Privacy Policy — nbajaa Online Casino Bangladesh

Privacy at a Glance

How nbajaa Protects Your Personal Information

The cards below summarise the most important aspects of our data practices. These summaries are provided for convenience only and do not replace the full policy text that follows.

Secure Data Storage

All personal data collected by nbajaa is stored on secured servers protected by industry-standard SSL/TLS encryption. Access to your account data is restricted to authorised personnel only and is subject to strict internal access controls.

No Data Selling

nbajaa does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used solely to operate and improve the nbajaa platform and to comply with our legal obligations.

You Control Your Data

You have the right to access, correct, and request deletion of your personal data held by nbajaa. You may submit a data request at any time by contacting our support team at [email protected].

Transparent Cookie Use

nbajaa uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyse platform usage. You can review our full cookie practices in the Cookies section of this policy.

Verified Third Parties Only

Where data is shared with third-party service providers — such as payment processors including bKash, Nagad, and Rocket, or game studio partners — those providers are contractually obligated to handle your data securely and in accordance with this policy.

Marketing Opt-Out

If you have opted in to receive promotional communications from nbajaa, you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link included in any marketing message we send to you.

Section 1

Data We Collect

When you interact with the nbajaa platform — whether during registration, account management, gameplay, or customer support — we may collect the following categories of personal data:

Identity and Contact Data

Full legal name as it appears on your government-issued identification document.
Date of birth (required for age verification in compliance with our 18+ policy).
Email address and mobile phone number used for account communication and two-factor authentication.
Residential address in Bangladesh (city, district, postal code).
Copies of identity documents such as your National Identity Card (NID) or passport, submitted during KYC verification.

Financial Data

Mobile banking account details (bKash, Nagad, Rocket, or Upay mobile number) used for deposit and withdrawal processing.
Card details (Visa or Mastercard) where card-based payments are used — note that full card numbers are never stored by nbajaa; card tokenisation is handled by our payment processor.
Transaction history including deposit amounts, withdrawal requests, and bonus credits in Bangladeshi Taka (BDT).

Technical and Usage Data

IP address and approximate geolocation at the time of login or transaction.
Device type, operating system, browser version, and screen resolution.
Pages visited on the nbajaa platform, time spent on each section, game sessions played, and bet history.
Login timestamps and session duration.

Communications Data

Content of messages sent to our support team via live chat or email.
Records of support tickets and resolution outcomes.
Survey responses or feedback submitted voluntarily through the platform.

            Data Minimisation: nbajaa collects only the personal data that is necessary for the specific purpose for which it is being gathered. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless explicitly required by law.
          

Section 2

How We Use Your Data

nbajaa processes your personal data on the basis of contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with applicable anti-money laundering and age verification requirements), and legitimate interest (to improve platform performance and prevent fraud). Where processing is based on consent — for example, for marketing communications — you may withdraw that consent at any time.

Purpose	Data Used	Legal Basis
Account registration & management	Identity, contact data	Contractual necessity
Age & identity verification (KYC)	Identity documents, date of birth	Legal obligation
Payment processing	Financial data, transaction history	Contractual necessity
Fraud prevention & security monitoring	Technical data, IP address, login history	Legitimate interest
Customer support	Communications data, account data	Contractual necessity
Platform analytics & improvement	Usage data, device data	Legitimate interest
Promotional communications	Email address, phone number	Consent
Responsible gaming monitoring	Bet history, session data, deposit patterns	Legal obligation & legitimate interest

nbajaa does not use automated decision-making processes that produce legal or similarly significant effects on your account without human review. Where automated systems flag an account for review — for example, due to unusual transaction patterns — a member of our compliance team will assess the case before any account action is taken.

Section 3

Data Sharing & Third Parties

nbajaa does not sell your personal data to third parties. We may, however, share specific data with carefully selected third-party service providers and, where required by law, with regulatory or law enforcement authorities. All third-party data sharing is governed by written data processing agreements that require those parties to handle your information securely and to use it only for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, nbajaa shares the minimum necessary payment data with our authorised payment partners, which include bKash, Nagad, Rocket, Upay, and the card processing networks supporting Visa and Mastercard transactions. These partners receive only the data required to complete the specific transaction and are not permitted to use that data for any other purpose.

Game Studio Providers

Games on the nbajaa platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and bet data necessary to operate the game session. They do not receive your full identity or payment data.

Legal and Regulatory Disclosure

nbajaa may be required to disclose personal data to government agencies, law enforcement bodies, or financial intelligence units in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the data specifically requested and will notify you of the disclosure to the extent permitted by applicable law.

