nbje Privacy Policy — How We Protect Your Data

nbje is an online casino and sports betting platform operated at nbje.io, serving players primarily based in Bangladesh. We are committed to handling all personal data entrusted to us with the highest standards of care, confidentiality, and transparency. This Privacy Policy has been prepared to give our players — wherever they are located across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and beyond — a clear, honest account of our data practices.

This Policy applies to all personal data collected in connection with the use of the nbje Platform, including data provided during account registration, identity verification (KYC), payment transactions, customer support interactions, promotional campaigns, and general browsing activity on our website. It applies regardless of the device or connection method used to access the Platform.

This Policy should be read alongside the nbje Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any inconsistency between this Privacy Policy and any other nbje document with respect to data protection matters, this Privacy Policy shall prevail.

nbje collects personal data across several distinct categories. The specific data collected depends on the nature of your interaction with the Platform. The following table summarises the main categories of personal data we hold and the context in which each category is collected:

nbje does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and fraud prevention. We do not collect biometric data, political opinions, religious beliefs, or health data unless directly relevant to a responsible gambling self-exclusion request submitted by the player themselves.

nbje collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotional activity.
• Automated Technical Collection: Data collected automatically as you interact with the Platform, including IP address, device identifiers, browser fingerprint, session timestamps, and page interaction events. This data is collected via server logs and first-party analytics tools.
• Cookies and Similar Technologies: nbje uses cookies and similar tracking technologies to maintain session continuity, remember player preferences, and analyse usage patterns. Full details of our cookie practices are set out in Section 7 of this Policy.
• Payment Provider Data: When you initiate a deposit or withdrawal through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, those payment providers may share transaction confirmation data with nbje for the purpose of reconciling your account balance.
• KYC and Identity Verification Services: In some cases, nbje may use third-party identity verification services to assist in confirming the authenticity of documents submitted during KYC. These services process document data solely on nbje's behalf and under strict data processing agreements.
• Game Provider Data Feeds: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may share game session data (round IDs, bet amounts, outcomes) with nbje for account reconciliation and dispute resolution purposes. No additional personal data beyond what nbje has already collected is received from game providers.

nbje processes personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to fulfil the agreement between nbje and the player as set out in the Terms & Conditions. This covers account creation, payment processing, game access, and customer support. Without this processing, nbje could not provide the Platform services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention obligations, and record-keeping requirements. nbje is required by law to retain certain categories of data for specified periods regardless of player preferences.
• Legitimate Interests: Processing is necessary for nbje's legitimate business interests, provided those interests are not overridden by the player's rights and freedoms. This includes security monitoring, fraud detection, platform analytics, and service improvement activities. nbje conducts a proportionality assessment before relying on this basis.
• Consent: For non-essential processing activities — specifically the delivery of marketing communications and the use of non-essential cookies — nbje relies on the player's freely given, informed, and revocable consent. Players may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

nbje uses the personal data it holds to carry out the following activities:

• Account Management: Creating, maintaining, and managing your registered player account, including processing login authentication, updating account details, and enforcing account security measures.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in accordance with our KYC policy, including reviewing submitted identity documents and, where necessary, cross-referencing data with third-party verification services.
• Payment Processing: Processing deposits and withdrawals via supported payment methods (bKash, Nagad, Rocket, Upay, and partner banks), reconciling transaction records, and managing chargeback and dispute resolution processes.
• Game and Betting Services: Enabling access to casino games and sports betting markets, recording wager history, calculating and crediting winnings, and maintaining game round records for auditing and dispute resolution purposes.
• Bonus and Promotions Management: Tracking bonus eligibility, crediting promotional balances, monitoring wagering requirement completion, and identifying and preventing bonus abuse across single and multiple accounts.
• Fraud and AML Prevention: Monitoring account activity for indicators of fraudulent behaviour, money laundering, prohibited conduct, or identity theft. Flagging and investigating anomalous patterns and, where required by law, reporting suspicious activity to relevant authorities.
• Responsible Gambling: Processing self-exclusion requests, deposit limit settings, loss limit settings, cooling-off periods, and session reminders. Monitoring player behaviour for indicators of problem gambling in order to fulfil our duty of care.
• Customer Support: Responding to enquiries, resolving disputes, processing account closure requests, and maintaining records of support interactions.
• Platform Analytics and Improvement: Analysing aggregated usage data to understand how players interact with the Platform, identify technical issues, improve game selection, and optimise the user experience.
• Marketing Communications (with consent): Sending promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (including BPL season, Eid, and Pohela Boishakh offers), and other nbje news, where the player has opted in to receive such communications.
• Legal and Regulatory Compliance: Fulfilling record-keeping obligations, responding to lawful requests from regulatory or law enforcement authorities, and defending nbje's legal rights in any dispute or legal proceedings.

nbje does not sell your personal data. We do not share your personal information with third parties for their own commercial purposes. Data sharing with third parties occurs only in the following defined circumstances:

• Payment Providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank solely for the purpose of processing the specific deposit or withdrawal transaction you have initiated. These providers operate under their own privacy policies and regulatory obligations.
• Game Providers: A unique player session token (not your full identity data) is shared with game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to authenticate your game session and record game round outcomes. No unnecessary personal data is transmitted to game providers.
• Identity Verification Services: Where nbje uses a third-party KYC provider to assist in document verification, the relevant identity documents and personal data submitted during KYC are processed by that provider as a data processor acting on nbje's behalf, under a binding data processing agreement that restricts their use of your data to the verification purpose only.
• Fraud Prevention and Security Services: Aggregated technical data (IP addresses, device fingerprints, behavioural patterns) may be processed by fraud detection services operating as data processors on nbje's behalf. These services do not receive your full identity or financial information.
• Legal and Regulatory Authorities: nbje will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid legal obligation, court order, or lawful request from an authority with jurisdiction. nbje will, where legally permissible, notify you of such a disclosure.
• Business Successors: In the event of a merger, acquisition, or sale of assets involving nbje, player personal data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming the same privacy obligations as set out in this Policy.

nbje uses cookies and similar technologies (including local storage and session tokens) on the Platform. Cookies are small text files placed on your device by your browser when you visit a website. They serve several functions on the nbje Platform:

• Essential Cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your account preferences, and ensure the security of your authenticated session. Essential cookies cannot be disabled without preventing access to the Platform.
• Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data helps nbje improve the Platform experience. Analytics cookies require your consent and may be declined.
• Functional Cookies: These cookies remember your stated preferences (such as your preferred game category or display settings) to provide a more personalised experience on return visits. Functional cookies require your consent.
• Marketing Cookies (if applicable): Where nbje runs targeted promotional campaigns, marketing cookies may be used to deliver relevant promotional content to players who have opted in. These are strictly opt-in and will only be placed with your explicit prior consent.

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete, or selectively permit cookies. Please note that disabling essential cookies may impair your ability to access certain Platform features, including your player account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

nbje retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Where data is retained in anonymised form for statistical or analytical purposes, it no longer constitutes personal data under applicable privacy law and is not subject to this Policy.

Players who request account closure should be aware that certain categories of data — particularly KYC documents and transaction records — must be retained by nbje for the legally mandated periods set out above, regardless of the account closure request. nbje will confirm the specific retention periods applicable to your data upon request.

nbje takes data security seriously and implements a layered set of technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• TLS/SSL Encryption: All data in transit between your device and the nbje Platform is encrypted using TLS 1.2 or higher. This includes login sessions, account management actions, payment requests, and any form submission on the Platform.
• Encryption at Rest: Sensitive data stored in nbje's databases — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within nbje's internal systems is restricted to authorised personnel who require it to perform their specific job functions. Role-based access controls, multi-factor authentication for administrative systems, and regular access reviews are in place.
• Secure Password Storage: Player passwords are never stored in plain text. They are stored as one-way cryptographic hashes using a strong hashing algorithm with per-user salting.
• Intrusion Detection and Monitoring: nbje's systems are subject to continuous automated monitoring for anomalous activity, attempted intrusions, and security incidents. Security events are logged and reviewed by our technical team.
• Regular Security Reviews: nbje conducts periodic reviews of its security practices and infrastructure to identify and remediate vulnerabilities in a timely manner.

Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. Players are strongly encouraged to use a strong, unique password for their nbje account, to avoid sharing account credentials, and to contact [email protected] immediately if they suspect unauthorised access to their account.

As a player whose personal data is processed by nbje, you hold the following rights with respect to your personal information. nbje will respond to all valid data rights requests within a reasonable timeframe, typically within 30 days of receipt of a complete and verifiable request:

• Right of Access: You have the right to request a copy of the personal data nbje holds about you, together with information about how it is being processed, the legal basis for processing, and the categories of third parties with whom it has been shared.
• Right to Rectification: If any personal data held by nbje is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly within your account dashboard without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to nbje's legal retention obligations — certain data categories cannot be deleted prior to the expiry of legally mandated retention periods.
• Right to Restriction: You have the right to request that nbje restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to nbje in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on nbje's legitimate interests. nbje will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact nbje at [email protected] with the subject line "Data Rights Request" and a description of your specific request. You may be asked to verify your identity before your request is processed in order to protect your data from unauthorised access requests.

The nbje Platform is strictly intended for individuals who are 21 years of age or older. nbje does not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes an age declaration step, and our KYC verification procedures are designed to identify and reject applications from underage individuals.

If nbje becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false age declaration, circumvention of our verification process, or any other means — we will take immediate steps to suspend the relevant account, void any associated transactions, and permanently delete all personal data associated with that account as promptly as our legal obligations permit.

If you are a parent or guardian and believe that your child has registered an account or provided personal data to nbje without your knowledge or consent, please contact us immediately at [email protected] with full details. We will investigate the matter and take appropriate action without undue delay.

The nbje Platform may from time to time contain references to game providers, payment method partners, or other third-party services. While nbje takes care to work only with reputable partners, we do not control the privacy practices of any third-party organisation, and this Privacy Policy does not extend to any external website, service, or platform that you may access in connection with your use of nbje.

When you interact with a third-party payment provider such as bKash, Nagad, Rocket, or Upay in order to make a deposit or withdrawal, you are interacting with that provider's own platform and your data is subject to that provider's own privacy policy. nbje receives only the transaction confirmation data necessary to credit or debit your nbje account balance and does not receive or store any additional personal data held by the payment provider.

We encourage all players to review the privacy policies of any third-party service they interact with. nbje accepts no responsibility or liability for the privacy practices, data collection activities, or security measures of any third-party organisation.

nbje may send you promotional communications about bonuses, new game launches, seasonal offers, and platform news, but only where you have given your explicit prior consent to receive such communications. Marketing communications may be delivered via email, SMS, or in-platform notification, depending on your stated preferences.

Promotional communications from nbje may reference seasonal events and occasions that are relevant to the Bangladesh market, including Eid, Pohela Boishakh (Bengali New Year), Victory Day (December 16), Bangladesh Premier League (BPL) season, and other cultural or sporting moments. All such communications will be in English and will be sent only to players who have actively opted in.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by nbje.
• Updating your notification preferences within your nbje account dashboard.
• Contacting nbje support at [email protected] with the subject line "Marketing Opt-Out" and your registered username.

Opting out of marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These operational messages are sent regardless of marketing preference as they are necessary for the fulfilment of your account agreement with nbje.

nbje reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes to our data processing activities, feedback from players or regulators, or improvements to the clarity and accuracy of the Policy's language.

When material changes are made to this Privacy Policy, nbje will notify registered players by one or more of the following methods:

• A notification displayed on the Platform homepage or within your account dashboard upon your next login following the update.
• An email notification sent to the email address associated with your registered account.
• An update to the "Last Updated" date displayed at the top of this Policy page.

Minor changes — such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to lists of supported payment methods or game providers — may be made without specific individual notification. The updated Policy will take effect from the date on which it is published on the Platform.

Your continued use of the nbje Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any change made to this Policy, you should discontinue use of the Platform and contact [email protected] to request account closure and deletion of your personal data, subject to our applicable legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data nbje holds about you, or your rights as a data subject, please contact the nbje privacy and compliance team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Enquiry" for general questions, or "Data Rights Request" for formal rights requests.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: General privacy enquiries are responded to within 24 hours. Formal data rights requests are acknowledged within 48 hours and fulfilled within 30 days.

When submitting a data rights request, please include your registered nbje username, the email address associated with your account, and a clear description of the specific right you wish to exercise and the data categories concerned. This will enable our compliance team to process your request accurately and efficiently.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the nbje Privacy Policy published prior to this date. All previous versions are archived and available upon request by contacting [email protected].