nabje Privacy
& Data Policy

nabje collects personal data from players in Bangladesh through several channels: during account registration, during the KYC (Know Your Customer) verification process, during payment transactions, through your ongoing use of the platform, and through your communications with our support team. The categories of personal data we collect are described below.

Registration Data: When you create a nabje account, we collect your full legal name, email address, mobile number, date of birth, country of residence (Bangladesh), and a username of your choice. This information is required to create and manage your account and to verify that you meet the 18+ age requirement.

Identity Verification (KYC) Data: To comply with anti-money laundering obligations and to verify your identity before processing withdrawal requests, nabje collects copies of your Bangladesh National Identity Card (NID), passport, or other government-issued identity documents. We may also collect a selfie photograph alongside your identity document if required for verification purposes.

Payment Data: nabje collects transaction data relating to your deposits and withdrawals, including the mobile wallet number (bKash, Nagad, Rocket, or Upay), bank account details, or card details (Visa/Mastercard) used for transactions, transaction amounts, timestamps, and transaction reference numbers. nabje does not store full card numbers — card payment processing is handled by our PCI-DSS compliant payment partners.

Device and Technical Data: When you access nabje, we automatically collect your IP address, browser type and version, operating system, device type, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), and session duration. This data is used for fraud prevention, security monitoring, and platform optimisation.

Gameplay and Betting Data: We record your game participation history, bet amounts, game outcomes, bonus usage, wagering progress, and account balance movements. This data is required for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Communication Data: If you contact nabje via live chat, WhatsApp, or email, we retain records of those communications including the content of messages, timestamps, and the resolution outcome. This data is used for quality assurance, training, and dispute resolution.

nabje uses the personal data we collect for the following purposes. We process personal data only where we have a lawful basis to do so — either because it is necessary to perform the contract between us (providing you with gaming services), because we have a legal obligation to do so, or because we have a legitimate interest that does not override your privacy rights.

nabje does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players, except where required for fraud prevention or responsible gaming intervention. Where automated screening flags a potential issue, a member of the nabje team reviews the case before any account action is taken.

nabje does not sell, rent, or trade your personal data to any third party. We share your personal data only with the categories of recipients described below, and only to the extent necessary to fulfil the purpose for which the data is shared.

Payment Service Providers: To process your deposits and withdrawals, nabje shares relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each payment provider operates under its own privacy policy and security standards. nabje selects payment partners who maintain PCI-DSS compliance for card-based transactions.

Game Content Providers: Certain game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe — may receive limited technical session data (such as a session token, game ID, and stake amount) to deliver live game experiences. These providers do not receive your full personal profile, identity documents, or payment details.

KYC and Identity Verification Partners: nabje may use third-party identity verification services to assist with the KYC process. These partners receive only the data necessary to perform the verification check (identity document images and registration data) and are contractually prohibited from using that data for any other purpose.

Fraud Prevention and Security Services: nabje shares device data, IP address information, and behavioural data with anti-fraud and cybersecurity service providers to protect the platform and its users from fraudulent activity.

Legal and Regulatory Authorities: nabje will disclose personal data to Bangladesh law enforcement authorities, financial intelligence units, or other government bodies where required to do so by applicable law, court order, or valid legal process. nabje will notify affected users of such disclosure where legally permitted to do so.

Business Transfers: In the event that nabje undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. nabje will notify registered users of any such transfer via the email address on their account prior to the completion of the transfer.

The nabje platform uses cookies and similar tracking technologies (including local storage and session storage) to operate core platform functions, maintain your login session, detect fraud, and analyse platform performance. Below is a full description of the cookie categories used by nabje.

nabje does not use third-party advertising cookies or behavioural tracking cookies that monitor your activity across other websites. The cookies placed by nabje's game providers (Evolution Gaming, Pragmatic Play, etc.) are limited to the scope of the game session and do not track your activity outside of the nabje platform.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies or fraud prevention cookies will prevent you from logging in to your nabje account or using the gaming platform. Clearing your browser cookies will log you out of your current nabje session.

nabje retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to each major category of personal data held by nabje:

• Active account data (registration details, account preferences, contact information): Retained for the duration of your account and for 5 years following permanent account closure.
• KYC and identity documents (NID copies, passport scans, selfie verification images): Retained for 5 years from the date of the most recent transaction on the account, in accordance with anti-money laundering record-keeping requirements.
• Transaction records (deposit and withdrawal history, payment method data, transaction timestamps): Retained for 7 years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay and betting history (game logs, bet records, bonus usage, wagering history): Retained for 3 years from the date of the relevant game session or bet settlement.
• Customer support communications (live chat transcripts, email correspondence, dispute records): Retained for 3 years from the date of the final communication in each support case.
• Device and technical data (IP logs, session logs, fraud detection records): Retained for 18 months from the date of collection, unless a specific security investigation requires longer retention.
• Marketing consent records: Retained for the duration of your opt-in and for 3 years following any withdrawal of consent, as evidence of the consent decision.

Upon expiry of the applicable retention period, nabje will securely delete or irreversibly anonymise the relevant personal data. Where data is anonymised rather than deleted, the resulting anonymised dataset cannot be used to identify any individual and is therefore no longer subject to this Privacy Policy.

nabje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and the nabje platform.
• Encrypted data storage for all sensitive personal data fields, including identity documents and payment credentials, held on nabje's servers.
• Role-based access controls ensuring that nabje staff can only access personal data to the extent required for their specific job function. Access to KYC documents and financial records is restricted to authorised personnel only.
• Multi-factor authentication for all nabje staff accessing internal systems that hold personal data.
• Regular security audits and penetration testing of the nabje platform infrastructure.
• Fraud detection systems that monitor for unusual account activity and flag potential unauthorised access attempts in real time.
• Incident response procedures that define how nabje responds to suspected data security breaches, including timelines for internal escalation and user notification.

In the event of a personal data breach that poses a risk to your rights and freedoms, nabje will notify affected users without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered on your account. The notification will describe the nature of the breach, the categories of data affected, and the steps nabje has taken or proposes to take to address it.

While nabje maintains robust security measures, no online platform can guarantee absolute security against all possible threats. You are also responsible for protecting your own account by keeping your login credentials confidential, using a strong and unique password, and logging out of your nabje account when using shared devices. If you believe your account has been compromised, contact nabje support immediately via live chat.

As a nabje player based in Bangladesh, you have the following rights with respect to the personal data that nabje holds about you. To exercise any of these rights, contact the nabje support team in writing at [email protected]. nabje will acknowledge your request within 48 hours and respond in full within 14 business days.

1. Right of Access: You have the right to request a copy of all personal data that nabje holds about you, together with information about how that data is used, who it has been shared with, and how long it will be retained. This is commonly referred to as a Subject Access Request (SAR).
2. Right to Rectification: If any personal data that nabje holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. For routine updates (e.g., change of email address or mobile number), you may update your account details directly via the nabje account settings page.
3. Right to Erasure: You have the right to request that nabje delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. This right is subject to nabje's legal obligations to retain certain data categories as described in Section 5.
4. Right to Restriction of Processing: You have the right to request that nabje restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and nabje is assessing the legitimate grounds for that processing.
5. Right to Data Portability: You have the right to receive a copy of the personal data you have provided to nabje in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.
6. Right to Object: You have the right to object to the processing of your personal data where nabje relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
7. Right to Withdraw Consent: Where nabje processes your personal data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

nabje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, new payment or game integrations, or other operational developments. The effective date of the current version of this Privacy Policy is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — nabje will notify registered players via email to the address on their account no less than 7 days before the updated policy takes effect. A notice will also be displayed prominently on the nabje platform during the notification period.

Your continued use of the nabje platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this Privacy Policy, you should cease using the nabje platform and request account closure by contacting the support team.

If you have any questions about this Privacy Policy, about how nabje handles your personal data, or about exercising your data rights, please contact us at any time:

• Email: [email protected]
• Live Chat: Available 24/7 via the nabje platform
• Average Response Time: 2–5 minutes (live chat), 2 business days (email)
• Formal Written Requests: Submit in writing to [email protected] — nabje will acknowledge within 48 hours and respond in full within 14 business days