Your Privacy Matters at hazi — Here Is How We Protect It

1. Introduction

This Privacy Policy ("Policy") describes the data protection practices of hazi (the "Platform", "we", "us", "our"), accessible at hazi.ws. It sets out in formal terms what categories of personal data hazi collects from individuals who register accounts, visit the website, or interact with the platform in any capacity ("Players", "Users", "you"), the purposes for which that data is processed, the legal basis upon which it is processed, and the rights that individuals hold with respect to their personal data.

hazi is committed to handling personal data in a manner that is transparent, lawful, fair, and secure. We recognise that players in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy applies to all data collected through the hazi website, mobile platform, customer support channels, and any other touchpoint through which a user interacts with hazi.

This Privacy Policy should be read in conjunction with hazi's Terms & Conditions, which are available at hazi.ws/terms-conditions, and the Responsible Gaming Policy available at hazi.ws/responsible-gaming. All three documents together form the complete agreement between you and hazi governing your use of the platform.

2. Who We Are

hazi is an online gaming and sports betting platform serving players primarily based in Bangladesh. The platform offers casino games, live dealer tables, crash games, card games, and sports betting markets, all denominated in Bangladeshi Taka (৳). hazi operates as the data controller in respect of all personal data collected through the platform — meaning that hazi determines the purposes and means by which personal data is processed.

For all privacy-related enquiries, data subject access requests, or complaints, players may contact hazi's designated data protection contact by emailing [email protected]. Please mark all data-related correspondence clearly with the subject line "Privacy / Data Request" to ensure it is directed to the correct team.

3. Categories of Personal Data We Collect

hazi collects personal data across several distinct categories depending on how a user interacts with the platform. The following table provides a structured overview of the categories of data collected and the context in which each category arises.

4. How We Collect Personal Data

hazi collects personal data through the following means:

4.1 Direct Collection

Data you provide directly to hazi when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or update your account settings. This is the primary source of identity, contact, financial, and responsible gaming data.

4.2 Automated Technical Collection

Data collected automatically as a result of your interaction with the hazi platform, including IP address, device identifiers, browser type, operating system version, session duration, page views, and in-game events. This data is collected through server logs, session tracking systems, and first-party cookies (see Section 8 for full cookie details).

4.3 Third-Party Sources

hazi may receive data about you from third-party identity verification providers (used to confirm your KYC documents), payment processors (used to confirm the status of deposit and withdrawal transactions), and fraud prevention services. Data received from these sources is used only for the specific purpose for which it was requested and is subject to the same security standards as directly collected data.

5. Legal Bases for Processing

hazi processes personal data only where a lawful basis exists for doing so. The following legal bases apply to the categories of processing carried out by hazi:

• Contractual Necessity: Processing required to perform the contract between hazi and the player — including account creation, payment processing, game operation, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC / anti-money laundering (AML) requirements, record-keeping obligations, and fraud reporting duties.
• Legitimate Interests: Processing carried out for hazi's legitimate business interests, including platform security monitoring, fraud prevention, abuse detection, and improving the platform's technical performance — provided such interests are not overridden by the player's fundamental rights.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of any prior processing.
• Vital Interests: In exceptional circumstances, hazi may process personal data where necessary to protect the vital interests of a player, such as in the context of a responsible gaming emergency or safeguarding concern.

6. How We Use Your Personal Data

hazi uses the personal data it collects for the following specific purposes:

• To create, manage, and maintain your player account, including verifying your identity and age at registration
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard
• To operate and deliver all casino games, live dealer tables, crash games, card games, and sports betting services on the platform
• To conduct KYC (Know Your Customer) verification as required by our compliance obligations
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, cheating, and other forms of prohibited activity
• To respond to customer support enquiries submitted via live chat or email
• To enforce the Terms & Conditions and other platform policies
• To operate responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion
• To send account-related transactional communications such as deposit confirmations, withdrawal notifications, and KYC request emails
• To send promotional communications and bonus offers where you have opted in to receive marketing from hazi
• To improve the performance, security, and user experience of the hazi platform through analysis of aggregated and anonymised usage data
• To comply with applicable legal obligations and respond to valid requests from law enforcement or regulatory authorities

7. Data Sharing & Disclosure

hazi does not sell, rent, or transfer your personal data to third parties for their independent marketing or commercial purposes. Personal data is shared only in the following strictly defined circumstances:

7.1 Payment Processors

To facilitate deposits and withdrawals, hazi shares the minimum necessary financial and identity data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors for Visa and Mastercard. All payment processors are bound by confidentiality obligations and applicable data protection requirements.

