Privacy Policy — How baazi Protects Your Data

This Privacy Policy sets out the basis on which baazi ("we", "us", "our") collects, processes, stores, and shares personal data obtained from individuals ("you", "the Member") who access or use the baazi Platform at baazi.lat. It also describes the rights available to Members in relation to their personal data and the mechanisms through which those rights may be exercised.

baazi is committed to protecting the privacy of all Members, in particular those resident in Bangladesh who form the primary audience of this Platform. We apply data protection principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity in all data processing activities we carry out.

This policy should be read alongside baazi's Terms & Conditions and Responsible Gaming policy, both of which form part of the contractual relationship between baazi and its Members. Where any conflict arises between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall prevail.

The effective date of this policy is stated in the hero section above. baazi will publish a revised effective date whenever material changes are made, and will notify Members via an in-Platform notice where changes significantly affect their data rights.

baazi collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the Platform; and from third-party service providers who assist us in operating the Platform. The categories of data collected are as follows:

2.1 Registration Data

When you create a baazi account, we collect:

• Full legal name as it appears on your official identification document.
• Date of birth (used to verify that you are aged 21 or above).
• Mobile phone number (used as your primary account identifier and for two-factor authentication).
• Preferred payment method (bKash, Nagad, Rocket, or Upay) and the registered mobile number associated with that account.
• Residential city or district (used for localisation and fraud detection — full residential address is not collected at registration).
• Username and a hashed version of your chosen password (the plaintext password is never stored).

2.2 Identity Verification (KYC) Data

Where baazi requires you to complete a Know Your Customer (KYC) verification process — which may be triggered by your account activity, withdrawal requests above defined thresholds, or routine compliance checks — we may additionally collect:

• A copy of a government-issued photo identification document (National ID card, passport, or driving licence).
• A photograph or selfie for facial comparison with the ID document provided.
• Proof of address documentation (e.g., a utility bill or bank statement dated within the preceding three months).
• Source of funds documentation in cases where transaction volumes trigger enhanced due diligence under our anti-money laundering framework.

2.3 Transaction Data

We record all financial transactions associated with your account, including:

• Deposit amounts, dates, times, and the payment provider used (bKash, Nagad, Rocket, or Upay).
• Withdrawal amounts, dates, times, destination payment account, and processing status.
• Bonus credits, wagering requirement progress, and bonus expiry events.
• Running Wallet balance at each transaction point.

2.4 Betting and Gaming Activity Data

We log all betting and gaming activity conducted through your account, including:

• Bets placed, including market, stake amount, odds at time of placement, and settlement outcome.
• Casino and slot game sessions, including games played, session duration, amounts wagered, and outcomes.
• Live dealer game participation records.
• In-play betting activity and real-time market selections.

This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance. It is retained for a minimum of five years from the date of each transaction.

2.5 Technical and Device Data

When you access the baazi Platform, we automatically collect certain technical data including:

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, and browser version.
• Session timestamps, page views, and navigation path within the Platform.
• Referral source (i.e., the URL from which you arrived at baazi.lat, where applicable).

2.6 Communications Data

If you contact baazi support via live chat, we retain a transcript of that conversation. Communications records are used for quality assurance, dispute resolution, and ongoing support continuity. Live chat transcripts are retained for a period of two years from the date of the conversation.

baazi uses the personal data it collects for the following specific purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent or updating this policy with reasonable advance notice.

You may opt out of promotional communications at any time by contacting baazi support via live chat. Opting out of promotional communications does not affect the processing of your data for any other purpose listed above, and does not affect your ability to use the Platform.

baazi processes your personal data on the following legal bases, each of which applies to the specific processing activities described in Section 3:

• Contractual necessity: Processing required to perform the contract between baazi and the Member — specifically, account creation, payment processing, game access, and customer support. Without this processing, baazi cannot provide the services you have registered to use.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and financial record-keeping standards.
• Legitimate interests: Processing carried out to pursue baazi's legitimate business interests, including fraud prevention, security monitoring, Platform performance analysis, and responsible gaming oversight, where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for promotional communications. This processing is based on your consent, which you provide by not opting out of marketing communications at registration. You may withdraw this consent at any time by contacting support.

