Nabajee Privacy Policy — Your Data, Protected

Nabajee is an online gaming platform operated under a valid gaming licence and designed specifically for players in Bangladesh. The nabajee platform is accessible at nabajee.app and through the nabajee mobile application. For the purposes of this Privacy Policy, nabajee is the data controller responsible for the personal data collected through the platform.

If you have any questions about how nabajee handles your personal data, or if you wish to exercise any of your data rights, you can contact us at any time using the details provided in Section 13 of this policy. Nabajee takes its responsibilities as a data controller seriously and is committed to handling your information with care, transparency, and respect.

Nabajee collects personal data in three main ways: data you provide directly, data collected automatically when you use the platform, and data received from third parties such as payment processors and identity verification services.

Data you provide directly to nabajee:

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address
• Government-issued ID documents submitted for identity verification
• Payment method details (processed securely via our payment partners)
• Communications you send to nabajee support
• Responsible gaming preferences and self-exclusion requests

Data collected automatically when you use nabajee:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the platform
• Game session data including bets placed, outcomes, and session duration
• Login timestamps and session identifiers
• Cookie and tracking data as described in Section 6

Data received from third parties:

• Identity verification results from our KYC (Know Your Customer) provider
• Transaction confirmation data from payment processors such as bKash and Nagad
• Fraud and risk signals from our compliance partners

Nabajee does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming request.

Nabajee uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The main ways nabajee uses your personal data are:

• Account management: Creating and maintaining your nabajee account, verifying your identity, and managing your account settings and preferences.
• Payment processing: Processing deposits and withdrawals, verifying payment methods, and maintaining transaction records as required by law.
• Platform security: Detecting and preventing fraud, unauthorised access, money laundering, and other prohibited activities on nabajee.
• Regulatory compliance: Meeting our obligations under applicable gaming regulations, anti-money laundering laws, and know-your-customer requirements.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of nabajee's support service.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools where appropriate.
• Platform improvement: Analysing usage data in aggregate to understand how players use nabajee and to improve the platform's features and performance.
• Marketing communications: Sending you promotional offers and updates about nabajee, subject to your communication preferences and the conditions in Section 11.

Nabajee does not use automated decision-making that produces legal or similarly significant effects on you without human review. Where automated systems flag an account for review — for example, for suspected fraud — a member of the nabajee compliance team reviews the case before any action is taken.

Nabajee processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to provide the nabajee service to you under the Terms and Conditions you agreed to at registration — including account management, payment processing, and gameplay.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, gaming licence conditions, and tax reporting requirements.
• Legitimate interests: Processing carried out for nabajee's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, such as sending you marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Nabajee does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: bKash, Nagad, Rocket, and bank transfer partners receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and by contractual obligations with nabajee.
• Identity verification providers: Our KYC partner receives the identity documents you submit for verification. They process this data solely to confirm your identity and return a verification result to nabajee.
• Fraud and compliance partners: Nabajee uses third-party services to detect fraud and meet anti-money laundering obligations. These partners receive technical and transaction data necessary for risk assessment.
• Regulatory authorities: Nabajee may be required to share data with gaming regulators, law enforcement agencies, or other government bodies where required by law or a valid legal order.
• IT and infrastructure providers: Nabajee uses third-party cloud and hosting services. These providers process data on our behalf under strict data processing agreements and do not have independent access to your personal data.

All third parties who receive personal data from nabajee are required to handle it securely, use it only for the specified purpose, and comply with applicable data protection laws. Nabajee does not transfer your personal data to countries outside your region without ensuring appropriate safeguards are in place.

Nabajee uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use nabajee. A cookie is a small text file stored on your device when you visit nabajee. The types of cookies nabajee uses are:

• Essential cookies: Required for the nabajee platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options. These improve your experience on nabajee but are not strictly essential.
• Analytics cookies: Help nabajee understand how players navigate the platform — which pages are visited most, where players encounter issues, and how features are used. This data is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns and flagging suspicious sessions on nabajee.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using nabajee, but some features may work less smoothly. Nabajee does not use third-party advertising cookies or share cookie data with advertisers.

Nabajee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and nabajee's servers.
• Encryption of sensitive data stored in nabajee's databases, including payment details and identity documents.
• Access controls that restrict internal access to personal data to staff who need it to perform their role.
• Regular security assessments and penetration testing of nabajee's infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Monitoring systems that detect and alert on unusual access patterns or potential security incidents.

While nabajee takes data security seriously and maintains robust protections, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, nabajee will notify you and the relevant authorities as required by applicable law. You can help protect your nabajee account by using a strong, unique password and enabling two-factor authentication.

Nabajee retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The general retention periods nabajee applies are:

• Account data: Retained for the duration of your active nabajee account, plus a minimum of five years after account closure to meet regulatory and legal obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, as required by anti-money laundering regulations.
• Identity verification documents: Retained for the period required by our gaming licence conditions, typically five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three years from the date of the last communication, unless the communication relates to a dispute that requires longer retention.
• Analytics and usage data: Aggregated and anonymised data may be retained indefinitely. Identifiable usage data is retained for up to two years.

When the applicable retention period expires, nabajee securely deletes or anonymises your personal data. If you request deletion of your data before the retention period has expired, nabajee will delete what it is legally permitted to delete and explain any data that must be retained and why.

As a nabajee player, you have the following rights in relation to your personal data. To exercise any of these rights, contact nabajee support at [email protected] with the subject line "Data Rights Request". Nabajee will respond within 30 days.

• Right of access: You can request a copy of the personal data nabajee holds about you, along with information about how it is used.
• Right to rectification: If any personal data nabajee holds about you is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: You can ask nabajee to delete your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to restrict processing: You can ask nabajee to pause processing of your data in certain circumstances — for example, while a correction request is being resolved.
• Right to data portability: You can request a copy of the personal data you provided to nabajee in a structured, machine-readable format.
• Right to object: You can object to nabajee processing your data on the basis of legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

Nabajee will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, nabajee will explain the reason for any charge before proceeding.

Nabajee is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the nabajee registration process, and we conduct additional verification checks before processing any withdrawal.

If nabajee discovers that personal data has been collected from a person under 18, we will immediately close the associated account, delete the data, and void any balance. If you believe a minor has registered on nabajee, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Nabajee may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers. We will only send you marketing communications if you have opted in to receive them, either during registration or through your account settings.

You can opt out of marketing communications from nabajee at any time by:

• Clicking the unsubscribe link in any marketing email from nabajee.
• Updating your communication preferences in your nabajee account settings.
• Contacting nabajee support at [email protected] and requesting to be removed from marketing lists.

Opting out of marketing communications does not affect transactional communications — nabajee will still send you account-related messages such as deposit confirmations, withdrawal notifications, and security alerts. These are necessary for the operation of your account and cannot be disabled while your account is active.

Nabajee does not share your contact details with third-party marketers. All marketing communications you receive will come directly from nabajee.

Nabajee may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, nabajee will notify registered players via email or an in-platform notification before the changes take effect.

The current version of this policy is always available at nabajee.app/privacy-policy. The effective date at the top of this page shows when the current version was last updated. We encourage you to review this policy periodically. Your continued use of nabajee after any update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how nabajee handles your personal data, please get in touch:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Live chat: Available 24/7 through the nabajee platform

Nabajee aims to resolve all privacy-related queries promptly. For formal data rights requests, we will acknowledge receipt within 48 hours and provide a full response within 30 days. If you are not satisfied with nabajee's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.