kbazi Privacy Policy

1 Introduction

kbazi ("we", "us", "our") operates an online betting and casino platform accessible at kbazi.io (the "Platform"). We take your privacy seriously and are committed to protecting the personal information of every user who interacts with our services. This Privacy Policy sets out in detail how kbazi collects, receives, uses, stores, shares, transfers, and otherwise processes personal data in connection with your use of the Platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, which together govern your overall relationship with kbazi. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms and Conditions.

kbazi serves players primarily based in Bangladesh. Our Platform is operated by kbazi as an internationally licensed offshore platform. We process personal data in accordance with internationally recognised data protection standards and the principles of fairness, transparency, and purpose limitation.

2 Data We Collect

kbazi collects personal data from you through multiple channels, including directly when you register or interact with the Platform, automatically when you browse or use our services, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

2.1 Identity and Registration Data

When you create a kbazi account, we collect your full legal name, date of birth, gender, nationality, and a copy of your government-issued identity document (National ID Card, passport, or driving licence). This information is required to verify your identity, confirm your eligibility to use the Platform, and comply with our Know Your Customer (KYC) obligations.

2.2 Contact Data

We collect your email address, mobile phone number, and residential address. These are used to communicate with you about your account, process transactions, send account notifications, and respond to your support enquiries.

2.3 Financial and Transaction Data

kbazi collects details of all financial transactions conducted through the Platform, including deposit amounts, withdrawal amounts, transaction timestamps, payment method identifiers (such as your bKash or Nagad registered mobile number, or the last four digits of your bank card), and transaction reference numbers. We do not store full card numbers or full mobile banking PINs on our systems.

2.4 Gameplay and Betting Activity Data

We record your betting history, game session data, win and loss records, bonus redemptions, and overall wagering activity on the Platform. This data is used to operate our services, detect fraud, identify responsible gaming concerns, and personalise your experience.

2.5 Technical and Device Data

We automatically collect technical information including your IP address, browser type and version, device type, operating system, screen resolution, time zone, and device identifiers. This data is collected via cookies and similar tracking technologies and helps us maintain Platform security, troubleshoot technical issues, and improve service quality.

2.6 Usage and Behavioural Data

We collect information about how you interact with the Platform, including pages visited, features used, links clicked, search queries entered, and the duration and frequency of your sessions. This enables us to improve the Platform, understand user behaviour patterns, and deliver relevant content.

2.7 Communications Data

We retain records of all communications between you and kbazi, including support chat transcripts, email correspondence, and any feedback or complaints submitted. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Data

kbazi uses the personal data we collect for a range of clearly defined purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. Our primary uses of your personal data include:

• Account Registration and Management: To create and maintain your kbazi account, verify your identity, manage your profile, and authenticate your logins.
• Service Delivery: To operate and deliver our betting, casino, slots, baccarat, cricket betting, and virtual sports services, process your bets, calculate winnings, and manage your account balance.
• Payment Processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other supported payment methods.
• KYC and Compliance: To verify your identity and age, complete Know Your Customer checks, comply with anti-money laundering obligations, and meet any applicable regulatory requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, multi-accounting, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor your gambling activity for signs of problematic behaviour, apply responsible gaming controls you have set (such as deposit limits or self-exclusion), and provide appropriate support and intervention where necessary.
• Customer Support: To respond to your enquiries, handle complaints, investigate disputes, and provide technical assistance.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and news about kbazi products and services, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, improve our user interface, and develop new features based on player behaviour insights.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms and Conditions.

4 Legal Basis for Processing

kbazi processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gameplay data is necessary for the performance of the contract between you and kbazi (i.e., the Terms and Conditions). Without this processing, we cannot provide the Platform services to you.
• Legal Obligation: Certain processing activities — particularly KYC verification, anti-money laundering checks, and retention of transaction records — are required by applicable law and regulatory standards applicable to our offshore operations.
• Legitimate Interests: We process technical data, usage data, and communications data on the basis of our legitimate interests in maintaining platform security, preventing fraud, improving our services, and managing our business effectively. We have assessed that these legitimate interests are not overridden by your privacy rights.
• Consent: Where we send you direct marketing communications or place non-essential cookies on your device, we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

kbazi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

5.1 Payment Service Providers

We share financial transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual data protection obligations with kbazi.

5.2 Identity Verification Providers

We may share your identity documents and personal details with third-party KYC and identity verification service providers to complete the verification process required before withdrawals are approved. All such providers are vetted for compliance with data protection standards.

5.3 Technology and Platform Providers

kbazi uses third-party software providers — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver certain games and features on the Platform. These providers may receive limited technical data necessary to operate their services within our Platform environment.

5.4 Fraud Prevention and Security

We may share data with specialist fraud detection services, cybersecurity firms, and industry fraud prevention networks to protect the Platform and our players from fraudulent activity and security threats.

5.5 Legal and Regulatory Disclosures

kbazi may disclose personal data where required to do so by law, court order, or lawful request from a competent authority. We may also disclose data where we believe disclosure is necessary to protect the rights, property, or safety of kbazi, our players, or others.

