rbazie Privacy Policy

This Privacy Policy ("Policy") describes how rbazie ("we", "us", "our") collects, processes, stores, and protects personal data submitted by or collected from users ("you", "your") of rbazie.net (the "Platform"). This Policy applies to all users of the Platform, including registered account holders, visitors browsing without an account, and individuals who contact rbazie support.

By using the rbazie Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together govern your use of rbazie.net.

1 Data We Collect

rbazie collects personal data from you through several channels: data you provide directly when registering for an account or contacting support, data generated automatically through your use of the Platform, and data received from third-party verification and payment processing services. The categories of personal data rbazie collects include the following:

rbazie does not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been submitted by a person under 18, we will delete that data promptly and close the associated account. If you believe a minor has submitted data to rbazie, please contact us immediately at [email protected].

2 How We Use Your Data

rbazie processes your personal data only where a lawful basis for doing so exists. The primary purposes for which your data is used, together with the applicable lawful basis in each case, are set out below:

• Account creation and management: To register your account, verify your identity, and maintain your account in good standing. Lawful basis: contractual necessity.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels; to detect and prevent payment fraud. Lawful basis: contractual necessity and legitimate interest.
• Identity and age verification: To confirm that you are at least 18 years old and that the details you have provided are accurate. Lawful basis: legal obligation and contractual necessity.
• Customer support: To respond to your queries, resolve disputes, and assist with account issues. Lawful basis: contractual necessity and legitimate interest.
• Responsible gaming compliance: To honour self-exclusion requests, apply deposit limits, and monitor for patterns of potentially problematic gambling behaviour in accordance with our Responsible Gaming Policy. Lawful basis: legal obligation and legitimate interest.
• Anti-fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, and other prohibited conduct. Lawful basis: legal obligation and legitimate interest.
• Platform improvement: To analyse usage patterns, optimise game performance, and improve the overall rbazie user experience for our Bangladesh player base. Lawful basis: legitimate interest.
• Marketing communications: To send you promotional offers, bonus notifications, and news about rbazie — but only where you have expressly opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time via your account notification settings.
• Legal compliance: To meet obligations imposed by applicable law, regulatory guidance, or lawful authority requests. Lawful basis: legal obligation.

3 Data Sharing & Disclosure

rbazie may share your personal data with carefully selected third parties only where necessary and under strict contractual conditions that require those parties to handle your data securely and in accordance with this Policy. The categories of recipients are:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposits and withdrawals.
• Identity verification services: Third-party Know Your Customer (KYC) and anti-money laundering (AML) providers who verify the authenticity of identity documents and cross-check against sanction lists.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data necessary (e.g., a player session token) to deliver game content. These providers do not receive your full identity or financial data.
• IT infrastructure and cloud service providers: Hosting, database, and content delivery network partners who process data on rbazie's behalf under data processing agreements.
• Analytics providers: Aggregate and anonymised usage analytics services used to understand platform performance. No personally identifiable data is shared with analytics providers beyond what is technically necessary for session tracking.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, and financial intelligence units where rbazie is required by law or valid legal process to disclose information.

rbazie does not transfer your personal data outside of the jurisdictions in which it operates except where required by the above-listed service providers and subject to equivalent data protection safeguards being in place. All third-party service providers are contractually bound to use your data solely for the purpose for which it was shared and to maintain appropriate security standards.

4 Cookies & Tracking

rbazie.net uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and gather aggregate analytics data. A cookie is a small text file placed on your device by the rbazie website. Cookies do not contain executable code and cannot access other data stored on your device.

The categories of cookies used on rbazie.net are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language selection, preferred game lobby view, and notification settings, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most frequently, where users exit, and how long sessions last. This data is used to improve rbazie.net. No personally identifiable information is sent to analytics services via these cookies.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts. These operate alongside rbazie's server-side security systems.

rbazie does not use fingerprinting techniques to identify or track you across websites you visit outside of rbazie.net. Any tracking on rbazie.net is limited to activity within the Platform itself, for the operational and security purposes described above.

