nabjee Privacy Policy

1 Data Controller Information

nabjee operates the Platform at nabjee.ws and acts as the data controller in respect of all personal data collected through the Platform. As data controller, nabjee determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way your personal data is handled, you may contact our dedicated privacy support team at [email protected]. We will acknowledge all privacy-related enquiries within 48 hours and aim to resolve them within 14 business days (Bangladesh Standard Time, UTC+6).

2 Personal Data We Collect

nabjee collects personal data through multiple channels — directly from you when you register and use the Platform, automatically through technical systems as you browse, and from trusted third-party partners where permitted. The categories of personal data we collect include:

3 How We Use Your Personal Data

nabjee processes your personal data only for specific, legitimate purposes. For each purpose, we rely on a corresponding lawful basis under applicable data protection principles. The primary purposes for which we use your data are:

• Account creation and management: to register your Player account, authenticate your login sessions, and administer your account settings and preferences.
• Payment processing: to facilitate deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records.
• Identity verification and compliance: to verify your age (21+ requirement), confirm your identity, detect and prevent fraud, and comply with anti-money-laundering (AML) obligations.
• Service delivery: to provide access to casino games, sports betting markets, and all other features of the nabjee Platform.
• Customer support: to respond to enquiries, investigate complaints, and resolve disputes in a fair and timely manner.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour and to administer responsible gaming tools such as deposit limits, session limits, cooling-off periods, and self-exclusion.
• Promotional communications: to send you information about bonuses, promotions, and Platform updates, where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Platform security and fraud prevention: to detect, investigate, and prevent unauthorised account access, fraudulent transactions, and other malicious activity.
• Analytics and service improvement: to analyse aggregated usage patterns, identify technical issues, and improve the design and performance of the Platform. Analytics data is anonymised or pseudonymised wherever possible.
• Legal obligations: to comply with requests from regulatory authorities, court orders, or other legally binding obligations requiring disclosure of personal data.

nabjee will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another lawful basis.

4 Legal Bases for Processing

nabjee relies on the following lawful bases when processing your personal data:

5 Sharing Your Personal Data

nabjee does not sell or rent your personal data to any third party. We share your data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Providers: bKash, Nagad, Rocket, Upay, and partnered banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the minimum transaction data required to process deposits and withdrawals. Each provider operates under their own privacy policy and applicable banking regulations.
• Game Software Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and session token to deliver their game content. These providers do not receive your full name, contact details, or payment information.
• Identity Verification Partners: Where we engage specialist KYC providers to assist with document verification, these partners receive only the documents and data necessary to perform the verification and are contractually prohibited from using that data for any other purpose.
• Fraud Prevention and Security Services: We may share IP addresses, device fingerprints, and behavioural signals with security service providers to detect and prevent fraudulent activity.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful request, subpoena, or court order.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of nabjee's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party recipients with whom nabjee shares personal data are required to implement appropriate technical and organisational security measures and to process your data solely in accordance with nabjee's instructions.

6 Data Retention

nabjee retains your personal data for as long as your Player account remains active, and for a defined period thereafter to fulfil legal, regulatory, and dispute-resolution obligations. The general retention periods we apply are as follows:

• Account and registration data: Retained for the duration of your account plus a minimum of 5 years after account closure, to satisfy financial record-keeping and AML compliance requirements.
• KYC and identity documents: Retained for the duration of your account plus a minimum of 5 years, or longer if required by a specific legal obligation or ongoing investigation.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction in accordance with standard financial record-keeping practice.
• Support communications: Retained for 2 years from the date of the communication, unless the subject matter relates to an ongoing dispute or legal proceeding.
• Technical and device logs: Retained for up to 12 months, after which they are either deleted or anonymised for aggregated analytics purposes.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent transaction.

When personal data reaches the end of its applicable retention period and no legal obligation requires further retention, nabjee will securely delete or irreversibly anonymise that data.

7 Cookies and Tracking Technologies

nabjee uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain your login session, and collect analytics data. The types of cookies we use are:

• Strictly Necessary Cookies: These are essential to the operation of the Platform. They enable you to log in, navigate between pages, and use core features. These cookies cannot be disabled without severely impairing your ability to use the site.
• Functional Cookies: These remember your preferences — such as your preferred language or display settings — to provide a more personalised experience on return visits.
• Analytics Cookies: These collect anonymised or pseudonymised data about how Players interact with the Platform, including which pages are visited most frequently and where users encounter difficulties. This data helps us improve the Platform. Analytics cookies are only placed with your consent.
• Session Security Tokens: Short-lived tokens used to maintain the integrity and security of your authenticated session. These expire when you log out or close your browser.

You may manage or withdraw your consent to non-essential cookies at any time through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the Platform. nabjee does not use third-party advertising or retargeting cookies.

8 Data Security

nabjee employs a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive personal data stored in our databases;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their specific role;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Secure, geographically redundant data storage with regular backups;
• Incident response procedures to detect, contain, and report data breaches in a timely manner.

While nabjee takes all reasonable steps to protect your data, no internet-based system is completely immune to security risks. You are responsible for keeping your own login credentials secure and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

9 Your Privacy Rights

As a Player on the nabjee Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Right Type]". We will respond within 14 business days.

• Right of Access: You may request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to nabjee's legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the way we use your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including direct marketing communications. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10 Children and Minors

The nabjee Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If nabjee becomes aware that personal data has been collected from a person under the minimum age, that account will be suspended immediately, the personal data will be deleted, and any balance will be forfeited pending review.

If you are a parent or guardian and believe that a minor has registered on the Platform without your knowledge, please contact us immediately at [email protected] so that we can take prompt corrective action.

11 International Data Transfers

nabjee primarily stores and processes personal data within secure server infrastructure. In certain limited circumstances — for example, where a game software provider or identity verification partner operates infrastructure outside Bangladesh — your personal data may be transferred to and processed in a different country.

Where such transfers occur, nabjee ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses. By using the Platform, you acknowledge and consent to such transfers where necessary for the provision of the service.

12 Changes to This Privacy Policy

nabjee reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players by email (to the address registered on the account) and by posting a prominent notice on the Platform, at least 14 days before the changes take effect.

The effective date at the top of this Policy will be updated whenever a new version is published. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.