1. Information We Collect
nbaji login collects personal data that is necessary to provide you with a safe, compliant, and enjoyable online betting experience. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically as you use the site, and occasionally from trusted third-party sources for identity verification purposes.
1.1 Information You Provide Directly
When you create an account or use our services, you may provide us with the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender, and a copy of your Bangladesh National Identity Card (NID), passport, or other government-issued identification submitted during KYC verification.
- Contact Data: Email address, Bangladesh mobile phone number, and residential address.
- Financial Data: bKash, Nagad, Rocket, or Upay mobile wallet account numbers; bank account details (for bank transfer users); transaction histories associated with your nbaji login account.
- Account Credentials: Your chosen username and encrypted password. We never store passwords in plain text.
- Communications Data: Records of your interactions with our customer support team via Live Chat, email, or other support channels, including chat transcripts and email correspondence.
- Responsible Gaming Data: Self-exclusion preferences, deposit limits, and session time restrictions you configure through the responsible gaming tools on your account.
1.2 Information Collected Automatically
When you visit nbaji-login.com or use our mobile-optimised interface, our systems automatically collect the following technical data:
- Device & Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and device language settings.
- Usage Data: Pages visited, games played, bets placed, session duration, click patterns, navigation paths, and features accessed within the platform.
- Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS coordinates unless you explicitly grant permission on a supported device.
- Cookie & Tracking Data: Session identifiers, authentication tokens, and analytics cookies. See Section 4 for full details on our cookie use.
1.3 Information from Third Parties
In certain circumstances, nbaji login may receive personal data about you from third-party sources, including identity verification partners (for KYC purposes), fraud detection service providers, payment processors, and, where permitted, responsible gambling databases maintained by self-exclusion registries. We use this information only to supplement our own records for compliance, fraud prevention, and player safety purposes.
2. How We Use Your Data
nbaji login processes your personal data on the basis of one or more of the following lawful grounds: the performance of a contract with you (your account and the services you use), compliance with a legal obligation, your consent (where explicitly given), and our legitimate interests in operating a safe and commercially viable platform. The table below summarises the principal purposes for which we use your data.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact, Credentials | Contract performance |
| Processing deposits & withdrawals | Identity, Financial | Contract performance |
| KYC & age verification | Identity, Financial | Legal obligation |
| Fraud detection & AML screening | Identity, Financial, Usage, Device | Legal obligation / Legitimate interest |
| Customer support communications | Identity, Contact, Communications | Contract performance |
| Personalising your platform experience | Usage, Device, Location | Legitimate interest |
| Sending promotional offers & bonuses | Contact, Usage | Consent |
| Responsible gaming monitoring | Usage, Responsible Gaming | Legal obligation / Legitimate interest |
| Platform analytics & improvement | Usage, Device, Cookie | Legitimate interest |
| Legal compliance & dispute resolution | All categories as relevant | Legal obligation |
2.1 Marketing Communications
nbaji login will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers if you have given explicit consent to receive such communications during registration or through your account settings. You can withdraw this consent at any time by updating your notification preferences in your account dashboard or by contacting our support team at [email protected].
Withdrawing marketing consent will not affect the lawfulness of any processing carried out prior to your withdrawal, and will not prevent us from sending you essential transactional or account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are required for the performance of our contract with you.
3. Data Sharing & Third Parties
nbaji login does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may share your data with carefully selected third-party service providers and partners solely to the extent necessary to operate our platform, comply with legal obligations, and protect the safety of our users.
3.1 Categories of Third Parties
- Identity Verification Partners: Third-party KYC providers who assist us in verifying your identity documents and age. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than verification services for nbaji login.
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions process your deposit and withdrawal transactions. They receive only the financial data necessary to execute the transaction.
- Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide the game software and live studio feeds on our platform. When you play their games, certain anonymised session data (such as game results, bet amounts, and RNG seeds) is processed by their certified servers. These providers do not receive your full personal profile.
- Fraud Prevention & Security Providers: Specialist anti-fraud and cybersecurity vendors who help detect and prevent account takeovers, payment fraud, and bot activity. Data shared is limited to technical identifiers and behavioural signals.
- Analytics Providers: Platform analytics tools that help us understand aggregate user behaviour, improve site performance, and identify technical issues. Data shared is pseudonymised wherever possible.
- Legal & Regulatory Authorities: We may disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
3.2 International Data Transfers
Some of our third-party service providers operate outside Bangladesh. Where your personal data is transferred to processors in other countries, nbaji login ensures that appropriate data protection safeguards are in place, including contractual data processing agreements that reflect internationally recognised standards for data protection. Your data will never be transferred to a jurisdiction that provides materially weaker privacy protections without your explicit consent.
4. Cookies & Tracking Technologies
nbaji login uses cookies and similar tracking technologies to keep you logged in, remember your preferences, protect your session against cross-site request forgery (CSRF), and analyse how the platform is used in aggregate. This section explains the types of cookies we use and how you can manage them.
