Privacy Policy — How nbajaa Collects, Uses & Protects Your Data
Your privacy is a core responsibility at nbajaa. This Privacy Policy explains precisely what personal data we collect from Bangladesh players, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own information.
1. Data Controller & Contact
nbajaa operates as the data controller in respect of all personal data collected from Players and visitors through the nbajaa platform at nbajaa.com. As data controller, nbajaa determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities are conducted lawfully, fairly, and transparently in accordance with this Privacy Policy.
For all privacy-related enquiries, data subject access requests, correction requests, deletion requests, or concerns regarding this Privacy Policy, Players may contact the nbajaa data protection team at:
Email (plain text — not a clickable link): [email protected]
Subject line: Privacy Request — [Your Account Username]
Response time: Within 5 business days of receipt.
This Privacy Policy applies to all individuals who: (a) register or apply to register a Player account on the nbajaa platform; (b) visit nbajaa.com without registering; (c) contact nbajaa's customer support team; or (d) interact with nbajaa through any associated platform interface. It does not apply to the personal data of nbajaa's own employees or contractors, which is governed by separate internal policies.
By using the nbajaa platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the way nbajaa processes personal data as described in this Policy, you should discontinue use of the platform. For Players under the age of 18, the nbajaa platform is not available and no data should be submitted. Any data discovered to belong to a minor will be deleted immediately upon identification.
2. Personal Data We Collect
nbajaa collects personal data through several channels: information you provide directly during registration and account management, data generated automatically through your use of the platform, and information received from third-party payment processors and identity verification partners. The categories of personal data collected are set out in the table below.
| Data Category | Specific Data Points Collected | Collection Method |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number (Bangladesh), username, password (hashed) | Provided by you at account creation |
| Identity Verification (KYC) | National Identity Card (NID) number, passport number, scanned ID document image, selfie photograph for liveness check | Provided by you prior to first withdrawal |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet number, bank account details (where used), transaction history, deposit and withdrawal records | Provided by you and received from payment processors |
| Technical & Device Data | IP address, device type, operating system, browser type and version, device fingerprint, screen resolution, time zone (Bangladesh Standard Time, UTC+6) | Collected automatically on platform access |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths, search queries within the platform, login timestamps | Collected automatically via platform analytics |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with the nbajaa support team | Generated during your interactions with support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, cooling-off period requests, problem gambling assessment responses | Provided by you through responsible gaming tools |
| Marketing Preferences | Communication opt-in/opt-out status, preferred notification channel (SMS, email), promotional interaction history | Provided by you and inferred from platform behaviour |
nbajaa does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information — for example, in the context of a responsible gaming self-assessment or a support communication. Where such data is disclosed, it is treated with the highest level of confidentiality and is processed only to the extent strictly necessary to respond to your enquiry or provide appropriate support.
nbajaa does not collect data from children. The platform is restricted to individuals aged 18 and above. If nbajaa discovers that personal data has been collected from a person under 18, that data will be securely deleted without delay and the associated account will be permanently closed.
3. Legal Basis for Processing
nbajaa processes your personal data only where a valid legal basis exists for doing so. The legal bases relied upon for nbajaa's data processing activities are as follows:
- Contractual Necessity: Processing your registration data, KYC information, and financial data is necessary for nbajaa to fulfil its contractual obligations to you under the Terms & Conditions — specifically, to operate your account, process deposits and withdrawals, and settle bets. Without this processing, nbajaa cannot provide the service.
- Legitimate Interests: nbajaa processes technical data, usage data, and fraud detection data based on its legitimate interest in operating a secure, fair, and commercially viable platform. This includes fraud prevention, abuse detection, platform optimisation, and security monitoring. nbajaa has assessed that these legitimate interests are not overridden by your privacy rights in these contexts.
- Legal Obligation: nbajaa processes KYC and financial transaction data to the extent required to comply with applicable anti-money laundering obligations, fraud reporting duties, and responses to lawful requests from law enforcement or regulatory authorities.
