rbazi Privacy Policy – How We Handle Your Personal Data

1. Who We Are

This Privacy Policy is issued by rbazi, the operator of the online betting and casino platform available at rbazi.cc ("Platform", "we", "us", "our"). rbazi is Bangladesh's most trusted English-language online betting platform, offering cricket betting, live casino games, slots, and related services to players aged 21 and above throughout Bangladesh.

For the purposes of this Privacy Policy, rbazi acts as the data controller in respect of the personal data of all registered players on the Platform. Questions regarding this Policy or the exercise of your data rights should be directed to our support team at the contact details set out in Section 13.

2. Data We Collect

2.1 Registration Data

When you create an rbazi Account, we collect the following information that you provide directly:

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (to verify you are 21 years of age or older)
• Mobile telephone number registered in Bangladesh
• Email address
• Preferred username and password (password is stored in hashed form only)
• Residential address in Bangladesh

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect players from identity fraud, rbazi may request copies of the following documents at any stage of your Account lifecycle:

• National Identity Card (NID), passport, or birth certificate
• Proof of address such as a utility bill or bank statement (issued within the last three months)
• Proof of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account registered in your name)

2.3 Transaction Data

We collect records of all financial transactions carried out through your rbazi Account, including deposit amounts and timestamps, withdrawal requests and processing outcomes, bonus credits and wagering activity, and the payment method identifiers (such as the last four digits of a mobile wallet number) associated with each transaction. All amounts are recorded in Bangladeshi Taka (৳).

2.4 Gameplay Data

We collect data about the games you play on the Platform, including game titles accessed, bet amounts, game outcomes, session durations, and any in-game actions relevant to responsible gaming monitoring. This data is used to operate the Platform correctly, resolve disputes, and identify potential problem gambling patterns as part of our commitment to player welfare.

2.5 Technical & Device Data

When you access rbazi.cc, we automatically collect certain technical data about your device and connection, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on pages, and click-path data
• Session start and end times
• Referral source (if you arrived at rbazi.cc via a link)

2.6 Communications Data

If you contact rbazi support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. These records are kept for quality assurance, staff training, and dispute resolution purposes.

3. How We Use Your Data

rbazi uses the personal data described in Section 2 for the following purposes:

rbazi does not use your personal data for any purpose not listed in this section without first obtaining your explicit consent or being required to do so by applicable law.

4. Legal Basis for Processing

rbazi processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, transaction data, and gameplay data is necessary to fulfil the contract between you and rbazi — that is, to operate your Account and deliver the Platform services you have subscribed to.
• Legal obligation: We are required to verify your identity, retain transaction records, and conduct anti-money-laundering checks as part of our compliance obligations. This processing is mandatory and cannot be opted out of while your Account remains active.
• Legitimate interests: We process technical data and communications data on the basis of our legitimate interest in maintaining the security of the Platform, preventing fraud, improving our services, and resolving player disputes. We have assessed that these interests do not override your privacy rights in the circumstances.
• Consent: Where we send you marketing communications or place non-essential cookies on your device, we do so only with your prior consent. You may withdraw consent at any time by contacting support or updating your Account preferences.

5. Data Sharing & Third Parties

5.1 Payment Service Providers

To process your deposits and withdrawals in Bangladeshi Taka, rbazi shares the minimum necessary personal data with payment service providers including bKash, Nagad, Rocket, and Upay, as well as partner banks such as BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, and Sonali Bank. These providers process your data solely for the purpose of completing your requested transaction and are bound by their own privacy and data protection obligations.

5.2 Identity Verification Providers

rbazi uses third-party KYC verification service providers to validate identity documents and conduct age verification checks. These providers receive only the data necessary to complete the verification and are contractually prohibited from using your data for any other purpose.

5.3 Game Studios

Games on the rbazi Platform are provided by licensed third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming, Play'n GO, and Red Tiger. These studios may receive anonymised session identifiers and game-round data for the purpose of operating the game and auditing outcomes. They do not receive your full name, NID, or payment details.

5.4 Legal & Regulatory Disclosure

rbazi may disclose your personal data to law enforcement authorities, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or to protect the rights and safety of rbazi, its players, or third parties. We will notify you of any such disclosure where permitted to do so by law.

5.5 No Sale of Data

rbazi does not sell, rent, or otherwise transfer your personal data to any third party for their own marketing, commercial profiling, or data brokerage purposes. This restriction applies unconditionally and is not subject to any opt-out or consent mechanism — it is a permanent commitment.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your browser when you visit rbazi.cc. They allow the Platform to recognise your device across sessions, remember your preferences, and collect aggregated usage statistics that help us improve the site.

