Privacy Policy — sporzy Gaming Platform

1 Introduction

sporzy ("we", "us", "our") is committed to protecting the privacy and security of all personal data collected from users of the sporzy platform, accessible at sporzy.vip. This Privacy Policy ("Policy") describes in detail what personal information sporzy collects, why we collect it, how it is stored and protected, with whom it may be shared, and what rights you hold with respect to your data.

This Policy applies to all interactions with the sporzy platform, including account registration, login, deposits and withdrawals, gameplay, customer support communications, and any use of the sporzy website and mobile-optimised interface.

By registering a sporzy account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the sporzy platform.

2 Information We Collect

sporzy collects personal information through several channels. The categories of information we collect are described below.

2.1 Registration Information

When you create a sporzy account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Residential address in Bangladesh
• Mobile phone number (linked to your bKash, Nagad, Rocket, or Upay account)
• Email address
• Username and password (password is stored in hashed form and is never visible to sporzy staff)

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may collect copies of:

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official government correspondence dated within 90 days)
• Proof of payment method ownership (a screenshot of your mobile financial service account showing your registered name and number)
• A selfie photograph holding your photo ID, if requested during enhanced verification

2.3 Transaction Data

sporzy records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and account balance history. Transaction records are retained for a minimum of five years in accordance with standard financial record-keeping obligations.

2.4 Usage and Device Data

When you use the sporzy platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Referring URL (the page or search query that directed you to sporzy.vip)

This data is used for fraud detection, platform optimisation, and responsible gaming monitoring. It is not used to build individual advertising profiles.

2.5 Customer Support Communications

If you contact sporzy via email or live chat, we retain records of those communications — including any attachments you send — for quality assurance purposes and to maintain an accurate history of your account interactions.

3 How We Use Your Information

sporzy uses the personal data we collect for the following purposes:

• Account management: To register, verify, maintain, and close your sporzy account.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods.
• Identity verification: To confirm your identity and age as part of our KYC obligations and responsible gaming commitments.
• Fraud prevention and security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Platform improvement: To analyse aggregated usage patterns and improve the functionality, performance, and design of the sporzy platform.
• Customer support: To respond to enquiries, resolve disputes, and assist with account-related requests.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling and to apply responsible gaming tools such as deposit limits or self-exclusion at your request.
• Communications: To send you transactional messages related to your account (e.g., deposit confirmations, withdrawal approvals, identity verification status updates). Marketing communications are only sent with your explicit opt-in consent.
• Legal compliance: To comply with applicable legal and regulatory obligations and to respond to lawful requests from competent authorities.

4 Legal Basis for Processing

sporzy processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration information and transaction data is necessary to perform our contractual obligations to you as a sporzy account holder.
• Legal obligation: Certain data processing activities — including identity verification and transaction record retention — are required to comply with applicable legal and financial regulatory obligations.
• Legitimate interests: sporzy processes usage and device data on the basis of legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Where we process your data for optional purposes such as marketing communications, we do so only on the basis of your explicit, freely given consent. You may withdraw consent at any time by contacting [email protected].

5 Payment Data Handling

sporzy takes the security of payment data extremely seriously. All financial transactions on the platform are processed through encrypted, PCI-compliant payment integration points. sporzy does not store your full bKash, Nagad, Rocket, or Upay account credentials on our servers.

Payment data is transmitted using 256-bit TLS encryption between your device, sporzy's servers, and the relevant payment provider. Transaction reference numbers and mobile number identifiers associated with your payment account are retained solely for the purpose of processing withdrawals to the correct account and for reconciling transaction records.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. sporzy uses cookies to maintain your login session, remember your preferences, and understand how players navigate the platform.

6.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your sporzy account during your visit. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use sporzy — such as which pages are most visited and how long sessions last. This data helps us improve the platform experience.
• Responsible gaming cookies: Used to track session duration and display responsible gaming reminders at appropriate intervals.

sporzy does not use third-party advertising cookies or cross-site tracking technologies. No cookie data is sold or shared with advertising networks.

6.3 Managing Cookies

You can manage or delete cookies at any time through your browser settings. Disabling essential cookies may prevent you from logging in to your sporzy account. Disabling analytics cookies will not affect your ability to use the platform.

7 Sharing Your Information

sporzy does not sell, rent, or trade your personal data to any third party. We may share your information only in the following limited circumstances:

• Payment processors: We share the minimum necessary payment data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Game technology providers: Live casino and slot game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Spribe may receive anonymised session identifiers to deliver game content and verify round outcomes. These providers do not receive your full identity or payment information.
• Identity verification services: Where third-party KYC verification technology is used to assist with document authentication, that service provider receives only the specific documents necessary for verification and is bound by strict confidentiality obligations.
• Legal authorities: sporzy may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law or in response to a valid legal process. We will notify you of such disclosures where permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of sporzy's business, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

8 Data Retention

sporzy retains your personal data for as long as your account remains active and for such additional periods as are required to meet our legal, financial, and operational obligations. The following retention periods apply:

• Account registration data: Retained for the duration of your account and for a minimum of five years after account closure.
• Identity verification (KYC) documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support records: Retained for three years from the date of the last communication, or longer if related to an unresolved dispute.
• Analytics and usage data: Aggregated analytics data is retained for up to 24 months. Raw session logs are deleted after 90 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

9 Data Security

sporzy implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sporzy's servers
• Encrypted storage of all personal data and KYC documents at rest
• Password hashing using modern cryptographic algorithms — sporzy staff cannot view your password in plain text
• Role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific function
• Multi-factor authentication required for all sporzy staff access to internal systems containing player data
• Regular security audits and penetration testing of the sporzy platform
• Automatic session timeout after a period of inactivity to protect against unauthorised access on shared devices

While sporzy takes all reasonable steps to protect your data, no internet transmission or electronic storage method is completely secure. In the event of a data breach that is likely to result in a risk to your rights, sporzy will notify affected users promptly and take all appropriate remediation steps.

10 Your Rights

As a sporzy user, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] from the email address registered on your sporzy account, clearly stating the nature of your request.

• Right of access: You may request a copy of all personal data sporzy holds about you. We will respond to verified requests within 30 days.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. You can also update certain account details directly through your account settings.
• Right to erasure: You may request permanent deletion of your personal data, subject to our legal obligations to retain certain records (e.g., transaction history and KYC documents). Erasure requests are processed within 30 days where legally permissible.
• Right to restriction: You may request that sporzy restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you provided to sporzy, which you may then transfer to another service provider of your choice.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to sporzy processing your personal data for legitimate interests purposes. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.

11 Children's Privacy

The sporzy platform is strictly intended for adults aged 18 years and above. sporzy does not knowingly collect personal data from any individual under the age of 18. If we discover that an account has been registered by a person under 18, that account will be immediately closed and all personal data associated with it will be deleted, subject to any legal obligations to retain evidence of the age violation.

If you believe that a minor has registered a sporzy account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 Changes to This Policy

sporzy reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will publish the revised Policy on this page with an updated "Last Updated" date. Where the changes are significant, we will also notify registered users via the email address on their account.

Your continued use of the sporzy platform after the revised Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how sporzy protects your data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sporzy handles your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support availability: 24 hours a day, 7 days a week
• Response time: All privacy-related enquiries will receive a response within 72 hours (Bangladesh Standard Time, UTC+6)

When submitting a data access, correction, or erasure request, please include your full name, the email address registered on your sporzy account, and a clear description of your request to ensure we can process it promptly and accurately.