7.2 Identity Verification Providers

To fulfil KYC obligations, hazi may share the identity documents you submit with third-party identity verification service providers. These providers process your data solely to confirm the authenticity of your documents and return a verification result to hazi. They are prohibited from using your data for any other purpose.

7.3 Game Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as a pseudonymous player ID and session token) to operate the games you play. They do not receive your full name, contact details, or financial data. All game providers operate under data processing agreements with hazi.

7.4 Fraud Prevention and AML Services

hazi may share data with fraud detection and anti-money laundering (AML) screening services to protect the platform and its players from financial crime. Where suspicious activity is identified, hazi may be legally required to report relevant information to applicable authorities without notifying the affected player.

7.5 Legal and Regulatory Disclosure

hazi may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other governmental authorities where required to do so by a valid legal obligation, court order, or official request. hazi will disclose only the minimum data required to satisfy the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hazi's business, personal data held by hazi may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

8. Cookies & Tracking Technologies

hazi uses cookies and similar tracking technologies to operate the platform, maintain your session, and — where you have consented — to analyse usage patterns and deliver relevant promotional communications.

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, preserve your account preferences, and enable secure communication between your device and hazi's servers. Essential cookies cannot be disabled without impairing core platform functionality. No consent is required for essential cookies as they are necessary for the performance of the contract.

8.2 Analytics Cookies

With your consent, hazi uses analytics cookies to collect aggregated, pseudonymous data about how players navigate the platform — including pages visited, session duration, and device type. This data is used solely to improve the platform's usability and technical performance. Analytics cookies do not identify you personally.

8.3 Marketing and Preference Cookies

With your consent, hazi may use cookies to record your promotional preferences and ensure that you receive relevant bonus offers aligned with your gaming interests. You may withdraw consent for marketing cookies at any time through your account settings, which will also unsubscribe you from related promotional email communications.

8.4 Managing Cookies

You may manage your cookie preferences through your account settings on the hazi platform or through your browser's built-in cookie management tools. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Disabling analytics and marketing cookies will not affect your ability to play games or make transactions.

9. Data Retention

hazi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming and Betting Logs: Retained for a minimum of 2 years from the date of each session, for dispute resolution and regulatory compliance purposes.
• KYC Documents: Retained for the duration of the account plus 5 years following closure, or longer if required by a specific regulatory or legal obligation.
• Customer Support Communications: Retained for 2 years from the date of each interaction, or longer if the communication is relevant to an ongoing dispute or compliance matter.
• Marketing Preference Records: Retained for 3 years from the date of your last opt-in or until you withdraw consent, whichever is earlier.
• Technical Logs and IP Data: Retained for a maximum of 12 months unless specific fraud or security concerns require extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

10. Data Security

hazi implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hazi's servers
• One-way cryptographic hashing of all account passwords — hazi staff cannot view your password in plaintext
• Encrypted storage of sensitive financial data including payment method details
• Role-based access controls ensuring that hazi staff can only access personal data necessary for their specific job function
• Regular third-party security audits and penetration testing of the hazi platform infrastructure
• Automated fraud and anomaly detection systems monitoring account activity in real time
• Multi-factor authentication requirements for hazi staff accessing internal systems containing personal data
• Formal data breach response procedures, including player notification protocols where a breach is likely to result in a high risk to individual rights

11. International Data Transfers

hazi's primary player base is in Bangladesh, and the platform is designed to serve Bangladeshi players in Bangladeshi Taka (৳). Some of the third-party service providers used by hazi — including game studios, payment network processors, and fraud prevention services — may process data on servers located outside Bangladesh. Where personal data is transferred internationally, hazi takes appropriate steps to ensure that the transfer is subject to adequate safeguards, including:

• Data processing agreements with all third-party recipients that impose binding obligations consistent with the standards set out in this Privacy Policy
• Transfer to countries or processors that apply data protection standards equivalent to those applied by hazi
• Use of standard contractual clauses or equivalent mechanisms where required by applicable data protection frameworks

12. Your Data Rights

As a hazi player, you hold the following rights with respect to the personal data hazi processes about you. To exercise any of these rights, please contact hazi support at [email protected] with the subject line "Data Rights Request". hazi will respond to all valid requests within 30 days of receipt.

12.1 Right of Access

You have the right to request a copy of all personal data that hazi holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. This is commonly referred to as a Subject Access Request (SAR).

