nebaji Privacy Policy

When you use the nebaji platform, we collect personal data in several ways — information you provide directly, data generated automatically through your use of the platform, and in some cases data obtained from trusted third-party sources. This section explains each category in plain English so you know exactly what nebaji holds about you.

Information You Provide Directly

When you register a nebaji account, you are required to provide certain personal details that allow us to create and manage your account, verify your identity, and process your financial transactions. The information collected at this stage includes:

• Full legal name — used for identity verification and payment matching
• Date of birth — used to verify that you meet the 18+ age requirement
• Email address — used for account communications, security alerts, and (with your consent) promotional messages
• Bangladesh mobile number — used for two-factor authentication, account recovery, and bKash/Nagad/Rocket payment verification
• Residential address — collected during KYC verification to satisfy anti-money laundering (AML) obligations
• National ID (NID) or passport details — collected during KYC to confirm your legal identity
• Payment account details — bKash number, Nagad number, Rocket number, Upay account, or card details used for deposit and withdrawal processing

Beyond registration and KYC, you may also provide personal data when you contact the nebaji support team via live chat or email, when you submit a dispute or complaint, or when you respond to voluntary surveys or feedback requests.

Information Collected Automatically

When you access the nebaji platform — whether through a browser on desktop or mobile — certain data is collected automatically as part of normal platform operation:

• IP address and approximate geographic location — used for fraud detection, regional compliance checks, and security monitoring
• Device type, operating system, and browser version — used for technical support and platform optimisation
• Session data — including login timestamps, session duration, pages visited, and features used
• Gameplay data — including game history, wager amounts, win/loss records, and bonus usage — retained for fairness auditing, dispute resolution, and responsible gaming monitoring
• Transaction logs — full records of every deposit, withdrawal, bonus credit, and balance adjustment on your account
• Cookies and similar tracking data — see Section 3 for full details

Information from Third Parties

In limited circumstances, nebaji may receive personal data about you from trusted third-party sources, including identity verification providers, payment processors (such as bKash, Nagad, and Rocket network operators), fraud prevention services, and responsible gambling databases. Data received from these sources is used solely to supplement and verify the information already held on your account and is handled with the same level of care as data you provide directly.

nebaji processes your personal data for a number of clearly defined purposes, each supported by a legitimate legal basis. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

Marketing Communications

nebaji will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or seasonal offers if you have explicitly opted in to marketing communications during registration or via your account preferences. You may withdraw your marketing consent at any time by updating your notification settings in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Automated Decision-Making

nebaji uses automated systems to assist with fraud detection, bonus abuse identification, and responsible gaming intervention triggers. Where an automated process results in a significant decision about your account — such as a temporary restriction or bonus void — you have the right to request a manual review of that decision by a member of the nebaji compliance team. To exercise this right, contact [email protected] with the subject line "Manual Review Request — [your username]".

nebaji uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the platform. This section explains the categories of cookies we use, their purpose, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred language, login status, and session data. Cookies cannot execute code, carry viruses, or access files on your device beyond the data they themselves contain.

Categories of Cookies Used by nebaji

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your cart/balance state, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: These remember your preferences — such as your language setting, preferred payment method, and UI layout choices — to provide a more personalised experience. Disabling these cookies means the platform will not remember your preferences between sessions.
• Analytics Cookies: These collect aggregated, anonymised data about how players navigate the nebaji platform — which pages are visited most, how long sessions last, and where users exit. This data helps us improve the platform. No personally identifiable information is attached to analytics data.
• Security & Fraud Detection Cookies: These assist our fraud prevention systems in identifying unusual or potentially malicious activity by comparing current session behaviour against historical patterns for your account.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive a notification before a new cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the nebaji platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in popular browsers are available via the browser's built-in help section.

nebaji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

Service Providers

We engage carefully selected third-party service providers to help us operate the nebaji platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators), identity verification services, fraud prevention platforms, cloud hosting providers, and game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). All service providers are bound by contractual data processing agreements that restrict their use of your data to the specific service they provide to nebaji. They are not permitted to use your data for their own independent purposes.

Legal and Regulatory Disclosure

nebaji may be required to disclose personal data to regulatory bodies, law enforcement agencies, or government authorities in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data required by the specific legal obligation and will notify the account holder where it is legally permissible to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of nebaji's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via your registered email address prior to any such transfer taking effect and will ensure the acquiring entity agrees to honour the terms of this Privacy Policy in relation to your data.

nebaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as standard:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, the resulting dataset may be retained indefinitely for statistical and platform improvement purposes, as anonymised data falls outside the scope of personal data protection obligations.

If you request deletion of your account and personal data before the end of a mandatory retention period, nebaji will suppress your data from active processing immediately — meaning it will no longer be used for any purpose other than satisfying the outstanding legal retention obligation — and will delete it fully once that retention period has elapsed.

As a nebaji player, you hold a number of rights in relation to the personal data we hold about you. nebaji is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request — [your username]".

nebaji takes the security of your personal data seriously and maintains a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no platform can guarantee absolute security, our approach is designed to meet and exceed the expectations of a trusted online casino serving Bangladesh players.

Technical Safeguards

• SSL/TLS encryption: All data in transit between your device and nebaji's servers is encrypted using industry-standard TLS protocols. Connections are HTTPS-only; HTTP requests are automatically redirected.
• Data encryption at rest: Sensitive personal data — including payment account details, KYC documents, and password hashes — is stored in encrypted form on our servers. Plain-text storage of passwords is strictly prohibited by our engineering standards.
• Two-factor authentication (2FA): Available for all accounts and strongly recommended. 2FA requires a one-time code in addition to your password for login from unrecognised devices.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff access is logged, monitored, and subject to regular audit. No member of the nebaji team has access to your plain-text password.
• Penetration testing: nebaji conducts regular security assessments to identify and remediate vulnerabilities before they can be exploited.

Your Role in Security

Account security is a shared responsibility. nebaji strongly recommends that you use a strong, unique password for your nebaji account, enable 2FA, never share your login credentials with anyone, and log out of your account when using a shared or public device. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately so we can investigate and, if necessary, secure your account.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, nebaji will notify affected account holders without undue delay via their registered email address. The notification will describe the nature of the breach, the data categories affected, the likely consequences, and the measures nebaji has taken or proposes to take to address the breach and mitigate its effects.

nebaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes — that is, changes that meaningfully affect how your personal data is used or the rights available to you — we will notify you via a prominent notice on the nebaji platform and, where appropriate, by email to your registered address.

Minor or clarificatory changes that do not affect your rights or the substance of our data practices may be made without individual notification. The "Last Updated" date at the top of this page will always reflect the most recent revision, so we encourage you to review this policy periodically.

Your continued use of the nebaji platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this policy, you should stop using the platform and may request account closure in accordance with our Terms and Conditions. All data collected prior to closure will continue to be handled in accordance with the version of the policy in effect at the time of collection, subject to any updated mandatory retention requirements.

This Privacy Policy was last updated on 1 January 2026 and applies to all players who have registered or used the nebaji platform on or after that date. Players who registered prior to this date and who continue to use the platform are considered to have accepted this updated policy.