Section 4 for full details on cookies used by zbazi

1.3 Information from Third Parties

In certain circumstances, zbazi may receive personal data about you from third-party sources, including:

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposits and withdrawals
• Identity verification services: Results from third-party KYC and document verification providers used to confirm your identity and age
• Fraud prevention services: Risk scores and flags from anti-fraud and AML compliance tools used to protect the platform and its players
• Game providers: Game session data (rounds played, outcomes, RTP statistics) from certified providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi

2 How We Use Your Data

zbazi uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose incompatible with the reason it was originally collected. The table below sets out our primary processing purposes and the legal basis for each:

2.1 Marketing Communications

zbazi will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, game launches, seasonal offers (such as Eid promotions, BPL betting specials, or Pohela Boishakh celebrations), and other zbazi news if you have explicitly opted in to receive such communications during registration or via your account settings.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in your zbazi account or by contacting our support team at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew it.

2.2 Responsible Gaming Use

zbazi uses your account activity data — including session length, frequency of play, deposit volumes, and betting patterns — to monitor for signs of problem gambling behaviour. This monitoring is carried out in the interests of player welfare and is a core part of zbazi's responsible gaming commitment. If unusual patterns are detected, zbazi may proactively contact you to offer support resources or suggest the use of self-exclusion or deposit limit tools.

3 Data Sharing & Third Parties

zbazi does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared with external parties only in the specific, limited circumstances described below. All third parties who receive zbazi player data are required to handle it in accordance with applicable data protection standards and are bound by appropriate contractual safeguards.

3.1 Service Providers

zbazi works with a number of third-party service providers who process personal data on our behalf in order to deliver the platform and its services. These providers are contractually obligated to process data only on zbazi's instructions and may not use it for their own purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard — to process financial transactions
• KYC and identity verification providers: To perform automated and manual identity and age checks on player accounts
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi — to deliver game sessions and record outcomes
• Cloud infrastructure and hosting providers: To host the zbazi platform, databases, and associated systems securely
• Customer support software providers: To manage live chat, email ticketing, and support communications
• Fraud prevention and AML analytics providers: To monitor transactions and player activity for suspicious patterns

3.2 Legal and Regulatory Disclosure

zbazi may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of zbazi, its players, or the public. This includes compliance with anti-money laundering (AML) reporting obligations.

3.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or part of zbazi's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via email in advance of any such transfer that materially affects how their data is handled, and the acquiring entity will be required to honour the terms of this Privacy Policy.

4 Cookies & Tracking Technologies

zbazi uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and understand how players navigate and use zbazi. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete all cookies, block cookies from specific sites, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent zbazi from functioning correctly, and you may be unable to log in or place bets.

Instructions for managing cookies are available in the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, and others). zbazi does not currently use third-party advertising cookies or cross-site tracking technologies that follow players across other websites.

5 Data Retention & Storage

zbazi retains your personal data for as long as your account remains active and for a reasonable period thereafter in line with our legal and regulatory obligations. We do not keep data longer than necessary, and we have internal policies that govern retention periods for each category of personal data.

5.1 Standard Retention Periods

• Account and identity data: Retained for the lifetime of your account and for a period of up to 7 years after account closure, in accordance with AML and financial record-keeping obligations.
• Transaction and financial records: Retained for up to 7 years from the date of the transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for up to 7 years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for up to 3 years from the date of the interaction, or longer if related to an ongoing dispute or legal matter.
• Session and usage logs: Retained for up to 12 months for security and fraud analysis purposes, after which they are deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent and for up to 3 years after withdrawal, as evidence of the consent history.

5.2 Data Storage Location

zbazi's player data is stored on secure servers. While zbazi primarily serves players in Bangladesh, the nature of cloud infrastructure may mean that some data is processed by servers located in other countries. In all cases, zbazi ensures that appropriate data protection safeguards are in place for any cross-border data transfers, including contractual clauses that require the recipient to handle data to an equivalent standard.

5.3 Data Deletion

When the applicable retention period expires, or when you successfully exercise your right to erasure (see Section 7), zbazi will securely delete or irreversibly anonymise your personal data so that it can no longer be linked to you as an individual. Deletion is carried out in a manner that prevents recovery of the data.

6 Data Security Measures

zbazi takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee 100% security, but zbazi applies industry-leading standards to minimise risk.

6.1 Technical Safeguards

• SSL/TLS encryption: All data transmitted between your device and zbazi's servers is encrypted using 256-bit SSL/TLS. The padlock symbol in your browser confirms this encryption is active during your session.
• Data encryption at rest: Sensitive data stored in our databases (including financial data and identity documents) is encrypted at rest using strong encryption standards.
• Two-factor authentication (2FA): zbazi supports optional two-factor authentication for player accounts, adding an additional layer of security to the login process beyond password alone.
• Firewalls and intrusion detection: Our servers are protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for unusual access patterns.
• Regular security assessments: zbazi conducts periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses in the platform.

6.2 Organisational Safeguards

• Access controls: Access to player personal data is restricted on a strict need-to-know basis. Only authorised zbazi personnel with a legitimate operational need may access identifiable player data.
• Staff training: All zbazi employees and contractors who handle personal data receive data protection training and are bound by confidentiality obligations.
• Incident response: zbazi maintains a data breach response procedure. In the event of a security incident that affects your personal data, zbazi will notify you without undue delay where required by applicable law.

7 Your Privacy Rights

As a zbazi player, you have a number of rights with respect to the personal data we hold about you. zbazi is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will acknowledge your request within 5 business days and aim to respond in full within 30 calendar days.

7.1 Summary of Your Rights

• Right of access: You have the right to request a copy of all personal data zbazi holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data zbazi holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update some information directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that zbazi delete your personal data. This right is not absolute — zbazi may be required to retain certain data for legal, regulatory, or fraud-prevention reasons — but we will delete everything we are not legally obliged to retain.
• Right to restrict processing: In certain circumstances, you may ask zbazi to pause the processing of your personal data while a dispute or request is being resolved, rather than delete it outright.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to have it transferred to another provider where technically feasible.
• Right to object: You may object to zbazi's processing of your personal data where we rely on legitimate interest as the legal basis. You may also object at any time to processing for direct marketing purposes.
• Right to withdraw consent: Where zbazi processes your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time with immediate effect on future processing.

7.2 Complaints

If you believe zbazi has handled your personal data in a manner that violates applicable data protection law or the terms of this Privacy Policy, you have the right to lodge a complaint. We would first ask that you contact us directly at [email protected] so we have the opportunity to address your concern. However, you also have the right to raise a complaint with the relevant data protection supervisory authority in your jurisdiction.

8 Updates to This Policy

zbazi reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this policy, we will notify registered players by email and/or by displaying a prominent notice on the zbazi platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when this version of the Privacy Policy came into effect. We encourage you to review this page periodically to stay informed about how zbazi protects your personal data. Your continued use of zbazi following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions or concerns about this Privacy Policy, the data zbazi holds about you, or the way we process personal data, please do not hesitate to contact our support team at [email protected]. We are available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6), and are always happy to help.