nbbaji Privacy Policy

This Privacy Policy ("Policy") describes how nbbaji ("we", "us", "our", "the Platform") collects, processes, uses, stores, and protects the personal data of individuals ("you", "the Player", "the User") who visit or interact with the nbbaji website and its associated services. It applies to all registered players, prospective players browsing the platform, and individuals who contact nbbaji's support team in any capacity.

nbbaji is committed to handling your personal data with transparency, integrity, and care. This Policy is aligned with widely recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) framework, and reflects our commitment to protecting the privacy rights of players across Bangladesh and beyond.

This Policy should be read alongside the nbbaji Terms & Conditions and Responsible Gaming Policy, which together form the full framework governing your relationship with nbbaji. By accessing the nbbaji platform and creating a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

What This Policy Covers

This Policy covers all personal data collected through:

• The nbbaji website and all its sub-pages and features
• Player account registration, login, and management processes
• Deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported payment providers
• Customer support interactions via email at [email protected]
• Promotional and marketing communications sent to opted-in players
• Technical data automatically collected when you access the nbbaji platform

This Policy does not apply to third-party websites, services, or platforms that may be linked from within the nbbaji platform. nbbaji has no control over, and accepts no responsibility for, the data practices of any third-party service provider's own platform or privacy policy.

nbbaji collects personal data from players through two primary channels: data you provide directly to us, and data we collect automatically as you interact with our platform. The following table summarises the categories of data we collect and the context in which each is obtained.

Data You Provide Directly

The majority of personal data nbbaji holds is provided directly by you at the point of registration, during the KYC verification process, or in the course of customer support interactions. This includes all identity, contact, verification document, and financial data listed above. You are under no obligation to provide this data, but nbbaji cannot offer full platform access — including real-money deposits, withdrawals, and bonus eligibility — without it.

Data Collected Automatically

When you access the nbbaji platform, our servers and analytics tools automatically record certain technical and usage data. This includes your IP address, which may indicate your general geographic region (for example, Dhaka, Chittagong, or Sylhet), your device and browser configuration, and behavioural data such as the pages you visit and the time you spend on each section of the site. This data is used for platform security, fraud prevention, responsible gaming monitoring, and service improvement. It is not used to identify you personally beyond the context of your nbbaji account.

nbbaji processes your personal data only for specific, legitimate purposes. We do not process personal data in any manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which nbbaji uses your data are as follows:

• Account management: Creating, maintaining, and managing your nbbaji player account, including processing login requests, account setting changes, and password resets.
• Identity and age verification: Verifying that you meet the 18+ age requirement and confirming that your registered identity matches supporting documentation, in compliance with our responsible gaming and security policies.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported payment methods. All financial transactions are denominated in Bangladeshi Taka (BDT).
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, multi-accounting, money laundering, and other prohibited conduct as defined in the nbbaji Terms & Conditions.
• Responsible gaming: Monitoring gaming activity patterns to identify indicators of problem gambling, enforcing player-set deposit limits and self-exclusion requests, and providing appropriate responsible gaming interventions.
• Customer support: Responding to queries, complaints, and support requests submitted to [email protected], and maintaining records of support interactions for quality assurance and dispute resolution.
• Platform improvement: Analysing aggregated usage data to improve site performance, expand game offerings, optimise payment flow, and enhance the overall player experience on nbbaji.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may opt out at any time.
• Legal compliance: Meeting obligations imposed by applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.

nbbaji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. However, in order to operate the nbbaji platform and provide its services effectively, we may share limited categories of personal data with the following categories of trusted third-party service providers, strictly on a need-to-know basis and under binding confidentiality and data protection obligations:

Payment Service Providers

To process your deposits and withdrawals, nbbaji shares necessary financial transaction data with supported payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank. The data shared is limited to what is required to execute and verify the transaction. Each payment provider operates under its own privacy and data protection policies, which we encourage you to review independently.

Identity Verification Partners

During the KYC verification process, nbbaji may share identity document images and personal data with third-party verification service providers who specialise in document authentication and identity checking. These providers are contractually bound to process your data solely for KYC purposes and may not retain or use it for any other purpose.

Game Content Providers

nbbaji integrates game content from internationally certified providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, Habanero, and Ezugi. These providers may receive limited technical session data (such as a session token or anonymised player identifier) to load and operate game content correctly. They do not receive your full identity, contact, or financial data.

Analytics and Platform Technology

nbbaji uses analytics and platform monitoring tools to measure site performance, session behaviour, and technical errors. Aggregated and anonymised data may be processed by these tools. nbbaji ensures that any such tools used are configured to minimise personal data transmission and are subject to data processing agreements.

Legal and Regulatory Disclosure

nbbaji may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or in response to a lawful request. nbbaji will, where legally permitted, notify you of such a disclosure request before complying.

nbbaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather anonymised analytics data about how the site is used. Cookies are small text files stored on your device by your browser at the request of the nbbaji platform. They do not contain executable code and cannot access other files on your device.