Cross-Border Data Transfers: Some of our third-party service providers may process your data outside Bangladesh. Where such transfers occur, nbajaa ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Section 4

Cookies & Tracking Technologies

nbajaa uses cookies — small text files stored on your device — and similar technologies such as web beacons and local storage objects to deliver a consistent, personalised, and secure platform experience. By continuing to use the nbajaa website, you acknowledge the use of these technologies as described below.

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, authentication, security tokens	Session / up to 24 hours
Functional	Language preference, game display settings, remembered login	Up to 30 days
Analytics	Page visit counts, navigation paths, error tracking	Up to 12 months
Marketing	Tracking referral source for bonus attribution and campaign performance	Up to 30 days

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are essential to the secure operation of your nbajaa account. You may disable functional, analytics, and marketing cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of the nbajaa platform — for example, your session preferences may not be remembered between visits.

For detailed guidance on managing cookies in popular browsers (Chrome, Firefox, Safari, Edge), please consult your browser's help documentation. Your device's mobile browser settings may also offer options to limit cross-site tracking.

Section 5

Data Security & Retention

nbajaa implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

End-to-end SSL/TLS encryption for all data transmitted between your browser and the nbajaa servers.
Encrypted storage of passwords using industry-standard hashing algorithms. nbajaa never stores your password in plain text.
Role-based access controls ensuring that staff members can access only the data necessary for their specific function.
Regular security audits and vulnerability assessments conducted by our technical team.
Two-factor authentication (2FA) available for all player accounts, strongly recommended for enhanced protection.
Automated systems to detect and alert on unusual login patterns, which may indicate an unauthorised access attempt.

Data Retention Periods

nbajaa retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our internal record-keeping obligations. Specific retention guidelines are as follows:

Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
Transaction and bet history: Retained for a minimum of five years from the date of each transaction.
Customer support communications: Retained for three years from the date of the interaction.
Analytics and usage data: Retained in aggregated, anonymised form for up to two years.

            Security Incident Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, nbajaa will notify affected users promptly and take immediate steps to contain and investigate the incident. We will also notify relevant authorities as required under applicable law.
          

Section 6

Your Privacy Rights

As a user of the nbajaa platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team by email at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and aim to respond in full within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data that nbajaa holds about you, along with information about how it is being used and with whom it has been shared.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. You may update basic profile information directly through your account settings panel.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that this right is subject to our legal retention obligations — for example, we are required to retain transaction records for a minimum period under anti-money laundering law, and these records cannot be deleted on request during that retention window.

Right to Restrict Processing

You have the right to request that nbajaa restrict the processing of your data in certain circumstances — for example, while a dispute regarding the accuracy of your data is under review.

Right to Object to Marketing

Where your data is processed for direct marketing purposes, you have an absolute right to object to that processing at any time. Upon receipt of a valid objection, we will cease processing your data for marketing purposes immediately.

How to Submit a Rights Request: Email [email protected] with the subject "Privacy Rights Request". Include your registered email address and a brief description of your request. We may ask you to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.

Section 7

Minors & Age Verification

The nbajaa platform is strictly intended for adults aged 18 years and above. 18+ We do not knowingly collect personal data from any individual under the age of 18. During the account registration process, users are required to confirm that they meet the minimum age requirement. This declaration is subject to verification through our KYC process.

If nbajaa becomes aware — through KYC review, third-party age verification checks, or any other means — that an account is held by or has been used by a person under the age of 18, the following steps will be taken immediately:

The account will be suspended and login access disabled without prior notice.
All personal data associated with the account will be flagged for review and handled in accordance with applicable child data protection requirements.
Any deposits made by the underage individual will be reviewed on a case-by-case basis and handled in accordance with applicable law.
The matter may be referred to the relevant authorities where required by law.

We strongly encourage parents and guardians in Bangladesh to make use of parental control software and to monitor the online activities of minors in their care. If you believe a minor is using the nbajaa platform, please contact us immediately at [email protected] so we can take prompt action.

Section 8

Policy Updates & Contact

nbajaa reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new service features, or evolving legal requirements. When a material change is made, we will update the Effective Date shown at the top of this document and, where appropriate, notify registered users via email or through a prominent notice on the nbajaa platform.

Your continued use of the nbajaa platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised document. We encourage you to review this policy periodically to stay informed about how we protect your data.

Previous Versions

If you wish to review a previous version of this Privacy Policy, please contact our support team at [email protected] and we will provide the applicable archived version on request.

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way nbajaa handles your personal data, please reach out to us using the details below. We take all privacy enquiries seriously and will respond within a reasonable timeframe.

Privacy Enquiries: Email us at [email protected] with the subject line "Privacy Enquiry". Our support team is available 24 hours a day, seven days a week, including during Bangladeshi public holidays such as Eid and Pohela Boishakh. We aim to respond to all privacy-related correspondence within 48 hours.

For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit our dedicated Responsible Gaming page or contact [email protected] directly.

Privacy Policy — nbajaa