zbazz Privacy Policy — Your Data, Your Rights

Section 01

Introduction & Scope

This Privacy Policy ("Policy") describes how zbazz ("zbazz", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "the Player") who access or use the zbazz platform at zbazz.pro, including all associated services such as sports betting, live casino, slots, crash games, Plinko, promotions, loyalty programmes, and customer support.

This Policy applies to all personal data processed by zbazz in connection with your use of the platform, regardless of the device or channel through which you access our services — whether via desktop browser, mobile browser, or any future application. By registering an account or continuing to use the zbazz platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

zbazz is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection principles. We apply the same standard of care to the personal data of every player, whether located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or any other part of Bangladesh.

Section 02

Data We Collect

2.1 Information You Provide Directly

When you register a zbazz account, use the platform, or contact our support team, you provide us with personal information. This includes:

• Full legal name as it appears on your official identity document;
• Date of birth (used for age verification — 21+ requirement);
• Residential address in Bangladesh (including city, district, and postcode);
• Valid email address used for account communications;
• Bangladeshi mobile phone number registered in your name;
• Username and encrypted password for account access;
• Identity verification documents (National Identity Card, passport, or other government-issued ID) submitted during the KYC process;
• Proof of address documents (utility bills, bank statements dated within 90 days);
• Payment method details — for example, your registered bKash, Nagad, Rocket, or Upay wallet number, or bank account details for bank transfer withdrawals;
• Communications you send to zbazz support via live chat or email, including the content of your messages and any attachments.

2.2 Information Collected Automatically

When you access and use the zbazz platform, certain technical data is collected automatically by our systems. This includes:

• IP address and approximate geographic location derived from it;
• Device type, operating system version, and browser type and version;
• Session timestamps — time and date of login, session duration, and time of logout;
• Pages visited within the zbazz platform, features used, and games played;
• Betting and gaming history — markets wagered on, stake amounts, game rounds, outcomes, and account balance changes;
• Cookie identifiers and similar tracking technologies (see Section 5);
• Referral source — the URL or channel through which you arrived at zbazz.pro.

2.3 Information from Third Parties

zbazz may receive personal information about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers who confirm your identity documents and cross-check against sanctions and politically exposed persons (PEP) lists;
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) who confirm the status and ownership of payment accounts;
• Fraud prevention and anti-money-laundering (AML) screening services;
• Responsible gaming support organisations, where a player has voluntarily referred themselves and consented to information sharing.

Section 03

How We Use Your Data

zbazz uses the personal data we collect for the following specific purposes. We process your data only where we have a valid legal basis for doing so (see Section 4).

zbazz does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without human oversight. Where automated tools are used — for example, in fraud scoring or responsible gaming flagging — a member of the zbazz Compliance Team reviews any decision before action is taken against an account.

Section 04

Legal Basis for Processing

zbazz processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil the agreement between you and zbazz — for example, account creation, processing deposits and withdrawals, and settling bets;
• Legal obligation: Processing required to comply with applicable laws — for example, Know Your Customer (KYC) verification, anti-money-laundering (AML) screening, and retention of transaction records for the legally required period;
• Legitimate interests: Processing based on zbazz's legitimate interests in operating a secure, fair, and commercially sustainable platform — for example, fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your rights and interests;
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you promotional emails or SMS communications about zbazz bonuses and new game releases. You may withdraw consent for this type of processing at any time via your account settings or by contacting [email protected].

Section 05

Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, keep you logged in across pages, and collect anonymised usage statistics. zbazz uses cookies and similar technologies (such as local storage and session identifiers) to operate and improve the platform.

5.2 Types of Cookies Used by zbazz

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking the platform's core functionality.
• Functional cookies: Remember your preferences such as your chosen display language, currency setting (BDT or INR), and recently played games, so you do not need to re-select them each visit.
• Analytics cookies: Collect anonymised data about how players use the zbazz platform — which pages are most visited, how long sessions last, and where users encounter difficulties. This data is used exclusively to improve the platform and is never linked back to your personal identity.
• Fraud prevention cookies: Help zbazz identify and block suspicious access patterns, bot activity, and account takeover attempts. These are essential for platform security and cannot be disabled.

5.3 Managing Cookies

You can control non-essential cookies via your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Note that disabling certain cookies may affect your experience on the zbazz platform — for example, your session may not persist correctly if authentication cookies are blocked.

zbazz does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

Section 06

Data Sharing & Disclosure

zbazz does not sell, rent, or trade your personal data. We share your personal information only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum personal and payment account data necessary to process your transactions. They are bound by their own privacy obligations and applicable financial regulations.
• KYC and identity verification providers: Specialist third-party services that verify the authenticity of your identity documents and screen against sanctions lists and PEP databases. These providers receive your identity document data under strict confidentiality agreements.
• Game studios and live casino providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised player session data (a pseudonymous player ID and game activity) to power the games you play. They do not receive your name, contact details, or payment information.
• Fraud prevention and AML services: Specialist risk management platforms that help zbazz detect and prevent money laundering, fraud, and abuse. Data shared is handled under contractual data processing agreements.
• Legal and regulatory authorities: Where zbazz is required by applicable law to disclose personal data to law enforcement, government bodies, courts, or regulatory authorities, we will comply with such requirements. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of zbazz's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material changes to data processing that result from it.