Where baazi relies on legitimate interests as the legal basis for any processing activity, we conduct a balancing assessment to ensure that our interests do not override your rights and freedoms. Records of these assessments are maintained internally. If you wish to obtain information about any specific legitimate interests assessment, please contact us using the details in Section 13.

baazi does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the data required to authenticate and process a specific payment transaction. They do not receive your full baazi account profile or betting history.
• KYC and identity verification services: Where baazi uses a third-party identity verification provider to process KYC submissions, that provider receives the documents you submit for the sole purpose of identity verification. The provider is contractually bound to process this data only as directed by baazi and not to retain or use it for any independent purpose.
• Game studios and content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) may receive technical session data (such as session tokens and game outcomes) to enable real-time game functionality. They do not receive your full personal profile, financial data, or contact details.
• Platform hosting and infrastructure providers: baazi's servers and supporting infrastructure are operated by contracted service providers who process data on baazi's behalf and under baazi's instruction. These providers are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: baazi may disclose personal data to law enforcement agencies, regulatory bodies, or legal authorities where required to do so by applicable law, court order, or in response to a formal legal process. baazi will notify affected Members of such disclosures to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of baazi's business assets, personal data held by baazi may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and of any material change in data processing practices that results from it.

All third-party service providers with whom baazi shares personal data are required to implement appropriate technical and organisational security measures to protect that data. baazi conducts due diligence on data processors prior to engagement and reviews these arrangements periodically.

The security of your financial data is a top priority for baazi. The following technical safeguards are in place at all times:

• 256-bit SSL/TLS encryption: All data in transit between your browser or device and baazi servers is encrypted using TLS 1.2 or higher. This applies to all pages of the Platform, not only the login and deposit pages.
• Password hashing: Your baazi account password is stored as a one-way cryptographic hash using a modern hashing algorithm. It is computationally infeasible to reverse this hash to recover your original password. baazi staff cannot view your password.
• Access controls: Access to personal data within baazi's internal systems is restricted on a need-to-know basis. Staff who handle Member data are subject to confidentiality obligations and receive data protection training.
• Fraud detection systems: Automated systems monitor transaction patterns and account activity in real time to detect anomalous behaviour. Suspicious activity triggers a review process before further transactions are permitted.
• Incident response: baazi maintains a data security incident response plan. In the event of a data breach that poses a risk to Member privacy, baazi will notify affected Members within a reasonable timeframe and will take immediate remedial action to contain the breach.

While baazi takes all reasonable technical and organisational measures to protect your data, no digital platform can guarantee absolute security. You also bear responsibility for maintaining the security of your own device and your baazi account credentials. If you suspect that your account has been compromised, please contact baazi support immediately via live chat.

baazi uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. A cookie is a small text file placed on your device when you visit the Platform. The cookies we use fall into the following categories:

baazi does not use advertising cookies, third-party tracking pixels, or retargeting technologies. We do not participate in cross-site tracking networks or share cookie-derived data with advertising partners.

You may control cookie preferences through your browser settings. Instructions for managing cookies in the most common browsers are available in each browser's help documentation. Please note that deleting or blocking all cookies may affect the functionality of the baazi Platform, particularly features that require an active authenticated session.

baazi retains personal data for no longer than is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained beyond these periods for statistical and performance analysis purposes.

Where an account is suspended or closed due to a breach of baazi's Terms & Conditions or as a result of a fraud or AML investigation, baazi may retain relevant data for longer than the standard retention periods stated above, for the duration of any ongoing investigation or legal proceedings.

As a Member of the baazi Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact baazi support via live chat or at the email address provided in Section 13.

