nabji Privacy Policy

nabji collects personal data in three primary ways: data you provide directly when registering or using the platform, data generated automatically by your use of the platform, and data received from third-party payment and verification service providers. The following table summarises the categories of personal data nabji processes and the lawful basis for each category.

nabji does not knowingly collect personal data from persons under 18 years of age. If nabji becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed in accordance with nabji's age restriction policy set out in the Terms & Conditions.

Where nabji receives personal data about you from a third-party source — for example, from a bKash or Nagad payment confirmation — nabji processes only the elements of that data necessary to reconcile the transaction with your nabji account. nabji does not retain raw payment processor data beyond the period required for transaction record-keeping and fraud prevention purposes.

nabji processes your personal data only for the specific, legitimate purposes listed below. We do not use personal data for automated decision-making that produces significant legal effects without human review, and we do not use your data to build third-party advertising profiles or to sell targeting segments to advertisers.

• Account Management: Creating, maintaining, and securing your nabji account; verifying your identity and age; authenticating your login sessions; communicating essential account information to you by email or SMS.
• Service Delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; crediting winnings and bonuses to your account; enabling access to casino games, live dealer tables, and sports betting markets including BPL cricket and T20 events.
• Platform Security and Fraud Prevention: Monitoring transactions and gameplay patterns to detect and investigate suspected fraud, multi-accounting, bonus abuse, money laundering, and other conduct prohibited by nabji's Terms & Conditions; maintaining audit logs for dispute resolution.
• Legal and Regulatory Compliance: Retaining transaction and identity records as required for platform integrity obligations; responding to valid legal processes and lawful requests from competent authorities; enforcing nabji's Terms & Conditions.
• Responsible Gaming: Monitoring usage patterns to identify potential indicators of problem gambling behaviour; applying and enforcing deposit limits, cooling-off periods, and self-exclusion requests you have submitted; maintaining records of responsible gaming tool activations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, platform stability, payment flow efficiency, and customer support quality. Individual-level data is not used for platform improvement analytics — only anonymised aggregate data.
• Communications: Sending you transaction confirmations, account security notifications, bonus opt-in confirmations, and material Terms & Conditions update notices. Where you have opted in to marketing communications, sending you information about relevant nabji promotions including the daily emerald bonus, BPL betting offers, and seasonal promotions. You may opt out of marketing communications at any time via the communications preferences panel in your account dashboard or by contacting [email protected].

nabji does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. nabji shares personal data with third parties only in the limited circumstances described in this section, and only to the extent strictly necessary for the stated purpose.

All third-party service providers with whom nabji shares personal data are required to process that data solely for the purpose for which it was shared, to implement appropriate technical and organisational security measures, and to delete or return the data when the processing purpose has been fulfilled. nabji maintains written data processing agreements with all third-party data processors.

nabji does not transfer personal data to countries outside the region in which it is hosted except where the transfer is necessary to deliver a specific service (for example, routing a payment through an international card network) and where appropriate safeguards are in place. Game technology providers such as Pragmatic Play and Evolution Gaming may process session data in servers located outside Bangladesh; in such cases, data is anonymised at the session level and does not include your identity or financial account details.

nabji uses cookies and similar tracking technologies to operate the platform correctly, maintain your login session, remember your preferences, and analyse aggregated usage patterns to improve platform performance. This section explains the types of cookies nabji uses and how you can manage them.

nabji does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. No data collected via nabji's cookies is shared with advertising networks or social media platforms.

You can manage cookie settings through your web browser's privacy controls. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, and delete cookies on a per-site basis. Please note that blocking strictly necessary or fraud detection cookies will impair your ability to use the nabji platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation. Continued use of the nabji platform following your review of this cookie notice constitutes acceptance of nabji's use of cookies as described in this section.

nabji retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required to meet nabji's platform integrity, security, and legal compliance obligations. The following retention periods apply to the main categories of personal data nabji holds.

When the applicable retention period for a category of personal data expires, nabji deletes or anonymises that data in a secure manner. Anonymised data — from which all identifying information has been irreversibly removed — may be retained beyond these periods for aggregated statistical purposes, as it no longer constitutes personal data.

Where nabji is required to retain data beyond the standard retention period by a valid legal hold, court order, or ongoing investigation, data is retained only for the duration of that legal obligation and is deleted promptly once the hold is lifted.

nabji employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following measures are in place at all times.

• Encryption in Transit: All communications between your browser or device and nabji's servers are encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page of the platform, every login request, and every payment transaction.
• Encryption at Rest: Sensitive personal data stored in nabji's databases — including identity records, financial account details, and KYC documents — is encrypted at rest using industry-standard symmetric encryption. Database encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within nabji's systems is restricted on a strict need-to-know basis. Only staff members whose specific job function requires access to a category of personal data are granted access to it. All staff access is logged and audited.
• Two-Factor Authentication: nabji strongly recommends that all players enable two-factor authentication (2FA) on their nabji account. 2FA is available in the account security settings panel and adds a second layer of protection against unauthorised account access.
• Fraud Monitoring: nabji's automated fraud detection systems continuously monitor login events, transaction patterns, and session metadata for anomalies consistent with account takeover, multi-accounting, or payment fraud. Suspicious activity triggers an immediate security review.
• Vulnerability Management: nabji's platform undergoes regular security assessments to identify and remediate vulnerabilities in the application code, server configuration, and payment integration layer.
• Incident Response: nabji maintains a formal security incident response procedure. In the event of a data breach that poses a material risk to account holders, nabji will notify affected players by email to their registered address within a reasonable period of discovering the breach, describing the nature of the incident, the data affected, and the steps nabji is taking to address it.

As a nabji account holder, you hold the following rights with respect to your personal data. All rights requests should be submitted to [email protected] with your registered account username and a clear description of the right you wish to exercise. nabji will acknowledge all rights requests within 5 business days and will complete the request or provide a substantive response within 30 calendar days.

nabji will not charge a fee for processing a reasonable rights request. Where a request is manifestly unfounded or excessive (for example, repetitive requests for the same data within a short period), nabji reserves the right to charge a reasonable administrative fee or decline to act on the request, and will provide written reasons for doing so.

If you are dissatisfied with nabji's response to a rights request, you may escalate the matter by writing formally to nabji's data protection contact at [email protected]. nabji is committed to resolving all data-related concerns through direct engagement with account holders before any formal escalation becomes necessary.

nabji reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, and applicable standards. When material changes are made to this Privacy Policy, registered account holders will be notified by email to the address associated with their nabji account at least seven (7) days before the changes take effect. The updated policy will also be posted at nabji.vip/privacy-policy with a revised effective date.

For the purposes of this Privacy Policy, a "material change" includes: adding new categories of data collected; adding new third parties with whom data is shared; changing the retention period for any data category; and any change to how nabji processes financial data or KYC documents. Routine clarifications, typographic corrections, and restructuring that does not alter the substance of the policy are not considered material changes and may be made without advance email notification.

Continued use of the nabji platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should stop using the nabji platform and request account closure by emailing [email protected] before the effective date.

This Privacy Policy should be read alongside nabji's Terms & Conditions and Responsible Gaming policy. Together, these three documents constitute the complete framework governing your relationship with the nabji platform.