Privacy Policy — nabajie

This Privacy Policy ("Policy") describes how nabajie ("we", "us", "our", or the "Platform") collects, stores, uses, shares, and protects personal data belonging to players and visitors ("you" or "your") who access or use the nabajie online casino and sports betting platform, whether via desktop browser or mobile device, from Bangladesh or any other supported location.

By registering an account on nabajie or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any part of this Policy, please discontinue use of the platform and contact Live Chat to request account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which contain additional provisions relevant to your use of nabajie.

nabajie collects personal data through several channels: directly from you during registration and account use, automatically through your device and browser as you navigate the platform, and from trusted third-party partners such as payment processors and identity verification services. The categories of data we collect are as follows:

1.1 Registration & Identity Data

When you create a nabajie account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (required for age verification — players must be 18 or above)
• Email address
• Bangladesh mobile number linked to your preferred MFS wallet (bKash, Nagad, Rocket, or Upay)
• Residential address (city, district, and postal code within Bangladesh)
• Username and encrypted account password

1.2 KYC Verification Data

To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, we may collect:

• Scanned copy or photograph of a government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address document dated within 90 days (utility bill, bank statement, or MFS account statement)
• Proof of payment method ownership (screenshot of registered bKash, Nagad, or Rocket account in your name)
• Selfie or video confirmation as requested by our compliance team

1.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Transaction amounts in BDT (Bangladeshi Taka)
• Payment method identifiers (e.g., the last four digits of a Visa/Mastercard, or the registered mobile number of a bKash/Nagad account)
• Transaction timestamps and confirmation references
• Deposit and withdrawal history associated with your account

1.4 Gameplay & Betting Activity Data

• Bet history including sport, market, odds, stake, and outcome
• Casino game session logs including game name, provider, session duration, wager amounts, and results
• Bonus claim and wagering activity
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

1.5 Technical & Device Data

We automatically collect technical data each time you access the platform:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Session duration, pages visited, and click-path data
• Referring URL (the site or link you came from before landing on nabajie)
• Cookie identifiers and similar tracking technologies (see Section 4)

1.6 Communications Data

• Live Chat transcripts between you and nabajie support agents
• Email correspondence with the support team
• Records of promotional communications sent to you and your opt-in/opt-out preferences

nabajie uses the personal data we collect for specific, legitimate purposes directly related to delivering and improving the platform, ensuring legal compliance, and protecting both players and the platform from harm. We do not use your data for any purpose that is incompatible with the purposes listed below without obtaining your explicit consent.

nabajie does not use automated decision-making or profiling that produces legally significant effects on players, except where required by AML regulations (for example, automated transaction monitoring that may trigger a review of suspicious activity). In such cases, you have the right to request human review of any automated decision that has affected your account.

nabajie does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

3.1 Payment Processing Partners

To process your deposits and withdrawals in BDT, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks. These partners are bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing the transaction.

3.2 Identity Verification Services

Where KYC verification is conducted via a third-party identity verification provider, your submitted documents and personal details are securely transmitted to that provider for verification purposes only. Results are returned to nabajie in a pass/fail format; raw document scans are not retained by nabajie beyond the verification period except where required by law.

3.3 Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (non-identifying, pseudonymised player session identifiers) to facilitate game delivery and RNG certification. These providers do not receive your full name, address, or financial data.

3.4 Legal and Regulatory Authorities

nabajie may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a lawful request, court order, or applicable regulatory obligation. In such cases, we disclose only the minimum data required to comply with the legal demand.

3.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of nabajie's business assets, player personal data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified via email and the updated Privacy Policy will be published on this page prior to any such transfer taking effect.

nabajie uses cookies and similar tracking technologies (including local storage and session storage) to keep the platform functional, secure, and user-friendly. The table below describes the categories of cookies we use:

nabajie does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies. We do not share cookie-derived data with advertising networks.

You can manage your cookie preferences by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For analytics and functional cookies, you can manage your preferences directly within your account dashboard settings.

nabajie retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting obligations. The standard retention periods we apply are as follows:

• Account and registration data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure (to meet AML record-keeping requirements)
• KYC verification documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later
• Financial transaction records: Retained for a minimum of 5 years in accordance with standard financial record-keeping practices
• Gameplay and betting history: Retained for a minimum of 3 years from the date of the activity
• Live Chat and email support records: Retained for 2 years from the date of the interaction
• Technical and device logs: Retained for up to 12 months on a rolling basis
• Marketing consent records: Retained for the duration of your account, plus 2 years following closure or opt-out, to evidence your consent history

When data reaches the end of its applicable retention period and there is no longer any legal or operational basis for retaining it, nabajie will securely delete or irreversibly anonymise that data. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and business intelligence purposes.

nabajie takes the security of your personal data seriously. We implement a multi-layered approach to information security designed to protect against unauthorised access, accidental loss, destruction, or disclosure of your data.

