Privacy Policy — How nbajet Collects, Uses, and Protects Your Personal Data

1. Information We Collect

nbajet collects personal data from you through several channels: directly when you register an account or interact with our support team, automatically when you use the platform, and from third-party service providers we rely on to operate. The categories of data we collect are described below.

1.1 Registration and Account Data

When you create a nbajet account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (to verify you are aged 18 or above)
• Residential address (city, district, and full postal address)
• Email address (used as your primary account identifier and for communications)
• Mobile phone number (used for account verification and security alerts)
• Username and encrypted password (your password is never stored in plain text)
• Account currency preference (Bangladeshi Taka — ৳)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of the following documents for players who reach withdrawal thresholds or whose accounts are flagged for manual review:

• National Identity Card (NID) — front and back
• Passport (bio-data page)
• Driving licence
• Recent utility bill or bank statement confirming residential address (issued within the last three months)
• Proof of payment method ownership (e.g., a screenshot showing your bKash or Nagad account number matches your registered details)

KYC documents are stored in an encrypted document management system with access restricted to authorised compliance personnel only.

1.3 Financial Transaction Data

We retain records of all deposit and withdrawal transactions processed through your nbajet account, including the payment method used, transaction amounts in BDT (৳), timestamps, and transaction reference numbers provided by our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank). Full payment credentials (such as bKash PINs or bank passwords) are never requested by or transmitted to nbajet.

1.4 Betting and Gaming Activity Data

We collect a complete record of your activity on the nbajet platform, including bets placed on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers matches), casino game sessions, bet amounts, outcomes, bonus usage, and session durations. This data is used to operate the platform, settle bets accurately, apply responsible gaming tools, and detect unusual activity patterns.

1.5 Technical and Device Data

When you access nbajet, our servers and analytics tools automatically collect certain technical data, including:

• IP address
• Device type, operating system, and browser version
• Screen resolution and time zone (Bangladesh Standard Time, UTC+6)
• Pages visited, features used, and time spent on each page
• Referring URL (the page or source that directed you to nbajet)
• Session start and end timestamps

This technical data is used for security monitoring, fraud prevention, platform optimisation, and responsible gaming analysis. It is not used to build advertising profiles.

1.6 Customer Support Communications

If you contact our support team via live chat or email, we retain a record of the conversation, including any personal information you share during the interaction. These records are used to resolve your query, train our support team, and maintain an audit trail of account-related requests.

2. How We Use Your Data

nbajet uses the personal data we collect solely for the following purposes. We do not use your data for purposes incompatible with those listed here without first obtaining your explicit consent.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, KYC data	Contract performance
Processing deposits and withdrawals	Financial transaction data, KYC data	Contract performance
Bet settlement and game operation	Betting and gaming activity data	Contract performance
Fraud detection and prevention	Technical data, transaction data, activity data	Legitimate interest
Responsible gaming monitoring	Activity data, session data, account data	Legal obligation / legitimate interest
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Customer support and dispute resolution	Support communications, account data	Contract performance
Platform analytics and improvement	Technical data, session data (anonymised)	Legitimate interest
Promotional communications (opt-in)	Email address, betting preferences	Consent

3. Data Sharing and Disclosure

nbajet does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited, specific circumstances described in this section, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, nbajet must share relevant transaction data — including your name, account reference, and transaction amount — with our approved Bangladeshi payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. These partners process this data solely to complete the requested transaction and are contractually prohibited from using it for any other purpose.

3.2 Game and Platform Technology Providers

To deliver casino games and betting markets, nbajet works with licensed game studios and platform technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay data to facilitate game delivery and RTP auditing. They do not receive your full personal profile, payment details, or KYC documents.

3.3 Fraud Prevention and Security Services

nbajet may share technical data (such as IP addresses and device fingerprints) with specialist fraud detection services to identify and prevent account fraud, money laundering, and bonus abuse. These services process data on nbajet's behalf and are bound by strict data-processing agreements.

3.4 Legal and Regulatory Disclosure

nbajet may disclose personal data to law enforcement agencies, courts, or other authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so. We may also disclose data without prior notice where we believe in good faith that doing so is necessary to prevent imminent fraud, criminal activity, or harm to persons.