Section 07

International Data Transfers

zbazz primarily stores and processes personal data on servers located in secure data centres with strong data protection standards. Some of our third-party service providers — including game studio partners and certain KYC providers — operate infrastructure outside of Bangladesh. Where personal data is transferred internationally, zbazz ensures that appropriate safeguards are in place to protect your information to the same standard as described in this Policy.

These safeguards include contractual clauses requiring the recipient to apply data protection standards equivalent to those described herein, and technical measures such as end-to-end encryption for data in transit. zbazz does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing such contractual and technical safeguards.

Section 08

Data Retention

zbazz retains your personal data for as long as it is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:

When the applicable retention period has expired and there is no legal basis for continued retention, zbazz will securely delete or anonymise the relevant data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

Section 09

Data Security

zbazz employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• TLS 1.3 encryption for all data in transit between your device and zbazz servers;
• AES-256 encryption for sensitive data at rest, including payment account details and identity documents;
• Secure, access-controlled data centres with physical security, redundant power, and environmental monitoring;
• Strict role-based access controls ensuring that zbazz staff can only access personal data that is necessary for their specific job function;
• Two-factor authentication (2FA) for all zbazz administrative and operational system access;
• Regular penetration testing and vulnerability scanning conducted by independent security specialists;
• Comprehensive audit logging of all access to systems containing personal data;
• Staff training on data protection and privacy responsibilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zbazz will notify you without undue delay, in accordance with applicable legal requirements, and will take all reasonable steps to contain and mitigate the breach.

Section 10

Your Rights

As a zbazz player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the zbazz support team via live chat or by emailing [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of all personal data zbazz holds about you, along with information about how it is being processed, where it came from, and with whom it has been shared.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data. If your name, address, or contact details have changed, you may update these directly via your account dashboard or by contacting support.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent, or where the processing is unlawful. Note that zbazz may be required to retain certain data to comply with legal obligations (see Section 8), in which case erasure will be deferred until the legal retention period expires.
• Right to restrict processing: You may request that zbazz restricts processing of your data in certain circumstances — for example, while you contest the accuracy of the data or while a complaint is under review.
• Right to data portability: You may request a copy of the personal data you provided to zbazz in a structured, machine-readable format (such as CSV or JSON), for the purpose of transferring it to another service.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though zbazz may be able to demonstrate compelling legitimate grounds that override your objection.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Section 11

Children & Minors

The zbazz platform is strictly intended for adults aged 21 and above. zbazz does not knowingly collect, store, or process personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps designed to prevent minors from creating accounts.

If zbazz discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will take immediate action to suspend the relevant account, delete all associated personal data, and reverse any transactions associated with that account. Any funds deposited by a minor will be returned to the originating payment method.

If you are a parent or guardian and believe your child may have created a zbazz account without your knowledge, please contact our support team immediately via live chat or at [email protected] so we can investigate and act promptly.

Section 12

Third-Party Links

The zbazz platform may, from time to time, contain references to or integrations with third-party services — such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket, Upay). When you interact with these third-party services — for example, by loading a live casino game from a provider's infrastructure — you may be subject to that provider's own privacy practices.

zbazz is not responsible for the privacy practices of any third-party service providers or game studios. We encourage you to review the privacy policies of any third-party services you interact with directly. The inclusion of a third-party service on the zbazz platform does not constitute an endorsement of that party's privacy practices.

Section 13

Changes to This Policy

zbazz reserves the right to update or amend this Privacy Policy at any time. When we make material changes — for example, to the types of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via the email address associated with their account at least 14 days before the changes take effect.

Non-material changes (such as corrections to typographical errors, clarifications of existing practices that do not affect your rights, or updates to contact information) may be made without prior notice, but the "Effective Date" at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the zbazz platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree to the revised terms, you should stop using the platform and may request account closure and data deletion by contacting [email protected].

Section 14

Contact & Complaints

14.1 Contacting zbazz About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zbazz handles your personal data, please contact our support team using one of the following channels:

• Live chat: Available 24/7 directly from your zbazz account panel. Average response time: 2–5 minutes. This is the fastest way to reach us for urgent privacy matters such as suspected account compromise.
• Email: [email protected] — for non-urgent privacy queries, rights requests, and formal complaints. Include your account username and a clear description of your query or request. zbazz aims to respond to all email privacy enquiries within 2 business days.

14.2 Raising a Formal Privacy Complaint

If you believe zbazz has handled your personal data in a way that does not comply with this Policy or applicable data protection principles, you have the right to raise a formal complaint. Please follow the process below:

• Step 1 — Contact Support: Submit your complaint via live chat or email. Describe the specific data processing activity you are concerned about, the data involved, and the outcome you are seeking. zbazz will acknowledge your complaint within 2 business days and aim to resolve it within 14 calendar days.
• Step 2 — Escalation: If your complaint is not resolved to your satisfaction within 14 calendar days, you may request escalation to the zbazz Data Protection Officer (DPO) by emailing [email protected] with the subject line "Privacy Complaint Escalation — [Your Username]".
• Step 3 — Final Decision: The DPO will issue a written final decision within 30 calendar days of receiving the escalated complaint. zbazz's final decision will set out the findings and any remedial action taken.

zbazz takes all privacy complaints seriously and is committed to resolving them fairly and transparently. All complaint records are retained for a minimum of 3 years.