Your Privacy Matters at nbjaee

1.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including city, division, and country — for example, Dhaka, Chittagong, Sylhet, or Khulna).
• Verification documents: Copies of government-issued photo identification (National Identity Card, passport, or driver's licence) and proof of address (utility bill or bank statement), submitted as part of the KYC process.
• Financial data: Payment method details including bKash account numbers, Nagad wallet references, Rocket or Upay identifiers, bank account details for Dutch-Bangla Bank or BRAC Bank transfers, and card information for Visa or Mastercard transactions. Full card numbers are not stored by nbjaee — payment card data is handled directly by our PCI-DSS compliant payment partners.
• Account credentials: Username and encrypted password. We never store passwords in plain text.
• Communications: The content of messages you send to our support team via email or live chat, including any attachments you share.
• Responsible gaming data: Self-exclusion preferences, deposit limits, session time limits, and cooling-off requests you set through your account settings.

1.2 Information Collected Automatically

When you access the nbjaee platform — whether via a desktop browser or a mobile device in Bangladesh — certain technical and behavioural data is collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, time spent on each section, clickstream data, and features used.
• Transaction data: Records of all deposits, withdrawals, bonus claims, and wagering activity on your account.
• Location data: Approximate geographic location inferred from your IP address, used to apply geographic eligibility rules and comply with applicable restrictions.
• Session data: Log-in timestamps, session duration, and log-out events, used to support responsible gaming monitoring and account security.

1.3 Information From Third Parties

nbjaee may receive personal information about you from the following categories of third parties:

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposits and process withdrawals.
• Identity verification agencies: Confirmation of identity and age from third-party KYC and AML screening services.
• Fraud prevention services: Risk signals and fraud scores used to protect the integrity of the platform and the security of player funds.
• Analytics partners: Aggregated and anonymised traffic and behavioural data used to understand how players interact with the nbjaee platform and to improve the user experience.

nbjaee processes your personal data on the basis of one or more of the following legal grounds: (a) performance of a contract between you and nbjaee; (b) compliance with a legal obligation; (c) our legitimate interests in operating a safe, fair, and commercially viable platform; or (d) your explicit consent, where requested. The table below maps the primary purposes for which we use your data to the corresponding legal basis.

2.1 Marketing Communications

If you have opted in to receive marketing communications from nbjaee, we may send you promotional emails or notifications about new games, bonuses, seasonal offers (such as Eid or BPL promotions), and platform updates. You can withdraw your consent to marketing communications at any time by updating your account preferences or by contacting our support team. Withdrawing marketing consent does not affect the lawfulness of communications sent prior to withdrawal.

2.2 Automated Decision-Making

nbjaee may use automated processes to evaluate account security risks, detect potentially fraudulent activity, and apply responsible gaming interventions where player behaviour patterns suggest a risk of harm. Where an automated decision has a significant effect on your account (for example, a temporary account suspension), you have the right to request human review of that decision by contacting our support team.

We may share your personal information with the following categories of recipients, each of whom is contractually required to handle your data securely and in accordance with applicable privacy law:

3.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card scheme operators (Visa, Mastercard). These providers operate under strict data security and financial regulatory requirements.

3.2 Identity and KYC Verification Partners

To satisfy our obligations in relation to age verification and anti-money laundering (AML) compliance, we share identity and document data with specialist third-party KYC and AML screening providers. These partners process your data solely for verification purposes and are not permitted to use it for any other purpose.

3.3 Technology and Infrastructure Providers

nbjaee relies on third-party technology providers for services including cloud hosting, data storage, platform development, customer support tooling, and analytics. These providers act as data processors on our behalf and are bound by contractual obligations that restrict their use of your data to the specific service they provide to nbjaee.

3.4 Game Providers

Where you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — the minimum technical data necessary to run the game (such as session identifiers and stake/result data) may be transmitted to and from that provider's systems. Game providers do not receive your full personal profile.

3.5 Legal and Regulatory Authorities

nbjaee may be required to disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where we receive a lawful request or where we are otherwise required to do so by applicable law. In such cases, we will disclose only the specific data required and will notify you of any disclosure to the extent we are legally permitted to do so.