• Right of access: You have the right to request a copy of the personal data that baazi holds about you. We will provide this information within a reasonable timeframe and in a commonly used, machine-readable format where technically practicable. We may ask you to verify your identity before fulfilling an access request.
• Right to rectification: If any personal data baazi holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details (such as your registered mobile number or payment account) may be updated directly through the Platform's account settings section, or by contacting support.
• Right to erasure: You may request that baazi delete the personal data it holds about you, subject to certain conditions. This right is not absolute — baazi may be required to retain certain data to comply with legal obligations (for example, transaction records for anti-money laundering compliance) even after a deletion request is received. Where erasure is possible, it will be carried out promptly.
• Right to restrict processing: In certain circumstances, you may request that baazi restrict the processing of your data — for example, while a dispute is being resolved or while the accuracy of data is being verified. During a restriction period, baazi will continue to hold your data but will not process it for other purposes.
• Right to object: You have the right to object to processing of your personal data that is based on baazi's legitimate interests. baazi will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or unless the processing is required for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to data portability: You may request that baazi provide your personal data in a structured, commonly used, machine-readable format, where technically feasible and where the processing is based on consent or contractual necessity.

baazi aims to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

baazi will not charge a fee for responding to data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or baazi may decline to act on the request.

baazi does not market to, target, or knowingly collect personal data from minors. Our registration process includes a mandatory date-of-birth field, and we verify that all Members meet the 21+ age requirement. Where an account is found to have been registered by a person under 21 years of age, baazi will immediately close the account, forfeit all associated balances, and securely delete the registration data in accordance with this policy and applicable law.

If you are a parent or guardian and believe that a minor in your household has registered an account on baazi, please contact us immediately via live chat or at the support email address in Section 13. We will investigate and act promptly on such reports.

baazi recommends that parents and guardians install device-level parental control software to prevent access to online gambling platforms by minors. This measure is particularly important on shared or family devices. baazi accepts no liability for harm arising from unauthorised account registration by a minor in circumstances where the adult account holder or guardian has not taken reasonable steps to secure access to their device.

The baazi Platform does not contain links to external third-party websites. However, payment flows may temporarily redirect your browser to the secure authentication environment of your chosen payment provider (bKash, Nagad, Rocket, or Upay) to complete transaction authentication. These environments are operated entirely by the respective payment providers and are governed by their own privacy policies and terms of service.

baazi has no control over the data practices of payment providers once you are within their authentication environment. We recommend that you review the privacy policies of bKash, Nagad, Rocket, and Upay if you have questions about how they handle your data during payment authentication.

Similarly, game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others) is rendered within an iFrame or embedded environment that is technically operated by those studios. baazi's session token system limits the data accessible to game studios, but each studio's own privacy and security practices govern their internal processing. baazi conducts due diligence on all game studio partners and requires that they maintain appropriate data security standards as a condition of their relationship with baazi.

baazi reserves the right to update or revise this Privacy Policy at any time. The most recent version of this policy will always be accessible at baazi.lat/privacy-policy, with the effective date displayed prominently at the top of the page.

Where changes to this policy are material — meaning they significantly affect how we collect, use, or share your personal data, or they reduce the rights available to you — baazi will provide advance notice via an in-Platform notification displayed when you next log in, or via your registered mobile number, at least 14 days before the changes take effect.

Minor updates, such as corrections of typographical errors, clarifications that do not alter the substance of any provision, or updates to contact details, may be made without advance notice. In all cases, the version of this Privacy Policy published on the Platform at the time of any relevant data processing event shall be the applicable version governing that event.

Your continued use of the baazi Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with the revised policy, you must cease using the Platform and may request account closure and deletion of your personal data in accordance with Section 9 of this policy.

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 9, or wish to raise a concern about how baazi has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by baazi's dedicated support staff who are trained in data protection matters.

• Support Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the baazi Platform.
• Response Time: Privacy-related enquiries are prioritised and typically receive an initial response within 2–3 minutes via live chat, or within 24 hours via email.
• Operating Hours: 24 hours, Bangladesh Standard Time (UTC+6).

When contacting us regarding a data rights request, please provide your registered mobile number and username so that we can verify your identity and locate your account records efficiently. We will not process a data rights request without first verifying the identity of the requester, to ensure that personal data is not disclosed to unauthorised parties.

If you are not satisfied with baazi's response to your privacy enquiry or data rights request, you have the right to raise a formal complaint. baazi takes all privacy complaints seriously and will investigate and respond to formal complaints within 30 days. Where a complaint cannot be resolved within 30 days, we will provide a written update explaining the reasons for the delay and the expected resolution timeline.