- Consent: nbajaa processes your marketing preferences and sends promotional communications (such as bonus offers, BPL season promotions, Eid special events, and reload bonus notifications) only where you have given explicit, freely-given, and withdrawable consent. You may withdraw this consent at any time by contacting [email protected] or updating your notification preferences within your account settings.
- Vital Interests: In circumstances where responsible gaming data indicates an acute risk of harm to your wellbeing, nbajaa may process relevant data to the extent necessary to protect your vital interests, for example by initiating a welfare check or applying a protective account restriction.
4. How We Use Your Data
nbajaa uses the personal data it collects exclusively for the purposes described in this Privacy Policy. Your data will not be used for any purpose that is materially incompatible with the purposes set out below without your prior consent. The principal purposes for which nbajaa uses your personal data are:
- Account Management: Creating and maintaining your nbajaa account, verifying your identity during KYC, authenticating your logins via OTP, and managing your account preferences and communication settings;
- Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests to your verified payment method; maintaining a complete and accurate transaction history for your account;
- Bet Settlement & Game Delivery: Recording wagers, processing game outcomes from certified RNG providers (Pragmatic Play, PG Soft, JILI, Evolution Gaming, Ezugi, Microgaming, Spribe, Habanero), settling winning bets, and crediting bonus winnings in accordance with promotion terms;
- Fraud Prevention & Security: Monitoring account activity for patterns consistent with prohibited conduct (duplicate accounts, bot usage, collusion, money laundering), maintaining device fingerprint records for security purposes, and responding to unauthorised access incidents;
- Responsible Gaming: Applying deposit limits, time-out periods, and self-exclusion requests; monitoring wagering patterns for indicators of problem gambling; sending responsible gaming alerts where applicable; and maintaining records of self-exclusion to prevent inadvertent re-registration;
- Customer Support: Responding to support tickets, resolving disputes, investigating complaints, and maintaining records of support interactions for quality assurance;
- Platform Improvement: Analysing aggregated usage data to improve game selection, platform performance, payment processing speed, and user experience for Bangladesh players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions;
- Marketing Communications: Where you have consented, sending promotional messages about available bonuses, cricket betting markets (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), slot releases, and seasonal events such as Eid promotions or Pohela Boishakh offers, via SMS or email to your registered contact details.
nbajaa does not use your personal data to build automated profiles for the purpose of making legally significant decisions about you without human review. Where automated systems flag an account for investigation, a human member of the nbajaa compliance team reviews the flag before any account action is taken.
5. Data Sharing & Third Parties
nbajaa shares personal data with the following categories of third parties, and only to the extent necessary for the stated purpose:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard receive the minimum necessary financial data (account reference, transaction amount, timestamp) to process deposits and withdrawals. These partners process data under their own privacy policies and are independently responsible for their data handling practices;
- Identity Verification Partners: nbajaa uses third-party KYC technology providers to verify NID documents, match selfie photographs, and confirm that account holders meet the 18+ age requirement. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose;
- Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, PG Soft, JILI, Microgaming, Spribe, Ezugi, and Habanero receive session tokens and anonymised player identifiers sufficient to deliver game content and validate RNG integrity. These providers do not receive your full name, NID, or payment details;
- Analytics & Platform Technology: nbajaa uses trusted technology partners for platform hosting, content delivery, and aggregated analytics. These partners act as data processors on nbajaa's behalf and are bound by data processing agreements that restrict use of data to the purposes specified by nbajaa;
- Law Enforcement & Regulatory Bodies: nbajaa will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by a valid legal order, court direction, or applicable statutory obligation. nbajaa will notify the affected Player of such disclosure where it is legally permitted to do so;
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of nbajaa's assets, Player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data handling practices that result from it.
