nbaiji Privacy Policy —
How We Protect Your Personal Data

Data We Collect

When you interact with the nbaiji platform — whether during registration, while placing bets, making a deposit, contacting support, or simply browsing — we may collect a variety of personal and technical data. We only collect data that is necessary for a specific, legitimate purpose and we do not gather information beyond what is required to operate our service safely and effectively.

Personal Identification Data

During the account registration and KYC (Know Your Customer) verification process, nbaiji collects the following personal identification data:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify you are aged 18 or above)
• Residential address (city, district, and postcode — including references to Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account communications and security alerts)
• Scanned copies of government-issued photo ID (National ID Card, Passport, or Driving Licence)
• Proof of address documents (e.g., utility bill, bank statement dated within the last three months)

Financial and Payment Data

To process your deposits and withdrawals in Bangladeshi Taka (BDT), nbaiji collects payment-related information including:

• Registered mobile banking number associated with your bKash, Nagad, Rocket, or Upay account
• Bank account name and account number for Dutch-Bangla Bank or other linked bank transfers
• Card type, partial card number (last four digits), and billing name for Visa or Mastercard payments
• Transaction history including deposit amounts, withdrawal requests, and timestamps

nbaiji does not store full card numbers or mobile banking PINs on our servers. All payment credentials are handled through encrypted, tokenised channels provided by our payment processing partners.

Usage and Behavioural Data

When you use the nbaiji platform, we automatically collect technical and behavioural data to improve performance, personalise your experience, and detect fraud:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths through the site
• Games played, bet amounts, session durations, and game outcome histories
• Login timestamps and account activity logs
• Referral source (how you arrived at nbaiji.net)

Communications Data

If you contact nbaiji through any support channel, we retain records of that correspondence including:

• Content of emails sent to or received from [email protected]
• Live chat conversation logs
• Details of complaints, disputes, and their resolutions

How We Use Your Data

nbaiji uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose beyond those described in this Privacy Policy without first obtaining your explicit consent.

Purpose	Data Used	Lawful Basis
Account creation and management	Name, email, phone, address, date of birth	Contract performance
Age and identity verification (KYC)	Photo ID, proof of address, date of birth	Legal obligation
Processing deposits and withdrawals	Payment method details, transaction history	Contract performance
Fraud detection and AML monitoring	IP address, device data, transaction patterns	Legal obligation / Legitimate interests
Customer support and complaints	Communications data, account history	Contract performance / Legitimate interests
Platform improvement and analytics	Usage data, game behaviour, session data	Legitimate interests
Responsible gaming monitoring	Betting patterns, session length, deposit frequency	Legal obligation / Legitimate interests
Marketing communications	Email address, preferences, game history	Consent (opt-in only)

Marketing Communications

If you have opted in to receive marketing communications from nbaiji, we may send you emails and notifications about new games, seasonal promotions (such as Eid, BPL cricket season, or Pohela Boishakh offers), deposit bonuses, and platform updates. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected] with a request to opt out. Opting out of marketing does not affect essential account communications such as transaction confirmations, security alerts, and policy update notifications.

Automated Decision-Making

nbaiji uses automated tools to monitor for fraud, money laundering, and responsible gaming indicators. Where automated systems flag an account for review, a member of the nbaiji compliance team will conduct a manual review before any action is taken. You have the right to request human review of any automated decision that materially affects your account. To submit such a request, contact [email protected].

Data Sharing & Disclosure

nbaiji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the limited circumstances described below, and always subject to appropriate contractual safeguards to ensure it is protected to the same standard as within nbaiji itself.

Third-Party Service Providers

To operate the nbaiji platform effectively, we engage trusted third-party service providers who process data on our behalf. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment gateways process transaction data necessary to complete your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services may process your photo ID and proof of address documents to assist with age and identity verification.
• Game software providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (e.g., player token, bet amounts) in order to deliver their games on the nbaiji platform. These providers do not receive your full personal profile.
• IT infrastructure and cloud hosting providers: Our platform infrastructure relies on secure cloud hosting services. Hosting providers do not access or process personal data beyond what is required for technical operations.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand player behaviour and improve the nbaiji experience.

All third-party service providers engaged by nbaiji are bound by data processing agreements that prohibit them from using your personal data for any purpose other than delivering the specific service they have been contracted to provide.

Legal and Regulatory Disclosure

nbaiji may be required by law to disclose your personal data to government bodies, regulatory authorities, or law enforcement agencies. Such disclosures may occur in connection with:

• Anti-money laundering (AML) investigations and suspicious transaction reporting
• Fraud investigations conducted by financial regulators or law enforcement
• Court orders, subpoenas, or other legally binding demands for information
• Protection of the rights, property, or safety of nbaiji, its players, or the public

Where legally permitted to do so, nbaiji will notify you before disclosing your data in response to a legal demand.

