Privacy Policy — How nbazzi Protects Your Personal Data

1. Information We Collect

1.1 Registration Data. When you create an nbazzi player account, we collect the following personal information: your full legal name, date of birth, registered Bangladesh mobile phone number, preferred payment method, and a username and password of your choosing. This information is required to open your account, verify your age, and process deposits and withdrawals.

1.2 Identity Verification (KYC) Data. As part of our Know Your Customer process, we may request and retain copies of government-issued identification documents, including your Bangladesh National Identity Card (NID), passport, or driving licence. KYC documents are stored securely and used solely for age and identity verification purposes.

1.3 Transaction Data. We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references (e.g., your bKash or Nagad account identifier), transaction timestamps, and transaction reference numbers. This data is necessary to process payments and maintain accurate financial records.

1.4 Gaming Activity Data. We collect data about your activity on the nbazzi platform, including games played, bets placed, bet amounts, game outcomes, session durations, and bonus usage. This data is used to operate the platform, detect fraud, enforce responsible gaming limits, and improve the player experience.

1.5 Device and Technical Data. When you access nbazzi, our servers automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This information helps us detect suspicious access patterns, prevent fraud, and ensure platform stability.

1.6 Communications Data. If you contact nbazzi support via live chat, email, or WhatsApp, we retain records of that communication — including the date, time, content of the conversation, and any attachments you share — for quality assurance, dispute resolution, and regulatory compliance purposes.

1.7 Voluntary Data. From time to time, you may voluntarily provide additional information, for example when responding to a player satisfaction survey or submitting a formal complaint. We retain this data for the period necessary to address the purpose for which it was provided.

2. How We Use Your Data

2.1 nbazzi uses your personal data for the following purposes:

• Account management: to create, maintain, and administer your player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay;
• Identity and age verification: to confirm that you are at least 18 years of age and to verify your identity as part of our KYC obligations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform;
• Responsible gaming: to monitor player activity for signs of problem gambling, enforce self-imposed limits, and intervene where necessary in the interests of player welfare;
• Customer support: to respond to your queries, resolve disputes, and communicate important account-related information;
• Platform improvement: to analyse usage patterns and player behaviour in aggregate, anonymised form to improve the quality and reliability of the nbazzi platform;
• Legal compliance: to fulfil our obligations under applicable laws and to respond to lawful requests from regulatory authorities or law enforcement agencies;
• Promotional communications: to send you information about promotions, bonuses, and special offers relevant to Bangladesh players — but only if you have opted in to receive such communications at the time of registration or subsequently via your account settings.

2.2 nbazzi does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is expressly necessary to prevent fraud or enforce responsible gaming restrictions. In those cases, you have the right to request human review of any automated decision by contacting our support team.

3. Legal Basis for Processing

3.1 nbazzi processes your personal data on the following legal grounds:

Processing Purpose	Legal Basis
Account creation and management	Performance of a contract (our Terms & Conditions)
Processing deposits and withdrawals	Performance of a contract; legal obligation
Age and identity verification (KYC)	Legal obligation; legitimate interests
Fraud prevention and security monitoring	Legitimate interests; legal obligation
Responsible gaming monitoring	Legitimate interests; player welfare
Customer support communications	Performance of a contract; legitimate interests
Promotional and marketing communications	Consent (opt-in only)
Platform analytics and improvement	Legitimate interests (anonymised data)
Responding to law enforcement requests	Legal obligation

3.2 Where we rely on your consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Data Sharing & Disclosure

4.1 nbazzi does not sell, rent, or trade your personal information to any third party under any circumstances. We share your data only in the limited circumstances described in this section.

4.2 Payment Processors. We share your account identifier and transaction details with bKash, Nagad, Rocket, and Upay solely to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and security standards. nbazzi does not store your full mobile banking PIN or password.

4.3 Game Studio Providers. To deliver our casino games, we pass a pseudonymised player session token to game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the data necessary to run the game session and return the result. They do not receive your full name, NID details, or payment account information.

4.4 Fraud and Security Partners. We may share IP address data and device fingerprint information with specialist fraud detection services to protect the integrity of the nbazzi platform. These partners are contractually bound to use the data solely for fraud prevention and to maintain appropriate security standards.

4.5 Legal and Regulatory Authorities. nbazzi will disclose personal data to law enforcement agencies, government bodies, or other official authorities where we are legally required to do so, or where disclosure is necessary to protect the safety and legal rights of nbazzi, its players, or third parties.

4.6 Business Transfers. In the event that nbazzi undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and ensure that the receiving entity is bound by data protection obligations equivalent to those in this Policy.

4.7 All third parties with whom we share personal data are required to process that data only for the specified purpose, to apply appropriate technical and organisational security measures, and to comply with applicable data protection standards.