3.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of nbjaee's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer where we are legally required to do so, and your rights under this Privacy Policy will continue to apply.

nbjaee uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, maintain your session, and gather analytics data. Cookies are small text files placed on your device by your browser when you visit the nbjaee website.

4.1 Categories of Cookies We Use

4.2 Managing Your Cookie Preferences

You may control optional cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies may prevent certain parts of the nbjaee platform from functioning correctly, including the ability to log in and maintain your session.

Disabling analytics cookies will not affect your ability to play games, deposit, or withdraw funds — it simply means we receive less data about aggregate usage patterns. We encourage players to keep functional cookies enabled, as they are what allow the platform to remember your BDT currency preference and your responsible gaming settings between sessions.

The security of your personal information is a top priority for nbjaee. We implement a layered set of technical and organisational controls designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

• Transport-layer encryption: All communications between your browser and the nbjaee platform are encrypted using TLS (Transport Layer Security), ensuring that data in transit cannot be intercepted by unauthorised parties.
• At-rest encryption: Sensitive data stored in our databases — including identity documents and financial information — is encrypted at rest using AES-256 or equivalent standards.
• Password security: Account passwords are hashed using a one-way cryptographic algorithm. nbjaee staff cannot view your password in plain text and will never ask you for it.
• Access controls: Access to personal data is restricted to nbjaee staff and contractors who have a genuine operational need. All access is logged and regularly audited.
• Intrusion detection: Our platform is monitored 24/7 for suspicious activity using automated security tools. Anomalous patterns — such as unusual login locations or rapid multiple login attempts — trigger alerts and may result in temporary account protections.
• PCI-DSS compliance: Payment card data is processed by PCI-DSS certified payment partners. nbjaee does not store full card numbers on its own systems.
• Penetration testing: nbjaee conducts periodic security testing to identify and remediate vulnerabilities before they can be exploited.

nbjaee retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations and legitimate interests. The following retention periods apply as a general guide:

When a retention period expires, your data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised and aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and business analysis purposes.

6.1 Requests for Early Deletion

You may request deletion of your personal data before the standard retention period has elapsed. We will honour such requests where we are not legally required to retain the data in question. Where a legal obligation prevents immediate deletion, we will inform you of the applicable retention period and restrict processing of your data to that legally required purpose until deletion becomes possible.

As a player on the nbjaee platform, you have a number of rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary friction. To submit a request, please contact us at [email protected] with the subject line "Privacy Rights Request" and a description of your request.

• Right of Access: You have the right to request a copy of the personal data nbjaee holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn the consent on which processing was based — subject to applicable legal retention requirements.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict processing of your data while a dispute or investigation is ongoing.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a machine-readable copy of your data for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including direct marketing. We will cease processing unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Rights Related to Automated Decision-Making: Where a fully automated decision significantly affects you, you have the right to request human review, to contest the decision, and to receive an explanation of the logic used.

We aim to respond to all privacy rights requests within 30 days of receipt. In complex cases where an extension is required, we will inform you within the initial 30-day period and provide an updated estimated response date. There is no fee for exercising your privacy rights unless a request is manifestly unfounded or excessive.

8.1 Contacting nbjaee About Privacy

If you have any questions, concerns, or complaints relating to this Privacy Policy or to nbjaee's data handling practices, please contact our support team. All privacy-related enquiries are handled by staff who are trained in data protection and committed to resolving your concern promptly.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)
• Response Target: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 14 working days.

8.2 Updates to This Privacy Policy

nbjaee reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where a material change is made, we will notify registered players via the email address associated with their account and/or via a prominent notice on the nbjaee platform before the change takes effect.

Minor updates — such as editorial corrections or clarifications that do not change the substance of our practices — may be made without individual notification. The effective date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the nbjaee platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree with any revision, you should stop using the platform and contact our support team to discuss your options, including account closure.

Last Updated: 1 January 2026. This Privacy Policy applies to all personal data processed by nbjaee in connection with the nbjaee.net platform. It supersedes all previous privacy notices issued by nbjaee. If you have questions, contact [email protected] — available 24/7 on Bangladesh Standard Time (UTC+6). 18+