nbajii Privacy Policy

Full Privacy Policy

Complete legal terms governing personal data processing at nbajii

1. Data Controller

nbajii (referred to in this policy as "nbajii", "we", "us", or "our") is the data controller responsible for the personal data collected through the nbajii platform at nbajii.ws. As data controller, nbajii determines the purposes for which and the manner in which personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact our data team at [email protected]. We aim to acknowledge all privacy-related enquiries within forty-eight (48) hours and to provide a substantive response within fourteen (14) calendar days.

2. Legal Basis for Processing

nbajii processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification requirements.
• Legitimate interests: Processing carried out to prevent fraud, ensure platform security, resolve disputes, improve our services, and analyse platform usage — provided such processing does not override your fundamental rights and freedoms.
• Consent: Processing for which you have given explicit consent, such as receiving optional promotional communications from nbajii. You may withdraw consent at any time by contacting our support team.

3. How We Use Your Personal Data

nbajii uses the personal data we collect for the following specific purposes:

• To create, manage, and maintain your registered player account on the nbajii platform.
• To verify your identity, age (21+), and residential address in compliance with our Know Your Customer policy.
• To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and other supported payment channels.
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities on the platform.
• To administer bonuses, promotions, and loyalty rewards to your account.
• To provide customer support and to respond to your enquiries, complaints, and dispute submissions.
• To send you account-related notifications, security alerts, and transaction confirmations.
• To enforce our Terms & Conditions and Responsible Gaming Policy, including implementing self-exclusion, deposit limits, and cooling-off periods where applicable.
• To analyse aggregated, anonymised usage data to improve the design, performance, and content of the nbajii platform.
• To comply with applicable legal and regulatory requirements and to respond to lawful requests from competent authorities.

4. Sharing Your Personal Data

nbajii does not sell, rent, or trade your personal data to third parties. We may, however, share your personal data with the following categories of recipients where necessary to deliver our services or to comply with legal obligations:

• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (City Bank, BRAC Bank, Dutch-Bangla Bank) receive the minimum data required to process your transactions, including your account reference and transaction amounts.
• Identity verification providers: Third-party KYC and identity verification service providers who assist nbajii in verifying the authenticity of identity documents and confirming player eligibility.
• Game content providers: Licensed game studios and live casino platform providers (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming) receive anonymised session data necessary to deliver game content. These providers do not receive your identity or financial data.
• Technology and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies, or courts in Bangladesh or other applicable jurisdictions, where nbajii is required by law to disclose personal data.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations and access data only where strictly necessary for the services they provide to nbajii.

All third parties with whom nbajii shares personal data are required to process that data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

5. Data Retention

nbajii retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following indicative retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data (logs): Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which they are deleted or anonymised.
• Cookie and session data: Session cookies are deleted when you close your browser. Persistent cookies expire as described in Section 7 of this policy.

Where your data is no longer required for its original purpose or by law, nbajii will securely delete or anonymise it so that it can no longer be associated with your identity.

6. Your Data Rights

As a data subject, you have the following rights with respect to the personal data nbajii holds about you. To exercise any of these rights, please submit a written request to [email protected]. We may need to verify your identity before processing your request.

• Right of access: You have the right to request a copy of the personal data nbajii holds about you, along with information about how that data is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details (such as your contact email or telephone number) directly via your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that nbajii may be required to retain certain data (such as transaction records and KYC documents) for legal compliance purposes even following an erasure request.
• Right to restriction of processing: You have the right to request that nbajii restricts the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on nbajii's legitimate interests. nbajii will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Cookies and Tracking Technologies

The nbajii platform uses cookies and similar technologies to provide core functionality, improve your experience, and protect platform security. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used by nbajii:

• Strictly necessary cookies: Required to operate the platform. These include session authentication cookies that keep you logged in during your visit. Without these cookies, services you have requested (such as maintaining your login session) cannot be provided. These cookies cannot be disabled.
• Functional cookies: Remember your preferences, such as your last-visited game category or display settings. These cookies expire after thirty (30) days and may be disabled, though doing so may reduce the quality of your experience.
• Analytics cookies: Collect anonymised data about how visitors use the platform, including pages visited, time spent on each page, and navigation paths. This data is used in aggregate form to improve platform performance and content. Analytics cookies expire after twelve (12) months.
• Security cookies: Help nbajii detect and prevent fraudulent activity, including identifying unusual login patterns and bot traffic. These cookies are strictly necessary and cannot be disabled.

nbajii does not use advertising cookies, retargeting cookies, or any third-party tracking technology designed to deliver targeted advertisements on or off the nbajii platform.

8. Security of Your Personal Data

nbajii takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS encryption on all data transmitted between your device and our servers.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms.
• Role-based access controls ensuring that only authorised nbajii personnel can access personal data, and only to the extent required for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
• Automatic session timeouts to protect accounts on shared or unattended devices.
• Anomaly detection systems that monitor for unusual login patterns, irregular transaction volumes, and other indicators of account compromise.

While nbajii takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that affects your rights and freedoms, nbajii will notify affected individuals as soon as reasonably practicable and will take all steps available to mitigate the impact of the breach.

9. Children's Privacy

The nbajii platform is strictly for adults aged 21 and above. nbajii does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately close the associated account and delete all related personal data from our systems.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on nbajii, please contact us immediately at [email protected] so that we can take appropriate action without delay.

10. Changes to This Privacy Policy

nbajii reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material, nbajii will notify registered players via the email address on file for their account prior to the changes taking effect.

Your continued use of the nbajii platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment to this policy, you should stop using the platform and contact our support team to request account closure.

11. Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to make a complaint about how nbajii has handled your personal data, please contact us:

• Email: [email protected]
• Subject line: Please include "Privacy Request" or "Data Complaint" in the subject line of your email to ensure it is routed to the correct team.
• Response time: We will acknowledge your message within 48 hours and provide a full response within 14 calendar days of receipt.

nbajii takes all privacy complaints seriously and will investigate each complaint thoroughly. Where we are unable to resolve a complaint to your satisfaction, you retain the right to seek any remedy available to you under applicable law.