PRIVACY

Last Updated: 1 January 2026

bazus Privacy
Policy

Your privacy is a priority at bazus. This Privacy Policy explains what personal data we collect when you use our platform, how we use and protect that data, and what rights you hold as a bazus player in Bangladesh. We are committed to handling your information with transparency, integrity, and care.

Data Protection SSL Encrypted No Data Selling 18+ Platform Bangladesh Players

Your Data, Our Responsibility

The sections below contain the full Privacy Policy text. These cards highlight the most important privacy commitments bazus makes to every player on our platform.

We Never Sell Your Data

bazus does not sell, rent, or trade your personal information to third-party marketing companies or data brokers. Your data is used solely to operate and improve your bazus experience and to comply with legal obligations applicable in Bangladesh.

End-to-End Encryption

All data transmitted between your device and bazus servers is protected by industry-standard SSL/TLS encryption. Sensitive fields such as passwords and payment credentials are additionally hashed and encrypted at rest using current best-practice cryptographic standards.

You Control Your Data

You have the right to access, correct, or request deletion of your personal data at any time. bazus provides a clear process for exercising these rights through our privacy team. Requests submitted to [email protected] are processed within 30 days.

Secure Payment Data

bazus does not store full payment card numbers or mobile banking PINs on its servers. Payment transactions via bKash, Nagad, Rocket, and Upay are processed through encrypted payment gateways. bazus retains only the minimum transaction metadata required for accounting, dispute resolution, and anti-money laundering compliance.

Minimal Data Collection

bazus applies the principle of data minimisation — we collect only the personal information that is strictly necessary to provide our services, verify your identity, process your transactions, and meet our legal obligations. We do not collect data speculatively or for purposes unrelated to your bazus account.

Marketing Opt-Out

Promotional communications from bazus are entirely opt-in. You may unsubscribe from email or SMS marketing at any time by updating your account preferences or by emailing [email protected]. Opting out of marketing will not affect your ability to use any core bazus service.

1Information We Collect

When you register for a bazus account, use our platform, or contact our support team, we collect certain categories of personal information. This section describes what we collect, the source of that information, and why it is gathered.

Information You Provide Directly

The following information is collected directly from you during registration, account verification, or in the course of using bazus services:

Identity Data: Your full legal name as it appears on your government-issued identification document, date of birth, gender (where provided), and National Identity Card (NID) number or passport number where submitted for KYC verification purposes.
Contact Data: Your email address, Bangladesh mobile phone number, and residential address (where provided for verification or correspondence purposes).
Account Credentials: Your chosen username and a hashed (non-reversible) representation of your password. bazus never stores your password in plain text.
KYC Documentation: Where required by our compliance procedures, copies of identity documents (NID, passport, driving licence), proof of address documents (utility bill, bank statement), and selfie images submitted for facial verification.
Financial Data: Payment method details including your bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details where bank transfer is used; and Visa/Mastercard details processed through our payment gateway (full card numbers are not stored by bazus — see the Secure Payment Data card above).
Communications Data: The content of any messages, emails, live chat conversations, or support tickets you submit to the bazus team.
Responsible Gaming Data: Where you voluntarily set deposit limits, session limits, or request self-exclusion, we record these preferences and apply them to your account.

Information Collected Automatically

When you access bazus through a web browser or mobile device, we automatically collect certain technical and behavioural data:

Device & Technical Data: IP address, device type, operating system and version, browser type and version, screen resolution, and device language settings.
Usage & Behavioural Data: Pages visited, time spent on each page, game sessions initiated and completed, bet amounts placed, win/loss records, login timestamps, and navigation paths through the bazus platform.
Location Data: Approximate geographic location derived from your IP address. bazus does not collect precise GPS-level location data unless explicitly enabled by the player on a mobile device.
Cookie & Tracker Data: Information collected via cookies, session tokens, and similar technologies as described in the Cookies & Tracking Technologies section of this Policy.

          Sensitive Categories: bazus does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, except where facial verification images are submitted as part of mandatory KYC compliance procedures — in which case such data is handled with additional security controls and retained only for as long as required for compliance purposes.
        

