nbaj Privacy Policy

1 Introduction

nbaj is committed to protecting the privacy and personal data of every player who uses its platform. We understand that when you share personal information with us — whether during registration, identity verification, or in the course of making financial transactions — you are placing a significant degree of trust in nbaj. We take that responsibility seriously.

This Privacy Policy applies to all personal data collected through nbaj.io, including data collected via the website, any associated mobile experience, live chat, email correspondence, and customer support interactions. It applies to all registered users, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh.

This Policy is effective from 1 January 2026. Any previous version of this Privacy Policy is superseded by the version published on this page. The date of the most recent revision is always displayed at the top of this document and in the sidebar.

2 Data We Collect

nbaj collects personal data through several channels and at different points during your use of the platform. The categories of data we collect are set out in the table below:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, gender	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account updates
Verification Data	Government-issued photo ID, utility bill, selfie/liveness check	KYC / AML compliance checks
Financial Data	bKash/Nagad/Rocket account numbers, transaction history, deposit and withdrawal records	Cashier deposits & withdrawals
Gaming Activity Data	Game session logs, wager amounts, bet history, win/loss records, bonus usage	Throughout platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps	Automatically on each visit
Communication Data	Live chat transcripts, support email content, feedback submissions	Customer support interactions
Preference Data	Language preferences, notification settings, responsible gaming limits set by user	Account settings & platform use

nbaj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than for identity verification purposes), or health data, except where strictly required by applicable law or where you have provided explicit consent.

3 How We Use Your Data

nbaj uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your player profile, and provide access to all platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements. This includes verifying your identity before processing withdrawals and monitoring transactions for suspicious activity.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and any other activity that threatens the integrity of the platform or the safety of other players.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through live chat and email channels.
• Responsible Gaming: To monitor gaming behaviour and intervene where patterns consistent with problem gambling are identified. This includes enforcing player-set deposit limits, cooling-off periods, and self-exclusion requests.
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the overall performance, design, and game selection of the nbaj platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided consent to receive such communications. You may withdraw this consent at any time through your account settings.

nbaj will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your explicit consent.

4 Legal Basis for Processing

nbaj processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to deliver the services described in our Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and the retention of financial records.
• Legitimate Interests: Processing carried out in pursuit of nbaj's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Processing for which you have provided a clear and freely given consent, including the receipt of direct marketing communications. You have the right to withdraw consent at any time.

5 Data Sharing & Disclosure

nbaj does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share financial data with payment processors — including bKash, Nagad, Rocket, Upay, and card processing partners — strictly to the extent necessary to complete your requested transactions. These providers are contractually bound to process your data only for that purpose.
• Identity Verification Partners: We use third-party KYC and AML compliance providers to verify your identity and screen transactions. These providers receive only the minimum data required to perform their verification function.
• Game Software Providers: To deliver games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, certain session and account data is shared with those studios' game servers. This data is used solely to operate the game and record outcomes.
• Legal and Regulatory Authorities: nbaj may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to prevent serious harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of nbaj's assets, personal data held by nbaj may be transferred to the acquiring entity. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

6 Cookies & Tracking

nbaj uses cookies and similar technologies (including local storage and session tokens) to operate the platform and improve your experience. The cookies we use fall into the following categories:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your gaming session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations, so that these do not need to be re-entered on each visit.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players interact with nbaj.io — including which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used exclusively for internal platform improvement and is not shared with third-party advertising networks.

nbaj does not use third-party behavioural advertising cookies, social media tracking pixels, or any cookie that tracks your activity across websites other than nbaj.io. You can manage or delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in and using the platform.

7 Data Retention

nbaj retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by applicable law and internal policy:

• Active Accounts: All personal and gaming activity data is retained for the full duration of your registered account.
• Closed Accounts: Following account closure, identity data, financial records, and KYC verification documents are retained for a minimum of five years in order to satisfy anti-money laundering obligations and to support the resolution of any post-closure disputes.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two years from the date of the communication.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for five years following the most recent consent event.
• Technical Logs: Server logs, IP address records, and session data are retained for a rolling period of 12 months, after which they are automatically purged or anonymised.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data set is no longer subject to this Privacy Policy and may be retained and used by nbaj indefinitely for statistical purposes.

8 Data Security

nbaj applies a multi-layered approach to data security designed to protect personal and financial data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive personal and financial data stored in our databases.
• Strict role-based access controls ensuring that nbaj staff can only access personal data that is necessary for their specific function.
• Regular independent security audits and penetration testing of the nbaj platform infrastructure.
• Two-factor authentication (2FA) available to all registered players as an additional layer of account security.
• Automated anomaly detection systems that flag unusual login patterns and transaction behaviour for immediate review.

While nbaj employs industry-leading security practices, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, nbaj will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Your Rights

As a player on the nbaj platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact nbaj's support team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data held about you by nbaj, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Minor corrections (such as contact details) can be made directly within your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to nbaj's legal retention obligations; we cannot delete data that we are legally required to retain.
• Right to Restriction of Processing: You have the right to request that nbaj restricts the processing of your personal data in certain circumstances, for example where you have contested the accuracy of the data while nbaj verifies it.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to nbaj in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

10 Children's Privacy

nbaj is strictly an adult gaming platform. The minimum age to register and use the platform is 21 years. nbaj does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

Where nbaj has reasonable grounds to believe that a registered account belongs to a person under the age of 21, that account will be immediately suspended and all associated data reviewed. If the account holder is confirmed to be under 21, the account will be permanently closed, all wagers voided, and any remaining balance returned to the originating payment method following completion of verification.

If you are a parent or guardian and believe that a minor has registered on nbaj using your identity or payment method, please contact [email protected] immediately. We will take prompt action to investigate and resolve the matter.

11 Third-Party Links

The nbaj platform does not contain links to third-party websites. The game interfaces delivered by our software partners operate within the nbaj.io environment and are subject to those providers' own privacy policies in respect of game-level data. nbaj is not responsible for the privacy practices of any third-party game studio or payment provider, and we encourage you to review their respective privacy policies if you have specific concerns.

12 Policy Updates

nbaj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. Where a material change is made to this Policy, we will provide reasonable notice to registered players via the email address on file or through a prominent notice on nbaj.io. The effective date of the most recent revision is always displayed at the top of this page.

Your continued use of the nbaj platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material change, you should cease using the platform and may request account closure by contacting support.

13 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way nbaj handles your personal data, please contact our Data Privacy team using the details below. All requests should be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Operating Hours: 24 hours a day, 7 days a week (BST, UTC+6)

nbaj takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or seek appropriate legal remedy under applicable law.