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication, CSRF protection, load balancing | Session / up to 24 hours | No — required for the platform to function |
| Functional | Remembering your language preference, display settings, and recently played games | Up to 30 days | Yes — disabling may reduce personalisation |
| Analytics | Aggregate traffic analysis, page performance monitoring, error tracking | Up to 12 months | Yes — via browser settings or account preferences |
| Security | Fraud detection signals, device fingerprinting for suspicious login detection | Up to 90 days | No — required for account security |
4.2 Managing Your Cookie Preferences
You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete cookies after each browsing session. Please note that disabling strictly necessary or security cookies will prevent you from logging into your nbaji login account and using core platform features.
For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor. Common browsers used by players in Bangladesh include Chrome for Android, Samsung Internet, Firefox, and Opera Mini.
5. Data Retention Policy
nbaji login retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, including the maintenance of your active account, compliance with legal and regulatory obligations, and the resolution of any disputes or claims.
5.1 Retention Periods by Data Category
- Account & Identity Data: Retained for the duration of your active account relationship with nbaji login, plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
- Financial Transaction Data: Retained for a minimum of 7 years from the date of the transaction, in line with standard financial record-keeping best practices.
- Customer Support Communications: Retained for 3 years from the date of the last communication, to allow for dispute review and quality assurance purposes.
- Cookie & Analytics Data: Pseudonymised analytics data is retained for up to 12 months before being aggregated or deleted. Session cookies expire within 24 hours.
- Marketing Consent Records: Retained for the duration of your marketing consent plus 3 years, to demonstrate regulatory compliance in the event of a complaint.
- Responsible Gaming Records: Self-exclusion records are retained for a minimum of 5 years following the expiry of the exclusion, to prevent reactivation of protections that were intended to be long-term.
5.2 Deletion & Anonymisation
When the applicable retention period for a category of personal data expires, nbaji login will securely delete the data or, where deletion is not technically feasible, will anonymise it so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical and platform improvement purposes.
If you request deletion of your personal data under your rights described in Section 7 and we have no overriding legal obligation to retain it, we will action your request within 30 days and confirm deletion via your registered email address.
6. Data Security Measures
nbaji login implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
- Data Encryption at Rest: Sensitive data fields — including payment details and identity document data — are encrypted at the database level using AES-256 encryption.
- Password Hashing: Account passwords are never stored in plain text. We use bcrypt with a high work factor to hash all passwords before storage.
- Two-Factor Authentication (2FA): Registered players are encouraged to enable 2FA on their accounts using a time-based one-time password (TOTP) app, adding a second layer of protection against unauthorised login attempts.
- Intrusion Detection Systems: Our infrastructure is monitored 24/7 by automated intrusion detection and anomaly detection systems that alert our security team to unusual access patterns in real time.
- Regular Security Audits: nbaji login undergoes periodic security assessments, including vulnerability scanning and penetration testing by qualified security professionals, to identify and remediate weaknesses before they can be exploited.
- Access Logging: All staff access to production systems containing personal data is logged, reviewed, and subject to least-privilege access controls. Administrative access requires multi-factor authentication.
- Data Breach Response Plan: In the event of a confirmed personal data breach that poses a risk to affected individuals, nbaji login will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.
While nbaji login takes all commercially reasonable steps to protect your data, no internet-based platform can guarantee absolute security. We strongly encourage you to use a strong, unique password for your account, enable 2FA, and ensure your own device and network security are maintained.
7. Your Privacy Rights
As a registered user of nbaji login, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, please contact us at [email protected] with the subject line "Privacy Rights Request".
7.1 Summary of Your Rights
- Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how it is being processed. We will provide this in a structured, commonly used, machine-readable format upon request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update basic account details directly through your account settings page.
- Right to Erasure: Also known as the "right to be forgotten", this allows you to request deletion of your personal data where we have no overriding legal obligation to retain it. Note that AML and KYC record-keeping obligations may mean we are required to retain certain data for a defined period even after account closure.
- Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data and we are verifying it, or if you object to processing based on legitimate interest while we consider your objection.
- Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) and to transmit it to another service provider, where technically feasible.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason. You may also object to processing carried out on the basis of legitimate interest, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
7.2 Response Timelines
nbaji login will acknowledge all privacy rights requests within 5 business days and will provide a substantive response or take the requested action within 30 calendar days. In cases of complex or high-volume requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
We reserve the right to refuse requests that are manifestly unfounded, repetitive, or that conflict with our legal obligations. In such cases, we will explain the basis for our refusal in writing.
8. Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way nbaji login handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by our dedicated privacy and compliance team.
- Email: [email protected] — use subject line "Privacy Enquiry" or "Privacy Rights Request"
- Live Chat: Available 24/7 on the nbaji login platform — select "Account & Privacy" from the support category menu
- Response Time: Initial acknowledgement within 5 business days; substantive response within 30 days
nbaji login is committed to resolving all privacy concerns raised directly with us in the first instance. If you are not satisfied with our response to your privacy concern, you may wish to seek independent advice or escalate your complaint through appropriate channels available in your jurisdiction.
This Privacy Policy was last reviewed and updated in January 2026. We reserve the right to update this policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. When material changes are made, we will notify registered users via email and update the "Last Updated" date at the top of the hero section on this page. We encourage you to review this Privacy Policy periodically.