kbazi Privacy Policy
How We Handle Your Personal Data

1. Data Controller Information

kbazi ("we", "us", "our") operates the online gaming and sports betting platform accessible at kbazi.app. For the purposes of this Privacy Policy, kbazi acts as the data controller in respect of all personal data collected from users ("you", "your", "Player") who access the Platform.

As data controller, kbazi is responsible for determining the purposes and means by which your personal data is processed. All privacy-related enquiries, data subject access requests, and complaints should be directed in the first instance to our support team at the contact address stated in Section 12 of this Policy.

---

2. Data We Collect

2.1 Registration Data

When you create a kbazi account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, and the mobile phone number associated with your preferred BDT payment method (such as your bKash or Nagad registered number). This information is required to create your account, verify your identity, and ensure compliance with our 18+ age restriction policy.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, kbazi may request copies of identity documents including your National ID card, passport, or other government-issued photo identification. We may also request proof of your registered payment method. These documents are stored securely and used solely for identity verification purposes.

2.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and wagering transactions conducted through your kbazi account. This includes the BDT amounts involved, the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, or Mastercard), timestamps, and transaction reference numbers. We do not store full card numbers on our servers; payment card data is tokenised by our payment processing partners.

2.4 Gameplay and Betting Data

kbazi records all betting activity, game sessions, bet slips, and game history associated with your account. This data is used to calculate and settle winnings, to detect potentially problematic gambling patterns as part of our responsible gaming obligations, and to resolve any disputes regarding game outcomes.

2.5 Technical and Device Data

When you access the kbazi Platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and connection type. This data is used for platform security, fraud prevention, and service optimisation purposes.

2.6 Communications Data

If you contact kbazi's support team via email, live chat, or any other channel, we retain records of those communications including the content of your messages and any attachments. This data is used to resolve your enquiry, improve our support service, and maintain an accurate record of your account history.

2.7 Marketing Preferences

If you have opted in to receive promotional communications from kbazi, we record that consent and the channel through which it was given. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email we send to you.

---

3. How We Use Your Data

kbazi uses the personal data we collect for the following specific purposes:

Purpose	Data Used	Basis
Account creation and management	Registration data, KYC documents	Contract performance
Processing deposits and withdrawals in BDT	Financial transaction data, KYC	Contract performance
Age verification and eligibility checks	Date of birth, KYC documents	Legal obligation
Fraud prevention and anti-money-laundering	Transaction data, device data, IP address	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gameplay data, transaction history	Legal obligation / Legitimate interest
Customer support communications	Communications data, account data	Contract performance
Platform security and technical operations	Device data, IP address, session logs	Legitimate interest
Promotional communications (if opted in)	Email address, marketing preferences	Consent
Dispute resolution and legal claims	All relevant account and transaction data	Legal obligation / Legitimate interest

---

4. Legal Basis for Processing

kbazi processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you — including opening your account, processing deposits and withdrawals, and settling bets — is carried out on the basis that it is required to perform the contract between you and kbazi.
• Legal Obligation: Some processing is required by law. This includes KYC identity verification, age verification, anti-money-laundering checks, and responsible gaming monitoring. We process data for these purposes because we are legally required to do so.
• Legitimate Interest: kbazi has a legitimate interest in maintaining platform security, preventing fraud, detecting and investigating suspicious account activity, and improving our services. We process data for these purposes where our legitimate interest is not overridden by your privacy rights.
• Consent: Where we process your data for optional purposes — such as sending you promotional emails or personalised bonus offers — we do so on the basis of your explicit consent. You may withdraw consent for such processing at any time without affecting the lawfulness of processing carried out before withdrawal.

---

5. Data Sharing & Third Parties

5.1 Payment Processors

To process your deposits and withdrawals in BDT, kbazi shares the minimum necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and the card scheme operators Visa and Mastercard. These partners are contractually bound to use your data solely for the purpose of executing the relevant payment transaction and are prohibited from using it for any other purpose.

5.2 Game Providers

When you play games on the kbazi Platform, your gameplay session data is necessarily transmitted to the relevant game provider (such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, or Ezugi) in order to deliver the game content. Game providers receive a session token and your wagering data; they do not receive your full name, payment details, or identity documents. All game provider partnerships are governed by strict data processing agreements.

5.3 Identity Verification Services

kbazi may use third-party KYC verification services to authenticate identity documents you submit during the verification process. These services process your ID document data solely for verification purposes and retain data only for the duration required to complete the check.

5.4 Legal and Regulatory Disclosures

kbazi may be required by law to disclose personal data to relevant authorities — including law enforcement agencies or financial intelligence units — in connection with the investigation of fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent legally required and, where permitted, without prior notification to the account holder.

