Privacy Policy — How gbazi Handles Your Data

gbazi operates as an online gaming and sports betting platform serving users in Bangladesh. When you create an account, make deposits or withdrawals, place bets, or interact with the gbazi platform in any way, certain personal and technical information is generated and processed. This Privacy Policy sets out exactly what information is collected, the lawful basis on which it is processed, how long it is retained, who it may be shared with, and the rights you hold over your own data. By using the gbazi platform, you acknowledge that you have read and understood this Privacy Policy.

This policy applies to all visitors, registered users, and former users of the gbazi platform. It covers all data collected via the gbazi website at gbazi.vip and any associated subdomains. gbazi does not direct its services to individuals under the age of 21, and does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed.

The specific purposes for which gbazi processes personal data are as follows. Each purpose has a corresponding lawful basis described in the Legal Basis section below.

gbazi does not store full bKash account numbers, Nagad numbers, Rocket numbers, or Upay numbers in plain text on its servers. Stored payment references are tokenised — only a partial reference sufficient for account reconciliation and fraud detection is retained. Full mobile wallet PINs are never transmitted to or stored by gbazi under any circumstances; PIN entry always takes place directly within the mobile wallet operator's own secure interface.

Where card payments are processed via Visa or Mastercard, payment card data is handled entirely by certified payment intermediaries operating under PCI-DSS compliance standards. gbazi receives only a tokenised reference and the last four digits of the card for display purposes in your transaction history. No full card numbers are ever visible to or stored by the gbazi platform.

To exercise any of the above rights, please contact gbazi at [email protected]. Please include your registered account details (name and registered phone number) so that your request can be verified and processed without unnecessary delay. gbazi will not charge a fee for exercising any of the above rights except where a request is manifestly unfounded or excessive, in which case a reasonable fee or a refusal to act may apply.

Cookies are small text files stored on your device when you visit the gbazi platform. gbazi uses strictly necessary cookies (required for the platform to function — for example, to keep you logged in during a session and to maintain your wallet balance display), functional cookies (which remember your preferences such as language settings), and analytical cookies (which help gbazi understand how the platform is used so that performance and user experience can be improved). gbazi does not use advertising or targeting cookies and does not share cookie data with advertising networks.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functioning of the gbazi platform and may prevent you from logging in or accessing your wallet. Disabling analytical cookies will not affect your ability to use the platform but will reduce gbazi's ability to diagnose performance issues and improve the user experience.

Despite these measures, no online platform can guarantee absolute security. If gbazi becomes aware of a data breach that is likely to result in a risk to the rights and freedoms of affected users, gbazi will take steps to contain the breach, assess its scope and impact, notify affected users without undue delay, and take corrective action to prevent recurrence. Users who suspect their account has been compromised should contact [email protected] immediately.

gbazi retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations — whichever is longer. The following general retention periods apply: account registration data and KYC documents are retained for a minimum of 5 years from the date of account closure, in accordance with anti-money-laundering record-keeping requirements; financial transaction records (deposit and withdrawal history) are retained for a minimum of 5 years from the date of each transaction; gaming and betting activity records are retained for 3 years from the date of the activity; technical and device data (server logs, IP records) is retained for up to 12 months unless required for an ongoing security investigation.

Where you request deletion of your personal data under your right to erasure, gbazi will delete or anonymise data that is not subject to a mandatory legal retention period. Data that must be retained to comply with anti-money-laundering obligations cannot be deleted early, even on request. In such cases, gbazi will restrict the processing of that data to the minimum necessary to satisfy the legal requirement — it will not be used for any other purpose during the retention period.

gbazi reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — gbazi will notify registered users via the email address associated with their account, or via a prominent notice on the gbazi platform, at least 7 days before the changes take effect. For minor clarifying amendments that do not alter the substance of how your data is handled, gbazi may publish the updated policy without individual notice. The current version of this Privacy Policy is always available at gbazi.vip/privacy-policy. The "last updated" date at the top of this page reflects the date of the most recent revision.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled by gbazi, please contact the gbazi support team. Email: [email protected] — available 24/7 in English. Please include your registered name and phone number in any data rights request so that your identity can be verified before any data is accessed or altered. gbazi aims to respond to all privacy-related enquiries within 14 days of receipt.