Data Collected From Third Parties

bazus may receive personal data about you from the following third-party sources:

Payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard gateway providers) who confirm the status and result of financial transactions.
Identity verification service providers used to validate KYC documentation submitted by players during account verification.
Fraud detection and anti-money laundering screening services that may flag accounts associated with known fraudulent activity.
Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) who provide session and game outcome data associated with your bazus account.

2How We Use Your Data

bazus uses the personal data it collects only for the specific, legitimate purposes described below. We do not use your data for any purpose incompatible with the purposes for which it was originally collected.

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, Contact, Credentials	Contract performance
Age verification and KYC compliance	Identity, KYC Documentation	Legal obligation
Processing deposits and withdrawals	Financial, Identity	Contract performance
Fraud detection and prevention	Device, Usage, Financial	Legitimate interest
Anti-money laundering (AML) screening	Identity, Financial, Transaction records	Legal obligation
Customer support and dispute resolution	Identity, Communications, Account history	Contract performance
Responsible gaming tools and monitoring	Usage, Behavioural, Responsible Gaming	Legal obligation / Legitimate interest
Platform analytics and improvement	Usage, Device, Cookie data	Legitimate interest
Marketing communications (opt-in only)	Contact, Preferences	Consent
Legal compliance and regulatory reporting	Identity, Financial, Transaction records	Legal obligation

Marketing and Promotional Communications

With your explicit consent at the point of registration or through your account settings, bazus may send you promotional emails or SMS messages about bonuses, new games, seasonal promotions (such as BPL cricket offers, Eid specials, and Pohela Boishakh promotions), and other bazus offers relevant to Bangladesh players. You may withdraw this consent at any time by updating your notification preferences in the account settings panel or by emailing [email protected] with the subject line "Unsubscribe — Marketing".

          No Automated Decision-Making With Legal Effect: bazus does not make any automated decisions about your account that have a legal or similarly significant effect — such as permanent account closure or withdrawal refusals — solely on the basis of automated processing without human review. Where automated systems flag an account for review, a qualified member of the bazus compliance team will assess the case before any material decision is taken.
        

3Legal Basis for Processing

bazus processes personal data only where a valid legal basis exists. The primary legal bases on which bazus relies are as follows:

Contract Performance: Processing is necessary to perform the contract between bazus and you — specifically, to register your account, accept deposits, process withdrawals, and deliver the games and betting services you have signed up to use.
Legal Obligation: Processing is required for bazus to comply with applicable legal and regulatory obligations, including age verification, anti-money laundering (AML) procedures, Know Your Customer (KYC) requirements, and financial record-keeping obligations.
Legitimate Interests: Processing is necessary for the legitimate interests of bazus — including fraud prevention, platform security, network monitoring, and improving our services — provided those interests do not override your fundamental rights and freedoms.
Consent: Where bazus relies on your consent (for example, for marketing communications or for optional analytics cookies), that consent is freely given, specific, informed, and unambiguous. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where bazus relies on legitimate interests as a legal basis, a legitimate interests assessment has been conducted to confirm that such interests are not overridden by your privacy rights. You may request details of any such assessment by contacting [email protected].

4Data Sharing & Disclosure

bazus does not sell your personal data. We share personal information with third parties only in the limited circumstances described in this section, and only to the minimum extent required for the stated purpose.

Categories of Recipients

Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card payment gateway providers receive the financial data necessary to process your deposit or withdrawal transactions. These processors operate under their own privacy policies and are contractually bound to process your data only for the purpose of completing your transaction.
Identity Verification Partners: Third-party KYC and identity verification service providers may receive copies of your identity documents and selfie images solely for the purpose of verifying your identity in compliance with bazus's age verification and AML obligations.
Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other content providers receive session identifiers and game-level data necessary to deliver their games to your account. These studios do not receive your payment data or full identity documents.
Fraud & Security Providers: Anti-fraud and cybersecurity service providers may receive device fingerprint data, IP addresses, and anonymised behavioural data to help detect and prevent fraudulent account activity on the bazus platform.
Legal and Regulatory Authorities: bazus may be required to disclose personal data to law enforcement agencies, courts, regulators, or other public authorities in Bangladesh or in other jurisdictions where legally compelled to do so. bazus will make reasonable efforts to notify you of such disclosure where permitted by law.
Professional Advisers: Lawyers, accountants, auditors, and insurers who provide professional services to bazus may receive limited personal data on a confidential basis where required for the provision of those services.