5.5 No Data Sales

kbazi does not sell, rent, licence, or otherwise transfer your personal data to any third party for advertising, marketing profiling, data brokerage, or any commercial purpose unrelated to operating your kbazi account. This commitment applies without exception.

---

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. kbazi uses cookies and similar local storage technologies to ensure the Platform functions correctly, to remember your account session, and to gather aggregate analytics data about how the Platform is used.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your logged-in session, load-balance server requests, and ensure Platform security functions operate correctly	Session / Up to 24 hours
Functional	Remember your preferences such as language, display settings, and responsible gaming tool configurations	Up to 12 months
Analytics	Collect aggregated, anonymised data about page visits, session duration, and feature usage to help us improve the Platform	Up to 24 months

6.3 What We Do Not Use

kbazi does not use third-party advertising cookies, behavioural tracking pixels, social media tracking scripts, or any cookies that build a profile of your browsing activity across external websites. Our analytics cookies collect aggregate data only and are not linked to your personal account identity.

6.4 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent the kbazi Platform from functioning correctly — in particular, you will not be able to maintain a logged-in session or access your account. Disabling functional cookies will result in your preferences not being saved between sessions.

---

7. Data Retention

kbazi retains personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal retention obligations. The following general retention schedule applies:

• Active account data: Retained for the full duration your account remains open and active on the kbazi Platform.
• Transaction and wagering records: Retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal claim, in which case retention continues until the matter is fully resolved.
• Marketing consent records: Retained for the duration of your consent and for 3 years following withdrawal of consent, to demonstrate compliance with our marketing obligations.
• Device and session logs: Retained for up to 12 months for security and fraud detection purposes, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Data that has been anonymised and aggregated for statistical purposes is not subject to deletion timelines as it no longer constitutes personal data.

---

8. Data Security

kbazi implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Encryption: All data transmitted between your browser and kbazi servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all account interactions including login, registration, deposit, and withdrawal flows.
• At-Rest Encryption: Personal data stored in kbazi databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within kbazi's internal systems is restricted on a strict need-to-know basis. Staff members are only granted access to the categories of personal data required to perform their specific role. All internal access is logged and audited.
• Password Security: Account passwords are stored in hashed form using a modern one-way hashing algorithm. kbazi does not store or have access to your plaintext password and will never ask you for it via email or chat.
• Payment Card Security: kbazi does not store full payment card numbers on its servers. Card data is tokenised at the point of entry by our PCI-DSS compliant payment processing partners.
• Fraud Monitoring: kbazi operates automated monitoring systems that flag unusual login activity, suspicious transaction patterns, and potential account compromise in real time.

While kbazi takes all reasonable precautions to protect your personal data, no system connected to the internet can be guaranteed to be entirely impervious to attack. kbazi will notify affected users without undue delay in the event of a data security incident that poses a material risk to their rights or interests.

---

9. Your Privacy Rights

As a kbazi account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and a clear description of your request. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data kbazi holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations — for example, transaction records required for financial compliance cannot be deleted on request alone.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and where processing is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or where the processing relates to the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

kbazi will not discriminate against you, restrict your account functionality, or otherwise penalise you for exercising any of the above privacy rights in good faith.

---

10. Children's Privacy

The kbazi Platform is strictly intended for adults aged 18 years and above. kbazi does not knowingly collect personal data from any individual under the age of 18. Our registration process requires you to confirm your date of birth, and we apply age verification checks at registration and prior to first withdrawal.

If kbazi becomes aware that personal data has been collected from an individual under 18 — whether through misrepresentation during registration or any other means — the account will be suspended immediately, all personal data associated with the underage account will be deleted as promptly as practicable, and any deposits made will be refunded to the originating payment method where possible.

If you are a parent or guardian and have reason to believe that a person under 18 in your care has registered an account on kbazi, please contact us immediately at [email protected]. We will prioritise the investigation and closure of any such account.

---

11. Changes to This Privacy Policy

kbazi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable laws or regulations, or improvements to our platform and services. When a material change is made to this Policy, we will provide reasonable advance notice to registered Players via the email address on their account and/or via a prominent notice on the Platform, no fewer than 7 days before the updated Policy takes effect.

The effective date displayed at the top of this Policy will be updated with each new version. Continued use of the kbazi Platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you may request account closure in accordance with the Terms & Conditions.

We recommend that you review this Privacy Policy periodically. The current version is always available at kbazi.app/privacy-policy and supersedes all prior versions.

---

12. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how kbazi processes your personal data, please contact our support team. Our English-language support team is available 24 hours a day, 7 days a week and will respond to privacy-related enquiries within 30 calendar days.

Where you are not satisfied with kbazi's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. kbazi takes all privacy complaints seriously and will cooperate fully with any such regulatory process.