nbajjee Privacy Policy

1. Information We Collect

nbajjee collects personal data through several channels — directly from you when you register or interact with the platform, automatically through your use of the platform, and in some cases from trusted third parties such as payment providers and identity verification services. Below is a full account of the categories of data we collect.

Registration & Identity Data

When you create an account with nbajjee, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address (used for account communications, password resets, and promotional contact where consented).
• Mobile phone number (used for account verification and transaction notifications).
• Residential address in Bangladesh.
• Preferred username and encrypted password.

Know Your Customer (KYC) Documents

To comply with our identity verification obligations and prevent fraud, we may collect copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Birth certificate issued by a recognised Bangladeshi authority.
• Proof of address documents (utility bill, bank statement, etc.) dated within 90 days.

KYC documents are securely stored and processed only by authorised personnel or trusted third-party identity verification partners. They are not used for any purpose other than verifying your identity and meeting our legal obligations.

Financial & Transaction Data

When you make a deposit or request a withdrawal, we collect transaction records including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. We do not store full payment account numbers or mobile financial service PINs.

Gameplay & Behavioural Data

We collect records of your activity on the platform, including games played , bet amounts and outcomes, session start and end times, and game preferences. This data is used to provide personalised recommendations, identify problem gambling patterns for responsible gaming purposes, and improve platform performance.

Technical & Device Data

When you visit nbajjee, our servers automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level).
• Browser type and version.
• Operating system and device type (desktop, mobile, tablet).
• Pages visited, time spent on each page, and referring URL.
• Unique device identifiers and cookie data (see the Cookies section for full details).

Communications Data

If you contact our customer support team via live chat or email, we retain a record of that correspondence, including any attachments you send and the content of your messages. These records are used to resolve disputes, improve support quality, and maintain an audit trail of interactions.

2. How We Use Your Data

nbajjee uses the personal data it collects only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

Purpose	Data Categories Used
Account creation and management	Registration data, contact details, password
Identity verification (KYC)	Identity documents, date of birth, address
Processing deposits and withdrawals	Financial data, transaction records
Fraud prevention and security monitoring	Device data, IP address, transaction patterns
Responsible gaming monitoring	Gameplay data, session data, behavioural patterns
Customer support and dispute resolution	Communications data, account history
Platform analytics and improvement	Technical data, gameplay data, session data
Promotional communications (where consented)	Email address, game preferences, location
Legal and regulatory compliance	All categories, as required by applicable obligations

Marketing Communications

With your explicit consent at the time of registration, nbajjee may contact you by email or in-platform notification about relevant promotions, bonuses, seasonal offers (such as BPL cricket season specials or Eid promotions), and new game releases. You may withdraw consent to marketing communications at any time by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and it does not affect communications that are necessary for the operation of your account (such as transaction confirmations, security alerts, or Terms update notifications).

3. Legal Basis for Processing

nbajjee processes personal data only where there is a valid legal basis to do so. The following legal bases apply to the processing activities described in this Privacy Policy:

• Contractual necessity: Processing your registration data, verifying your identity, and facilitating deposits and withdrawals is necessary for us to perform our contractual obligations to you as a platform user.
• Legal obligation: We are required to collect and retain certain data — including KYC documents and transaction records — to comply with anti-money laundering obligations and age verification requirements.
• Legitimate interests: We process device data and behavioural data to prevent fraud, maintain platform security, and improve the service. These interests do not override your privacy rights.
• Consent: Where we rely on consent as a legal basis — primarily for marketing communications — you retain the right to withdraw that consent at any time without consequence to your account status.

4. Data Sharing & Third Parties

nbajjee does not sell your personal data to any third party. We may, however, share your data with trusted partners and service providers where this is necessary to operate the platform or fulfil legal obligations. All third-party processors are contractually required to process your data only on our documented instructions and to maintain appropriate security standards.

Categories of Third Parties

• Identity Verification Providers: Third-party KYC and age verification services that assist us in confirming your identity and age before processing withdrawals.
• Payment Processors: bKash, Nagad, Rocket, Upay, and international card processors (Visa, Mastercard) receive transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and data protection frameworks.
• Game Providers: When you play games supplied by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as session tokens and bet amounts) is shared with those providers to enable game functionality. No personally identifiable information beyond a pseudonymous player identifier is shared with game studios.
• Analytics Providers: We use analytics tools to understand how players interact with the platform. Data shared for analytics purposes is aggregated or pseudonymised and cannot be used to identify you directly.
• Legal and Regulatory Authorities: We may be required to disclose your data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request. We will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention Services: We share data with specialised fraud detection services to identify and prevent suspicious activity, money laundering, and bonus abuse across the platform.

