nbaazi Privacy Policy

When you interact with the nbaazi platform — whether browsing as a guest, registering an account, making a deposit, placing a bet, or contacting support — certain personal data is collected. We collect only the data that is necessary for the specific purpose it serves. The categories of data we collect are as follows:

Registration & Identity Data

When you create a nbaazi account, we collect your full legal name, date of birth, email address, mobile phone number (used for account verification and bKash/Nagad wallet linkage), and a username chosen by you. This information is required to establish your identity, verify that you meet the minimum age requirement of 18 years, and prevent duplicate account creation.

KYC Verification Documents

To comply with our Know Your Customer obligations and prevent fraud, we may collect copies of government-issued identity documents, including your Bangladesh National Identity Card (NID), valid passport, or driving licence. We may also collect a photograph of your payment method screen (e.g., a bKash or Nagad account screen showing your registered name and number) to confirm that deposits originate from a payment method in your own name.

Financial & Transaction Data

We record all deposit and withdrawal transactions on your account, including the amount in BDT (৳), timestamp, payment method used, and transaction reference number. We do not store full card numbers or mobile banking PINs. Payment data is processed through encrypted channels provided by our payment partners.

Gameplay & Betting Activity

We collect detailed records of your betting and gaming activity, including: games played, bet amounts, outcomes, session durations, bonus usage, and responsible gaming tool activations. This data is used for account management, dispute resolution, fraud detection, and to personalise your experience on the platform.

Technical & Device Data

We automatically collect certain technical data when you access nbaazi, including: IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data helps us secure the platform, detect suspicious login attempts, and optimise the interface for devices commonly used by players in Dhaka, Chittagong, Sylhet, and other regions across Bangladesh.

Communications Data

If you contact nbaazi via live chat or email at [email protected], we retain a record of the communication, including the contents of messages and the date and time of contact. This enables us to maintain continuity of support and resolve disputes accurately.

nbaazi processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which your data is processed are:

Account Operation & Service Delivery

The core purpose of collecting your personal data is to create and maintain your nbaazi player account, process deposits and withdrawals in BDT (৳), settle bets and game outcomes, apply bonuses and promotions, and provide you with 24/7 English-language support. Without this processing, we cannot operate your account or deliver our services.

Identity Verification & Fraud Prevention

We use your registration data, KYC documents, device information, and transaction records to verify your identity, confirm that you meet the 18+ age requirement, detect and prevent fraudulent activity (including multi-accounting and payment fraud), and comply with anti-money laundering (AML) obligations. Automated systems flag unusual patterns; flagged cases are reviewed by our compliance team.

Responsible Gaming Compliance

nbaazi uses your gameplay history, session data, and deposit/withdrawal patterns to monitor for signs of problem gambling behaviour and to enforce the responsible gaming tools you have activated (deposit limits, loss limits, self-exclusion). 18+ This processing is a core commitment of our platform and cannot be opted out of.

Platform Improvement & Analytics

Aggregated, anonymised technical and gameplay data is used to understand how players use the nbaazi platform, identify performance bottlenecks, improve game loading speeds, and optimise the mobile experience for players accessing via smartphones in Bangladesh. Individual players are not identified in analytics reports.

Marketing Communications

With your explicit consent at the time of registration, nbaazi may send you promotional communications about new games, bonuses, and seasonal offers (e.g., Eid promotions, BPL cricket season offers, Pohela Boishakh specials) via email or SMS. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support.

Legal & Regulatory Obligations

We retain and process certain data as required to comply with applicable laws and to respond to lawful requests from regulatory authorities or law enforcement agencies. This may include disclosing transaction records, identity documents, or account activity where required by a valid legal order.

nbaazi uses cookies and similar browser-storage technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players navigate the site. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain your login session. nbaazi uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

Categories of Cookies Used by nbaazi

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security state (including two-factor authentication tokens), and enable core features such as the game lobby and deposit flow. These cookies cannot be disabled without breaking platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the nbaazi platform — which pages are visited most frequently, how long sessions last, and where players encounter errors. This data helps us improve the platform. No personally identifiable information is included in analytics data.
• Functional Cookies: These cookies remember your preferences such as your chosen language display (English), your responsible gaming settings, and any interface customisations you have applied. Disabling these cookies may affect your personalised experience.
• Security Cookies: These cookies assist our fraud detection and bot-prevention systems. They help us distinguish legitimate player sessions from automated scripts and identify unusual login patterns that may indicate account compromise.

