Your Privacy Matters to bazi — Our Full Data Policy

bazi ("we", "our", "us") operates the online betting and casino platform accessible at bazi.vu. This Privacy Policy describes how bazi collects, processes, stores, and protects personal data belonging to users ("you", "your", "the player") who register for an Account, visit the platform, or otherwise interact with our services.

We recognise that privacy is a fundamental right. The trust our players place in us when sharing personal and financial data is not taken lightly. bazi applies strict internal data governance standards and technical safeguards to ensure that your information is used only for the purposes described in this Policy and handled with a standard of care commensurate with the sensitivity of that data.

This Policy applies to all personal data collected through the bazi website, mobile browser interface, customer support channels (including email at [email protected] and WhatsApp), and any other interaction you have with bazi as a service provider. It does not apply to the privacy practices of third-party game providers, payment processors, or other external services linked to or integrated with our platform — those parties maintain their own privacy policies.

If you have any questions about this Policy or about how bazi handles your personal data, please contact our support team using the plain-text contact details provided in Section 14 of this document.

bazi collects several categories of personal data in the course of providing its services. The categories collected depend on your level of interaction with the platform — some data is collected from all visitors, while other data is only relevant to registered account holders.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a natural person, unless specifically required by applicable law or regulation.

bazi collects personal data through the following channels and mechanisms:

• Direct submission: You provide data directly to bazi when you register for an Account, complete our KYC verification process, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automated collection: When you visit the bazi platform, our servers and analytics systems automatically record Technical Data and Usage Data, including your IP address, browser characteristics, and navigation behaviour. This occurs for all visitors regardless of registration status.
• Payment providers: When you initiate a deposit or withdrawal through bKash, Nagad, Rocket, or Upay, those providers transmit transaction confirmation data to bazi, including the registered mobile number and transaction reference number. bazi does not receive your full mobile banking PIN or password.
• Third-party game providers: Game session data — including session start and end times, wager amounts, and game outcomes — is transmitted from the relevant game provider (e.g., Pragmatic Play, Evolution Gaming, Spribe) to bazi's backend systems for the purpose of settling bets and maintaining account records.
• Cookies and similar technologies: bazi uses cookies and similar tracking technologies to maintain session state, remember preferences, and collect anonymous usage analytics. Please refer to Section 8 (Cookies and Tracking) for full details.
• Identity verification services: Where required, bazi works with third-party KYC providers to verify the authenticity of identification documents you submit. Those providers may process your identity data on our behalf subject to strict data processing agreements.

bazi uses the personal data it collects exclusively for the following stated purposes. We do not use your data for purposes incompatible with those listed below without first obtaining your explicit consent or establishing a separate lawful basis for processing.

• Account management: To create, maintain, and administer your bazi Account, process login requests, enforce security measures, and deliver the platform services you have registered to receive.
• Transaction processing: To process BDT deposits and withdrawals through mobile banking providers, reconcile your Wallet balance, and maintain accurate financial records of all transactions associated with your Account.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years, confirm your identity to prevent fraud and money laundering, and comply with any applicable regulatory obligations relating to customer due diligence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct as described in the bazi Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance and training purposes.
• Responsible gaming compliance: To monitor betting patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion orders, and fulfil our responsible gaming commitments as described in the bazi Responsible Gaming Policy.
• Platform improvement: To analyse aggregated and anonymised usage data in order to improve the performance, features, and user experience of the bazi platform.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about new features. You may withdraw consent for marketing communications at any time by contacting bazi support.
• Legal and regulatory compliance: To meet any obligations imposed on bazi by applicable law, court orders, or regulatory authorities, including the retention of transaction records and the reporting of suspicious activity where required.

bazi processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to perform our contract with you as a registered player — including account management, transaction processing, and bet settlement — is carried out on the basis that it is necessary to fulfil the Terms & Conditions you accepted at registration.
• Legitimate interests: Processing carried out for fraud prevention, platform security, internal analytics, and responsible gaming monitoring is conducted on the basis of bazi's legitimate interests in operating a safe, reliable, and legally compliant betting platform, provided those interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and identity verification requirements, is carried out on the basis of bazi's legal obligations.
• Consent: Processing for the purpose of sending optional marketing communications is carried out solely on the basis of your explicit, freely given, and withdrawable consent. Where consent is the legal basis, you retain the right to withdraw it at any time without detriment to your Account status.