3.5 Business Transfers

In the event that nbajet undergoes a merger, acquisition, restructuring, or sale of all or part of its business, personal data held by nbajet may be transferred to the acquiring entity as part of that transaction. We will notify affected players via their registered email addresses before any such transfer and will ensure that the receiving entity agrees to honour this Privacy Policy or provide equivalent protections.

4. Cookies and Tracking Technologies

nbajet uses cookies and similar technologies to operate the platform, improve the user experience, and maintain security. A cookie is a small text file that is stored in your browser when you visit a website. Cookies allow the site to recognise your device on subsequent visits and to remember your preferences and session state.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these without impairing your ability to use the platform.
• Functional cookies: These remember your preferences such as language setting, preferred game lobby view, and notification preferences. They are set by nbajet's own servers and are not shared with third parties.
• Analytical cookies: We use anonymised first-party analytics cookies to understand how players navigate nbajet — which pages are visited most often, where users drop off in the registration flow, and how game categories perform. This data is used exclusively to improve the platform.

4.2 Cookies We Do Not Use

nbajet does not deploy third-party advertising cookies, retargeting pixels, social media tracking pixels, or any cross-site tracking technology. You will not receive nbajet-targeted advertisements on other websites as a result of visiting nbajet.net.

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete cookies when you close the browser. Please note that blocking strictly necessary cookies will prevent you from logging in to your nbajet account. Refer to your browser's help documentation for instructions on managing cookie preferences.

5. Data Security Measures

nbajet takes the security of your personal data seriously and employs a combination of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers.
• Encrypted password storage — passwords are hashed using a strong one-way algorithm and are never stored in plain text or reversible form.
• Encrypted storage of KYC documents in a dedicated, access-controlled document management system.
• Firewall and intrusion detection systems monitoring traffic to and from nbajet's server infrastructure around the clock.
• Automated anomaly detection that flags unusual login patterns, abnormal transaction volumes, and potential account-takeover attempts for immediate human review.

5.2 Organisational Safeguards

• Access to personal data is restricted to nbajet employees and contractors who have a legitimate operational need to access it.
• All personnel with access to personal data are bound by confidentiality obligations and undergo data privacy training.
• KYC documents are accessible only to members of the nbajet compliance team.
• Internal data access is logged and audited regularly.

6. Data Retention Policy

nbajet retains personal data only for as long as is necessary for the purpose for which it was collected, and for no longer than required to comply with applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Regulatory compliance, dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Anti-money laundering obligations
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Betting and gaming activity logs	Duration of account + 3 years post-closure	Responsible gaming audits, dispute resolution
Customer support communications	3 years from last interaction	Quality assurance, dispute history
Technical/device logs	12 months on a rolling basis	Security monitoring and fraud detection
Marketing preferences	Until opt-out, then deleted within 30 days	Consent-based, user-controlled

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data (for example, statistical reports on platform usage with no individual identifiers) may be retained indefinitely for analytical purposes.

7. Your Rights Over Your Data

As a user of the nbajet platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, of which we will notify you.

7.1 Right to Access

You have the right to request a copy of all personal data nbajet holds about you, along with information about how it is used, where it is stored, and who it has been shared with. We will provide this in a clear, structured format.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update most account details directly via your account settings page. For changes to name, date of birth, or other core identity fields, please contact support and provide updated identity documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you believe the data is being processed unlawfully. Please note that nbajet may be legally obligated to retain certain data (particularly KYC and transaction records) even after an account is closed, as described in Section 6. In such cases, we will delete all data that we are not legally required to retain and inform you of what has been retained and why.

7.4 Right to Data Portability

Where nbajet processes your personal data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

7.5 Right to Object to Processing

You have the right to object to nbajet's processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of nbajet's legitimate interests, in which case we will review the objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.6 Right to Withdraw Consent

Where nbajet processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. To withdraw consent, contact us at [email protected] or use the unsubscribe link in any marketing email.

8. Updates to This Privacy Policy

nbajet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable regulations. When we make material changes, we will update the "Last Updated" date shown at the top of this document and, where appropriate, notify active players via their registered email addresses or via a notice displayed upon login to the platform.

Your continued use of the nbajet platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your data. Previous versions of this Privacy Policy are available upon request — contact us at [email protected].

If you have questions, concerns, or complaints about this Privacy Policy or about the way nbajet handles your personal data, please contact our Data Privacy team directly at [email protected]. We take all privacy concerns seriously and will investigate and respond to every enquiry promptly.