Types of Cookies Used by nbbaji

Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies will prevent certain core features of the nbbaji platform from functioning correctly, including maintaining your login session. Disabling analytics or functional cookies will not prevent you from accessing the platform but may affect personalisation features. For guidance on managing cookies in your specific browser, consult your browser provider's support documentation.

nbbaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply to the principal categories of data held by nbbaji:

• Account and identity data: Retained for the duration of your active nbbaji account and for a minimum period of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for the duration of your active account and for five (5) years after account closure or the last transaction date, whichever is later.
• Gaming activity logs: Retained for up to three (3) years, used for responsible gaming monitoring, dispute resolution, and fraud investigation purposes.
• Support and communications data: Retained for up to two (2) years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Technical and usage data: Anonymised and aggregated after 12 months; identifiable technical data (such as IP address logs) is retained for up to 12 months for security and fraud detection purposes.

Upon expiry of the applicable retention period, nbbaji securely deletes or irreversibly anonymises the relevant data. Where a legal hold or active dispute prevents deletion, the relevant data is isolated and access-restricted until the hold is lifted.

All personal data held by nbbaji is stored on servers protected by industry-standard physical and logical security controls. Data transfers between nbbaji and its authorised third-party service providers are conducted over encrypted channels.

nbbaji takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and the nbbaji platform is encrypted using TLS, ensuring that sensitive information — including login credentials and payment data — cannot be intercepted in transit.
• Encryption at rest: Sensitive personal data stored on nbbaji's servers, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data held by nbbaji is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need may access player data, and all access is logged and monitored.
• Intrusion detection and monitoring: nbbaji's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns using automated security tools.
• Vulnerability management: nbbaji conducts regular security assessments and works with its technology partners to identify and remediate vulnerabilities in a timely manner.
• Staff training: All personnel with access to player data receive regular data protection and security awareness training as part of nbbaji's internal compliance programme.

While nbbaji takes all reasonable steps to protect your personal data, no platform operating over the internet can guarantee absolute security. In the event of a data security incident that poses a material risk to your rights, nbbaji will notify affected players without undue delay and take all appropriate remedial action.

You also have a role in keeping your data secure. nbbaji strongly encourages all players to use a unique, complex password for their nbbaji account and to ensure that their registered email account is similarly secured. If you suspect any unauthorised access to your nbbaji account, contact support immediately at [email protected].

nbbaji respects your rights in relation to your personal data. Subject to applicable legal limitations and identity verification requirements, registered nbbaji players may exercise the following rights at any time by submitting a written request to [email protected]:

• Right of Access: You may request a copy of the personal data nbbaji holds about you. nbbaji will provide a structured summary of your data within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data nbbaji holds about you is inaccurate or incomplete, you may request that it be corrected or updated. For account-level information, you may also be able to update certain details directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing. Note that certain data must be retained for the minimum periods specified in Section 6 to comply with legal obligations, and erasure requests cannot override those obligations.
• Right to Restriction: You may request that nbbaji temporarily restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Object: You may object to nbbaji processing your personal data for direct marketing purposes at any time, with immediate effect. You may also object to other forms of processing where nbbaji relies on legitimate interests as the legal basis, subject to nbbaji demonstrating compelling grounds.
• Right to Data Portability: Where nbbaji processes your data on the basis of consent or contract, you may request that your data be provided to you in a structured, machine-readable format.

To exercise any of the above rights, please contact nbbaji's support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of the right you wish to exercise. nbbaji will acknowledge your request within five (5) business days and respond in full within 30 calendar days, or notify you if an extension is required.

nbbaji will not charge a fee for processing data rights requests unless a request is manifestly unfounded, repetitive, or excessive — in which case nbbaji reserves the right to charge a reasonable administrative fee or decline to respond, with written explanation.

The nbbaji platform is strictly intended for adults aged 18 years and above. nbbaji does not knowingly collect personal data from individuals under the age of 18. As part of our registration and KYC verification processes, nbbaji takes active steps to verify the age of all applicants before granting full account access.

If nbbaji discovers or reasonably suspects that a registered account belongs to a person under 18 years of age, we will:

• Immediately suspend the account and block access to all real-money gaming features
• Conduct a review of all transactions and gaming activity associated with the account
• Take appropriate action in accordance with our Terms & Conditions, which may include permanent account closure and handling of any account balance in accordance with applicable policies
• Delete or restrict the personal data associated with the account to the extent permissible under our legal retention obligations

If you are a parent or guardian and believe that a person under 18 in your care may have registered a nbbaji account without your knowledge, please contact our support team immediately at [email protected]. nbbaji will treat such reports with the highest priority and take immediate action to investigate and close any underage account identified.

nbbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to the nbbaji platform's features, or changes in applicable laws and regulations. The current version of this Policy, including its effective date, is always available at nbbaji.com/privacy-policy.

Where nbbaji makes material changes to this Privacy Policy — for example, changes that significantly affect how your personal data is used or shared — registered players will be notified via their registered email address or through a prominent notice displayed upon login to the nbbaji platform. It is your responsibility to ensure that the email address associated with your nbbaji account is current and that you review all communications from nbbaji promptly.

Your continued use of the nbbaji platform following the publication of an updated Privacy Policy constitutes your acknowledgment and acceptance of the revised Policy. If you do not agree with any material change, you have the right to close your nbbaji account and request erasure of your data as described in Section 8.

For any questions, concerns, or requests relating to this Privacy Policy or nbbaji's data protection practices, please contact our support team at [email protected]. We are committed to responding to all privacy-related enquiries within five (5) business days during Bangladesh Standard Time (UTC+6) business hours.