6 Data Retention

kbazi retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. Our general retention principles are as follows:

• Active Account Data: Data relating to your active kbazi account is retained for the full duration of your account's existence and for a minimum of five years following account closure.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, in accordance with anti-money laundering standards.
• Financial Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction.
• Support and Communications Records: Records of customer support interactions are retained for three years from the date of the interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of your account plus three years, to demonstrate compliance with consent obligations.
• Technical and Log Data: Server logs, IP address records, and session logs are retained for up to 12 months, after which they are anonymised or deleted.

When personal data is no longer required for any of the above purposes, kbazi will securely delete or anonymise the data. Where full deletion is not immediately practicable for technical reasons, the data will be placed in secure archival storage and will not be actively processed until deletion is completed.

7 Data Security

kbazi takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the kbazi Platform is protected by 256-bit SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted during transit.
• Encrypted Data Storage: Sensitive personal data stored in our systems — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within kbazi's systems is restricted on a strict need-to-know basis. Employees and contractors are granted only the minimum level of access required to perform their specific role. All access is logged and monitored.
• Multi-Factor Authentication: Administrative access to kbazi's internal systems requires multi-factor authentication (MFA) to reduce the risk of unauthorised access resulting from compromised credentials.
• Regular Security Audits: kbazi conducts regular internal and third-party security reviews, penetration testing, and vulnerability assessments to identify and address potential weaknesses in our systems.
• Incident Response: kbazi maintains a documented data breach incident response procedure. In the event of a confirmed data breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify affected users promptly and take all steps necessary to contain and remediate the breach.

8 Your Data Rights

kbazi respects your rights in relation to your personal data and provides mechanisms for you to exercise those rights. Subject to applicable law and certain limitations, you have the following rights regarding your personal data held by kbazi:

To exercise any of the above rights, please submit your request in writing to support@kbazi.io with the subject line "Data Rights Request". We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. We may require identity verification before processing certain requests to protect against unauthorised access to your data.

9 Cookies and Tracking Technologies

kbazi uses cookies and similar technologies — including web beacons, pixel tags, and local storage objects — to operate the Platform, enhance your experience, and gather analytical insights about how users interact with our services.

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, remember your preferences, and provide information to website operators. Some cookies are essential for the Platform to operate; others are optional and used for analytics or personalisation purposes.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They enable you to navigate the site, access secure areas, maintain your login session, and use core features such as betting and account management. The Platform cannot function properly without these cookies and they cannot be disabled.
• Analytics and Performance Cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. We use this data to improve how the Platform works. These cookies do not identify you individually.
• Functionality Cookies: These cookies allow the Platform to remember choices you make (such as your preferred language or display settings) and provide enhanced, personalised features.
• Targeting and Marketing Cookies: With your consent, we may use cookies to deliver promotional content that is relevant to your interests based on your browsing and betting activity. You may opt out of these cookies at any time.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to be notified when a cookie is being placed on your device. Please note that disabling certain cookies may impair the functionality of the kbazi Platform and prevent you from accessing some features. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

10 Minors and Age Restriction

kbazi is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement and mandatory KYC verification that involves submission of a government-issued identity document confirming the player's date of birth.

If kbazi discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal compliance purposes, and notify the person that their account has been closed due to the age restriction.

11 International Data Transfers

kbazi operates as an internationally licensed offshore platform. As a result, your personal data may be transferred to, stored in, and processed in countries other than Bangladesh. These countries may have data protection laws that differ from those applicable in your jurisdiction.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data. These safeguards may include contractual data protection clauses with our service providers, ensuring that recipient organisations adhere to internationally recognised security and privacy standards equivalent to those applied by kbazi.

Specifically, personal data shared with payment providers such as bKash, Nagad, and Rocket is processed within Bangladesh under those providers' own privacy frameworks. Data shared with international game studio providers such as Pragmatic Play and Evolution Gaming is governed by contractual data processing agreements that require them to maintain appropriate technical and organisational measures to protect your information.

By using the kbazi Platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh as described in this section. If you have concerns about international transfers of your data, please contact us at support@kbazi.io.

12 Changes to This Privacy Policy

kbazi reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features available on the Platform. When material changes are made to this Policy, we will notify registered players by posting the updated Policy on the Platform with a revised effective date, and where practicable, by sending a notification to the email address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how kbazi protects your personal data. The current version of the Policy is always available at kbazi.io/privacy-policy. The date at the top of this Policy indicates when it was last reviewed and updated.

Your continued use of the kbazi Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated practices described therein. If you do not agree to the changes, you should discontinue use of the Platform and may request account closure by contacting support@kbazi.io.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kbazi handles your personal data, please do not hesitate to get in touch with our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: support@kbazi.io (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Website: kbazi.io

For urgent account security matters — such as suspected unauthorised access or a potential data breach affecting your account — please contact us immediately at the email address above and include the subject line "URGENT — Account Security" so that your message is escalated to our security team without delay.