zbazi Privacy Policy — How We Protect Your Data
At zbazi, the privacy and security of your personal information is a top priority. This Privacy Policy explains what data we collect when you use the zbazi platform, how we use and store that data, who we may share it with, and the rights you hold as a member in Bangladesh. We are committed to handling your information with transparency, care, and the highest standard of data security.
A summary of the core commitments zbazi makes to every member regarding the collection, use, and protection of personal information.
Data Security First
All data transmitted between your device and zbazi is protected by industry-standard TLS/SSL encryption. Our servers operate behind multi-layered firewalls, and access to member data is strictly limited to authorised personnel with a demonstrable need to process that information.
We Never Sell Your Data
zbazi does not sell, rent, or trade your personal information to third-party marketers. Data is shared with external partners only where strictly necessary for service delivery — such as payment processing via bKash and Nagad, identity verification, and fraud prevention — and only under binding confidentiality agreements.
Your Rights, Respected
As a zbazi member you have the right to access, correct, and in certain circumstances request deletion of the personal data we hold about you. You also have the right to object to specific types of data processing and to withdraw consent where processing is consent-based. Contact our support team to exercise any of these rights.
Purpose-Limited Collection
zbazi only collects personal data that is directly necessary to provide and improve our services, verify your identity, process payments, comply with anti-money laundering obligations, and communicate with you about your account. We do not collect data speculatively or for purposes unrelated to your membership.
Transparent Processing
This Privacy Policy is written in plain, accessible English so that every zbazi member — regardless of technical background — can understand exactly what data we hold, why we hold it, how long we retain it, and with whom we share it. We will notify you of any material changes to this policy with reasonable prior notice.
Cookie Transparency
zbazi uses cookies and similar tracking technologies to improve your experience on the platform, remember your preferences, and analyse how members interact with our games and features. You can manage your cookie preferences at any time through your browser settings. Essential cookies required for platform functionality cannot be disabled.
This Privacy Policy describes how zbazi collects, uses, stores, and protects your personal information when you use the zbazi platform. By registering an account or using any zbazi service, you acknowledge that you have read and understood this Privacy Policy. Last updated: 1 January 2026.
1 Data Controller
zbazi ("zbazi", "We", "Us", "Our") is the data controller responsible for the personal information collected through the zbazi platform at zbazi.io. As data controller, zbazi determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.
If you have any questions about this Privacy Policy or how zbazi handles your personal data, you may contact our dedicated data protection point of contact at the email address provided in Section 14 of this policy. All data-related enquiries are handled by our support team on Bangladesh Standard Time (BST, UTC+6), seven days a week.
2 Personal Data We Collect
zbazi collects personal data across several categories depending on how you interact with the platform. The table below sets out the main categories of personal data we may hold about you and provides examples of the specific data points within each category.
| Category | Examples of Data Collected | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph | Yes — required for KYC |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh (district, city) | Yes — required for account |
| Financial Data | bKash / Nagad / Rocket account numbers, Visa / Mastercard details (tokenised), transaction history, deposit and withdrawal records | Yes — required for payments |
| Account Data | Username, encrypted password, account balance history, betting history, game session records, bonus usage | Yes — core platform data |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone (BST), session duration | Automatically collected |
| Usage Data | Pages viewed, games played, features used, search queries on the platform, clickstream data | Automatically collected |
| Marketing Data | Communication preferences, opt-in / opt-out records, promotional response data | Optional — consent-based |
| Support Data | Support ticket content, live chat transcripts, email correspondence with zbazi, complaint records | Collected when you contact us |
zbazi does not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where strictly required by anti-money laundering obligations or responsible gaming regulations — and only with your explicit consent where required by applicable law.
3 How We Collect Your Data
zbazi collects personal data through the following channels and methods:
3.1 Direct Collection
You provide data directly to zbazi when you register an account, complete KYC identity verification, make a deposit or withdrawal, contact our support team, respond to a promotion, or participate in a survey or competition. This is the primary source of identity, contact, and financial data.
3.2 Automated Technical Collection
When you access the zbazi platform through any browser or device, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This data is collected without any active input from you and includes your IP address, device identifiers, and clickstream information. See Section 9 for full details on our use of cookies.
3.3 Third-Party Sources
zbazi may receive personal data about you from third parties in limited circumstances, including:
- Payment processors such as bKash, Nagad, Rocket, and Upay — confirming transaction status and account ownership
- Identity verification providers used during the KYC process — confirming name, date of birth, and document authenticity
- Fraud prevention and anti-money laundering databases — cross-referencing account activity against known risk indicators
- Analytics providers — providing aggregated, anonymised usage statistics to help us improve platform performance
When we receive data from third-party sources, we use it only for the purpose for which it was shared, consistent with this Privacy Policy and applicable law.
4 How We Use Your Personal Data
zbazi uses the personal data we collect for the following purposes. In each case we have identified the legal basis that applies, which is detailed further in Section 5.
