Privacy Policy — ozi365

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below. These definitions apply throughout this document and in all supplementary privacy notices published by ozi365:

• "ozi365", "the Platform", "we", "us", "our" — refers to the ozi365 online casino and sports betting platform accessible at ozi365.app and all associated sub-domains and digital services.
• "Player", "User", "you", "your" — refers to any individual who accesses, registers on, or interacts with the ozi365 platform in any capacity, whether as a registered account holder or as an anonymous visitor.
• "Personal Data" — refers to any information that relates to an identified or identifiable natural person. This includes information such as name, date of birth, email address, mobile number, physical address, financial details, and device identifiers.
• "Processing" — refers to any operation performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.
• "Data Controller" — refers to the entity that determines the purposes and means of processing personal data. For users of ozi365, the data controller is the ozi365 platform operator.
• "Data Processor" — refers to any third-party entity that processes personal data on behalf of ozi365 under a contractual data processing agreement, including payment processors, KYC providers, and cloud hosting partners.
• "KYC" — Know Your Customer. The identity and age verification procedures conducted by ozi365 to comply with anti-fraud and responsible gaming obligations.
• "Cookies" — small text files stored on your device by your web browser when you visit the ozi365 platform, used to maintain session state and collect usage analytics.

ozi365 collects personal data in several categories depending on your level of interaction with the platform. The table below provides a structured overview of the data categories, specific data points within each category, and the primary reason for collection.

ozi365 collects personal data through the following primary channels. Understanding these collection methods helps you make informed decisions about the information you provide and how you interact with the platform.

3.1 Direct Collection (Information You Provide)

The majority of personal data held by ozi365 is information that you provide to us directly when you create an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey or offer. This data is provided voluntarily and is necessary to use specific features of the platform.

3.2 Automated Collection (Platform Activity)

When you use the ozi365 platform, certain technical and behavioural data is collected automatically by our systems. This includes your IP address, device identifiers, session timestamps, pages accessed, game interactions, and betting activity. This data is collected without active input from you and is primarily used for security monitoring, fraud detection, and platform performance analysis.

3.3 Cookie-Based Collection

ozi365 uses browser cookies and similar tracking technologies to collect usage analytics and maintain session continuity. Cookies allow the platform to remember your preferences, keep you logged in across pages, and analyse aggregate traffic patterns. See Section 7 of this Policy for a full explanation of cookie types used by ozi365.

3.4 Third-Party Sources

In certain circumstances, ozi365 may receive personal data about you from third-party sources. These include KYC verification service providers who validate identity documents, payment processors who confirm transaction statuses, and fraud prevention databases that flag high-risk account patterns. Data received from third-party sources is treated with the same level of care as data collected directly from you.

ozi365 processes personal data for specific, explicit, and legitimate purposes. We do not process personal data in a manner that is incompatible with the purposes stated in this section. The primary purposes for which ozi365 processes your personal data are as follows:

• Account Management: Creating, maintaining, and administering your player account, including processing login authentication, account settings changes, and password resets.
• Identity Verification: Conducting KYC checks to confirm your identity, age, and payment method ownership in compliance with anti-fraud and responsible gaming requirements.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining transaction records for reconciliation and dispute resolution purposes.
• Platform Operation: Delivering game content, managing betting markets, calculating outcomes, and maintaining the technical infrastructure required for platform performance.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-account violations, and other prohibited activities as defined in the ozi365 Terms & Conditions.
• Responsible Gaming: Monitoring player activity to identify potential problem gambling behaviours and administering player-requested tools including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: Responding to player enquiries, resolving disputes, and maintaining communication records for quality assurance and training purposes.
• Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and reporting suspicious financial activity where legally obligated.
• Platform Improvement: Analysing aggregated usage data to improve the platform's features, interface design, game selection, and overall player experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may opt out at any time via their account settings or by contacting support.

ozi365 processes personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is required to perform the contract between you and ozi365 — specifically, to provide you with access to the platform, manage your account, and process your transactions. Without this processing, ozi365 cannot deliver its core services to you.
• Legitimate Interests: Processing carried out in pursuit of ozi365's legitimate business interests, provided that those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, platform analytics, and responsible gaming oversight.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, identity verification requirements, and responses to lawful requests from competent authorities.
• Consent: Where ozi365 relies on your consent as the legal basis for processing — for example, for the delivery of optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Consent withdrawal requests should be directed to [email protected].

Where the legal basis for a particular processing activity changes, ozi365 will update this Privacy Policy accordingly and, where required, seek fresh consent from affected players.

ozi365 does not sell your personal data to third parties. However, in order to operate the platform effectively and comply with applicable obligations, ozi365 may share personal data with the following categories of recipients under appropriate contractual safeguards:

6.1 Payment Processors

To facilitate deposits and withdrawals, ozi365 shares relevant financial and identity data with payment processing partners including mobile banking operators (bKash, Nagad, Rocket, Upay) and card network processors (Visa, Mastercard). This sharing is limited to the data strictly necessary to complete the transaction in question.

6.2 KYC and Identity Verification Partners

To fulfil identity and age verification requirements, ozi365 may share registration data and KYC documentation with specialist third-party verification service providers. These partners are contractually prohibited from using your data for any purpose other than verification on behalf of ozi365.

6.3 Game Content Suppliers

Third-party game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe — may receive limited technical session data (such as a session token and game round identifiers) to facilitate game delivery. These providers operate under their own privacy frameworks and do not receive personally identifiable information beyond what is operationally necessary.

