Privacy Policy — nbaji app

1 Information We Collect

nbaji app collects personal information from users in several ways — directly when you register or interact with the platform, automatically as you browse and play, and occasionally from third-party sources where permitted. We limit collection to the minimum data necessary to deliver our services safely, legally, and effectively.

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you may provide the following categories of personal information:

1.2 Information Collected Automatically

When you access and use nbaji app, our platform automatically records certain technical data about your device and session. This data is collected primarily for security purposes, fraud prevention, and platform performance optimisation:

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers
• Usage data: Pages visited, games played, time and duration of sessions, betting history, login timestamps
• Location data: Approximate geographic location inferred from IP address (country and city level only — we do not collect precise GPS coordinates)
• Cookie and tracking data: Session identifiers, preference cookies, analytics data (see Section 4 for full cookie details)

1.3 Information from Third Parties

In certain circumstances, nbaji app may receive information about you from third-party sources. This includes identity verification results from KYC service providers, fraud risk scores from payment processors, and transaction confirmation data from mobile banking partners such as bKash, Nagad, and Rocket. We handle all third-party sourced data with the same level of care and security applied to data you provide directly.

2 How We Use Your Information

Every use of your personal data by nbaji app is grounded in a legitimate purpose. The following table summarises the primary purposes for which we process your information, along with the legal basis that justifies each use:

nbaji app will never use your personal data for any purpose that is incompatible with those stated above without first obtaining your explicit consent or establishing a new legitimate basis. Where processing is based on your consent (for example, receiving promotional emails about new slots, cricket betting offers, or Eid special bonuses), you have the right to withdraw that consent at any time by contacting [email protected] or updating your account preferences.

3 Data Sharing and Third Parties

nbaji app does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only where it is necessary to deliver our services or where we are legally required to do so. The categories of third parties with whom we may share your data are as follows:

3.1 Payment and Banking Partners

To process your deposits and withdrawals, nbaji app shares the minimum required financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks such as Visa and Mastercard. These partners are bound by their own strict data protection obligations and are permitted to use your data only for the specific transaction being processed.

3.2 Identity Verification Providers

We work with regulated KYC and identity verification service providers to validate the identity and age of our players in compliance with our legal obligations. These providers receive only the identity documents and data necessary to complete the verification check and are strictly prohibited from using this data for any other purpose.

3.3 Game Content Providers

Casino games on nbaji app are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, technical session data (such as a session token and stake amounts) may be transmitted to the relevant provider's servers to enable gameplay. These providers do not receive your identity or contact information and are bound by contractual data protection obligations.

3.4 Legal and Regulatory Authorities

nbaji app may be required by law to disclose your personal information to government bodies, law enforcement agencies, or financial intelligence units in response to a lawful request, court order, or regulatory investigation. In such cases, we will disclose only the minimum data required to satisfy the legal obligation. Where permitted by law, we will notify you of any such disclosure.

4 Cookies and Tracking Technologies

nbaji app uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how users interact with our site so we can improve the experience over time. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on nbaji app:

nbaji app does not use third-party advertising cookies or behavioural tracking cookies. We do not participate in cross-site tracking networks or retargeting programmes. Strictly necessary and security cookies cannot be disabled as they are essential for the platform to function. Functional and analytics cookies may be managed through your browser settings, though disabling them may affect your experience on the platform.

5 Data Retention and Storage

nbaji app retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial): retained for the lifetime of your account plus a minimum of five years after account closure, in line with standard financial record-keeping obligations.
• KYC and verification documents: retained for a minimum of five years following the completion of the KYC process or account closure, whichever is later.
• Transaction records: retained for a minimum of five years from the date of the transaction, in compliance with anti-money laundering requirements.
• Support correspondence: retained for up to three years from the date of the last interaction, to provide continuity of service and to resolve any subsequent disputes.
• Analytics and usage data: retained in anonymised or aggregated form for up to two years for platform improvement purposes.
• Marketing consent records: retained for the duration of your consent plus two years, to demonstrate compliance with opt-in requirements.

All personal data held by nbaji app is stored on secure servers protected by access controls, encryption at rest, and regular security audits. Where data is processed by third-party service providers on our behalf, we require those providers to maintain equivalent security standards through contractual data processing agreements.

6 Your Privacy Rights

nbaji app respects your rights with regard to your personal data. As a registered user of the platform, you are entitled to exercise the following rights at any time by contacting our support team at [email protected]:

6.1 Right of Access

You have the right to request a copy of the personal data that nbaji app holds about you. We will respond to verified access requests within 10 business days and provide your data in a clear, portable format.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account details such as your contact email or phone number, you may be able to update these directly through your account settings. For identity data, please contact our support team.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where you object to processing and there is no overriding legitimate interest. Note that certain data must be retained to comply with legal obligations (such as AML record-keeping requirements) even after you request erasure. In such cases, we will inform you of the specific categories of data that must be retained and the reason for retention.

6.4 Right to Object and Restrict Processing

You have the right to object to processing of your personal data where that processing is based on our legitimate interests, and to request restriction of processing in certain circumstances (for example, while an accuracy dispute is being resolved). Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Security Measures

nbaji app implements a comprehensive set of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. Our security programme includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption at rest for all stored personal data and financial records
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication for all internal administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated fraud detection systems that monitor for unusual transaction patterns, suspicious login attempts, and potential account takeover activity in real time
• Staff training on data protection best practices, phishing awareness, and secure data handling procedures
• Incident response procedures for rapid detection, containment, and notification in the event of a data security incident

Despite these measures, no system is entirely immune to security risk. In the unlikely event of a data breach that poses a significant risk to your rights or interests, nbaji app will notify affected users without undue delay and take all reasonable steps to contain and remediate the incident. You can help protect your account by using a strong, unique password and never sharing your login credentials with anyone.

8 Changes to This Privacy Policy

nbaji app reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect developments in our services, updates to applicable legal requirements, or improvements to our data handling practices. When material changes are made to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered users via their registered email address.

We encourage all nbaji app users to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the nbaji app platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you must discontinue use of the platform and contact us at [email protected] to request account closure and data deletion in accordance with your rights under Section 6.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of this Policy are superseded by this current version as of the effective date stated above. For a historical record of Privacy Policy versions, please contact [email protected].