Privacy Policy — razabazi

1.1 — razabazi collects personal data that you provide directly when registering an account, making deposits or withdrawals, contacting customer support, or participating in promotions. We also collect certain data automatically as you use the platform. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create a razabazi account, we collect the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify that you are 18 years of age or older);
• Email address (used for account communications and verification);
• Mobile phone number (used for OTP verification and account security);
• Residential address in Bangladesh;
• Username and encrypted password.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawal requests, we may collect:

• A copy of your Bangladesh National Identity Card (NID) or passport;
• Proof of address (utility bill, bank statement, or similar document issued within 90 days);
• Proof of ownership of the mobile financial service account (bKash, Nagad, Rocket, or Upay) used for transactions;
• A selfie or photograph for identity confirmation where required.

1.3 Transaction Data

We maintain records of all financial transactions on your account, including:

• Deposit amounts, dates, times, and payment method used;
• Withdrawal requests, processed amounts, and destination payment accounts;
• Bonus credits, wagering activity, and promotional participation history;
• Bet placement records, including market type, stake, odds, and outcome.

1.4 Technical & Usage Data

When you access razabazi through a browser, we automatically collect certain technical data:

• IP address and approximate geographic location (city/division level);
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and in-app navigation patterns;
• Connection type (mobile data carrier — e.g., Grameenphone, Robi, Banglalink, Teletalk — or Wi-Fi ).

1.5 — razabazi does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly necessary for age and identity verification purposes.

2.1 — razabazi processes your personal data only for legitimate, specified purposes directly related to the operation of the platform and our obligations to you as a player. We do not use your data for purposes incompatible with those listed below.

2.2 — You may withdraw your consent to marketing communications at any time by contacting razabazi support via live chat. Withdrawing consent for marketing will not affect the lawfulness of processing carried out before the withdrawal, nor will it affect your ability to use the platform.

2.3 — razabazi will never use your personal data to make automated decisions that have significant legal or similarly serious effects on you without first providing you with an opportunity to request human review of that decision.

3.1 — razabazi does not sell, rent, or trade your personal data to any third party. We may share limited personal data with trusted third-party service providers strictly as necessary to operate the platform. All third-party recipients are contractually bound to handle your data securely and only for the purposes for which it is shared.

Categories of Third Parties We Work With

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are regulated mobile financial service providers in Bangladesh.
• Identity verification providers: Where KYC checks are conducted using third-party tools, your identity documents may be processed by a vetted verification partner. This data is not retained by that partner beyond the period needed to complete verification.
• Game content providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming may receive anonymised session data to support game delivery and RNG integrity. They do not receive your name, contact details, or financial data.
• Cloud infrastructure and hosting providers: razabazi uses secure server infrastructure to store platform data. Server-level access is restricted and governed by strict data processing agreements.
• Analytics providers: Anonymised, aggregated usage data may be processed by platform analytics tools to help us understand how players navigate razabazi and where improvements can be made.

3.2 — razabazi may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to any individual.

3.3 — In the event that razabazi undergoes a business restructure, merger, or acquisition, player data may be transferred to a successor entity. You will be notified of any such transfer in advance, and your data will continue to be handled in accordance with this Privacy Policy.

4.1 — razabazi uses cookies and similar technologies (such as local storage tokens and session identifiers) to deliver a functional and secure platform experience. This section explains the types of cookies we use and the purposes they serve.

4.2 — razabazi does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts (such as Facebook Pixel or Google Ads tags) on the platform. Our cookie use is limited to what is necessary for platform operation, security, and performance.

4.3 — Most modern browsers allow you to manage, restrict, or delete cookies through your browser settings. Please note that disabling essential cookies may prevent certain features of razabazi from working correctly, including the ability to stay logged in or access your wallet.

4.4 — On mobile browsers (which account for the majority of razabazi usage in Bangladesh across Dhaka, Chittagong, Sylhet, and other cities), cookie management options are available within your browser's privacy settings. Clearing browser data will also remove stored cookies.

5.1 — razabazi retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required to comply with applicable legal and compliance obligations.

5.2 — The following general retention periods apply:

• Active account data (name, contact details, account preferences): Retained for the full duration of your active account relationship with razabazi, plus a minimum of 5 years after account closure for compliance purposes.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission, in line with standard anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction or bet, to support dispute resolution and regulatory compliance.
• Customer support communications: Retained for 2 years from the date of the final communication in a support thread.
• Session and usage data: Anonymised and aggregated after 12 months; raw session logs deleted after 90 days.

5.3 — Where you request account closure, razabazi will mark your account as closed and cease active use of your personal data for marketing or platform personalisation purposes. Core account and transaction records will be retained for the minimum periods described above before being securely deleted or anonymised.

5.4 — Where razabazi is required by law to retain data beyond the periods stated above, the longer legal retention period will apply. You will be notified where this is the case.

6.1 — As a player on razabazi, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat on the platform or email support@razabazi (plain text — not a clickable link).

• Right of Access: You may request a copy of the personal data razabazi holds about you. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. Account details such as your email address and contact number can also be updated directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligation to retain it (see Section 5 — Data Retention).
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you do not want the data deleted.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a structured, commonly used, machine-readable copy of the personal data you provided to razabazi.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interest where you believe your rights and freedoms override that interest.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6.2 — razabazi will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you promptly.

6.3 — We may need to verify your identity before processing a privacy rights request, to ensure that personal data is not disclosed to or amended by an unauthorised party.

7.1 — razabazi implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS (Transport Layer Security) encryption on all data transmitted between your device and the razabazi platform;
• Encryption of sensitive stored data, including passwords (stored as salted cryptographic hashes, never in plain text) and KYC documents;
• Strict role-based access controls, ensuring that only authorised personnel with a legitimate operational need can access player personal data;
• Regular security reviews and vulnerability assessments of platform infrastructure;
• Automated fraud detection systems that flag unusual login patterns, rapid successive deposits, or atypical withdrawal requests for manual review;
• OTP (one-time password) verification for sensitive account actions such as password changes and withdrawal requests.

7.2 — While razabazi takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security against all threats. You also have a role to play in keeping your account secure — particularly by using a strong, unique password and not sharing your login credentials with anyone else.

7.3 — In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, razabazi will notify affected players without undue delay once the breach has been identified and assessed. The notification will describe the nature of the breach, the likely consequences, and the steps razabazi has taken or proposes to take in response.

8.1 — razabazi reserves the right to update or revise this Privacy Policy at any time. Where a change materially affects your rights or how we use your data, we will notify registered players via their registered email address or via a prominent notice on the platform at least 14 days before the change takes effect.

8.2 — The effective date at the top of this page will be updated each time this Privacy Policy is revised. We encourage you to review this page periodically so that you remain informed about how razabazi protects your personal data.

8.3 — Continued use of razabazi following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should discontinue use of the platform and contact support to close your account.

8.4 — This Privacy Policy is to be read in conjunction with the razabazi Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your rights and obligations as a razabazi player.