oz365 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how oz365 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "member", "user") who access or use the oz365 platform at https://oz365.ws, including all associated services such as sports betting, live casino games, slot games, account management, customer support, and promotional communications (collectively, the "Platform").

By registering an account, depositing funds, or otherwise using the oz365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside the oz365 Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete legal framework governing your relationship with oz365. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to data processing, this Policy takes precedence.

2. Data Controller

oz365 is the data controller responsible for the personal data collected through the Platform. As data controller, oz365 determines the purposes and means by which your personal data is processed. All data-related enquiries, access requests, and complaints should be directed to oz365 through the contact details provided in Section 14 of this Policy.

The oz365 Platform is operated as an online entertainment service targeting adult users in Bangladesh. All member data is handled in accordance with applicable data protection principles including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

3. Data We Collect

oz365 collects personal data from you through several channels: information you provide directly, data generated automatically through your use of the Platform, and information received from trusted third-party partners such as payment providers. The categories of personal data we collect are detailed below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other), registered mobile number, and login credentials (username and password).
• Identity Verification (KYC) Documents: Government-issued national identity card (NID), passport, birth certificate, or utility bill/bank statement submitted to satisfy Know Your Customer requirements.
• Payment Data: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used for deposits and withdrawals. Note: full card numbers are not stored by oz365 — payment processing is handled by certified payment service providers.
• Support Communications: Messages, emails, and live chat transcripts you send to the oz365 support team, including any personal information contained within those communications.
• Responsible Gaming Requests: Self-exclusion requests, deposit limit preferences, cooling-off instructions, and related communications submitted through the Platform or support channel.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited on the Platform, game sessions initiated, bets placed, session duration, click paths, search queries within the Platform, and feature interactions.
• Transaction Data: Deposit and withdrawal history, bet history, bonus claim records, and account balance history, all denominated in BDT (৳).
• Cookie & Tracking Data: Session identifiers, preference cookies, and analytical data collected through cookies and similar tracking technologies. See Section 7 for full details.

3.3 Data Received from Third Parties

• Payment Verification Data: Transaction confirmation signals from bKash, Nagad, Rocket, Upay, and banking partners confirming successful deposit or withdrawal completion.
• Fraud Prevention Signals: Risk-scoring data from fraud detection service providers used to identify suspicious account activity or potentially fraudulent transactions.
• Game Provider Data: Game session results, round identifiers, and RTP data from certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used for account crediting, dispute resolution, and regulatory audit purposes.

4. How We Use Your Data

oz365 uses your personal data only for the specific purposes set out below. We do not process your data in a manner that is incompatible with the purposes for which it was collected.

• Account Creation and Management: To register your account, verify your identity, maintain your member profile, and manage your login credentials securely.
• Transaction Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and banking channels; to credit winnings and debit wagers from your account balance; and to maintain accurate financial records for audit purposes.
• Identity Verification (KYC): To verify your age (confirming you are 21 years or older), confirm your identity, and comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Service Delivery: To provide access to sports betting markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures), live casino games, slot titles, crash games, and all other Platform features.
• Customer Support: To respond to your enquiries, resolve disputes, process responsible gaming requests, and provide assistance via email and live chat.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and other prohibited conduct described in the oz365 Terms & Conditions.
• Responsible Gaming: To implement and monitor deposit limits, cooling-off periods, and self-exclusion requests; to identify patterns of play that may indicate problem gambling; and to intervene proactively where necessary.
• Platform Improvement: To analyse aggregated usage data, test new features, optimise game loading performance, and improve the overall member experience on the oz365 Platform.
• Promotional Communications: To send you relevant offers, seasonal promotions (Eid, Pohela Boishakh, BPL season), and bonus notifications, where you have not opted out of such communications.
• Legal and Regulatory Compliance: To maintain records required by applicable law, respond to lawful requests from authorities, and defend oz365's legal rights in the event of a dispute.

5. Legal Basis for Processing

oz365 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform the contract between you and oz365 — specifically, the delivery of betting, gaming, and account management services as described in the Terms & Conditions. This basis covers account creation, transaction processing, KYC verification, and service delivery.
• Legitimate Interests: Processing carried out to pursue the legitimate interests of oz365, provided these are not overridden by your privacy rights. This basis covers fraud detection, Platform security, analytical improvements, and responsible gaming monitoring.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering laws, financial record-keeping requirements, and responses to lawful authority requests.
• Consent: Processing for which you have provided explicit and freely given consent, such as receiving promotional emails and marketing notifications. You may withdraw consent at any time by contacting oz365 support, without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

oz365 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals. These providers receive only the minimum data necessary to complete the transaction and are contractually bound to confidentiality.
• Identity Verification Partners: Third-party KYC verification services that assist oz365 in verifying member identity and age, processing NID and document scans in a secure and compliant environment.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios — who may receive a session token and anonymised player identifier to deliver game content and record game results for settlement purposes.
• Fraud Prevention and Security Services: Specialist providers of fraud detection, device fingerprinting, and IP analysis tools used to protect the integrity of the oz365 Platform and all member accounts.
• IT Infrastructure and Hosting Providers: Cloud infrastructure and managed hosting partners responsible for storing Platform data securely. These providers operate under strict data processing agreements and may not use member data for any purpose beyond providing infrastructure services to oz365.
• Legal and Regulatory Authorities: Where oz365 is legally required to disclose member data to government bodies, regulatory authorities, law enforcement agencies, or courts — for example, in the context of an AML investigation or a court order — oz365 will comply with such lawful requests.
• Professional Advisers: Lawyers, accountants, and auditors acting as service providers to oz365, bound by confidentiality obligations, who may access member data as part of their professional advisory role.

