Privacy Policy — How dhaka bazi Handles Your Data

This Privacy Policy ("Policy") is published by dhaka bazi ("we", "us", "our", "the Platform") and applies to all individuals who visit, browse, register on, or otherwise interact with the dhaka bazi website at dhaka-bazi.com and any associated mobile or desktop applications ("the Services"). This Policy explains how dhaka bazi collects, processes, stores, protects, and in certain circumstances discloses personal data relating to you ("the Player", "you", "your").

By accessing or using the dhaka bazi platform, or by completing account registration, you acknowledge that you have read and understood this Privacy Policy in full and that you consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the dhaka bazi platform.

dhaka bazi is committed to protecting the privacy of all players, including those located in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We process personal data responsibly, collect only what is necessary for the legitimate operation of our platform, and maintain appropriate technical and organisational safeguards to protect your information.

This Policy should be read in conjunction with dhaka bazi's Terms & Conditions and Responsible Gaming policy. In the event of any inconsistency between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy will take precedence.

dhaka bazi collects personal data from you through several channels: directly when you register or use our platform, automatically when you browse the site, and occasionally from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described in the table below.

dhaka bazi does not intentionally collect sensitive personal data beyond what is required for identity verification and age-gating (i.e., 18+ compliance). We do not collect biometric data, health information, religious affiliation, or political opinions. If you voluntarily include such information in a support message or other communication, it will be treated with the highest level of confidentiality and will not be used for any purpose beyond resolving your enquiry.

We do not knowingly collect personal data from individuals under the age of 18. If we discover that data has been collected from a minor, we will delete it immediately and close the associated account in accordance with our Terms & Conditions.

dhaka bazi processes your personal data only for specific, legitimate purposes. We rely on one or more of the following legal bases for each processing activity: performance of a contract with you (running your account and processing transactions), compliance with a legal obligation (KYC/AML requirements), pursuit of our legitimate interests (fraud prevention, platform security, product improvement), or your explicit consent (where required by applicable law).

The primary purposes for which dhaka bazi uses your personal data are as follows:

• Account creation and management: To create, maintain, and administer your dhaka bazi account, including verifying your identity and age as part of our mandatory 18+ compliance checks.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain transaction records in BDT for audit and reconciliation purposes.
• Provision of gaming services: To allow you to place bets on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers matches), football, kabaddi, badminton, and other sports, and to provide access to live casino, slots, and all other games on the platform.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, match-fixing involvement, and any other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: To comply with applicable anti-money-laundering (AML) and Know Your Customer (KYC) obligations, and to respond to lawful requests from law enforcement or other authorities.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion and deposit limit settings you have applied to your account, and to provide timely support to players who contact us for help.
• Customer support: To respond to your enquiries, resolve disputes, and communicate important account-related information to you via email or live chat.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the dhaka bazi platform.
• Promotional communications: Where you have opted in to receive marketing messages, to send you information about relevant promotions, seasonal bonus offers (e.g., Eid specials, Pohela Boishakh promotions, BPL season boosts), and platform news. You may opt out of marketing communications at any time by contacting [email protected].

dhaka bazi does not share your personal data with third parties except in the limited circumstances described in this section. When data is shared, we require all third-party recipients to apply appropriate data protection measures consistent with this Policy.

• Payment service providers: We share relevant financial data (such as your mobile wallet number or card details) with our payment partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly to the extent necessary to process your deposits and withdrawals. These providers have their own privacy policies governing their handling of your data.
• Identity verification providers: Where we use a third-party KYC or age-verification service to verify your identity documents, we share the relevant identity data with that provider. All such providers are contractually bound to process data only for the purpose of verification and to delete or return it once that purpose is fulfilled.
• Game studio providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as session tokens and bet values) in order to deliver their game content to your device. They do not receive your full identity or financial data.
• Analytics and technical providers: We use third-party analytics and infrastructure services to monitor platform performance and uptime. These providers process only anonymised or pseudonymised technical data and are prohibited from using it for any other purpose.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate suspected fraud, money laundering, match-fixing, or other criminal activity.
• Business transfers: In the event that dhaka bazi undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquirer will be required to adhere to this Privacy Policy.

dhaka bazi will not disclose your personal data to any third party beyond those described above without your explicit prior consent, except where required by law.

dhaka bazi uses cookies and similar tracking technologies to improve your browsing experience, maintain your login session, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by your browser when you visit our site. Cookies do not contain executable code and cannot transmit viruses.

We use the following categories of cookies on the dhaka bazi platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your in-game state during a betting or casino session, and ensure security tokens remain valid. You cannot opt out of these cookies if you wish to use dhaka bazi.
• Preference cookies: These store your language and display preferences so that you do not need to reconfigure them each time you visit. They are not essential but improve your experience significantly.
• Analytics cookies: We use anonymised analytics to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used to improve the platform and is never linked back to your individual account without aggregation.
• Session identifier cookies: Short-lived cookies used to link your activity across a single browsing session for functional purposes such as maintaining a multi-leg accumulator bet while you browse sports markets.