What We Do Not Use

nbaazi does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site tracking technology that would allow external advertising networks to build profiles of your behaviour beyond the nbaazi platform. Our cookie implementation is limited to what is operationally necessary.

Managing Your Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies will impair your ability to use the nbaazi platform, including logging into your account. Instructions for managing cookies are available in the help documentation for all major browsers (Chrome, Firefox, Safari, Edge, Samsung Internet). If you are accessing nbaazi from a device in Dhaka, Chittagong, or elsewhere in Bangladesh, the same browser controls apply regardless of your mobile operator or internet service provider.

nbaazi does not sell your personal data. We share data with third parties only where it is strictly necessary to operate our services, comply with legal obligations, or protect the security of the platform and its players. All third parties who receive player data from nbaazi are bound by data processing agreements that restrict them from using the data for any purpose other than the specific service they provide to us.

Payment Processing Partners

To process deposits and withdrawals, nbaazi shares transaction data (amount, timestamp, account reference) with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Islami Bank, Sonali Bank, BRAC Bank, Visa, Mastercard, and supported cryptocurrency gateway providers. Each payment partner operates under their own privacy policy and security standards. nbaazi does not transmit your NID or passport data to payment partners.

Game Software Providers

Games on the nbaazi platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised session tokens and game-round data necessary to operate the game. They do not receive your full personal profile, payment details, or identity documents.

Fraud Prevention & Security Services

nbaazi uses industry-standard fraud detection services that may process your IP address, device fingerprint, and behavioural data to identify suspicious activity. These services act as data processors under our instruction and do not independently control or retain your data beyond what is necessary for their fraud detection function.

Legal & Regulatory Disclosure

We may disclose personal data — including identity documents, transaction records, and account activity logs — to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when we receive a valid legal order requiring disclosure. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that nbaazi undergoes a merger, acquisition, or sale of all or part of its business assets, player account data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and provided with the opportunity to close your account if you do not wish your data to be transferred under the new entity's privacy terms.

nbaazi retains your personal data for as long as your account is active and for a defined period thereafter, in order to fulfil legal, regulatory, and operational obligations. We do not retain data indefinitely — once the applicable retention period has expired and there is no outstanding legal basis for continued storage, data is securely deleted or anonymised.

Active Account Data

While your nbaazi account is active, all associated personal data — including registration details, KYC documents, transaction history, gameplay records, and support communications — is retained in full. This is necessary to operate your account, resolve disputes, and comply with our regulatory obligations.

Post-Closure Retention

Following account closure (whether initiated by you or by nbaazi), we retain your personal data for a minimum period of five (5) years from the date of closure. This retention period is required to:

• Comply with anti-money laundering (AML) record-keeping requirements
• Resolve any disputes or claims that arise after account closure
• Respond to lawful requests from regulatory authorities or law enforcement
• Prevent re-registration by individuals who have been excluded or banned for fraud or underage use

KYC Document Retention

Identity documents submitted for KYC verification are retained for a minimum of five (5) years post-account closure. After this period, original document images are permanently deleted from our systems and replaced with a confirmation record noting that verification was completed.

Marketing Data Retention

If you have consented to receive marketing communications, your contact details and marketing preferences are retained until you withdraw consent. Upon withdrawal of marketing consent, your details are removed from active marketing lists within 48 hours (BST, UTC+6). A suppression record noting your opt-out is retained to prevent accidental re-subscription.

Technical & Log Data

Server logs, IP records, and device session data are retained for a rolling 12-month period, after which they are automatically purged unless flagged as part of an active fraud investigation or legal proceedings.

nbaazi implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, we apply industry-standard controls that are proportionate to the nature and sensitivity of the data we hold.