International Data Transfers

bazus's primary server infrastructure is located to serve the Bangladesh market. Where personal data is transferred to third-party service providers whose systems are located outside Bangladesh, bazus ensures that appropriate contractual safeguards are in place — such as data processing agreements with standard contractual clauses — to protect your personal data to a standard equivalent to that described in this Privacy Policy.

          No Data Selling: bazus does not sell, rent, lease, or otherwise make available your personal data to third-party advertisers, data brokers, or marketing companies for their independent commercial use. Any third party that receives your data from bazus receives it solely as a data processor acting on bazus's instructions, not as an independent data controller.
        

5Cookies & Tracking Technologies

bazus uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. This section explains what cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember information such as your login session, language preference, and display settings. Cookies may be session-based (deleted when you close your browser) or persistent (remaining on your device for a specified period).

Types of Cookies Used by bazus

Cookie Type	Purpose	Duration	Consent Required
Strictly Necessary	Maintain your login session, enable core platform functions, prevent CSRF attacks	Session	No — essential to service
Functional	Remember display preferences, language settings, and responsible gaming notification acknowledgements	Up to 12 months	No — functional necessity
Analytics	Measure page performance, track user journeys, identify technical errors, improve UX	Up to 24 months	Yes — opt-in
Marketing / Retargeting	Deliver relevant promotional content to opted-in players based on their gaming preferences	Up to 90 days	Yes — opt-in

Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies for individual websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your bazus account and using core platform features. Disabling functional cookies may affect your experience by resetting preferences each session. You can also opt out of analytics and marketing cookies at any time by emailing [email protected].

          Session Security Cookies: The session authentication cookie used to keep you logged in to bazus is a strictly necessary, HttpOnly, Secure-flagged cookie that cannot be accessed by JavaScript. This protects your active session from cross-site scripting (XSS) attacks. bazus session cookies expire automatically after a period of inactivity as part of our platform security controls.
        

6Data Retention

bazus retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account and identity data (active accounts)	Duration of account plus 5 years post-closure	Legal obligation, dispute resolution
KYC documentation	5 years post account closure	AML regulatory obligation
Financial transaction records	7 years from transaction date	Accounting and tax compliance
Customer support communications	3 years from last interaction	Dispute resolution, service improvement
Analytics and usage data	24 months on a rolling basis	Platform improvement (anonymised)
Marketing consent records	Until consent withdrawn, plus 2 years	Evidence of consent
Self-exclusion records	Lifetime of exclusion period plus 5 years	Responsible gaming compliance

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

7Data Security

bazus takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

Technical Security Measures

TLS/SSL Encryption: All data in transit between your device and bazus servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across all pages without exception.
Password Hashing: Account passwords are stored using strong, salted one-way cryptographic hash functions. Even bazus technical staff cannot view your password in plain text.
Firewall and Intrusion Detection: bazus server infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous traffic patterns.
Access Controls: Access to player personal data is restricted on a strict need-to-know basis. bazus staff members are granted only the minimum level of access required to perform their specific job function. All access to production data is logged and audited.
Two-Factor Authentication: bazus offers two-factor authentication (2FA) on player accounts. We strongly recommend that all players enable 2FA through their account security settings to add an additional layer of protection against unauthorised access.
Penetration Testing: bazus conducts periodic security assessments and penetration testing of its platform to identify and remediate vulnerabilities before they can be exploited.

Organisational Security Measures

All bazus staff who handle personal data are subject to strict confidentiality obligations and receive regular data protection and security awareness training.
Third-party vendors who process personal data on behalf of bazus are subject to written data processing agreements that require them to implement security measures equivalent to those applied by bazus.
bazus maintains an incident response plan for data security breaches. In the event of a breach that poses a risk to your rights and freedoms, bazus will notify affected players as promptly as reasonably practicable.

