nbaja Privacy Policy — How We Protect Your Data

nbaja ("we", "us", "our") operates the online casino and sports betting platform accessible at nbaja.org. We are committed to handling all personal data responsibly, transparently and in accordance with applicable data protection principles. This Privacy Policy describes the categories of personal information we collect, the purposes for which that information is used, the circumstances under which it may be shared with third parties, and the rights available to you in relation to your personal data.

This policy should be read alongside the nbaja Terms & Conditions, which together form the complete agreement between you and nbaja governing your use of the platform. Capitalised terms used but not defined here carry the meanings given to them in the Terms & Conditions. If you have questions about this policy at any time, contact our support team at [email protected].

nbaja collects personal data that is necessary to provide you with a safe, functional, and legally compliant gaming account. We collect information in two ways: directly from you when you register or use the platform, and automatically through technical systems when you browse or play. The categories of data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. We collect only what is necessary to operate the platform, verify your identity, process payments, and meet our legal obligations. Where data collection is optional (for example, providing a physical address), it will be clearly indicated as such.

The personal data we collect is used exclusively for the following purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your consent.

• Account creation and management — to register your account, verify your identity, maintain accurate account records, and communicate account-related information to you.
• Payment processing — to process deposits from bKash, Nagad, Rocket, Upay and other supported payment methods, and to verify and execute withdrawal requests to your registered payment method.
• KYC and fraud prevention — to fulfil anti-money laundering obligations, verify age eligibility, prevent the creation of duplicate accounts, and detect and investigate suspicious activity or prohibited conduct.
• Platform operation and improvement — to monitor platform performance, diagnose technical issues, analyse usage patterns to improve game selection and user experience, and develop new features.
• Responsible gaming — to monitor for patterns consistent with problem gambling behaviour, to enforce self-exclusion and deposit limits you have set, and to contact you with responsible gaming information where our systems indicate a potential concern.
• Customer support — to respond to your enquiries, process complaints, provide account assistance, and maintain records of support interactions for quality assurance and dispute resolution purposes.

We do not use your personal data for automated decision-making that produces legal effects or similarly significant outcomes without human oversight. Where profiling is used (for example, to identify responsible gaming indicators), it is always reviewed by a member of the support team before any action is taken that affects your account.

nbaja processes personal data on the following legal grounds, each of which applies to the specific processing activities described in Section 2:

• Contract performance — processing your registration data, payment data and game activity data is necessary to provide you with the gaming service you have contracted for when you accepted the Terms & Conditions.
• Legal obligation — processing identity verification documents, financial records and transaction histories is required by applicable anti-money laundering regulations and age verification obligations that nbaja must comply with as a condition of operation.
• Legitimate interests — processing technical and usage data to improve the platform, detect fraud, and ensure platform security serves the legitimate interests of nbaja and its users, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — where we send you promotional communications about bonuses, new games or seasonal offers, we do so on the basis of your consent given at registration or subsequently. You may withdraw consent for marketing communications at any time by contacting support.

nbaja uses cookies — small text files stored on your device by your browser — to enable core platform functionality, maintain your logged-in session, remember your language and display preferences, and collect anonymised analytics data about how players navigate and use the platform.

We use three categories of cookies on nbaja:

• Essential cookies — these are strictly necessary for the platform to function. They enable login sessions, security tokens, and payment flow continuity. They cannot be disabled without breaking core platform features.
• Analytics cookies — these collect anonymised information about which pages are visited, how long sessions last, which games are played, and where users navigate from. This data is used internally to improve the platform and is not shared with third-party advertisers.
• Preference cookies — these remember your language choice, display settings, and other interface preferences so you do not need to reset them on each visit.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear cookies after each session. Please note that disabling essential cookies will prevent you from logging in and using the platform. nbaja does not use cross-site tracking cookies or advertising cookies that follow you to other websites.

nbaja implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL encryption for all data transmitted between your device and our servers, encrypted storage of passwords and sensitive account data, restricted internal access controls ensuring only authorised personnel can access personal data on a need-to-know basis, regular security audits and vulnerability assessments of our platform infrastructure, and transaction monitoring systems that flag unusual activity for manual review.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, nbaja will notify affected users without undue delay and will take all appropriate remediation steps. You can help protect your account by using a strong unique password, not sharing your login credentials with anyone, and contacting support immediately if you suspect your account has been compromised.

As a user of nbaja, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with your registered username and a clear description of your request. We will respond within 30 days of receiving a valid request.

• Right of access — you may request a copy of the personal data nbaja holds about you, along with information about how it is used and with whom it has been shared.
• Right of rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where processing was based on consent), or where you object to processing and there are no overriding legitimate grounds. Note that legal retention obligations may prevent immediate full erasure of some categories of data.
• Right to restrict processing — in certain circumstances (for example, while the accuracy of data is contested), you may request that we limit how we use your data rather than delete it entirely.
• Right to object — you may object at any time to processing of your personal data for direct marketing purposes. On receiving an objection to marketing, we will cease all marketing communications immediately. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds to continue.

We will not charge a fee for handling standard rights requests. We reserve the right to charge a reasonable administrative fee or decline to act on requests that are manifestly unfounded or excessive. Where we decline a request, we will explain why in writing and advise you of any available recourse.

We retain your personal data for as long as your nbaja account remains active and for a further period after account closure as required by applicable law. Specifically: registration and identity data is retained for a minimum of five years after account closure to meet anti-money laundering record-keeping requirements; financial transaction records are retained for the same period; game activity logs are retained for two years for dispute resolution purposes; support communications are retained for two years; technical log data (IP addresses, session logs) is retained for twelve months from collection.

When personal data is no longer required for its original purpose and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregated data (for example, total bet volumes by game category used for platform improvement analytics) may be retained indefinitely as it does not constitute personal data.

The nbaja platform does not contain links to external third-party websites for commercial or promotional purposes. Where references to payment providers, game studios or regulatory bodies appear in our content, these are informational references only and do not constitute endorsements. nbaja is not responsible for the privacy practices or content of any external website. If you navigate away from nbaja to any external site, you do so at your own risk and under the terms and privacy policy of that external site.

nbaja reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered users by email and update the "Last updated" date at the top of this page. Your continued use of nbaja after any such update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nbaja handles your personal data, please contact our privacy support team by email at [email protected]. Include your registered username and a clear description of your query. Our team will respond within 30 days. For urgent data security concerns, such as suspected unauthorised access to your account, please contact us immediately and we will prioritise your case.