5 Data Retention

rbazie retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law. The principal retention periods applied by rbazie are:

• Active account data: Retained for the full duration of your active account relationship with rbazie, plus a minimum period of five years following account closure to meet anti-money laundering and financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later, in accordance with applicable KYC/AML regulations.
• Transaction records: Deposits, withdrawals, wagers, and bonus redemptions are retained for a minimum of five years from the date of each transaction.
• Customer support communications: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, unless the content relates to an ongoing dispute or legal matter, in which case retention is extended until resolution.
• Marketing consent records: Retained for as long as you remain opted in, plus two years following withdrawal of consent, to evidence compliance with consent requirements.
• Self-exclusion records: Retained indefinitely, even following account closure, to prevent re-registration in violation of an active exclusion.
• Server log data: Technical and access log data is retained for a maximum of 12 months, after which it is aggregated or deleted.

When personal data is no longer required for any of the above purposes, rbazie will delete or anonymise it securely. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for aggregate analytics and platform improvement purposes.

6 Data Security

rbazie implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and rbazie.net is encrypted using 256-bit TLS encryption. The rbazie.net domain operates exclusively over HTTPS.
• Password hashing: Account passwords are never stored in plain text. rbazie applies bcrypt hashing with a per-account salt to all stored passwords, making brute-force recovery computationally infeasible.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. rbazie employees and contractors are granted access only to the data necessary for their specific role.
• Intrusion detection and monitoring: rbazie's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and distributed denial-of-service (DDoS) attacks.
• Payment data isolation: Full payment credentials (e.g., bKash wallet PINs, bank account passwords) are never stored by rbazie. Payment processing is handled by the respective payment service provider over their own secure infrastructure.
• Regular security audits: rbazie conducts periodic security reviews and vulnerability assessments of its platform infrastructure and third-party integrations.

While rbazie takes all reasonable and practicable measures to protect your data, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, rbazie will notify affected account holders promptly via their registered email address and take all necessary steps to contain and remediate the breach.

7 Your Privacy Rights

As a user of the rbazie Platform, you have the following rights with respect to your personal data. Requests to exercise any of these rights should be submitted to [email protected] or via the live chat support team. rbazie will respond to all privacy rights requests within 30 days of receipt.

• Right of access: You may request a copy of all personal data that rbazie holds about you, together with information about how that data is used and with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. For data that you can update directly in your account settings, we encourage you to do so without waiting for a formal request.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that rbazie may retain certain data beyond a deletion request where required by law (e.g., AML transaction records) or where the data is necessary to defend a legal claim.
• Right to restriction of processing: You may request that rbazie restricts processing of your data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to data portability: You may request that rbazie provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing of your personal data where rbazie relies on legitimate interest as its lawful basis. rbazie will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for legal claims.
• Right to withdraw consent: Where rbazie processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

rbazie will not charge a fee for handling privacy rights requests submitted in good faith. However, rbazie reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in volume.

8 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how rbazie handles your personal data, please contact the rbazie privacy team using any of the following channels:

• Privacy enquiries email: [email protected]
• General support email: [email protected]
• Live chat: Available 24/7 via the rbazie.net website, with a target response time of under 3 minutes
• WhatsApp: +880 1800 000 000 (Bangladesh Standard Time, UTC+6, 24/7)

When submitting a privacy rights request by email, please include your registered email address and, where applicable, the last four digits of the mobile number associated with your rbazie account so that we can verify your identity before processing the request. rbazie will not action privacy requests from unverified senders to protect against fraudulent access to account data.

rbazie may update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, or our data practices. Material updates will be communicated to registered account holders via the email address on file. The current version of this Policy is always available at rbazie.net/privacy-policy and supersedes all prior versions. If you continue to use the Platform after the effective date of any revision, you are deemed to have accepted the updated Policy.