Privacy Policy — Your Data at nabaje

1. Introduction and Scope

This Privacy Policy ("Policy") describes how nabaje ("we", "us", "our") collects, processes, stores, and protects personal data submitted by users ("you", "your", "the Player") of the nabaje online casino and sports betting platform, accessible at https://nabaje.ws.

nabaje is committed to handling your personal data responsibly and in accordance with applicable data protection principles. By registering an account, making a deposit, or otherwise using the nabaje platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected through the nabaje website, mobile web experience, customer support channels, and any related communications. It does not apply to third-party websites or services that may be linked from the platform — those are governed by their own privacy policies.

2. Data Controller

nabaje operates as the data controller for personal information collected through the platform. For all data-related queries, requests, and complaints, you may contact the nabaje data team at the following address:

Email: [email protected]
Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

nabaje will acknowledge all formal data-related requests within five (5) business days and will aim to resolve them within thirty (30) calendar days of receipt.

3. How We Collect Your Personal Data

nabaje collects personal data through the following channels:

• Direct submission: Information you provide when creating an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical data including your IP address, device identifiers, browser type and version, operating system, referring URLs, session duration, and pages viewed — collected automatically when you access the nabaje platform.
• Payment processors: Confirmation data shared by bKash, Nagad, Rocket, Upay, or your bank when a transaction is processed, including transaction reference numbers and timestamps.
• Identity verification providers: Where you submit a government-issued ID document (such as a Bangladesh National Identity Card or passport), that document and associated extracted data may be processed by a third-party verification partner acting on nabaje's behalf.
• Cookies and tracking technologies: Session and preference data collected via cookies placed on your browser when you visit the platform. See Section 9 for full details of our cookie practices.

4. Purposes and Legal Basis for Processing

nabaje processes your personal data for the following purposes:

• Account registration and management: To create and maintain your player account, verify your identity, and enable you to access games, deposit funds, and request withdrawals in BDT (৳).
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, and to maintain accurate financial records.
• Age and eligibility verification: To confirm that you meet nabaje's minimum age requirement of 21 years and are otherwise eligible to use the platform.
• Responsible gaming compliance: To monitor gaming patterns, apply player-requested deposit limits or self-exclusion instructions, and identify players who may be showing signs of problem gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, match-fixing, money laundering, and other prohibited activities.
• Customer support: To respond to queries, complaints, and formal dispute submissions sent to [email protected] or through the platform's support channels.
• Platform improvement: To analyse aggregate usage data to understand how the platform is used and to improve the quality, reliability, and range of games and services we offer.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as BPL season offers, Eid promotions, and Pohela Boishakh bonuses) — where you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

5. Sharing Your Personal Data

nabaje does not sell or rent your personal data. We may share your data with the following categories of third party strictly as necessary to deliver the nabaje service:

• Payment service providers: bKash, Nagad, Rocket, Upay, and approved banks — to process deposits and withdrawals in BDT.
• Identity verification services: Third-party KYC providers engaged to verify identity documents submitted during account verification.
• Game content providers: Licensed studio providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming — who may receive anonymised session data to deliver their game content correctly within the nabaje platform.
• IT infrastructure providers: Cloud hosting and server management providers who store and process platform data under strict data processing agreements with nabaje.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful government request, nabaje may disclose personal data to relevant authorities.

All third-party processors are contractually required to process player data only on nabaje's documented instructions, to maintain appropriate technical security measures, and not to use your data for their own independent purposes.

6. Data Retention

nabaje retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any pending disputes or enforce our Terms and Conditions.

As a general guideline:

• Active account data is retained for the lifetime of your account plus a minimum of five (5) years following account closure, to satisfy financial record-keeping obligations.
• Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence is retained for three (3) years from the date of the interaction.
• Marketing consent records are retained for the duration of the consent and for three (3) years following withdrawal of consent.

When personal data is no longer required, nabaje will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

7. Your Data Rights

As a nabaje player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of access: You have the right to request a copy of the personal data nabaje holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that nabaje delete your personal data. This right is subject to nabaje's legal and regulatory data retention obligations and may not apply in all cases.
• Right to restriction of processing: You may request that nabaje restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.

nabaje will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be informed of the extension and the reason for it.

8. International Data Transfers

The nabaje platform serves players based in Bangladesh. Some of our third-party service providers — including game content studios and cloud infrastructure providers — may be located outside Bangladesh and may process your data in other jurisdictions. In all cases, nabaje ensures that appropriate contractual protections are in place before transferring personal data to processors in other countries, and that those processors maintain security standards consistent with this Policy.

9. Cookies and Tracking Technologies

nabaje uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the site. The following categories of cookies are used on the nabaje platform:

• Essential cookies: Necessary for the platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cookies cannot be disabled without impairing the core functionality of the platform.
• Preference cookies: Used to remember your account preferences, such as language settings and display preferences, so you do not have to re-enter them on each visit.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data helps nabaje improve the player experience.
• Marketing cookies: Used to deliver relevant promotional content and offers based on your browsing behaviour on the platform. These cookies are only placed where you have provided consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability or functionality of some nabaje features.

10. Children and Age-Restricted Access

The nabaje platform is strictly for adults aged 21 years and above. nabaje does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, that account will be immediately suspended, the data will be deleted, and any associated funds will be dealt with in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered on nabaje without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

11. Changes to This Privacy Policy

nabaje reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by posting a notice on the platform and, where appropriate, by sending a communication to the contact details held on your account. The date at the top of this Policy reflects when it was last updated. Your continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically so that you remain informed about how nabaje handles your personal data.