International Data Transfers

Some of our third-party service providers operate outside Bangladesh. Where personal data is transferred internationally, nbajjee ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a standard of protection equivalent to that described in this Privacy Policy. We do not transfer your data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate protective measures.

5. Cookies & Tracking Technologies

nbajjee uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to understand how it is used, and to deliver a better experience to players in Bangladesh. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential Cookies: These are strictly necessary for the platform to function. They maintain your logged-in session, remember your language and currency preferences, and keep your active bet slip intact. Without these cookies, core platform features would not work correctly. Essential cookies cannot be disabled.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are most visited, how long sessions last, and which features are used most frequently. This helps us identify improvements. Analytics cookies are only placed with your consent.
• Functional Cookies: These remember your preferences (such as your preferred deposit method or notification settings) to provide a more personalised experience on return visits.
• Security Cookies: Used to detect fraudulent behaviour, identify suspicious login attempts, and protect your account from unauthorised access.

Managing Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the nbajjee platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

6. Data Retention

nbajjee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and anti-fraud obligations
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance
Financial transaction records	Duration of account + 7 years after closure	Financial record-keeping requirements
Gameplay and session logs	2 years from session date	Dispute resolution, responsible gaming monitoring
Customer support correspondence	3 years from last communication	Dispute resolution and quality assurance
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent
Analytics data (anonymised)	Up to 26 months	Platform improvement

When a retention period expires, personal data is either securely deleted or anonymised so that it can no longer be linked to an identifiable individual. In some circumstances, we may be required by law to retain data beyond the periods stated above, in which case the data will continue to be protected in accordance with this Privacy Policy.

7. Your Privacy Rights

As a player on nbajjee, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email.

Right of Access

You have the right to request a copy of the personal data nbajjee holds about you. We will provide this information within 30 days of receiving your verified request. Where a request is complex or involves a large volume of data, we may extend this period by an additional 30 days and will notify you accordingly.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections — such as updating your contact number — can be made directly through your account settings. Corrections to identity data (name, date of birth) require submission of supporting documentation.

Right to Erasure

You may request that nbajjee delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where you object to processing and there are no overriding legitimate grounds. Please note that we may be required to retain certain data to comply with legal obligations even after an erasure request — in such cases, we will explain what data is retained and why.

Right to Restrict Processing

You may request that we limit how your data is used in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.

Right to Object

You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out prior to withdrawal.

8. Data Security Measures

nbajjee takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.

Technical Safeguards

• SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting nbajjee.
• Encrypted Data Storage: Sensitive data — including passwords and KYC documents — is stored in encrypted form on secured servers. Passwords are hashed using a one-way algorithm; we cannot retrieve your plain-text password.
• Access Controls: Access to personal data within nbajjee is restricted to authorised personnel only. Staff members are granted the minimum level of access required to perform their duties.
• Intrusion Detection: Our systems are monitored continuously for unauthorised access attempts, unusual activity patterns, and security vulnerabilities. Security patches are applied promptly upon release.
• Secure Payment Infrastructure: Payment data is processed through PCI-compliant gateways. nbajjee does not store card numbers, CVV codes, or mobile banking PINs on its own servers.

Organisational Safeguards

Our team members who handle personal data are trained in data protection best practices and are bound by confidentiality obligations. We conduct periodic reviews of our data protection procedures and update them in response to changes in technology, regulation, or identified risk factors.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, nbajjee will notify affected players without undue delay and take all reasonable steps to contain, investigate, and remediate the breach. We will document all data breaches in accordance with our internal incident response procedures.

9. Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nbajjee handles your personal data, please get in touch with our team. We are committed to resolving privacy-related queries promptly and transparently.

How to Reach Us

You can contact the nbajjee privacy team through any of the following channels:

• Email: support at nbajjee — please use the subject line "Privacy Query" and include your registered email address so we can locate your account.
• Live Chat: Available 24 hours a day, 7 days a week through the nbajjee platform. Our support agents can handle data access requests, consent withdrawals, and general privacy questions.

We aim to respond to all privacy-related correspondence within 2 business days (Bangladesh Standard Time, UTC+6), and to complete substantive requests such as data subject access requests within 30 days of identity verification.

Policy Updates

nbajjee may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When we make material changes, we will notify registered players by email and via an in-platform notification. The most current version of this Privacy Policy will always be accessible at nbajjee/privacy-policy. We encourage you to review this page periodically. Continued use of the platform after an update has been communicated constitutes your acceptance of the revised Privacy Policy.

Related Policies

This Privacy Policy should be read alongside the nbajjee Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the platform and our handling of your data.