nbajie Privacy Policy

nbajie is Bangladesh's premier online casino and cricket betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

This Policy applies to all personal data we process in connection with your use of the nbajie Platform, including data collected when you register an Account, make deposits or withdrawals, place bets, contact our support team, or browse the Platform. It applies regardless of the device or browser you use to access nbajie.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which are published on the nbajie Platform and are incorporated herein by reference.

For the purposes of this Policy, nbajie acts as the Data Controller with respect to the personal data of players who register and use the Platform. As Data Controller, nbajie is responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about how your personal data is handled, or wish to exercise any of your data rights, you may contact our Data Protection contact directly at:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request — [Your Account Username]"
• Response time: Within 30 calendar days of receipt

nbajie collects personal data in three primary ways: data you provide directly, data generated automatically by your use of the Platform, and data received from third parties. The categories of personal data we collect are as follows:

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, mobile phone number, email address, and chosen username.
• Identity verification (KYC) data: Government-issued photo ID (National ID card, passport, or driving licence), proof of address (utility bill, bank statement), and proof of payment method ownership (e.g., bKash or Nagad account screenshot).
• Financial data: Payment method details (mobile money account numbers for bKash, Nagad, Rocket, Upay; card numbers for Visa or Mastercard; bank account details for BRAC Bank, Dutch-Bangla Bank, City Bank), deposit and withdrawal amounts, and transaction history.
• Communications data: Records of your correspondence with our support team, including emails, live chat logs, and any documentation you share.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, cooling-off period preferences, and any self-reported information about gambling habits.

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, search queries made within the Platform, and deposit/withdrawal events.
• Cookie data: Identifiers stored by essential, performance, and analytics cookies as described in Section 9.

3.3 Data Received from Third Parties

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and banking partners.
• Identity verification providers: Results of automated document authentication checks conducted by our KYC service providers.
• Fraud and AML screening providers: Risk scores and watchlist screening results from third-party financial crime prevention services.
• Game providers: Game session data, bet history, and RTP records from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

nbajie processes your personal data for the following purposes:

• Account creation and management: To register your Account, authenticate your identity at login, and maintain accurate Account records.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and partner banks, and to maintain complete financial transaction records.
• Identity verification and AML compliance: To verify your identity in accordance with Know Your Customer (KYC) requirements and to screen transactions for potential money laundering, fraud, or other financial crime.
• Platform delivery: To provide access to casino games, sports betting markets, live casino products, and all other Platform features you use.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of our correspondence for quality and audit purposes.
• Responsible gaming: To apply deposit limits, loss limits, cooling-off periods, and self-exclusion measures that you or we initiate, and to identify indicators of problem gambling behaviour requiring intervention.
• Security and fraud prevention: To detect and prevent unauthorised access, account takeover, bonus abuse, collusion, bot activity, and other forms of fraudulent or prohibited conduct.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features and products that better serve Bangladesh players.
• Legal and regulatory compliance: To fulfil our obligations under applicable law, including responding to lawful requests from competent authorities.
• Direct communications: To send you transactional notifications (deposit confirmations, withdrawal confirmations, security alerts) and, where you have provided consent, promotional communications about nbajie offers and tournaments.

nbajie does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on you without human review.

nbajie processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and nbajie — including registration, account management, payments, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including AML, KYC, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for nbajie's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and platform improvement.
• Consent: Processing based on your freely given, specific, and informed consent — including optional promotional communications. You may withdraw consent at any time by contacting [email protected]; withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

nbajie does not sell, rent, or trade your personal data to any third party. We share your data only in the following strictly limited circumstances:

• Payment processors: We share financial and identity data necessary to process your deposit or withdrawal with the relevant payment provider (bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, BRAC Bank, Dutch-Bangla Bank, City Bank). These providers act as independent data controllers for their own processing activities.
• KYC and AML service providers: We share identity document data with our certified KYC and fraud-screening service providers for the purpose of verifying your identity and fulfilling our AML obligations. These providers operate as data processors under contract with nbajie.
• Game providers: Certified providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive the game session data necessary to deliver and record gameplay. These providers do not receive your full personal profile.
• IT infrastructure and security providers: Cloud hosting, content delivery network, and cybersecurity service providers that process data on nbajie's behalf under data processing agreements that require them to maintain appropriate security standards.
• Legal and regulatory authorities: We may disclose personal data to competent government authorities, law enforcement agencies, or courts when required to do so by law, court order, or legitimate regulatory investigation.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of nbajie's assets, your personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third-party processors engaged by nbajie are required to implement appropriate technical and organisational security measures and to process personal data only on nbajie's documented instructions.

Some of nbajie's third-party service providers — including game providers and cloud infrastructure partners — may be located outside Bangladesh. Where personal data is transferred internationally, nbajie ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses that impose obligations equivalent to those in this Policy on the receiving party;
• Transfers only to service providers that maintain internationally recognised security certifications (such as ISO 27001);
• Encryption of data in transit and at rest for all cross-border transfers.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting [email protected].

nbajie retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

Where you request deletion of your Account, nbajie will delete or anonymise all personal data not subject to a mandatory retention obligation within 30 days of verifying the request.

nbajie uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

nbajie does not use advertising, targeting, or third-party social media cookies. You can manage or delete cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing core Platform features.

nbajie implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data exchanged between your browser or app and the nbajie servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Personal data and financial records stored on nbajie servers are encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised nbajie employees and contractors on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion detection: nbajie employs continuous network monitoring, intrusion detection systems, and automated anomaly alerting to identify and respond to potential security incidents in real time.
• Penetration testing: The Platform undergoes regular security assessments and penetration tests conducted by independent security specialists.
• Incident response: nbajie maintains a formal data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players without undue delay.

While nbajie takes every reasonable precaution, no system is entirely immune to security threats. We therefore also encourage players to protect their own Accounts by using a strong, unique password and by contacting [email protected] immediately if they suspect any unauthorised access to their Account.

As a data subject, you have the following rights with respect to your personal data held by nbajie:

• Right of access: You may request a copy of all personal data nbajie holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For basic Account data (name, address, contact details), you may also update this directly within your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. This right is subject to our mandatory legal retention obligations.
• Right to restriction: You may request that we temporarily restrict processing of your personal data in specific circumstances — for example, while the accuracy of data is disputed.
• Right to data portability: You may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will respond within 30 calendar days. We may request proof of identity before processing your request to ensure we disclose data only to the correct individual.

The nbajie Platform is strictly intended for individuals aged 18 years and above. nbajie does not knowingly collect, process, or store personal data relating to persons under the age of 18. If you are under 18, you must not register an Account or use the Platform under any circumstances.

If nbajie becomes aware that personal data has been collected from a person under 18 without verifiable parental consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact [email protected] immediately.

Parents and guardians who are concerned about a minor's access to online gambling are encouraged to use parental control software and internet filtering tools to block access to gambling websites.

The nbajie Platform may contain references to, or integrate services from, third-party providers such as certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket). While nbajie carefully vets all integrated partners, each third party operates under its own independent privacy policy and data practices.

nbajie accepts no responsibility for the privacy practices of third-party services that are not under our direct operational control. We encourage you to review the privacy policies of any third-party service provider whose services you use in connection with your nbajie Account.

nbajie reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes to this Policy will be communicated to registered players via email or a prominent notice on the Platform at least seven days before the changes take effect.

The date at the top of the Policy indicates when it was last reviewed and updated. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and contact support to close your Account.

We recommend reviewing this Policy periodically to remain informed of how nbajie is protecting your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by nbajie, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Privacy Request — [Your Account Username]"
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response time: Acknowledgement within 24 hours; substantive response within 30 calendar days
• Language: English

nbajie takes all privacy-related enquiries seriously and aims to resolve them promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with a competent supervisory authority in your jurisdiction.