6.4 Cloud Infrastructure and Hosting Partners

ozi365 uses third-party cloud hosting and infrastructure providers to store and process platform data. These providers operate as data processors under contractual agreements that impose strict obligations regarding data confidentiality, security, and access controls.

6.5 Legal and Regulatory Authorities

ozi365 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law or in response to a valid legal order. In such cases, ozi365 will disclose only the minimum data necessary to comply with the legal requirement.

ozi365 uses cookies and similar tracking technologies to maintain platform functionality and gather aggregated usage analytics. The following table describes the categories of cookies deployed on the ozi365 platform:

ozi365 does not use third-party advertising cookies or retargeting pixels that track your activity across unrelated websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the ozi365 platform.

ozi365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's active status and for a defined period following account closure.
• Financial Transaction Records: Records of all deposits and withdrawals are retained for a minimum of five (5) years following the date of the transaction to support anti-money laundering compliance, tax record obligations, and dispute resolution requirements.
• KYC Documentation: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure or the date of document submission, whichever is later.
• Gaming Activity Logs: Bet history, game session records, and win/loss data are retained for a minimum of three (3) years following account closure.
• Support Communications: Customer support correspondence is retained for a minimum of two (2) years following the date of the relevant interaction.
• Marketing Preferences: Records of consent for marketing communications are retained for the duration of the player relationship and for one (1) year following opt-out, to evidence consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with a specific individual. Where anonymisation is not technically feasible, data is securely destroyed in accordance with ozi365's data disposal procedures.

ozi365 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no system can guarantee absolute security, the following controls are maintained across the ozi365 platform and its supporting infrastructure:

• Transport Layer Security: All data transmitted between your device and the ozi365 platform is encrypted using TLS (Transport Layer Security) protocols. This protects your login credentials, personal information, and financial data from interception during transmission.
• Encryption at Rest: Sensitive data stored in ozi365's databases — including KYC documentation and payment identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the specific data categories required to perform their job functions, and all access is logged and auditable.
• Two-Factor Authentication: ozi365 offers two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised account access.
• Fraud Detection Systems: Automated fraud detection systems continuously monitor account activity for patterns indicative of unauthorised access, credential stuffing, and account takeover attempts. Suspicious activity triggers automatic security alerts and, where necessary, temporary account restrictions pending manual review.
• Third-Party Security Audits: ozi365's infrastructure and security controls are subject to periodic third-party review to identify and remediate potential vulnerabilities.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to player rights, ozi365 will notify affected players promptly and take all reasonable steps to contain and mitigate the impact of the breach.

As a player on the ozi365 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data that ozi365 holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data held by ozi365 is inaccurate or incomplete, you have the right to request that it be corrected or updated. Certain data corrections may require submission of supporting documentation.
• Right to Erasure: You may request that ozi365 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to legal retention obligations — ozi365 may be required to retain certain data categories for defined minimum periods regardless of an erasure request.
• Right to Restriction: In certain circumstances, you may request that ozi365 restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that ozi365 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where ozi365 relies on your consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing undertaken prior to withdrawal.

ozi365 will respond to all valid privacy rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

The ozi365 platform is strictly intended for adults aged 18 years and above. ozi365 does not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not use the ozi365 platform or submit any personal data to us.

If ozi365 becomes aware that personal data has been collected from an individual under the age of 18, we will take immediate steps to delete that data, close the associated account, and — where funds have been deposited — return those funds via the original payment method to the extent technically feasible.

The ozi365 platform may contain references to, or integrations with, third-party services such as payment gateways and game delivery platforms. While ozi365 selects its third-party partners carefully and requires them to maintain appropriate data protection standards, ozi365 is not responsible for the privacy practices of third-party services or their independent data processing activities.

Each third-party service provider operates under its own privacy policy. ozi365 encourages players to review the privacy policies of any third-party services they interact with through or alongside the ozi365 platform, including mobile banking services such as bKash, Nagad, Rocket, and Upay, which are independently operated platforms subject to their own terms and privacy frameworks.

ozi365 does not control, endorse, or assume responsibility for the content, privacy practices, or data handling of any third-party service. Any concerns regarding third-party privacy practices should be directed to the relevant service provider directly.

ozi365 reserves the right to update or amend this Privacy Policy at any time. Amendments may be made in response to changes in applicable law, updates to platform features or data processing activities, changes in third-party service arrangements, or improvements to our internal privacy governance framework.

When material changes are made to this Privacy Policy, ozi365 will notify registered players via email or through a prominent notice displayed on the platform prior to the changes taking effect. The updated Privacy Policy will always be accessible at ozi365.app/privacy-policy, and the effective date at the top of this document will reflect the date of the most recent revision.

Your continued use of the ozi365 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the terms of an updated Privacy Policy, you should cease using the platform and may close your account in accordance with the procedures described in the ozi365 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ozi365 handles your personal data, please contact the ozi365 privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Privacy and Data Protection Contact:
Email: [email protected]
Platform: ozi365.app
Response Time: Within 30 calendar days of receipt of a valid request

When contacting us regarding a privacy matter, please include your registered account username, a clear description of your request or concern, and any supporting information that may assist us in processing your request efficiently. Where identity verification is required before actioning a request, our team will advise you of the specific documents needed.

ozi365 takes all privacy enquiries seriously. We will acknowledge receipt of your message and provide a substantive response within the timeframes specified in Section 10 of this Policy. Where a request falls outside the scope of privacy rights — for example, a general account or payment query — our support team will redirect your enquiry to the appropriate department.