7. Cookies & Tracking Technologies

oz365 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse how members use the site. The following categories of cookies are used:

7.1 Essential Cookies

These cookies are strictly necessary to deliver the core functionality of the Platform. Without them, features such as account login, session management, deposit/withdrawal flows, and game loading would not function. Essential cookies cannot be disabled while you are using the Platform.

7.2 Preference Cookies

These cookies remember your settings and personalisation choices — such as your preferred language, odds format, and notification preferences — so that these settings are retained across visits to the Platform.

7.3 Analytical Cookies

oz365 uses analytical cookies to collect aggregated, anonymised data about how members interact with the Platform. This data helps us identify which features are most used, where members experience difficulties, and how we can improve navigation, performance, and game selection.

7.4 Security Cookies

Security cookies help oz365 detect and prevent fraudulent activity, identify unusual login patterns, and protect member accounts from unauthorised access. These cookies may store session authentication tokens and device fingerprint identifiers.

7.5 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may impair certain Platform features. Refer to your browser's help documentation for instructions on adjusting cookie preferences. oz365 does not currently respond to "Do Not Track" browser signals, as no uniform industry standard for such signals has been established.

8. Data Retention

oz365 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active oz365 account is retained for the full duration of the account's existence and for a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML compliance requirements.
• KYC Documents: Identity verification documents (NID scans, passport copies, utility bills) are retained for a minimum of five (5) years following account closure or the completion of the business relationship, whichever is later.
• Transaction Records: Deposit, withdrawal, and betting transaction records in BDT are retained for a minimum of five (5) years from the date of each transaction for regulatory audit and dispute resolution purposes.
• Support Communications: Customer support transcripts and email records are retained for three (3) years from the date of the interaction, or longer if they relate to an ongoing dispute or regulatory matter.
• Marketing Data: Where you have consented to receive promotional communications, your contact preferences are retained until you withdraw consent or request data deletion, subject to the minimum retention periods above.
• Analytical Data: Aggregated and anonymised analytical data that cannot be linked to an individual member may be retained indefinitely for Platform improvement purposes.

When your personal data is no longer required for any active or legal purpose, oz365 will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

9. Data Security

oz365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security practices include:

• SSL/TLS Encryption: All data transmitted between your device and the oz365 Platform is encrypted using SSL/TLS protocols. The oz365 website operates exclusively over HTTPS.
• Encrypted Data Storage: Sensitive personal data, including identity documents and payment identifiers, is stored using AES-256 encryption at rest.
• Access Controls: Access to member personal data within oz365's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and periodically audited.
• Password Security: Member passwords are never stored in plain text. They are hashed using industry-standard one-way hashing algorithms with salting to prevent reverse-engineering.
• OTP Authentication: oz365 uses one-time password (OTP) verification via your registered Bangladeshi mobile number as an additional authentication layer for sensitive account actions including withdrawals and password changes.
• Fraud Monitoring: Automated systems continuously monitor account activity for anomalous patterns indicative of unauthorised access, credential stuffing, or fraudulent transactions.
• Third-Party Security Audits: oz365's platform infrastructure and data handling practices are periodically reviewed by independent security specialists to identify and remediate vulnerabilities.

10. Your Data Rights

As a member of the oz365 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact oz365 support at [email protected] with the subject line "Data Rights Request". oz365 will respond within thirty (30) calendar days of receiving your request.

• Right of Access: You may request a copy of all personal data that oz365 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data held by oz365 about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and oz365 has no overriding legitimate grounds. Note that erasure requests may be declined or partially fulfilled where retention is required by law (e.g., AML record-keeping obligations).
• Right to Restriction of Processing: You may request that oz365 restrict (but not delete) processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request that oz365 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where oz365 relies on legitimate interests as the legal basis. oz365 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where oz365 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Minors and Age Restriction

The oz365 Platform is strictly restricted to individuals who are 21 years of age or older. oz365 does not knowingly collect personal data from any individual under the age of 21. All registration flows require confirmation of age, and KYC verification is used to confirm that members meet the minimum age requirement.

If oz365 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all associated data will be scheduled for secure deletion (subject to any legally required minimum retention period), and any deposits received will be returned to the original payment source after appropriate review.

If you are a parent or guardian and believe that your child has created an oz365 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. Third-Party Links and Services

The oz365 Platform may contain references to or integrations with third-party services — such as payment providers (bKash, Nagad), game studios (Pragmatic Play, Evolution Gaming, Spribe), and infrastructure partners — whose own privacy practices are governed by their respective privacy policies. oz365 is not responsible for the privacy practices of third-party services and does not control how those services collect, use, or protect data.

When you interact directly with a third-party payment provider's interface (for example, completing a bKash payment flow), you are subject to that provider's terms and privacy policy in addition to oz365's. oz365 recommends reviewing the privacy policies of any third-party service you interact with in connection with your oz365 account.

The oz365 website does not contain links to external third-party websites for advertising or affiliate purposes. All links on the Platform lead to internal oz365 pages or to the interfaces of established payment and game providers that are integral to the Platform's operation.

13. Changes to This Privacy Policy

oz365 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, oz365 will notify active members by email to their registered address or via an in-platform notification, providing at least seven (7) days' notice before the updated Policy takes effect.

The "Last Reviewed" date displayed at the top of this page will be updated each time the Policy is revised. Your continued use of the oz365 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the Platform and may request account closure in accordance with the oz365 Terms & Conditions.

The most current version of this Privacy Policy is always available at https://oz365.ws/privacy-policy. oz365 recommends reviewing this page periodically to stay informed of how your data is being protected.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way oz365 handles your personal data, please contact our support team through the following channel:

For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or contact support directly. All responsible gaming communications are handled with strict confidentiality.

For general account assistance, betting queries, or payment support, our customer support team is available 24 hours a day, 7 days a week, including all Bangladesh public holidays.