Technical Security Controls

• TLS 1.3 Encryption in Transit: All data transmitted between your device and nbaazi servers is encrypted using TLS 1.3, preventing interception by third parties on the same network.
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including KYC documents, payment records, and account credentials — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. 2FA adds an additional verification layer that protects your account even if your password is compromised.
• Hashed Passwords: nbaazi does not store your password in plain text. Passwords are hashed using a secure one-way algorithm (bcrypt). Not even nbaazi staff can read your password — which is why we will never ask you for it.
• Intrusion Detection Systems: Automated systems monitor our infrastructure 24/7 for anomalous access patterns, brute-force login attempts, and data exfiltration indicators.

Organisational Security Controls

Access to player personal data within nbaazi is restricted on a strict need-to-know basis. Only staff members whose role specifically requires access to personal data (e.g., KYC compliance officers, fraud investigators, support agents) are granted access, and only to the minimum data necessary for their role. All staff with access to personal data are subject to confidentiality obligations.

Reporting a Security Concern

If you believe your nbaazi account has been compromised, or if you discover a potential security vulnerability in our platform, contact our support team immediately via live chat in your account dashboard or by email at [email protected]. Security concerns are escalated to our technical team within one hour of receipt and treated as highest priority.

As a nbaazi player, you hold specific rights with respect to the personal data we hold about you. nbaazi is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our support team via live chat in your account dashboard or email [email protected]. We will respond to all verified privacy rights requests within 72 hours (BST, UTC+6).

Right of Access

You have the right to request a copy of the personal data nbaazi holds about you. Upon a verified request, we will provide a structured summary of your account data, including: registration details, KYC status, transaction history, gameplay records, and any marketing preferences on file. We will fulfil access requests within 30 days of receipt.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered email address has changed, or if your name was recorded incorrectly at registration, you may request an update. Please note that changes to identity data (name, date of birth) may require re-submission of KYC documents for verification before the update is applied.

Right to Erasure

You may request deletion of your personal data in certain circumstances — most commonly when you close your account and the applicable retention period has expired, or where data was collected on the basis of consent that you have since withdrawn. Please note that nbaazi cannot delete data that we are legally required to retain (e.g., AML records for the mandatory five-year post-closure period). We will clearly communicate which data can be deleted immediately and which must be retained for legal reasons.

Right to Restrict Processing

You may request that nbaazi restrict the processing of your personal data in specific situations — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and we are assessing your objection. Restriction means we will continue to store your data but will pause active processing until the matter is resolved.

Right to Data Portability

Where nbaazi processes your personal data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider if you wish.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time via your account settings or by contacting support. Opt-out requests are processed within 48 hours and you will receive a confirmation once complete.

Rights Related to Automated Decision-Making

nbaazi uses automated systems for fraud detection and responsible gaming monitoring. Where an automated decision has a significant effect on your account (for example, an automated account suspension triggered by a fraud flag), you have the right to request human review of that decision. Contact support immediately if you believe an automated decision has been applied to your account incorrectly.

nbaazi reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this policy, we will notify you through one or more of the following channels:

• A prominent notice displayed on the nbaazi platform homepage and login screen for a minimum of 14 days following the update
• An in-platform notification sent to your account dashboard
• An email notification sent to your registered email address (if you have opted into platform communications)

Effective Date & Version History

This Privacy Policy is effective as of 1 January 2026. The effective date at the top of this document will be updated each time a new version is published. Your continued use of the nbaazi platform after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should discontinue use of the platform and contact support to request account closure.

Minor Updates

Non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of our data practices, or updates to contact details — may be made without advance notice. We recommend reviewing this Privacy Policy periodically to stay informed about how nbaazi protects your personal data.

Contact nbaazi About Privacy

If you have any questions, concerns, or feedback about this Privacy Policy or the way nbaazi handles your personal data, our support team is available 24/7 via live chat in your account dashboard. Alternatively, you may contact us by email at [email protected]. All privacy-related enquiries are handled by our designated data compliance staff and will receive a response within 4 hours during standard operating hours (BST, UTC+6). For formal privacy rights requests (such as access, erasure, or portability), please state clearly in your message that you are submitting a formal data subject request so that it can be routed to the correct team immediately.