nbajet Privacy Policy

nbajet processes your personal data on one or more of the following legal bases depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and nbajet — for example, managing your account, processing payments, and settling bets.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud detection, platform security, and improving our services, provided these interests do not override your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements and age verification mandates.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing emails or promotional SMS messages. You may withdraw consent at any time without affecting the lawfulness of prior processing.

nbajet does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment service providers require transaction data to process deposits and withdrawals. They operate under their own privacy policies and data security standards.
• Identity verification providers: Third-party services used to verify the authenticity of identity documents submitted during the KYC (Know Your Customer) process.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive limited technical data (such as session tokens) necessary to deliver their games on our platform. They do not receive your full identity or financial data.
• Fraud and risk management services: Specialised providers that help us detect suspicious activity, multi-accounting, and potential money laundering patterns.
• Legal and regulatory authorities: We may be required by law, court order, or regulatory direction to disclose personal data to competent authorities. We will comply with such obligations to the extent required.
• Business successors: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the successor entity, which will be bound by commitments consistent with this Privacy Policy.

All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures and to process your data only for the specified purpose.

nbajet uses cookies and similar tracking technologies to operate essential platform functions, remember your preferences, maintain your login session, and analyse aggregate usage patterns. Cookies are small text files stored on your device by your browser.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that prevent fraudulent use of your session. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how visitors use the platform — pages visited, time spent, and navigation paths — to help us improve the site. This data is aggregated and not linked to your identity.
• Marketing cookies: Used to track whether you arrived at nbajet through a promotional link and to measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core functions of the nbajet platform, but some features may not operate as intended.

nbajet retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable law or regulation.

Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account and for a period of five years after account closure, to comply with anti-money-laundering record-keeping obligations.
• Identity verification documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for five years from the transaction date in accordance with standard financial record-keeping requirements.
• Customer support correspondence: Retained for three years from the date of the most recent interaction in a given support case.
• Marketing consent records: Retained for three years from the date consent was given or last renewed, to demonstrate compliance with consent obligations.
• Technical and log data: Retained for up to twelve months in standard operational logs; anonymised aggregate data may be retained indefinitely for analytics purposes.

Where your data is no longer required, it will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

nbajet employs a layered set of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:

• Encryption in transit: All data exchanged between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by leading international financial institutions.
• Encryption at rest: Sensitive personal data stored in our systems — including identity documents and payment details — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within nbajet is restricted to employees and contractors who have a documented, legitimate operational need. All internal access is logged and auditable.
• Password hashing: Account passwords are never stored in plain text. We use strong, salted hashing algorithms so that even our internal team cannot read your password.
• Intrusion detection: Our infrastructure is monitored continuously for unusual activity, attempted breaches, and anomalous access patterns.
• Regular security reviews: We conduct periodic internal reviews and engage third-party security assessments to identify and remediate vulnerabilities.

While we take every reasonable precaution, no method of data transmission over the internet is completely secure. If you become aware of any security incident affecting your nbajet account, please contact our support team immediately so that we can take protective action.

As a player on the nbajet platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the email address shown in the footer of this page:

• Right of access: You may request a copy of the personal data we hold about you. We will respond within a reasonable timeframe and at no charge for standard requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or update it. Account details can also be updated directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that certain data must be retained to comply with legal obligations and cannot be deleted on request alone.
• Right to restriction of processing: You may ask us to restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (such as for marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests where you believe your privacy rights outweigh those interests. We will assess each objection individually.

The nbajet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration process, and we reserve the right to request documentary proof of age at any point during the account lifecycle.

If we become aware that a person under the age of 21 has provided personal data to us, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned to the payment source, less any winnings, which will be forfeited. If you have reason to believe that a minor has registered an account on our platform, please contact our support team immediately.

nbajet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made, we will update the "Last updated" date displayed at the top of this page and, where the change significantly affects how we process your data, notify registered players via email or an in-platform notification prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the nbajet platform after any revision constitutes your acceptance of the updated policy. If you do not accept the revised policy, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

This Privacy Policy, together with the Terms & Conditions and Responsible Gaming Policy, forms part of the complete agreement between you and nbajet governing your use of the platform.