Cookies & Tracking

nbaiji uses cookies and similar tracking technologies on the nbaiji.net platform to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device when you visit a website. Cookies help us remember your preferences, keep your session active while you are logged in, and understand how players interact with different areas of the platform.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential / Functional	Required to keep you logged in, maintain your session, and enable core platform features such as game loading and payment processing	Session / up to 30 days
Performance / Analytics	Collects anonymised data on how players navigate the site, which pages receive the most visits, and where errors occur — used to improve platform performance	Up to 12 months
Preference / Personalisation	Remembers your language preference, game display settings, and previously visited game categories to personalise your return visits	Up to 6 months
Security / Fraud Prevention	Helps detect unusual login patterns, suspicious device behaviour, and potential fraud attempts to protect your account	Session / up to 90 days

Managing Your Cookie Preferences

You may manage or disable cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, Edge, and mobile browsers on Android and iOS devices) allow you to block or delete cookies via their privacy settings menu. Please note that disabling essential cookies will affect the functionality of the nbaiji platform — in particular, you may be unable to remain logged in or complete transactions if essential session cookies are blocked.

nbaiji does not use cookies to serve third-party advertising on the nbaiji platform or to track your activity on websites other than nbaiji.net. Our analytics cookies collect anonymised, aggregated data only and do not identify you personally.

Data Retention

nbaiji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure. This extended period is required to comply with anti-money laundering regulations and to respond to regulatory inquiries or legal disputes that may arise after your account is closed.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with AML and financial record-keeping requirements.
• KYC documents (photo ID, proof of address): Retained for five (5) years from the date of submission or the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, unless the subject matter relates to an ongoing dispute or legal matter, in which case records are retained until the matter is fully resolved.
• Usage and analytics data: Anonymised usage data is retained for up to twenty-four (24) months for platform improvement purposes. Personally identifiable usage logs are retained for twelve (12) months and then anonymised.
• Marketing consent records: Retained for the duration of your consent plus three (3) years post-withdrawal, to demonstrate compliance with consent-based marketing obligations.

When the applicable retention period expires, nbaiji will securely delete or anonymise your personal data so that it can no longer be attributed to you as an identifiable individual. You may request early deletion of certain categories of your data — subject to overriding legal retention obligations — by contacting [email protected].

Data Security

nbaiji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, nbaiji maintains industry-leading standards and continuously reviews and updates our security posture.

Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the nbaiji platform is protected using SSL/TLS encryption. Look for the padlock icon and "https://" in your browser's address bar when visiting nbaiji.net.
• Data Encryption at Rest: Sensitive personal and financial data stored on nbaiji servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to nbaiji personnel who require it to perform their job functions. Role-based access controls ensure that data is accessible only to authorised staff.
• Regular Security Audits: nbaiji conducts periodic security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their nbaiji accounts for an additional layer of login security. Where 2FA is available, it is strongly recommended for all account holders.
• Fraud Monitoring: nbaiji employs real-time fraud detection systems that monitor for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise.

What You Can Do to Stay Secure

• Use a strong, unique password for your nbaiji account — do not reuse passwords from other sites.
• Never share your login credentials with anyone. nbaiji support staff will never ask for your password.
• Log out of your nbaiji account after each session, particularly when using shared or public devices.
• Keep your registered email address and mobile phone number up to date so you receive security alerts promptly.
• Contact [email protected] immediately if you suspect any unauthorised activity on your account.

Your Privacy Rights

As a registered player on the nbaiji platform, you hold a number of rights in relation to the personal data we hold about you. nbaiji is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights described below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address for identification purposes.

• Right of Access: You have the right to request a copy of the personal data nbaiji holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as email address and phone number) by contacting our support team directly.
• Right to Erasure ("Right to Be Forgotten"): You may request that nbaiji delete your personal data. This right is subject to overriding legal obligations — for example, we are required to retain financial transaction records and KYC documents for a minimum of five years. We will delete data that is no longer required for the purposes for which it was collected and for which no legal retention obligation applies.
• Right to Restriction of Processing: You may request that nbaiji restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, portable format and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling carried out for direct marketing purposes. You may opt out of marketing at any time without affecting your account status.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects. Where such automated decisions are made, you may request human review by contacting [email protected].

nbaiji will respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case nbaiji will notify you within the initial 30-day window and explain the reason for the delay.

Policy Updates

nbaiji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this policy, we will notify registered players by email (to the address associated with your account) and by posting a prominent notice on the nbaiji.net platform. The updated policy will take effect on the date specified in the notice.

Minor or non-material updates — such as corrections to formatting, clarifications that do not change the substance of the policy, or changes to contact details — may be made without individual notice. The "Effective Date" shown at the top of this page will always reflect the date of the most recent update.

Your continued use of the nbaiji platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes to this Privacy Policy, you should cease using the nbaiji platform and close your account by contacting [email protected]. Account closure requests submitted in response to a policy update will be handled with priority and any verified real-money balance will be returned to your registered payment method.

We recommend reviewing this Privacy Policy periodically to stay informed about how nbaiji collects, uses, and protects your personal information. The most current version of this policy is always available at nbaiji.net/privacy-policy.

Contact for Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data nbaiji holds about you, please contact our team at [email protected]. We are committed to addressing all privacy-related enquiries honestly, promptly, and in plain English. Bangladesh Standard Time (UTC+6) business hours apply for prioritised response, with coverage available 24 hours a day for urgent security matters.