Your Role in Security: While bazus takes extensive measures to protect your data, the security of your account also depends on the strength and confidentiality of your login credentials. Please use a strong, unique password for your bazus account and enable two-factor authentication. Never share your login details with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

8Your Privacy Rights

As a bazus player, you have the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting our privacy team at [email protected]. bazus will respond to all valid privacy rights requests within 30 calendar days.

Right of Access: You have the right to request a copy of the personal data bazus holds about you, together with information about how it is used and who it has been shared with. This is commonly referred to as a Subject Access Request (SAR).
Right to Rectification: If the personal data bazus holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly through your bazus account settings panel.
Right to Erasure: In certain circumstances, you have the right to request that bazus delete the personal data it holds about you. This right is not absolute — bazus may be required to retain certain data to comply with legal obligations (such as AML record-keeping) even after your account has been closed. Where erasure is not possible in full, bazus will explain which data must be retained and why.
Right to Restriction: You have the right to request that bazus restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing on the basis of legitimate interests, pending verification of those interests.
Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object at any time to processing of your personal data based on bazus's legitimate interests, including profiling for fraud prevention purposes. You also have an unconditional right to object to processing for direct marketing purposes.
Right to Withdraw Consent: Where bazus processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights: To submit a privacy rights request, email [email protected] with the subject line "Privacy Rights Request" and include your full name, the email address registered to your bazus account, and a clear description of the right you wish to exercise. bazus may request additional identity verification before processing your request to ensure we are responding to the correct account holder. There is no fee for submitting a privacy rights request.

9Third-Party Services

The bazus platform integrates third-party services to deliver its full range of features, including casino games, payment processing, security monitoring, and analytics. When you interact with these services through the bazus platform, your data may be processed by the relevant third party in accordance with their own privacy policies.

Game Studios

Casino games delivered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other content providers are served via embedded game clients. These studios may set their own session cookies and may collect game session data (such as bet history and game outcomes) to operate their games and comply with their own licensing obligations. bazus recommends reviewing the privacy notices of individual game studios where their games are played.

Payment Service Providers

Transactions made via bKash, Nagad, Rocket, Upay, or card payment gateways are processed by those service providers' own systems. bazus has no control over the data practices of your chosen payment provider once a transaction is initiated on their platform. Please refer to the privacy policy of your payment provider for details of how they handle your financial data.

Analytics and Security Tools

bazus uses analytics and security tools to monitor platform performance and detect fraudulent or abusive activity. These tools process anonymised or pseudonymised data about platform usage. bazus does not permit analytics or security providers to use data collected on the bazus platform for their own independent commercial purposes.

          No Third-Party Advertising Networks: bazus does not embed third-party advertising networks or allow external advertisers to place tracking cookies or pixels on the bazus platform. The only third-party cookies present on bazus are those strictly necessary for delivering integrated services (games, payments, security) as described above.
        

10Changes to This Privacy Policy

bazus reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the introduction of new platform features, legal and regulatory developments, and feedback from our player community in Bangladesh. The date of the most recent revision is always displayed at the top of this page.

Where changes to this Privacy Policy are material — for example, where we introduce a new category of data collection, a new category of third-party recipients, or a significant change to your privacy rights — bazus will make reasonable efforts to notify registered players by email to the address registered on their account at least 14 days before the changes take effect.

For non-material changes (such as clarifications of existing language, corrections of typographical errors, or restructuring of the document for readability), bazus may update this Policy without prior individual notification, though the revised date will be updated accordingly. Continued use of the bazus platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.

Archived versions of previous Privacy Policies are available on request by emailing [email protected] with the subject line "Privacy Policy Archive Request".

11Contact for Privacy Queries

If you have any questions, concerns, or complaints about this Privacy Policy or about the way baz us handles your personal data, please contact our privacy team using the details below. We take all privacy concerns seriously and will respond promptly and transparently.

Privacy Team

For all data protection queries, Subject Access Requests, right to erasure requests, and general privacy concerns, contact our dedicated privacy team:

Email
[email protected]

Response Time
Within 30 calendar days of receipt

General Support

For account-related questions, deposit and withdrawal assistance, game issues, or any other support matter not related to a formal privacy rights request, please contact our general support team: