Privacy Policy — gbazze Data Protection

01 Introduction

gbazze ("we", "us", "our") operates the online casino and sports betting platform available at gbazze.net, serving players across Bangladesh. As a platform that processes personal and financial data, gbazze takes its data protection responsibilities seriously and is committed to handling all personal information with care, transparency, and security.

This Privacy Policy sets out the types of personal data that gbazze collects from players ("you", "your") and visitors to the platform, the purposes for which that data is collected and processed, the circumstances in which it may be shared with third parties, the security measures in place to protect it, and the rights that you hold in respect of your personal data.

This Policy should be read alongside the gbazze Terms & Conditions and Responsible Gaming Policy, both of which incorporate data-related provisions that are relevant to your use of the platform. In the event of any conflict between this Privacy Policy and those documents, this Privacy Policy shall govern in respect of data protection matters.

If you have any questions about how gbazze processes your personal data, or if you wish to exercise any of your data rights described in this Policy, please contact the gbazze support team using the details provided in Section 14.

02 Personal Data We Collect

gbazze collects personal data in the following categories. We collect only what is necessary for the purposes identified in Section 3 of this Policy.

2.1 Registration & Identity Data

• Full legal name as it appears on your national identity document or passport
• Date of birth (for mandatory age verification — players must be 18 or older)
• Residential address, including city and district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Bangladesh National ID number or passport number (collected during enhanced verification)
• Username and encrypted password

2.2 Contact Data

• Bangladesh mobile number (used for OTP verification, SMS notifications, and bKash/Nagad account matching)
• Email address (used for account communications and support correspondence)

2.3 Financial & Transaction Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals
• Bank account references for players using Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other direct-transfer methods
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
• Visa or Mastercard partial card details (last 4 digits and card type — full card numbers are never stored by gbazze; they are tokenised by our PCI-DSS compliant payment processor)

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss records, session durations, and wagering history
• Sports betting selections including cricket markets (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), football, kabaddi, and other available markets
• Bonus claims, promotional interactions, and tournament participation records

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP address
• Device type, operating system, and browser version
• Session timestamps, login records, and platform navigation data
• Cookie identifiers and similar tracking technology data (see Section 7)

2.6 Verification Documents

• Copies of identity documents (national ID, passport, driving licence) submitted for Know Your Customer (KYC) verification
• Proof of address documents (utility bills, bank statements) submitted during enhanced verification checks
• Selfie or liveness check images submitted during identity verification, where applicable

03 How We Use Your Personal Data

gbazze uses the personal data described in Section 2 for the following purposes:

Purpose	Data Categories Used
Account creation, identity verification, and age verification	Registration & Identity Data, Verification Documents, Contact Data
Processing deposits and withdrawals via bKash, Nagad, Rocket, and other methods	Financial & Transaction Data, Contact Data
Delivering casino games, sports betting, and platform functionality	Gaming Activity Data, Technical & Device Data
Responsible gaming monitoring and application of player protection tools	Gaming Activity Data, Registration Data, Contact Data
Fraud prevention, anti-money laundering checks, and platform security	All categories where relevant
Sending account notifications, transaction confirmations, and support responses	Contact Data, Transaction Data
Sending promotional communications about bonuses and offers (with your consent)	Contact Data, Gaming Activity Data
Platform analytics, performance monitoring, and product improvement	Technical & Device Data, Gaming Activity Data (aggregated/anonymised)
Legal compliance and responding to regulatory or law enforcement requests	All categories where required by law

04 Legal Basis for Processing

gbazze processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations to you under the gbazze Terms and Conditions — including account management, payment processing, game delivery, and support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where gbazze's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications (including promotional SMS and email). You may withdraw your consent to marketing communications at any time by contacting support or updating your account preferences.

05 Data Sharing & Disclosure

gbazze does not sell, rent, or exchange your personal data with third-party marketers. Personal data is shared only in the following circumstances and only to the extent necessary for the relevant purpose:

5.1 Service Providers

gbazze works with carefully selected third-party service providers who assist in operating the platform. These include identity verification and KYC service providers, payment processors (including mobile wallet gateways for bKash, Nagad, and Rocket), game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting and infrastructure providers, fraud detection and cybersecurity service providers, and customer support software providers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing services to gbazze.

5.2 Legal & Regulatory Disclosure

gbazze may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law or a valid legal order. gbazze will, where permitted by law, notify you of any such disclosure request before complying with it.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of gbazze's business assets, personal data held by gbazze may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

5.4 Aggregate & Anonymised Data

gbazze may share aggregated, anonymised, or de-identified data — data from which all personally identifying information has been removed — with third parties for research, analytics, or business intelligence purposes. Such data cannot be used to identify any individual player.

06 Payment Data & Mobile Wallet Processing

The gbazze platform is designed to serve Bangladeshi players, and mobile wallet payments via bKash, Nagad, Rocket, and Upay represent the primary deposit and withdrawal methods on the platform. The following specific provisions apply to the processing of payment data:

• When you initiate a bKash or Nagad transaction, your registered mobile wallet number is transmitted to the respective payment gateway for transaction authorisation. gbazze receives a transaction reference and status confirmation but does not receive or store your full mobile banking PIN or password.
• For card payments via Visa or Mastercard, card data is processed directly by a PCI-DSS Level 1 certified payment processor. gbazze stores only a transaction token and the last 4 digits of the card for reference purposes.
• Withdrawal requests are processed only to the payment method previously used to deposit funds into your gbazze account. This verification requirement is a fraud-prevention measure.
• All transaction records are retained by gbazze for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping obligations.
• Transaction amounts are denominated in Bangladeshi Taka (৳). gbazze does not store currency conversion records for BDT-denominated transactions.