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. For instructions on managing cookies in your specific browser, consult the browser's official help documentation.

dhaka bazi retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years following permanent account closure, in accordance with standard financial record-keeping requirements and AML obligations.
• Transaction records: All deposit and withdrawal records — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard transaction logs — are retained for a minimum of five (5) years following the date of the transaction.
• KYC and identity documents: Copies of NID, passport, or other verification documents are retained for a minimum of five (5) years following account closure. In cases where a regulatory investigation is ongoing, documents will be retained until the investigation is formally concluded.
• Gaming logs and bet history: Individual bet records are retained for a minimum of three (3) years for internal audit, dispute resolution, and responsible gaming monitoring purposes.
• Customer support communications: Emails and live chat transcripts are retained for two (2) years following the closure of the support ticket, unless the communication is part of an ongoing dispute or legal matter.
• Analytics data: Anonymised or aggregated analytics data may be retained indefinitely as it cannot be linked to any individual player.

When retention periods expire and no legal obligation requires continued storage, dhaka bazi securely deletes or anonymises the relevant personal data. Deletion is carried out using industry-standard data destruction methods appropriate to the sensitivity of the data category involved.

As a player and data subject, you hold a number of rights in relation to the personal data dhaka bazi holds about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered email address and the specific right you wish to exercise. We will respond within a reasonable timeframe and in any event within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data dhaka bazi holds about you, along with information about how that data is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your account settings.
• Right to erasure ("right to be forgotten"): Subject to applicable legal retention obligations, you may request that we delete personal data we hold about you. We cannot comply with erasure requests that conflict with mandatory AML, KYC, or financial record-keeping requirements.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing activities carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes. However, we may override your objection where our legitimate interest or legal obligation outweighs your rights in the specific circumstances.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

dhaka bazi employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no platform can guarantee absolute security against all possible threats, we apply industry-standard controls appropriate to the sensitivity and volume of data we handle.

• SSL/TLS encryption: All data transmitted between your device and the dhaka bazi platform is encrypted using SSL/TLS protocols. You will see the padlock icon and "https://" prefix in your browser's address bar at all times when using the site.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. dhaka bazi staff never have access to your plain-text password and will never ask you to share it.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Only authorised personnel who require access to perform their job functions can view player data, and all access is logged and audited.
• Two-factor authentication (2FA): We strongly recommend that all players enable 2FA on their dhaka bazi account. This provides a second layer of protection against unauthorised login even if your password is compromised.
• Fraud monitoring systems: Automated systems continuously monitor account activity for signs of unusual behaviour, unauthorised access attempts, and potentially fraudulent transactions. Suspicious activity triggers internal review processes.
• Data minimisation: We collect and retain only the minimum personal data necessary for each processing purpose, reducing the risk associated with unnecessary data storage.

In the event of a personal data breach that poses a risk to your rights and freedoms, dhaka bazi will notify affected individuals without undue delay and will take prompt steps to contain and remediate the breach. Please report any suspected security vulnerabilities to [email protected] immediately.

The dhaka bazi platform integrates with third-party services to deliver payment processing, game content, and platform analytics. These integrations are necessary for the core operation of the platform and are described in Section 04 above in the context of data sharing. This section provides further context on how dhaka bazi manages its third-party service relationships from a privacy perspective.

Each third-party service provider with whom dhaka bazi shares personal data is subject to a Data Processing Agreement (DPA) that:

• Restricts the provider from using your data for any purpose other than the specific service they provide to dhaka bazi.
• Requires the provider to apply technical and organisational security measures at least equivalent to those described in Section 08 of this Policy.
• Obligates the provider to delete or return personal data at the conclusion of the service relationship.
• Prohibits the provider from sub-processing your data to further third parties without dhaka bazi's prior written consent.

dhaka bazi is not responsible for the privacy practices of independent third-party websites that are not part of our platform. This Privacy Policy applies solely to data processed by dhaka bazi and its contracted service providers acting under our instruction. If you follow a link from our platform to an external site, you should review that site's own privacy policy before providing any personal information.

dhaka bazi reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will provide notice by posting the updated Policy on this page with a revised "Last Updated" date, and where practicable, by sending a notification to your registered email address.

Your continued use of the dhaka bazi platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes and your agreement to be bound by the revised Policy. If you disagree with any change, you should stop using the platform and may request account closure by contacting [email protected].

We recommend reviewing this Privacy Policy periodically — particularly before making any new deposit or engaging with any new feature on the platform — to ensure you remain comfortable with how we handle your personal data. Archived versions of previous Privacy Policy documents are not published on the website but may be requested by emailing our support team.

All questions, concerns, or requests relating to this Privacy Policy should be directed to the dhaka bazi support team, available 24 hours a day, 7 days a week via live chat on the platform or by email at [email protected].