bdbazzi Privacy Policy — How We Handle Your Personal Data

bdbazzi ("the Platform", "we", "us") collects personal data from players ("you", "your") for the purposes of operating the Platform, verifying player identity, processing payments, and complying with legal obligations applicable to online gaming services in Bangladesh. This Privacy Policy governs all personal data collected through bdbazzi, regardless of the device or method used to access the Platform.

We collect personal data through the following means: directly from you during account registration and KYC verification; automatically via cookies and server logs when you browse or interact with the Platform; and from payment service providers such as bKash, Nagad, and Rocket when you make deposits or request withdrawals.

Categories of Personal Data Collected

bdbazzi processes your personal data only where a lawful basis exists. The primary lawful bases we rely on are: (a) the performance of a contract — i.e., operating your player account and delivering the services you have signed up for; (b) compliance with legal obligations — such as anti-money laundering (AML) record-keeping and age verification requirements; and (c) our legitimate interests in maintaining platform security, preventing fraud, and improving the overall player experience.

Specific Purposes of Processing

• Account management: Creating and maintaining your player account, processing login authentication, and updating your profile information as requested.
• Identity verification (KYC): Confirming that you are who you claim to be, that you are 18 years of age or older, and that you reside in Bangladesh, in accordance with our responsible gaming obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported methods. Your payment data is transmitted securely to the relevant payment processor and is not stored on bdbazzi servers beyond what is required for transaction records.
• Customer support: Responding to your queries, complaints, and account requests via live chat or email at support at bdbazzi.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, unauthorised access, money laundering, or terms violations. Technical data such as IP address and device fingerprint is used for this purpose.
• Responsible gaming compliance: Tracking betting patterns to identify potential problem gambling behaviours, managing self-exclusion requests, and enforcing deposit limits set by players.
• Platform improvement: Using anonymised, aggregated usage data to understand how players navigate the Platform, which features are most popular, and where the user experience can be improved.
• Marketing communications: Where you have explicitly opted in to receive promotional emails or SMS messages, we use your contact data to send relevant offers and promotions. You may opt out of marketing communications at any time by contacting support at bdbazzi.

bdbazzi uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, maintain your session state, and collect anonymised analytics data. A cookie is a small text file placed on your device by your browser when you visit the Platform. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in while you navigate between pages, and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Analytics cookies: Used to collect anonymised data on how players use the Platform — including pages visited, time on page, and navigation paths. This data is aggregated and never linked to individual player identities. Analytics data is used solely to improve the Platform experience.
• Fraud prevention cookies: Assist in identifying unusual activity patterns associated with account takeover attempts, multi-account abuse, or automated bot traffic. These cookies store device fingerprint data for security purposes.
• Preference cookies: Remember your language preference and display settings between sessions so you do not need to re-configure them on each visit.

Third-Party Cookies

bdbazzi does not permit third-party advertising networks or social media platforms to place tracking cookies on the Platform. Any third-party services integrated into the Platform — such as payment gateways and game providers — may set their own functional cookies strictly necessary for delivering their services. bdbazzi does not control the cookie policies of third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, or Spribe.

Managing Cookies

You may manage or disable cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging into your bdbazzi account and may impair other core platform functions. Disabling analytics or preference cookies will not affect your ability to use the Platform but may result in a less personalised experience.

bdbazzi does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes under any circumstances. Data sharing is limited to what is strictly necessary to operate the Platform and comply with legal obligations. The following categories of third parties may receive your personal data on a need-to-know basis:

Payment Processors

To process deposits and withdrawals, bdbazzi shares relevant financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Visa, and Mastercard. Data shared with payment processors is limited to the information strictly required to complete the specific transaction and is governed by the processor's own privacy and security policies.

Game Content Providers

Third-party game studios and providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised technical data (such as session tokens and device type) necessary for delivering their games through the bdbazzi Platform. Game providers do not receive personally identifiable information such as your name, mobile number, or payment details.

Legal and Regulatory Disclosure

bdbazzi may disclose personal data where required to do so by applicable law, court order, or at the lawful request of authorised government or regulatory bodies. In such cases, disclosure will be limited to the minimum information required to satisfy the specific legal obligation. bdbazzi will, where legally permitted, notify affected players of such disclosure.

Business Transfers

In the event that bdbazzi undergoes a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that arises as a result.

bdbazzi takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Security Measures

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bdbazzi servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This applies to account login, payment processing, KYC document uploads, and all other data transmissions.
• Encrypted data storage: Sensitive data at rest — including identity documents, financial records, and authentication credentials — is stored in encrypted form. Passwords are hashed using a strong one-way hashing algorithm and are never stored in recoverable plain text.
• Access controls: Access to personal data within bdbazzi is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific roles. Access logs are maintained and reviewed regularly.
• Fraud monitoring: Automated systems monitor account activity in real time for indicators of unauthorised access, unusual betting patterns, and suspicious payment activity. Alerts trigger immediate review by the security team.
• Secure infrastructure: The bdbazzi platform is hosted on secured servers with firewall protection, intrusion detection systems, and regular security patching protocols.

Organisational Measures

All personnel at bdbazzi with access to personal data are subject to confidentiality obligations. Staff members receive regular training on data protection practices. Access credentials are reviewed periodically and revoked immediately upon the end of an employment or service relationship.

Reporting a Security Concern

If you believe your bdbazzi account has been compromised, or if you identify a potential security vulnerability on the Platform, please contact us immediately at support at bdbazzi. Do not attempt to exploit any vulnerability — report it to our team so it can be investigated and resolved promptly.

As a player on bdbazzi, you have a number of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please submit a written request to support at bdbazzi. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days of receipt, subject to identity verification.

• Right of access: You have the right to request a copy of the personal data bdbazzi holds about you, including details of the categories of data held, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Requests for correction of identity data may require supporting documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the lawful basis for processing), or where the data has been unlawfully processed. Please note that bdbazzi may be required to retain certain data for legal and regulatory compliance purposes even following a deletion request.
• Right to restrict processing: In certain circumstances, you may request that bdbazzi restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that bdbazzi provide you with your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdbazzi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and accounting obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

bdbazzi reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes to applicable law, or improvements to the Platform. The effective date at the top of this page indicates when the current version was last revised.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how we process your personal data — bdbazzi will notify registered players via email to their registered address, or via an in-platform notification displayed upon next login, no less than 14 days before the revised policy takes effect. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), we may update the page without individual notification.

Your continued use of bdbazzi after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request account closure by contacting support at bdbazzi.

The most current version of the Privacy Policy is always available on this page. We encourage you to revisit this page periodically to stay informed about how bdbazzi protects your personal data.