5. Cookies & Tracking Technologies

5.1 nbazzi uses cookies and similar technologies to operate the platform and maintain a secure, reliable player experience. The types of cookies we use are described below:

Cookie Type	Purpose	Duration
Strictly necessary	Session management, login state, security tokens	Session (deleted on browser close)
Functional	Remembering language preference, platform settings	Up to 12 months
Performance / analytics	Aggregated, anonymised usage statistics for platform improvement	Up to 24 months

5.2 nbazzi does not use third-party advertising cookies, cross-site behavioural tracking, or retargeting pixels. We do not share cookie data with advertising networks or social media platforms.

5.3 You can manage or disable cookies via your browser's settings at any time. Please note that disabling strictly necessary cookies may impair your ability to log in to your nbazzi account and use the platform. Disabling functional or performance cookies will not affect your access to the core service.

5.4 We may update our cookie usage as the platform evolves. Any material changes to our use of cookies will be reflected in an updated version of this Policy and communicated to registered players where appropriate.

6. Data Retention

6.1 nbazzi retains your personal data for as long as your account is active and for such period thereafter as is necessary to fulfil the purposes set out in this Policy or to comply with our legal obligations. The following retention periods apply:

• Account and registration data: retained for the duration of your account plus a minimum of 5 years following account closure, to comply with financial record-keeping requirements;
• Transaction data: retained for a minimum of 5 years following the date of each transaction;
• KYC documents: retained for a minimum of 5 years following the closure of your account or the date on which your identity was verified, whichever is later;
• Customer support records: retained for 2 years following the resolution of the relevant query or dispute;
• Gaming activity logs: retained for 2 years following the relevant game session, except where a longer period is required for dispute resolution or fraud investigation;
• Marketing preference data: retained until you withdraw consent, plus 6 months thereafter for audit purposes.

6.2 When data is no longer required, nbazzi will securely delete or anonymise it in a manner that prevents reconstruction or re-identification. Anonymised, aggregated data derived from your gaming activity may be retained indefinitely for statistical analysis and platform development purposes.

7. Data Security

7.1 nbazzi applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and nbazzi servers;
• Encryption of sensitive data fields (including KYC document references and payment identifiers) at rest in our database;
• Role-based access controls ensuring that only authorised nbazzi personnel with a legitimate need can access player personal data;
• Regular security assessments and penetration testing of the platform infrastructure;
• Certified Random Number Generator (RNG) technology for all casino game outcomes, independently audited for fairness;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.

7.2 While nbazzi applies industry-standard security practices, no online platform can guarantee absolute security against all threats. You play an important role in keeping your account secure by choosing a strong, unique password, not sharing your login credentials with any third party, and logging out of your account when using a shared device.

7.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nbazzi will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps we are taking to address it.

8. Your Data Rights

8.1 As a registered nbazzi player, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data nbazzi holds about you at any time;
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it;
• Right to erasure: in certain circumstances, you may request that we delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. Note that we may be required to retain certain data to comply with legal obligations, in which case erasure may be partial;
• Right to restriction of processing: in certain circumstances, you may request that we restrict how we process your data while a query or complaint is being investigated;
• Right to data portability: where processing is carried out on the basis of your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format;
• Right to object: you may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you believe your particular circumstances justify such an objection;
• Right to withdraw consent: where we process your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8.2 To exercise any of the rights listed above, please contact nbazzi support in writing at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and include your registered account details and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

8.3 We will not charge a fee for reasonable data rights requests. Where a request is manifestly unfounded or excessive in nature, we reserve the right to charge a reasonable administrative fee or decline to act on the request, in either case providing written reasons for our decision.

9. Children's Privacy

9.1 The nbazzi platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been collected from a person under 18, we will delete that data immediately, close the associated account, and take appropriate steps to prevent future access.

9.2 If you are a parent or guardian and believe that a person under 18 in your care has registered an nbazzi account or provided personal data to us, please contact support immediately at [email protected] (plain text). We treat such reports as urgent and will investigate and respond within 24 hours.

9.3 We strongly encourage parents and guardians to make use of available parental control software to restrict access to online gambling platforms on devices used by minors. nbazzi is not responsible for unauthorised access by persons under 18 who misrepresent their age during registration.

10. Updates to This Policy

10.1 nbazzi may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights or our use of your data, we will notify you directly via the mobile number or email address on record.

10.2 We encourage you to review this Policy periodically. Continued use of the nbazzi platform following the publication of a revised Policy constitutes your acknowledgement of and agreement to the updated terms.

10.3 Where a proposed change to this Policy would result in a materially less protective treatment of data you have already provided, we will seek your explicit consent before applying the new terms to your existing data.

11. Contact Us About Privacy

11.1 If you have any questions, concerns, or complaints relating to this Privacy Policy or to how nbazzi handles your personal data, please contact us using the details below. All privacy-related communications must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the nbazzi platform
• Subject line for privacy requests: "Privacy Policy Query" or "Data Rights Request"
• Response time: within 5 business days for general queries; within 30 calendar days for formal data rights requests
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)

11.2 If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through appropriate legal channels available to you under applicable law in Bangladesh.

11.3 This Policy is written in English. In the event of any conflict between an English version and any translation or interpretation of this Policy, the English text shall prevail in all circumstances.