nbagi Privacy Policy

Information You Provide Directly

nbagi collects the following personal data that you provide directly when you interact with the platform:

• Registration data: your mobile number, chosen username, password stored in encrypted form only, date of birth, and full legal name.
• KYC documents: government-issued identity documents such as your NID or passport, and proof of address submitted when you request a withdrawal or when nbagi initiates a verification check.
• Support communications: messages you send to nbagi customer support, including any personal details included in those messages.
• Responsible gaming preferences: deposit limits, time-out settings, and self-exclusion requests submitted through your account settings or via support.

Information Collected Automatically

When you access the nbagi platform, certain technical and behavioural data is collected automatically by our systems for platform security, fraud prevention, and service improvement:

• Device and connection data: IP address, device model, operating system version, browser type and version, screen resolution, and mobile network operator.
• Session data: login timestamps, session duration, pages and games visited, betting actions taken during each session, and logout or session-expiry events.
• Cookie data: session cookies for platform functionality, preference cookies to remember your language and display settings, and analytics cookies that help us understand aggregate usage patterns. See Section 4 for full details.

Core Platform Purposes

nbagi uses your personal data for the following core operational purposes, all of which are necessary to provide the nbagi service:

• Account management: registering your account, verifying your identity, processing OTP login, managing your account balance, and sending account-related updates via SMS.
• Payment processing: handling deposits via bKash, Nagad, Rocket, and Upay; processing withdrawals to your registered wallet; and maintaining transaction records for audit and dispute resolution.
• Service delivery: operating the casino games, sports betting markets, crash games, and slots you access; maintaining your game history and balance; and personalising content based on your activity.
• Fraud prevention: monitoring account and transaction activity for signs of fraud, money laundering, multi-accounting, and unauthorised access; taking protective action including account suspension where suspicious activity is detected.
• Legal compliance: maintaining records required by anti-money laundering obligations; responding to lawful authority requests; and conducting KYC verification to satisfy player due-diligence requirements.

Communications and Marketing

nbagi may use your contact details to send the following types of communications. You may opt out of marketing communications at any time by contacting [email protected]:

• Transactional SMS: deposit confirmations, withdrawal notifications, OTP messages, and security alerts. These are essential service communications and cannot be opted out of while your account is active.
• Promotional communications: bonus offers, seasonal promotions such as BPL, Eid, and Pohela Boishakh specials, new game announcements, and cashback offers. These require your opt-in consent, which you may withdraw at any time.
• Support communications: responses to queries and complaints submitted to [email protected]. These are reactive communications sent only in response to your contact.

Authorised Third-Party Processors

nbagi does not sell personal data. We share personal data only with third parties who perform specific, necessary functions in delivering the nbagi service, and only to the extent required for those functions:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process deposit and withdrawal transactions. These providers operate under their own privacy policies.
• Game providers: providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive your session ID and stake data to operate the games you play. They do not receive your full identity or payment details.
• Identity verification providers: third-party KYC service providers who assist nbagi in verifying the identity documents you submit. These providers act under strict data processing agreements.
• IT and cloud infrastructure providers: hosting, database, and security providers who store or process platform data on nbagi's behalf under strict data processing agreements.

Disclosure Required by Law

nbagi may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where legally required, or where disclosure is necessary to protect the rights, property, or safety of nbagi, its players, or third parties. nbagi will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify you that a disclosure request has been received.

Types of Cookies Used

The nbagi platform uses cookies and similar local storage technologies to deliver core functionality, remember your preferences, and analyse platform usage:

• Strictly necessary cookies: required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Preference cookies: store your language selection and display settings so nbagi remembers your preferences between sessions. These do not track you across other websites.
• Analytics cookies: help nbagi understand aggregate, anonymised patterns of how players navigate and interact with the platform. Individual player identities are not exposed in analytics reports.
• Security cookies: used by nbagi's fraud detection systems to identify anomalous device or behavioural patterns that may indicate account takeover attempts or other malicious activity.

Security Measures in Place

nbagi implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS encryption: all data transmitted between your device and the nbagi platform is encrypted in transit. The padlock icon in your browser confirms this encryption is active during your session.
• Password hashing: your account password is stored using a one-way cryptographic hash function. nbagi staff cannot view your password in plain text under any circumstances. Password resets are performed via OTP to your registered mobile number.
• Access controls: access to personal data within nbagi's internal systems is restricted to personnel who require it for their job functions. All staff with data access are subject to confidentiality obligations and regular security training.
• Fraud monitoring: automated systems continuously monitor account and transaction patterns for indicators of fraud, unauthorised access, and suspicious activity. Anomalous patterns trigger automated alerts and manual review by our security team.

Data Breach Response

In the event of a personal data breach likely to result in a risk to your rights and freedoms, nbagi will notify affected players without undue delay via SMS to their registered mobile number. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps nbagi has taken or will take to address it. nbagi maintains an internal incident response plan that is tested and updated on a regular basis.

Retention Schedule

nbagi retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for the duration of your active account, plus a minimum of 5 years after account closure. This satisfies anti-money laundering record-keeping obligations and covers any post-closure disputes.
• Transaction records: retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements applicable to online payment processing operations.
• Support and complaint records: retained for 3 years from the date of resolution, to ensure consistency in handling repeat queries and to document our response to formal complaints.

Minors and Age Verification

nbagi is strictly an adult platform for players aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under 21. Players are required to confirm the 21+ age requirement at registration. Where nbagi has reasonable grounds to suspect a registered account belongs to a person under 21, we will suspend the account, initiate identity verification, and delete the account and all associated personal data if the suspicion is confirmed. Parents or guardians who believe a minor has registered on nbagi are requested to contact us immediately at [email protected].

Updates to This Privacy Policy

nbagi reviews this Privacy Policy periodically and updates it when our data practices change, when applicable law requires amendments, or when we introduce new platform features involving personal data processing. When material changes are made, we will notify registered players via SMS at least 7 days before the updated Policy takes effect. Non-material changes such as typographical corrections may be made without advance notice. Your continued use of the nbagi platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Contact Us About Privacy

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how nbagi handles your personal data, please send a written request to [email protected]. Our privacy team will acknowledge your query within 24 hours and provide a substantive response within 30 calendar days. If you are not satisfied with our response, you may escalate by writing to [email protected] with the subject line 'Privacy Escalation'. nbagi takes all privacy concerns seriously and will provide a final written position within 10 business days of receiving an escalation.