6.2 Types of Cookies Used by rbazi

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options. Disabling these may affect your experience but will not prevent you from using core Platform features.
• Analytics cookies: Collect anonymised data about how players navigate rbazi.cc, which pages are most visited, and where technical errors occur. This data is used solely to improve the Platform and is never linked to your personal Account.
• Marketing cookies: Used only where you have explicitly consented to receive personalised promotions. These cookies help ensure that any bonus offers you see are relevant to your play history on the Platform. They are never shared with third-party advertisers.

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your rbazi Account. For all other cookie types, you may opt out without losing access to the Platform's core services. Detailed instructions for managing cookies in major browsers are available in your browser's help documentation.

7. Data Security

rbazi applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rbazi.cc
• Bcrypt password hashing — your password is never stored in recoverable plain text
• Tokenised payment processing — card and mobile wallet details are handled by the payment provider directly and are not stored on rbazi servers
• Role-based access controls ensuring that rbazi staff members can only access player data relevant to their specific job function
• Regular security audits and penetration testing by independent security professionals
• Automatic session expiry after a defined period of inactivity to prevent unauthorised access from unattended devices

While rbazi takes every reasonable precaution to protect your data, no online service can guarantee absolute security against all possible threats. You are also responsible for maintaining the confidentiality of your Account credentials. If you believe your Account has been compromised, contact rbazi support immediately.

8. Data Retention

rbazi retains your personal data for the following periods:

• Active Account data: Retained for the full duration of your Account and for a period of 5 years following permanent Account closure, to satisfy financial record-keeping and anti-money-laundering compliance requirements.
• KYC documents: Retained for 5 years from the date of submission or from the date of Account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of each transaction in accordance with financial compliance requirements applicable to Bangladesh.
• Communications records (live chat and email): Retained for 2 years from the date of the communication, then securely deleted.
• Technical and device data: Retained for 12 months from collection, then anonymised or deleted.
• Marketing consent records: Retained for the duration of your Account or until consent is withdrawn, whichever comes first.

Once a retention period expires, data is securely and permanently deleted from rbazi's systems, or anonymised so that it can no longer be associated with you as an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Your Rights

As a registered player on the rbazi Platform, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, contact rbazi support using the details in Section 13.

• Right of access: You may request a copy of the personal data rbazi holds about you. We will provide this within 30 calendar days of your request, at no charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Updates to core Account information (name, mobile number, email) may require re-verification of your identity.
• Right to erasure: You may request that rbazi delete your personal data. This right is subject to our legal obligation to retain certain data for the periods set out in Section 8. Where erasure is possible, we will action it within 30 calendar days.
• Right to restrict processing: In certain circumstances (for example, while a data accuracy dispute is being resolved), you may request that rbazi pause its processing of your data.
• Right to object: You may object to rbazi's processing of your data on the basis of legitimate interests, including profiling for responsible gaming monitoring. We will assess your objection and respond within 30 calendar days.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting support or updating your Account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

All data subject requests are acknowledged within 48 hours of receipt. We aim to resolve all requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

10. Children & Underage Players

The rbazi Platform is strictly for individuals aged 21 years and above. rbazi does not knowingly collect or process personal data belonging to individuals under the age of 21. If rbazi becomes aware that personal data has been collected from a person under 21, that data will be permanently deleted and the associated Account will be immediately closed.

If you are a parent or guardian and believe that a minor has registered an Account on rbazi.cc, please contact our support team immediately at the email address provided in Section 13. We will investigate and take appropriate action within 48 hours of receiving the report.

11. Marketing Communications

rbazi may send you promotional emails or in-platform notifications about bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh offers, or BPL cricket season specials), and other Platform updates. We will only send marketing communications where you have explicitly opted in to receive them at the time of registration or through your Account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from rbazi
• Updating your communication preferences in the Account settings section of the Platform
• Contacting rbazi support and requesting removal from the marketing list

Opting out of marketing communications does not affect the delivery of transactional notifications such as deposit confirmations, withdrawal updates, and security alerts — these are sent as part of the Account service and cannot be disabled while your Account remains active.

12. Changes to This Policy

rbazi reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify all registered players by email and via a prominent in-platform notice at least 7 calendar days before the updated policy takes effect.

The updated Privacy Policy will be published at rbazi.cc/privacy-policy with a revised Effective Date at the top of the document. If you continue to use the Platform after the updated policy takes effect, you will be deemed to have accepted the revised terms. If you do not agree with any change, you should stop using the Platform and contact support to arrange Account closure before the effective date of the amendment.

For changes that are minor in nature — such as typographical corrections or clarifications that do not affect the substance of our data processing practices — we may update the policy without individual player notification, though the Effective Date on the document will always be updated to reflect the revision.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 9, or wish to report a suspected privacy concern or data breach, please contact the rbazi data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the support widget on the Platform
• Response Time: All privacy-related enquiries are acknowledged within 48 hours and resolved within 30 calendar days
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data rights request, please provide your registered Account username and the email address associated with your Account so that we can verify your identity before actioning your request. rbazi will not action data rights requests from unverified individuals to prevent unauthorised access to player data.