4.1 Account Registration and Management
We use your identity and contact data to create and manage your zbazi account, verify your eligibility to use the platform (including age verification), maintain your account security, and communicate with you about your account status, including important notices and updates.
4.2 Payment Processing
We use your financial data to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), maintain an accurate transaction history, and investigate any disputed transactions. All payment processing is conducted through secure, encrypted channels.
4.3 Identity Verification and Fraud Prevention
We use identity data, technical data, and usage data to verify your identity in accordance with our KYC obligations, detect and prevent fraudulent activity (including multi-account creation, bonus abuse, and money laundering), and protect the security and integrity of the zbazi platform.
4.4 Service Delivery and Personalisation
We use account data and usage data to deliver and improve zbazi's betting and casino services, personalise your experience (such as displaying relevant promotions and game recommendations), remember your platform preferences, and analyse how members use different features so we can prioritise improvements.
4.5 Responsible Gaming
We use account data and usage data to monitor gambling behaviour in accordance with our responsible gaming obligations, identify members who may be exhibiting signs of problem gambling, apply deposit limits, cooling-off periods, and self-exclusion tools where requested, and comply with responsible gaming best practices.
4.6 Marketing Communications
Where you have provided your consent, we use your contact and marketing preference data to send you promotional communications about zbazi offers, new games, tournaments, and seasonal promotions relevant to the Bangladesh market. You may withdraw consent at any time by contacting our support team or updating your communication preferences in your account settings.
4.7 Legal and Regulatory Compliance
We use your personal data to comply with applicable legal and regulatory obligations, including anti-money laundering requirements, responding to lawful requests from competent authorities, maintaining records as required by applicable law, and enforcing our Terms & Conditions.
5 Legal Basis for Processing
zbazi processes your personal data on one or more of the following legal bases depending on the specific processing activity:
- Contractual Necessity — Processing required to perform our contract with you, including account management, payment processing, and delivering the betting and casino services you have subscribed to use.
- Legal Obligation — Processing necessary to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering screening, and responding to lawful authority requests.
- Legitimate Interests — Processing carried out in zbazi's legitimate interests where these are not overridden by your rights and interests, including fraud prevention, platform security, service improvement, and analytics.
- Consent — Processing based on your freely given, specific, and informed consent, including marketing communications and the setting of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Where zbazi relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may contact us to request details of the specific legitimate interest test applied to any particular processing activity.
6 Data Sharing and Disclosure
zbazi does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data with external parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
6.1 Service Providers
zbazi works with carefully selected third-party service providers who process personal data on our behalf and under our instruction. These providers include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC providers, fraud detection and anti-money laundering screening services, IT infrastructure and cloud hosting providers, customer support platform operators, and game studios and content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi). All service providers are bound by written data processing agreements that restrict their use of your data to the specific purposes for which it was shared.
6.2 Legal and Regulatory Disclosures
zbazi may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request. In such cases, zbazi will disclose only the minimum data necessary to comply with the relevant requirement and will, where legally permissible, notify the affected member of the disclosure.
6.3 Business Transfers
In the event that zbazi undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. zbazi will take reasonable steps to ensure that any such transfer is subject to appropriate data protection safeguards and will notify affected members of material changes to data controller arrangements in advance where possible.
zbazi will never share your personal data with third-party advertisers, data brokers, or any organisation for the purpose of targeted advertising or profiling outside the zbazi platform.
7 Data Retention
zbazi retains your personal data for as long as your account remains active and for a defined period following account closure, as set out below. Retention periods are determined by the nature of the data, the purpose for which it was collected, and applicable legal and regulatory retention requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and KYC Data | 5 years after account closure | Anti-money laundering and regulatory compliance |
| Financial Transaction Records | 5 years after account closure | Legal obligation, dispute resolution |
| Account and Betting History | 3 years after account closure | Dispute resolution, responsible gaming monitoring |
| Support and Complaint Records | 3 years after resolution | Dispute resolution, quality assurance |
| Marketing Preference Data | Until consent withdrawn or account closed | Consent-based processing |
| Technical and Usage Data | 13 months on a rolling basis | Fraud detection, platform analytics |
| Cookie Data (non-essential) | Up to 12 months from consent | Platform personalisation, analytics |
Once the applicable retention period expires, zbazi will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.
8 Data Security
zbazi implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data in transit between your device and zbazi's servers
- AES-256 encryption for sensitive data stored at rest, including payment details and identity documents
- Multi-factor authentication requirements for administrative access to systems containing personal data
- Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access member data
- Regular third-party security audits and penetration testing of platform infrastructure
- Intrusion detection and prevention systems monitoring platform traffic in real time
- Comprehensive staff data protection training and confidentiality obligations
- Documented incident response procedures ensuring prompt action in the event of a suspected data breach
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, zbazi will notify affected members without undue delay, providing clear information about the nature of the breach, the data affected, and the steps we are taking to mitigate any potential harm.