All third parties with whom nbajaa shares personal data are required to maintain appropriate technical and organisational security measures, and to process personal data only in accordance with nbajaa's instructions and for the stated purpose. nbajaa conducts periodic reviews of its third-party data processing arrangements to ensure continued compliance with this Privacy Policy.
6. Cookies & Tracking Technologies
nbajaa uses cookies and similar tracking technologies (including local storage objects and session tokens) on the nbajaa platform. Cookies are small text files placed on your device when you visit the platform. They serve several functions essential to the operation and improvement of the nbajaa service.
The categories of cookies used by nbajaa are as follows:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, carry your wallet balance state across page loads, manage your OTP authentication flow, and ensure security tokens are valid. These cookies cannot be disabled without impairing core platform functionality;
- Functional Cookies: These cookies remember your preferences such as your preferred game category, language setting (English), and notification preferences. They improve your experience by reducing the need to re-enter settings on each visit;
- Analytics Cookies: nbajaa uses aggregated analytics cookies to understand how Players navigate the platform — which game sections are most visited, where users encounter friction, and how session patterns differ between device types. This data is used in aggregate and is not linked to your individual identity for analytics purposes;
- Security & Fraud Prevention Cookies: These cookies support nbajaa's fraud detection systems by maintaining a consistent device signature across sessions. They help identify when an account is being accessed from an unfamiliar device or location, triggering additional authentication steps for your protection.
nbajaa does not use third-party advertising cookies or behavioural tracking cookies that build profiles for advertising networks outside the nbajaa platform. Your browsing activity on nbajaa is not shared with advertising platforms or data brokers.
Most browsers allow you to manage cookie settings through the browser's privacy or settings menu. You may disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in to and use the nbajaa platform. Clearing cookies will log you out of your current session.
7. Data Retention Periods
nbajaa retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for such additional period as is required by applicable legal or regulatory obligations. The general retention periods applied by nbajaa are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | Duration of account plus 5 years after closure | Contractual obligations, dispute resolution, fraud prevention |
| KYC / Identity Documents | 5 years from date of verification or account closure (whichever is later) | Anti-money laundering legal obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping and regulatory compliance |
| Betting & Gaming History | 5 years from account closure | Dispute resolution, bonus abuse prevention, RNG audit trail |
| Support Communications | 3 years from last communication | Quality assurance, dispute evidence, complaint records |
| Self-Exclusion Records | Minimum 7 years from self-exclusion date | Responsible gaming obligations — prevent inadvertent re-registration |
| Analytics & Usage Data | 26 months in identifiable form; indefinitely in aggregated/anonymised form | Platform improvement; anonymised data carries no privacy risk |
| Marketing Consent Records | Duration of consent plus 3 years after withdrawal | Evidence of consent basis for marketing communications |
At the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where data cannot be immediately deleted due to a live dispute, ongoing investigation, or regulatory hold, it will be retained until that matter is resolved and then deleted without delay.
8. Your Privacy Rights
As a Player on the nbajaa platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Request — [Your Account Username]". nbajaa will respond within 5 business days and will aim to resolve requests within 30 days of receipt.
Right of Access
Request a copy of all personal data nbajaa holds about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your nbajaa account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Right to Restrict Processing
Request that nbajaa limits processing of your data while a rectification request or objection is being assessed.
Right to Data Portability
Request your personal data in a structured, machine-readable format where processing is based on your consent or a contract with you.
Right to Object
Object to processing of your data based on nbajaa's legitimate interests, including profiling for fraud detection and marketing communications.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing based on that consent.
Right to Lodge a Complaint
If you believe nbajaa has not handled your data correctly, you may raise a formal complaint via [email protected]. We are committed to resolving all complaints fairly.
Please note that some rights are subject to exceptions. For example, the right to erasure does not apply where nbajaa is required to retain data by law (such as financial transaction records or self-exclusion records). Where an exception applies, nbajaa will explain the specific reason in its response to your request.
