nbajae Privacy Policy

nbajae ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all users who access or use the services available at https://nbajae.app. This Privacy Policy explains the categories of personal data we collect, the purposes for which that data is used, the basis on which it is processed, how long it is retained, and the rights available to you as a data subject.

By registering an account on the nbajae Platform or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Privacy Policy forms an integral part of our Terms & Conditions and should be read alongside that document.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The revised Policy will be published on this page with a new effective date. We encourage you to review this page periodically to stay informed about how we protect your information.

For the purposes of this Privacy Policy, nbajae acts as the data controller in respect of personal data collected through the Platform. All enquiries, requests, and complaints relating to the handling of your personal data should be directed to our support team at [email protected]. We aim to acknowledge all privacy-related correspondence within five (5) business days.

We collect personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in limited circumstances from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

3.1 Registration and Account Data
When you create an account on nbajae, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and maintain your account, verify your identity, and comply with our age verification obligations. Players must be 21 years of age or older to register.

3.2 Identity Verification Data
To fulfil our Know Your Customer (KYC) obligations and to prevent fraud and money laundering, we may request copies of government-issued identity documents (such as a National Identity Card or passport), proof of address (such as a utility bill or bank statement dated within the last three months), and proof of payment method ownership. This data is processed securely and retained only for the period required by applicable anti-money laundering regulations.

3.3 Financial and Transaction Data
We collect records of deposits, withdrawals, and gaming transactions conducted through your account. This includes payment method identifiers (such as the last four digits of a card, or a registered bKash, Nagad, or Rocket mobile number), transaction amounts in Bangladeshi Taka (৳), transaction dates, and payment processing references. We do not store full card numbers or full mobile banking credentials on our servers.

3.4 Gaming and Betting Activity Data
We maintain records of your gaming sessions, game choices, bet amounts, outcomes, and bonus usage. This information is used to operate the Platform, resolve disputes, detect irregular activity, and — where you have opted in — to personalise promotional offers relevant to your gaming preferences.

3.5 Technical and Device Data
When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, session duration, and pages visited. This data is collected through server logs and analytics tools and is used to maintain Platform security, diagnose technical issues, and improve the user experience.

3.6 Communications Data
If you contact our support team, submit a complaint, or communicate with us via any channel, we retain records of those communications, including the content of messages, the date and time of correspondence, and any resolution reached. This data is used to handle your enquiry, train support staff, and maintain a record of our interactions with you.

3.7 Cookies and Tracking Technologies
The Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and gather anonymised analytics data about Platform usage. For further detail, please refer to Section 9 of this Policy (Cookies).

We process your personal data only where we have a lawful basis to do so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing your registration data, identity verification data, and financial transaction data is necessary to provide you with the services you have signed up for and to perform our obligations under the Terms & Conditions.
• Legal obligation: We are required by applicable anti-money laundering, counter-terrorism financing, and KYC regulations to collect and retain certain categories of personal data for specified periods.
• Legitimate interests: We process technical, device, and gaming activity data to maintain Platform security, detect and prevent fraud, resolve disputes, and improve our services. We have assessed that our legitimate interests are not overridden by your rights and freedoms in respect of this processing.
• Consent: Where you have opted in to receive marketing communications or personalised promotional offers, we process your data for those purposes on the basis of your consent. You may withdraw consent at any time by contacting us at [email protected].

The personal data we collect is used for the following purposes:

• Creating and maintaining your account and verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.
• Providing access to games, live casino tables, cricket and sports betting markets, slots, and fishing games.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
• Complying with our legal and regulatory obligations, including retention of financial records.
• Responding to customer support queries, complaints, and dispute resolution requests.
• Sending you account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional and bonus offers where you have given your consent to receive marketing communications.
• Improving the Platform through anonymised analytics, A/B testing, and performance monitoring.
• Enforcing our Terms & Conditions and protecting the rights of nbajae and other players.

6.1 nbajae does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the circumstances described in this section.

6.2 Payment Processors: We share the minimum necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — in order to process your deposits and withdrawals. These partners are independently responsible for their own data processing practices and are bound by their own privacy policies.

6.3 Game Providers: We share session identifiers and account tokens (not personal identity data) with our third-party game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to enable you to access their game content. These providers are certified and operate under strict data security requirements.

6.4 Identity Verification Providers: We use accredited third-party KYC service providers to verify the authenticity of identity documents. These providers process your verification documents on our behalf and are contractually bound to process your data only for the purpose of identity verification.

6.5 Legal and Regulatory Disclosure: We may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

6.6 Business Transfers: In the event of a merger, acquisition, or transfer of all or part of our business, your personal data may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer and your rights in connection with it.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for three (3) years from the date of each session for dispute resolution and fraud detection purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Technical and device data: Retained in anonymised or aggregated form for up to twelve (12) months for analytics purposes.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

You have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) days.

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may ask us to restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: You may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your personal data where it is based on our legitimate interests, unless we can demonstrate compelling legitimate grounds that override your interests.

9.1 The nbajae Platform uses cookies — small text files stored on your device — and similar technologies including local storage and session tokens, to operate and improve the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in during a gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language or last-used payment method, to improve your experience on return visits.
• Analytics cookies: Used to collect anonymised information about how visitors use the Platform, including which pages are visited most frequently and how long sessions last. This data is used solely to improve the Platform and is not linked to your personal identity.

9.2 You can control cookie settings through your browser's privacy preferences. Please note that disabling strictly necessary cookies may prevent the Platform from functioning correctly. We do not use cookies to serve third-party advertising or to track your activity on other websites.

nbajae implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive personal data at rest, strict access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments, and two-factor authentication options for account access.

While we take all reasonable precautions, no method of electronic transmission or storage is entirely risk-free. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay.

The nbajae Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately close that account and delete all associated personal data. If you believe a minor has accessed the Platform, please notify us immediately at [email protected].

The nbajae Platform primarily serves players located in Bangladesh and processes personal data within the region. Where data is transferred to third-party service providers — such as game providers or identity verification services — operating in other jurisdictions, we ensure that appropriate safeguards are in place to protect your personal data, including contractual obligations requiring those providers to process your data to the same standard as we do ourselves.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which nbajae handles your personal data, please contact our support team:

Email: [email protected]
Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

We take all privacy complaints seriously and will work to resolve your concern promptly. If you remain dissatisfied with our response, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.