07 Cookies & Tracking Technologies

The gbazze platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and collect anonymised usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your language and display preferences, and ensure secure authentication. These cookies cannot be disabled without affecting your ability to use the platform.
• Analytics Cookies: These cookies collect anonymised data about how visitors interact with the platform — including which pages are visited, how long sessions last, and which features are used most. This data is used to improve the platform. Analytics cookies do not identify individual users.
• Functional Cookies: These cookies remember your account preferences, such as notification settings and preferred deposit method, to provide a more personalised experience on return visits.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in to or using the platform. gbazze does not use third-party advertising cookies or retargeting pixels.

08 Data Security

gbazze implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the gbazze platform
• AES-256 encryption for sensitive personal data stored in gbazze's databases
• Role-based access controls ensuring that gbazze staff can only access personal data that is necessary for their specific job function
• Two-factor authentication (2FA) via SMS OTP for player account access — available and strongly recommended for all accounts
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security specialists
• Automated fraud detection systems that monitor account activity for unusual patterns and flag suspicious transactions for manual review
• Incident response procedures enabling gbazze to detect, contain, and notify affected players of any personal data breach within a reasonable timeframe

While gbazze takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your gbazze account and to enable 2FA to maximise the security of your account.

09 Data Retention

gbazze retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Data Category	Retention Period	Reason
Account registration & identity data	Duration of account + 5 years after closure	Legal compliance, AML obligations
Financial transaction records	5 years from transaction date	Financial record-keeping obligations
KYC verification documents	Duration of account + 5 years after closure	Anti-money laundering compliance
Gaming activity records	Duration of account + 3 years after closure	Responsible gaming monitoring, dispute resolution
Support correspondence	3 years from last contact	Dispute resolution, service improvement
Technical & device data (logs)	12 months from collection	Security monitoring, fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Compliance with consent obligations

Following the expiry of the applicable retention period, personal data is either securely and irreversibly deleted from gbazze's systems, or anonymised such that it can no longer be attributed to any identifiable individual.

10 Your Privacy Rights

You hold the following rights in respect of the personal data that gbazze holds about you. To exercise any of these rights, please contact the gbazze support team using the details in Section 14. gbazze will acknowledge your request within 24 hours (Bangladesh Standard Time) and will provide a substantive response within 5 business days.

• Right of Access: You have the right to request a copy of the personal data that gbazze holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request that gbazze corrects any inaccurate or incomplete personal data held about you. For certain data fields (such as your registered mobile number), you may be able to update this information directly within your account settings.
• Right to Erasure: You have the right to request that gbazze deletes your personal data where there is no longer a lawful basis for retaining it. Please note that gbazze may be required to retain certain data (such as transaction records) for legal compliance purposes even after account closure, and erasure requests cannot override these obligations.
• Right to Restriction: You have the right to request that gbazze restricts its processing of your personal data in certain circumstances — for example, while a complaint or data accuracy dispute is being resolved.
• Right to Object: You have the right to object to gbazze's processing of your data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where gbazze processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: You have the right to receive a copy of personal data that you have provided to gbazze in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.

11 Children's Privacy

The gbazze platform is strictly for individuals aged 18 and above. gbazze does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process, and gbazze may request additional proof of age at any time.

If gbazze discovers or has reason to believe that personal data has been collected from a person under 18 years of age, that account will be immediately suspended, all balances will be voided, and the personal data will be permanently deleted from gbazze's systems as soon as the investigation is complete. If you believe that a minor has created a gbazze account, please contact the support team immediately using the contact details in Section 14.

12 Third-Party Links & Embedded Content

The gbazze platform may contain references to third-party game providers and payment processors. Where you interact with third-party services — such as the bKash or Nagad payment gateway — during a transaction, you are subject to the privacy policy of that third party for the duration of that interaction. gbazze is not responsible for the data practices of third-party services. We recommend that you review the privacy policies of any third-party service you interact with.

gbazze does not embed third-party social media plugins, share buttons, or advertising networks on the platform. No data is transmitted to social media platforms as a result of your use of the gbazze platform unless you explicitly initiate such sharing.

13 Amendments to This Policy

gbazze reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this Policy, gbazze will notify registered players by sending a notification to their registered mobile number or email address at least 14 days before the amended Policy takes effect.

The most current version of this Privacy Policy is always available on this page and is identified by the version number and effective date displayed in the update badge at the top of this document. Continued use of the gbazze platform following the effective date of any amendment constitutes your acceptance of the amended Privacy Policy.

For minor corrections such as typographical fixes or clarifications that do not materially affect your privacy rights, gbazze may update this Policy without advance notice. The version number will be incremented to reflect any such update.

14 Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests (access, rectification, erasure, restriction, portability, and objection), and reports of suspected privacy incidents, please contact the gbazze data support team using the following details:

When submitting a data rights request, please include your registered username and the mobile number associated with your gbazze account so that we can locate your records promptly and verify your identity before processing the request. gbazze will not process a data rights request from an unverified individual, as doing so could itself constitute a privacy breach.

If you are not satisfied with gbazze's response to a privacy complaint or data rights request, you have the right to escalate the matter through any dispute resolution process available under applicable law. gbazze's formal complaint process is described in the Terms & Conditions, Section 14.