9. Data Security Measures
nbajaa takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- SSL/TLS Encryption: All data transmitted between your device and the nbajaa platform is encrypted in transit using industry-standard TLS (Transport Layer Security) protocols. Connections over unencrypted HTTP are not accepted;
- Password Hashing: Account passwords are stored only as salted cryptographic hashes. nbajaa never stores passwords in plain text and cannot retrieve your password — only reset it;
- OTP Authentication: Login and withdrawal actions are protected by one-time password (OTP) verification sent to your registered Bangladesh mobile number, providing a second layer of authentication against unauthorised account access;
- Access Controls: Access to Player personal data within nbajaa's internal systems is restricted on a strict need-to-know basis. Staff access to personal data is logged, audited, and subject to regular review;
- Payment Data Isolation: Full payment credential details (bKash PINs, bank passwords) are never transmitted to or stored by nbajaa. Payment transactions are processed directly through the relevant MFS or banking partner's secure API;
- Fraud Monitoring: Continuous automated monitoring systems operate to detect unusual account activity, suspicious login patterns, and potentially fraudulent transactions. Alerts are reviewed by nbajaa's security team;
- Secure Data Storage: Personal data is stored on secure servers with physical and logical access controls. Regular security assessments and vulnerability tests are conducted on platform infrastructure.
10. Policy Updates & Contact
nbajaa may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, legal obligations, or applicable regulations. Where a change is material — meaning it significantly affects how your personal data is used or your rights over it — nbajaa will notify registered Players via the mobile number or email address on their account, or via a prominent notice upon login to the platform, at least 7 days before the change takes effect.
Minor updates, such as corrections of typographical errors, clarifications of existing practices, or additions reflecting new payment methods or game providers, may be made without advance notice and will take effect upon publication at nbajaa.com/privacy-policy. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Your continued use of the nbajaa platform after any updated Privacy Policy has taken effect constitutes your acknowledgement of the revised Policy. If you disagree with any update, you should stop using the platform and may request account closure in accordance with the Terms & Conditions.
For all privacy-related enquiries, to exercise your data rights, or to raise a complaint regarding nbajaa's data handling practices, please contact the nbajaa data protection team. All communications should be sent to [email protected] with a subject line clearly indicating the nature of your request. nbajaa is committed to acknowledging all privacy enquiries within 48 hours and resolving them within 30 days of receipt.
This Privacy Policy is written in English. English is the governing language of this Policy. In the event of any inconsistency between this English version and any translation, the English version shall prevail in all respects.
Your Privacy at nbajaa — In Plain Terms
Beyond the formal policy language, here is what nbajaa's privacy commitment means for every Bangladesh player in practical terms.
No Data Sales — Ever
nbajaa does not sell, rent, or trade your personal information to third parties for their marketing or commercial use. Your data is used only to operate and improve your nbajaa account experience.
SSL-Encrypted Connections
Every interaction with the nbajaa platform — login, deposit, withdrawal, game play — travels over TLS-encrypted connections. Your data is never sent over unencrypted channels.
OTP-Protected Account Access
Every login and withdrawal is verified by a one-time password sent to your registered Bangladesh mobile number. Unauthorised access is blocked even if your password is compromised.
You Control Your Data
Access, correct, export, or delete your personal data at any time by contacting the nbajaa support team. All valid requests are processed within 30 days — no runaround.
Opt-Out of Marketing Anytime
Promotional SMS and email communications are only sent with your explicit consent. You can withdraw that consent instantly through your account settings or by emailing [email protected].
Transparent Retention Policy
nbajaa publishes clear data retention periods for every category of personal data. When your data is no longer needed, it is securely deleted — not archived indefinitely.
Play with Confidence on nbajaa
Your data is protected, your identity is verified, and your withdrawals are fast. Explore cricket betting, live casino games, and slots — all backed by nbajaa's privacy-first approach for Bangladesh players.