The security measures we maintain include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your device and nabajie servers is encrypted using Transport Layer Security (TLS 1.2 or higher)
• Encrypted data storage: Sensitive data fields including passwords (hashed using bcrypt), payment identifiers, and KYC documents are encrypted at rest
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security
• Fraud monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and other security anomalies
• Regular security reviews: nabajie conducts periodic security assessments of its platform infrastructure and data handling practices

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, nabajie will notify affected players as promptly as practicable and will take all reasonable steps to contain the breach and mitigate its effects.

You also have a role to play in keeping your account secure. You should use a strong, unique password for your nabajie account, never share your login credentials with anyone, and contact Live Chat immediately if you suspect unauthorised access to your account.

nabajie respects your rights over your personal data. As a registered player, you may exercise the following rights at any time by contacting our support team via Live Chat or at support@nabajie:

• Right of Access: You may request a copy of the personal data nabajie holds about you. We will provide a structured summary of your data within 14 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update most account details directly via your account settings page; for KYC-related corrections, please contact Live Chat.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that we are obligated to retain certain data (KYC records, financial transaction data) for legal and regulatory compliance periods as described in Section 5, and these records cannot be erased on request during the retention period.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data.
• Right to Data Portability: Where technically feasible, you may request a machine-readable export of your personal data (account details, transaction history, gameplay history).
• Right to Object to Marketing: You may opt out of promotional emails and SMS communications at any time via your account dashboard or by contacting support. Opting out of marketing does not affect essential transactional notifications.
• Right to Object to Automated Processing: Where any automated decision-making has materially affected your account (such as an AML-triggered account flag), you may request human review of that decision.

We will respond to all data rights requests within 14 calendar days. In complex cases, we may extend this period by a further 14 days and will notify you of the extension with an explanation. Identity verification may be required before we can action a data rights request, to ensure that your data is not disclosed to an unauthorised third party.

nabajie is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration and KYC process, and we take all reasonable steps to prevent underage players from accessing the platform.

If we discover or have reasonable grounds to believe that a registered account is held by a person under 18 years of age, we will:

• Immediately suspend the account and block access to all platform features
• Freeze any funds associated with the account pending investigation
• Delete the personal data of the minor to the extent permitted by law once the investigation is resolved, retaining only the minimum data necessary to document the incident and prevent future underage access attempts
• Refund deposits where the funds can be confirmed as belonging to a parent or guardian, subject to satisfactory verification

Parents and guardians who believe a minor may have accessed nabajie using their device or payment credentials should contact our support team immediately via Live Chat or at support@nabajie. We will treat such reports with the highest priority.

The nabajie platform integrates with a number of third-party technology and service providers to deliver a complete and reliable betting and casino experience. When you use features powered by these providers, limited data may be processed by them in accordance with their own privacy policies. The key third-party integrations on nabajie are described below:

9.1 Game Providers

nabajie integrates game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own game servers and may process pseudonymised session data to deliver game results, verify RNG outcomes, and handle in-game mechanics. Game providers do not receive your full name, physical address, or payment details.

9.2 Payment Processors

Deposits and withdrawals are facilitated through payment processing partners including bKash, Nagad, Rocket, Upay, and international card networks (Visa and Mastercard). These partners independently collect and process payment data in accordance with their own privacy policies and applicable financial regulations. nabajie recommends reviewing the privacy policies of your chosen payment method provider for full details of their data practices.

9.3 Analytics Providers

We may use analytics tools to collect aggregated, non-personally-identifiable data about how players navigate and interact with nabajie. This data is used solely to improve platform performance, identify technical issues, and optimise the user experience. No analytics provider receives your name, financial data, or KYC documentation.

9.4 Customer Support Tools

Our Live Chat support system is powered by a third-party customer communications platform. Support conversations are stored securely and accessible only to authorised nabajie support staff. Chat transcripts are not shared with any external party except as required by law.

9.5 Identity Verification Services

Where automated KYC document checks are required, nabajie may use a specialist third-party identity verification provider. Documents submitted for KYC are transmitted to that provider via encrypted connection and processed solely for verification purposes. The provider's data retention practices are governed by their own privacy policy and any applicable contractual data processing agreements with nabajie.

nabajie reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes to this Policy, we will publish the updated version on this page and update the "Last Updated" date shown in the Document Information panel within the hero section above.

Where a change is significant — for example, where we introduce a new purpose for processing your data or change the categories of third parties with whom we share data — we will provide advance notice via email to your registered address or via an in-platform notification, where practicable, at least 14 days before the change takes effect.

Minor amendments, such as typographical corrections, clarifications that do not alter the substance of a provision, or updates to reflect a change in a payment partner's name, may be made without separate notification. It is your responsibility to review this Policy periodically to stay informed of any updates.

Your continued use of nabajie following the publication of a revised Privacy Policy constitutes your acceptance of the updated data practices. If you do not agree with an updated version of this Policy, you must stop using the platform and may request account closure by contacting Live Chat or emailing support@nabajie.

All previous versions of this Policy are superseded by the current published version. If you require a copy of a previous version for legal or compliance purposes, please contact our support team with your request and the approximate date of the version you require.