bazi does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared with external parties only in the following strictly defined circumstances:

• Payment processors: Transaction data is shared with mobile banking providers (bKash, Nagad, Rocket, Upay) to the extent necessary to process deposit and withdrawal instructions. These parties act as independent data controllers for their own transaction records.
• KYC and identity verification providers: Where identity verification is required, your submitted identification documents and personal details may be processed by our contracted third-party KYC provider. Such providers operate under data processing agreements with bazi and are permitted to use your data only for verification purposes.
• Game content providers: Session-level data (wager amounts, game outcomes, timestamps) is exchanged with licensed game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to enable real-time game delivery and bet settlement. These providers do not receive your contact or financial data beyond what is operationally necessary for game delivery.
• Legal and regulatory authorities: bazi will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request, or where disclosure is necessary to prevent or detect serious crime.
• Professional advisers: bazi may share data with legal counsel, auditors, and other professional advisers on a strictly confidential basis where necessary to obtain professional advice or to manage legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of bazi's business, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer where practicable.

All third parties who process personal data on behalf of bazi are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than those specified in their agreements with bazi.

bazi retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Identity, contact, financial, and account data is retained for the full duration of your Account's active status and for a period of at least five (5) years following account closure or last activity, in order to satisfy potential legal, regulatory, or audit requirements.
• Transaction records: Records of all BDT deposits, withdrawals, and bet transactions are retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• KYC verification documents: Identity documents submitted for KYC purposes are retained for the duration of the Account and for five (5) years post-closure, unless a longer retention period is required by applicable anti-money laundering regulation.
• Support communications: Customer support records, including email and WhatsApp correspondence, are retained for three (3) years from the date of the last interaction, or longer where the communication relates to an ongoing dispute or legal matter.
• Technical and usage data: Anonymised and aggregated usage analytics may be retained indefinitely for platform improvement purposes. Non-anonymised Technical Data (such as IP address logs) is retained for no longer than twelve (12) months from collection.
• Marketing consent records: Records of consent provided for or withdrawn from marketing communications are retained for five (5) years as evidence of compliance with consent management obligations.

Upon expiry of the applicable retention period, bazi will securely delete or anonymise personal data in a manner that prevents recovery or reconstruction.

bazi uses cookies and similar browser-based tracking technologies to operate the platform effectively and to understand how users interact with our services. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on the bazi platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, retain your Wallet state between page loads, and ensure security measures operate correctly. You cannot opt out of strictly necessary cookies without impairing platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred display language, odds format, and notification settings — so that you do not need to reconfigure them on each visit.
• Analytics cookies: bazi uses anonymised analytics data to understand page performance, identify technical errors, and prioritise platform improvements. Analytics data is aggregated and does not identify individual users.
• Security cookies: Short-lived security tokens and CSRF protection cookies are used to prevent cross-site request forgery attacks and to validate the integrity of form submissions.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that blocking certain cookie categories may impair your ability to log in to your bazi Account or use platform features that depend on session state.

bazi does not use third-party advertising cookies or permit external advertising networks to track users across unrelated websites via the bazi platform.

As a data subject whose personal data is processed by bazi, you hold the following rights with respect to your information. To exercise any of these rights, please contact bazi support using the plain-text contact details in Section 14:

• Right of access: You have the right to request confirmation of whether bazi holds personal data about you, and to receive a copy of that data in a readable format, together with information about the purposes for which it is processed and the categories of data held.
• Right to rectification: You have the right to request correction of any personal data bazi holds about you that is inaccurate or incomplete. You may update basic account information directly within your Account settings; for changes to identity or financial data, a formal request with supporting documentation is required.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis for processing exists. This right is subject to legal retention obligations that may prevent immediate deletion of certain categories of data.
• Right to restriction of processing: You have the right to request that bazi restricts the processing of your personal data in circumstances such as where you contest the accuracy of the data, where processing is unlawful but you prefer restriction to erasure, or where bazi no longer needs the data but you require it for legal claims.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bazi in a structured, commonly used, and machine-readable format, and to request that bazi transmit that data directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where bazi relies on legitimate interests as the legal basis, unless bazi can demonstrate compelling legitimate grounds that override your rights. You have an unconditional right to object to direct marketing processing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bazi will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, this period may be extended by a further two (2) months, with notice provided to you within the initial thirty-day window.

bazi implements a layered set of technical and organisational security measures designed to protect personal and financial data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:

• SSL/TLS encryption: All data transmitted between your device and the bazi platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Password hashing: Account passwords are never stored in plain text. bazi uses strong one-way cryptographic hashing algorithms to store password representations, ensuring that even internal staff cannot access your password.
• Access controls: Access to personal data within bazi's internal systems is restricted on a strict need-to-know basis. Staff members who handle personal data receive regular data protection training and are bound by confidentiality obligations.
• Fraud monitoring systems: bazi operates automated fraud detection systems that monitor account activity in real time for patterns indicative of unauthorised access, account takeover attempts, or financial crime.
• Infrastructure security: bazi's platform infrastructure is hosted on secure, access-controlled servers with regular security patching, vulnerability scanning, and intrusion detection systems in place.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, bazi will take immediate containment action and notify affected users as promptly as practicable.

While bazi takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your Account credentials. Do not share your password with any third party and ensure that your registered mobile banking accounts are protected with appropriate PIN security.

The bazi platform is intended exclusively for adults aged 21 years and above. bazi does not knowingly collect personal data from any individual under the age of 21, and any person under this age is strictly prohibited from registering an Account or engaging in any betting or gaming activity on the platform.

If bazi becomes aware — through its own checks, a parental report, or any other means — that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, investigate the circumstances, and permanently delete all personal data associated with that Account as expeditiously as possible.

Parents or guardians who believe their child may have registered an Account on the bazi platform are strongly encouraged to contact bazi support immediately at [email protected] (plain text — not a clickable link). bazi takes underage access extremely seriously and will prioritise any such report.

The bazi platform may contain references to or integrations with third-party service providers, including game providers and payment processors. Each of these third parties operates its own independent privacy policy and data processing framework. bazi does not control and is not responsible for the privacy practices of any third-party service.

We encourage you to review the privacy policies of any third-party provider with whom you interact as a result of using the bazi platform, particularly payment providers such as bKash, Nagad, Rocket, and Upay, to understand how those parties handle your data independently of bazi.

The presence of a third-party integration on the bazi platform does not constitute an endorsement of that party's privacy practices by bazi.

bazi reserves the right to update or revise this Privacy Policy at any time. Where changes are material — such as the introduction of a new data processing purpose, a new category of data collected, or a new category of third party to whom data is disclosed — bazi will use reasonable endeavours to notify registered players in advance, via the mobile number or email address associated with their Account, or through a prominent notice on the platform.

The effective date of the current version of this Policy is stated at the top of this document. The version published on the bazi platform at any given time is the version that governs data processing at that time. Users are encouraged to review this Policy periodically. Continued use of the bazi platform following the effective date of any revision constitutes acceptance of the updated Policy.

If you do not agree with a revised version of this Privacy Policy, you should cease using the platform and contact bazi support to request account closure. Any personal data collected prior to your closure request will be retained as described in Section 7 (Data Retention) above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bazi processes your personal data, please contact the bazi Data Support team using the following plain-text contact details. These are not clickable links.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)
• Support hours: 24/7 live chat availability, with peak staffing 08:00–00:00 BST (UTC+6)

For formal data subject rights requests — including access, rectification, erasure, portability, or objection requests — please contact us via email with the subject line "Data Subject Rights Request" and include your full registered name and the mobile number associated with your bazi Account so that we can verify your identity before processing the request. bazi will acknowledge all formal data requests within five (5) business days of receipt.