darazpy Privacy Policy

1 Information We Collect

darazpy collects personal information in several ways: directly from you when you register an account or contact support, automatically when you use the platform, and occasionally from third-party verification services as part of our Know Your Customer (KYC) process. The categories of information we collect are described below.

Account Registration Data: When you create a darazpy account, we collect your full legal name, date of birth, mobile phone number, email address, and the password you set for your account. This information is required to establish your identity, create your account record, and communicate with you about your account activity.

Identity Verification (KYC) Data: To comply with financial regulations and to confirm that all players are aged 18 or above, darazpy requires identity verification documents. These may include:

• A copy of your Bangladesh National Identity Card (NID) or passport
• A proof of address document such as a utility bill or bank statement
• Confirmation that the bKash, Nagad, Rocket, or Upay account used for deposits is registered in your name
• A selfie or live photograph in some cases, used solely to match against your submitted identity document

Financial Transaction Data: We record details of all deposits and withdrawals made through your darazpy account, including transaction amounts in Bangladeshi Taka (BDT), timestamps, the payment method used (such as bKash or Nagad), and transaction reference numbers. We do not store full mobile banking PINs or full card numbers on our servers.

Gameplay and Betting Data: darazpy logs your in-platform activity, including the games you play, bets placed, wagering amounts, game outcomes, session durations, and bonus usage history. This data is used to manage your account, calculate winnings, detect problem gambling indicators, and improve our game offering.

Technical and Device Data: When you access darazpy via a web browser or mobile device, we automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

Communications Data: If you contact darazpy's support team by email or live chat, we retain a record of that correspondence, including the date, subject matter, and content of your message. This is used to handle your enquiry and to improve support quality.

2 How We Use Your Information

darazpy processes your personal data only for lawful purposes. The primary legal bases for our data processing activities are contractual necessity (we need your data to provide the gaming service you have requested), legal obligation (applicable financial regulations require us to verify identities and retain transaction records), and legitimate interest (we have a legitimate interest in keeping our platform secure and fraud-free).

Specifically, your personal data is used for the following purposes:

darazpy does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated systems flag an account for investigation (for example, a fraud alert), a member of the darazpy compliance team will review the flag before any consequential action is taken.

3 Sharing and Disclosure of Data

darazpy does not sell your personal data to any third party. We share personal information only in the following limited and specific circumstances:

• Payment Service Providers: To process deposits and withdrawals, we share necessary transaction data with the relevant payment providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Sonali Bank, Visa, and Mastercard. These providers are contractually bound to handle your data securely and to use it only for payment processing purposes.
• Identity Verification Partners: darazpy uses reputable third-party KYC and identity verification services to assist in confirming player identities and ages. These partners process identity documents and verification data on our behalf under strict data processing agreements.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary to deliver and log the games you play. These providers do not receive your full personal profile or financial data.
• Legal and Regulatory Authorities: darazpy may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in Bangladesh or relevant jurisdictions when required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Business Successors: In the event that darazpy or substantially all of its assets are acquired by or merged with another entity, your personal data may be transferred to that entity as part of the transaction. You will be notified of any such transfer in advance wherever practicable.

All third parties with whom darazpy shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose for which it was shared.

4 Cookies and Tracking Technologies

darazpy uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and analyse usage patterns. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device.

darazpy uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, and ensure that game sessions are correctly attributed to your account. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised information about how players navigate darazpy — for example, which pages are visited most often and whether error messages are encountered. This data is used solely to improve platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences, such as your preferred language setting or display preferences, so that you do not need to re-enter them each time you visit.
• Security Cookies: These cookies assist in detecting and preventing fraudulent login attempts, bot activity, and other security threats. They are an integral part of darazpy's platform security infrastructure.

You can manage or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect the functionality of some areas of the darazpy platform. darazpy does not use third-party advertising or behavioural tracking cookies.

5 Data Retention and Storage

darazpy retains your personal data for as long as your account is active and for a defined period thereafter, as required by applicable regulations. The specific retention periods we apply are as follows:

• Account and registration data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and session logs: Retained for a period of two (2) years from the date of each session, after which they are anonymised or deleted.
• Customer support communications: Retained for two (2) years from the date of each interaction.
• Technical and device data: Retained for ninety (90) days for security monitoring purposes, then deleted.

All personal data stored by darazpy is held on secured servers. Where data is processed by third-party service providers, those providers are contractually required to apply retention and deletion standards consistent with darazpy's own policies.

6 Your Privacy Rights

As a player registered with darazpy, you have specific rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please submit a written request to [email protected]. darazpy aims to respond to all privacy rights requests within ten (10) working days.

• Right of Access: You have the right to request a copy of the personal data that darazpy holds about you. We will provide this in a readable format within the statutory response period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly through your account settings; other corrections require a support request.
• Right to Erasure: In certain circumstances, you may request that darazpy delete your personal data. This right is subject to limitations where we are required by law to retain the data (for example, financial transaction records required for AML compliance).
• Right to Restriction of Processing: You may request that darazpy restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that darazpy provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where darazpy processes your data on the basis of your consent (for example, for receiving promotional emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to darazpy processing your personal data for direct marketing purposes. If you object, we will cease that processing immediately.

7 Data Security Measures

darazpy employs a layered security architecture to protect the personal data of all players. The key technical and organisational measures in place include the following:

• Transport Layer Security (TLS): All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. This protects your login credentials, financial data, and personal information from interception during transmission.
• Data Encryption at Rest: Sensitive personal and financial data stored in darazpy's databases is encrypted at rest using AES-256 encryption. This means that even in the event of unauthorised server access, stored data remains unreadable without the correct decryption keys.
• Access Controls: Access to personal player data within darazpy's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions. All data access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): darazpy strongly recommends that all players enable two-factor authentication on their accounts. 2FA adds a second layer of verification to prevent unauthorised account access even if login credentials are compromised.
• Penetration Testing and Vulnerability Management: darazpy conducts regular security assessments of its platform infrastructure, including penetration testing by independent security professionals. Identified vulnerabilities are remediated according to a prioritised schedule.
• Staff Training: All darazpy personnel who handle personal data receive regular training on data protection obligations, secure data handling practices, and how to recognise and respond to potential security threats.

Despite these measures, no internet-connected system can guarantee absolute security. darazpy encourages all players to use strong, unique passwords for their accounts, to enable 2FA where available, and to avoid accessing their accounts from unsecured public Wi-Fi networks. If you suspect that your account has been compromised, please contact [email protected] immediately.

8 Updates to This Policy

darazpy reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or the features and services we offer. When we make material changes to this Policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the darazpy platform for a period of at least 14 days prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page and in the document metadata reflects the date on which the most recent version of this Policy came into effect. We encourage you to review this page periodically to stay informed about how darazpy protects your personal information.

Your continued use of the darazpy platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using darazpy and may request closure of your account by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the darazpy Data Protection team at [email protected]. We are available seven days a week and will respond to all data-related enquiries within ten (10) working days of receipt.