nabaji
Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by nabaji, the operator of the online casino and sports betting platform available at nabaji.vip ("the Platform"). It describes how nabaji collects, processes, stores, shares, and protects the personal data of individuals who visit the Platform, register for an account, make a deposit, place a bet, or otherwise interact with our services ("you", "your", "the Player").

This Policy applies to all personal data processing activities carried out by nabaji in connection with the Platform. It covers data collected through the website, through our customer support channels (including live chat and email), through payment processing interactions, and through any other means by which you communicate with us. It does not cover the data practices of third-party websites that may be linked from the Platform; those sites operate under their own privacy policies.

By creating an account on nabaji or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood how nabaji handles your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the Platform and contact our support team at [email protected] to arrange account closure.

2 Information We Collect

nabaji collects personal data from you in several ways: directly when you provide it to us during registration or account management, automatically when you use the Platform, and from third parties such as payment providers and identity verification services. The categories of personal data we collect include the following:

Identity & Contact Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the 18+ age requirement).
• Email address registered to your nabaji account.
• Mobile phone number used for account verification and two-factor authentication.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other) and postal code.
• National Identification Card (NID) number or passport number, collected as part of our KYC process.

Financial & Transaction Information

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers used to fund your nabaji account.
• Bank account details (account number and bank name) for players who use bank transfer methods such as BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, or Sonali Bank.
• Deposit amounts, withdrawal amounts, transaction dates, and transaction reference numbers.
• Bonus and promotional fund activity associated with your account.

Technical & Usage Information

• IP address and approximate geolocation at the time of login and key account events.
• Device type, operating system, browser type and version.
• Pages visited on the Platform, time spent on each page, game titles accessed, and betting history.
• Session duration, login and logout timestamps.
• Referral source (the URL or campaign that directed you to nabaji, if applicable).

Communications Data

• The content of messages you send to nabaji via live chat, email ([email protected]), or any in-platform messaging feature.
• Records of support tickets raised, their resolutions, and the dates of all interactions.

The table below summarises the primary data categories, their source, and the legal basis on which nabaji processes them:

3 How We Use Your Data

nabaji uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first notifying you and, where required, obtaining your consent.

• Account creation and management: To register your account, verify your identity, maintain your player profile, and communicate essential account information to you.
• Processing transactions: To handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and to maintain an accurate transaction history in your account.
• Identity and age verification (KYC): To verify that you are aged 18 or above and that the identity information you have provided is accurate, in compliance with our legal obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, use of automated betting software, and any other prohibited conduct listed in our Terms & Conditions.
• Customer support: To respond to queries, complaints, and support tickets submitted via live chat, email, or any other support channel.
• Platform improvement: To analyse usage patterns, game performance data, and player feedback in order to improve the quality, reliability, and range of services offered on nabaji.
• Personalisation: To tailor the content, promotions, and game recommendations you see on the Platform based on your gaming preferences and history, where you have not opted out of personalisation.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to apply deposit limits or self-exclusion measures you have requested, and to contact you with responsible gaming information where appropriate.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about bonuses, special events, and new games — but only where you have given explicit consent to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].
• Legal and regulatory compliance: To fulfil our obligations under applicable laws and regulations, including anti-money laundering requirements, and to respond to lawful requests from government authorities or courts.

4 Data Sharing & Third Parties

nabaji does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: We share necessary financial and identity information with bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks solely for the purpose of processing your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the stated purpose.
• Identity verification partners: Where required, we may share identification documents and personal details with KYC verification service providers to confirm your age and identity. These partners operate under strict data processing agreements with nabaji.
• Game content providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive certain technical data (such as your player session token and game history) that is necessary to deliver their games on the nabaji platform. They do not receive your full personal profile.
• Fraud detection and security services: We use specialist third-party tools to assist with fraud monitoring, bot detection, and security analysis. These tools may process technical and usage data in order to identify suspicious activity.
• Legal and regulatory authorities: nabaji will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, by a valid court order, or when we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of nabaji's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players in advance of any such transfer and the new privacy terms that will apply.

5 Cookies & Tracking Technologies

nabaji uses cookies and similar tracking technologies (collectively "cookies") on the Platform. Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide analytical information to site operators.

nabaji uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and load-balancing cookies that distribute server traffic. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, your last viewed game category, and your responsible gaming settings — so that you do not have to re-enter them on every visit.
• Analytics cookies: These cookies collect anonymous information about how players use the Platform, including which pages are visited most frequently and how players navigate between sections. This data helps nabaji improve the Platform. Analytics data is aggregated and does not identify individual players.
• Marketing cookies: Where you have given explicit consent, nabaji may use cookies to track your interaction with promotional content and to deliver targeted offers relevant to your gaming preferences. You may withdraw consent for marketing cookies at any time.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the nabaji Platform. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect your user experience.

6 Data Retention

nabaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with our legal and regulatory obligations. The specific retention periods we apply are as follows:

When the applicable retention period expires, nabaji will securely delete or anonymise the personal data in question. Anonymised data (data from which all identifying information has been permanently removed) may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

7 Your Privacy Rights

As a player on the nabaji platform, you have a number of rights in relation to the personal data we hold about you. nabaji is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You have the right to request a copy of the personal data nabaji holds about you. We will respond to valid access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (such as email address or phone number) directly through your account dashboard.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that nabaji delete the personal data we hold about you. This right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum period and cannot delete them early even on request.
• Right to restriction of processing: You have the right to request that nabaji restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data we hold, while we verify the correction.
• Right to data portability: Where data is processed on the basis of your consent or for the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to nabaji processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, though this right is subject to nabaji demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where nabaji's processing of your personal data is based on your consent (for example, for marketing communications or optional analytics cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8 Data Security

nabaji takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment details, and personal information in transit.
• Data encryption at rest: Sensitive data stored in nabaji's databases — including KYC documents and financial records — is encrypted at rest using strong encryption standards.
• Access controls: Access to systems containing personal data is restricted to authorised nabaji personnel on a strict need-to-know basis. All internal access is logged and periodically audited.
• Two-factor authentication (2FA): nabaji offers two-factor authentication for player accounts to provide an additional layer of security beyond the standard username and password combination.
• Penetration testing and security audits: Our Platform undergoes regular security assessments, including penetration testing by qualified security professionals, to identify and remediate potential vulnerabilities before they can be exploited.
• Staff training: All nabaji employees who handle personal data receive regular training on data protection obligations, secure data handling procedures, and how to respond to data security incidents.
• Incident response: nabaji maintains a documented data breach response procedure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the breach.

While nabaji employs robust security measures, it is important to acknowledge that no method of electronic transmission or storage is completely secure. You also play a role in keeping your account safe — please use a strong, unique password for your nabaji account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect unauthorised access to your account, contact our support team immediately at [email protected].