12.2 Right to Rectification

You have the right to request that hazi corrects any inaccurate personal data it holds about you, and to have incomplete personal data completed. You may update most account information directly through your hazi account settings. For changes to identity data (name, date of birth), please contact support with supporting documentation.

12.3 Right to Erasure

You have the right to request that hazi deletes your personal data where: it is no longer necessary for the purposes for which it was collected; you have withdrawn consent (where consent was the basis for processing); or the data has been unlawfully processed. This right is not absolute — hazi may retain data where required by legal obligation, including AML record-keeping requirements, in which case hazi will inform you of the specific legal basis for retention.

12.4 Right to Restriction of Processing

You have the right to request that hazi restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being assessed.

12.5 Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that hazi transmits that data directly to another data controller where technically feasible.

12.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of hazi's legitimate interests, on grounds relating to your particular situation, after which hazi will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

12.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any hazi promotional email or update your preferences in your account settings.

13. Children & Minors

hazi strictly prohibits the use of its platform by individuals under the age of 21. hazi does not knowingly collect personal data from minors. If hazi becomes aware that personal data has been collected from an individual under 21, that data will be deleted promptly and the associated account will be closed immediately.

14. Third-Party Services & Links

The hazi platform integrates with third-party game providers and payment services to deliver its full range of products. While hazi imposes data protection obligations on all third-party processors through binding contractual agreements, hazi is not responsible for the independent privacy practices of those third parties with respect to data they collect and process in their own right.

Game interfaces operated by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi are subject to those providers' own privacy policies in addition to any obligations imposed under their agreements with hazi. Players who interact with game provider interfaces are encouraged to review the relevant provider's privacy documentation.

15. Marketing Communications

hazi may send promotional emails, bonus notifications, and seasonal offer communications to players who have opted in to receive marketing. You may opt out of marketing communications at any time by: clicking the unsubscribe link in any hazi promotional email; updating your communication preferences in your hazi account settings; or contacting hazi support at [email protected].

Opting out of marketing communications will not affect the delivery of essential transactional emails such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These communications are necessary for the operation of your account and cannot be disabled independently.

hazi does not engage in unsolicited bulk email marketing (spam) and will never send marketing communications to individuals who have not explicitly opted in. hazi's marketing communications will always identify clearly that they originate from hazi and will always contain a working unsubscribe mechanism.

16. Responsible Gaming & Data

Personal data collected through hazi's responsible gaming tools — including deposit limits you have set, cooling-off periods you have activated, and self-exclusion requests you have submitted — is handled with a heightened level of care. This data is used solely to operate those tools effectively and to protect your wellbeing as a player.

Self-exclusion data is treated as sensitive and is subject to strict access controls. Where a player has requested self-exclusion, hazi takes technically reasonable steps to prevent that player from creating new accounts on the platform during the exclusion period. Self-exclusion records are retained for the full duration of the exclusion period plus a minimum of 5 years, to allow hazi to identify and reject any re-registration attempts.

Gaming session data including bet history, session duration, and loss records may be analysed on an aggregate basis to identify patterns of potentially harmful play. Where such patterns are identified, hazi may proactively contact the player via the registered email address to offer responsible gaming resources. This analysis is carried out in hazi's legitimate interests and for the vital interests of the affected player.

17. Amendments to This Privacy Policy

hazi reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform features, or business practices. When material changes are made to this Privacy Policy, hazi will notify registered players by email to the address associated with their account, and will update the "Last Updated" date at the top of this document.

Continued use of the hazi platform following notification of a material change to this Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any change to this Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

Minor changes that do not materially affect the rights of players — such as typographical corrections, clarifications of existing language, or updates to contact information — may be made without individual notification, though the "Last Updated" date will always be revised to reflect any amendment of any kind.

18. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which hazi processes your personal data, please contact the hazi data protection team using the details below. hazi treats all privacy-related correspondence seriously and commits to acknowledging all enquiries within 5 business days and providing a substantive response within 30 days.

If you are not satisfied with hazi's response to your privacy complaint, or if you believe that hazi is processing your personal data in a manner that is inconsistent with applicable data protection requirements, you have the right to escalate your complaint to the relevant data protection or consumer rights authority in your jurisdiction.

hazi is committed to resolving all privacy concerns fairly, promptly, and transparently. We view every privacy enquiry as an opportunity to improve our data handling practices and to reinforce the trust that our players in Bangladesh and beyond place in the hazi platform.