While zbazi employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for keeping your zbazi account password confidential and for ensuring the security of the device and network connection you use to access the platform. Contact our support team immediately if you suspect unauthorised access to your account.
9 Cookies and Tracking Technologies
zbazi uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the platform. The following table describes the categories of cookies used on zbazi.io.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the platform to function — session management, authentication, security tokens, load balancing | No — essential for operation |
| Functional | Remembering your language preferences, display settings, and last-used payment method | Yes — via browser settings |
| Analytics | Understanding how members use the platform — pages visited, session duration, feature engagement — to identify improvements | Yes — with consent |
| Fraud Prevention | Device fingerprinting and behavioural analysis to detect multi-accounting, bonus abuse, and suspicious transactions | No — required for security |
You can control and manage cookies through your browser settings. Please be aware that disabling certain categories of cookies may affect the functionality and performance of the zbazi platform. Detailed instructions for managing cookies in popular browsers are available from browser support documentation.
10 Your Data Protection Rights
As a zbazi member you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14. zbazi will respond to all data rights requests within a reasonable timeframe and at no charge, except where requests are manifestly unfounded or excessive.
- Right of Access — You have the right to request a copy of the personal data zbazi holds about you, together with information about how it is being used.
- Right to Rectification — You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure — In certain circumstances, you have the right to request deletion of your personal data. This right is subject to overriding legal retention obligations (see Section 7).
- Right to Restriction — You have the right to request that we restrict processing of your personal data in certain circumstances, for example while a correction request is being assessed.
- Right to Data Portability — Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object — You have the right to object to processing based on legitimate interests and to processing for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
- Right to Withdraw Consent — Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Please note that some of the above rights are not absolute and may be subject to exceptions under applicable law — for example, zbazi cannot delete identity and transaction records that we are legally required to retain for anti-money laundering compliance purposes. Where we are unable to fulfil a request in full, we will explain the reason clearly.
11 Minors and Age Restriction
The zbazi platform is strictly restricted to individuals aged 21 years and above. zbazi does not knowingly collect or process personal data from anyone under the age of 21. During account registration, all applicants are required to confirm their date of birth and submit valid identity documentation. Any account found to belong to a person under the age of 21 will be suspended immediately, all funds will be handled in accordance with applicable law, and all personal data associated with that account will be deleted as soon as legally permissible.
If you have reason to believe that a minor has registered an account on the zbazi platform or that we have inadvertently collected personal data from a person under the age of 21, please notify our support team immediately using the contact details in Section 14. We take age restriction obligations extremely seriously and will act on any such report without delay.
21+ only. zbazi does not permit use of the platform by individuals under 21 years of age under any circumstances. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.
12 International Data Transfers
zbazi primarily serves members located in Bangladesh and operates its core data infrastructure to serve that market. In certain circumstances, your personal data may be transferred to and processed in countries outside Bangladesh — for example, where a service provider operates infrastructure in another jurisdiction. Where such transfers occur, zbazi takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that afforded within Bangladesh, including through the use of contractual safeguards with recipient organisations such as standard contractual clauses or equivalent data transfer mechanisms.
zbazi will not transfer your personal data to any jurisdiction that does not offer an adequate level of data protection without first putting in place appropriate contractual or technical safeguards, and without informing you of the transfer where required by applicable law.
13 Changes to This Privacy Policy
zbazi may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will notify you by posting a prominent notice on the zbazi platform and, where appropriate, by sending a notification to the email address associated with your account. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. Your continued use of the zbazi platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material changes to this policy, you should discontinue use of the platform and contact our support team to request account closure.
14 Contact Us — Data & Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or zbazi's handling of your personal data, please contact our support team through the following channels. Our data protection point of contact will respond to all privacy-related enquiries within a reasonable timeframe during standard support hours (Bangladesh Standard Time, UTC+6, seven days a week).
- Email: [email protected] (plain text — not a clickable link)
- WhatsApp: +880 1700 000000
- Live Chat: Available 24/7 directly on the zbazi platform
- Postal subject line: FAO: Data Protection — zbazi.io
When submitting a data rights request, please include your registered email address and a clear description of your request so that we can verify your identity and respond efficiently. zbazi will not action data rights requests from unverified individuals in order to protect member privacy.
For responsible gaming support, self-exclusion requests, deposit limit adjustments, or cooling-off periods, please visit our Responsible Gaming page or contact our support team directly. zbazi is committed to supporting members who need help managing their gambling activity.
Responsible Gaming Commitment: zbazi is dedicated to providing a safe, fair, and responsible gaming environment for all members in Bangladesh. We offer deposit limits, session time reminders, cooling-off periods, and full self-exclusion tools to help you stay in control. If gambling is affecting your life or the lives of those around you, please visit our Responsible Gaming page or contact our support team. zbazi is for players aged 21 and above only.
Now that you understand how zbazi handles your data, explore our full range of cricket betting, live casino games, and slots — all on a platform built with your security and privacy in mind.