n bajji Privacy Policy

1 Information We Collect

n bajji collects personal data only where it is necessary to provide our services, fulfil our legal obligations, or improve the platform experience for registered players. We collect information through several channels: directly from you when you register or interact with the platform; automatically when you browse the site; and from trusted third-party service providers such as payment processors and identity verification partners.

1.1 Information You Provide Directly

When you create an n bajji account or interact with our services, you may provide the following categories of personal data:

1.2 Information Collected Automatically

When you access n bajji, our servers and analytics systems automatically record certain technical data. This includes your IP address, browser type and version, device operating system, screen resolution, the pages you visit and the order in which you visit them, session duration, referring URL, and timestamps of all in-session events. This technical data is used primarily for security monitoring, fraud prevention, and aggregate performance analytics. It is not used to build individual behavioural profiles for commercial resale.

1.3 Information from Third Parties

n bajji may receive personal data about you from the following third-party sources:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank): Transaction confirmation data, wallet verification status, and fraud-flag indicators.
• Identity verification services: Confirmation of identity document authenticity, age verification results.
• Fraud prevention partners: Risk scores, device fingerprinting data, and IP reputation information used to protect the platform against abuse.

2 How We Use Your Data

n bajji uses your personal data for clearly defined purposes only. We do not engage in speculative data processing or use your information for purposes that would be incompatible with those disclosed at the time of collection. The following table summarises our primary data-use purposes and their respective legal bases:

2.1 Marketing Communications

n bajji will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal offers (such as BPL match-day promotions, Eid special offers, or Pohela Boishakh campaigns) if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences from within your account dashboard or by contacting support. Withdrawal of marketing consent does not affect your ability to use the platform or your entitlement to transactional account notifications.

2.2 Automated Decision-Making

n bajji uses automated systems to assess fraud risk and to apply responsible gaming interventions (such as automatically triggering account review when a player's betting pattern suggests problem gambling indicators). Where an automated decision has a material impact on your account — such as a temporary suspension pending fraud review — you have the right to request a human review of that decision by contacting our support team. n bajji does not use automated profiling for credit decisions or employment-type determinations.

3 Legal Basis for Processing

n bajji processes personal data only where there is a valid legal basis to do so. The four legal bases we rely upon are described below:

3.1 Contractual Necessity

The majority of personal data processing at n bajji is necessary to fulfil the contract we have with you as a registered player. This includes creating your account, processing your financial transactions, verifying your identity, providing customer support, and delivering the gaming and betting services you have requested. Without this processing, we could not operate the platform or deliver the services you have signed up for.

3.2 Legal Obligation

Certain processing activities are required by applicable law. These include age and identity verification (to comply with responsible gaming obligations), transaction record-keeping (to comply with financial record requirements), and cooperation with lawful requests from competent authorities. n bajji cannot waive or opt out of processing required by legal obligation, regardless of a player's preferences.

3.3 Legitimate Interests

Where processing is not strictly required by contract or law but serves a genuine operational interest of n bajji — such as fraud detection, platform security, abuse prevention, and aggregated analytics — we rely on the legitimate interests basis. In each such case, we have assessed that our legitimate interest is not overridden by your fundamental rights and freedoms. You may object to processing carried out under this basis by contacting support, though we may continue processing where our legitimate interest is compelling.

3.4 Consent

Where we rely on consent as a legal basis — specifically for sending marketing and promotional communications — you have the right to withdraw that consent at any time. Withdrawal of consent is prospective only; it does not affect the lawfulness of any processing that took place prior to withdrawal.

4 Data Sharing & Disclosure

n bajji does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Service Providers and Data Processors

n bajji engages a small number of carefully selected third-party service providers who process personal data on our behalf as data processors. These providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to n bajji. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners process transaction data solely to execute your deposit and withdrawal instructions.
• Identity verification providers: Third-party KYC partners validate identity documents and return a verification result to n bajji. They do not retain your document images beyond the verification process.
• Fraud prevention services: Specialist providers analyse technical signals (IP address, device fingerprint) to assess transaction risk. No personally identifiable betting history is shared with these providers.
• Cloud hosting and infrastructure providers: Server infrastructure and data storage providers who host the n bajji platform under strict data security contractual obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other certified providers receive only the technical session data necessary to deliver game content. They do not receive your full identity or financial data.

4.2 Legal and Regulatory Disclosure

n bajji may disclose your personal data to competent legal authorities, regulatory bodies, or law enforcement agencies where we are required to do so by applicable law or a valid court order. In such cases, n bajji will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of the disclosure as promptly as possible.

4.3 Business Transfers

In the event that n bajji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such a scenario, n bajji will take reasonable steps to ensure that the acquiring entity provides the same standard of data protection as described in this Privacy Policy and will notify registered players of any material change to data controller identity.

5 Cookies & Tracking

n bajji uses cookies and similar browser-storage technologies on the platform. Cookies are small text files placed on your device when you visit a website. They allow the site to remember certain information about your session and preferences. The following categories of cookies are used on the n bajji platform:

5.1 Third-Party Cookies

Game content delivered by third-party providers (such as Pragmatic Play, Evolution Gaming, or Spribe) may place their own session cookies on your device when you launch a game. These cookies are scoped to the game provider's domain and are governed by the provider's own privacy policy. n bajji does not have control over, and accepts no responsibility for, cookies placed by game providers — though we select only providers who meet our data protection standards.

5.2 Managing Cookies

You can manage or delete cookies at any time through your browser settings. The following browser help pages explain how to manage cookies: Chrome, Firefox, Safari, and Edge all provide straightforward cookie management in their respective privacy or settings menus. Note that disabling essential or fraud-prevention cookies may prevent certain features of the n bajji platform from functioning correctly, and in some cases may prevent you from logging in to your account.

5.3 No Cross-Site Tracking

n bajji does not deploy tracking pixels, cross-site tracking scripts, or persistent third-party advertising identifiers that follow your browsing activity beyond the n bajji domain. Our analytics tools use aggregated, anonymised data that cannot be used to identify you individually.

6 Data Retention

n bajji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply to the primary categories of personal data we hold:

6.1 Deletion and Anonymisation

At the end of the applicable retention period, n bajji will either securely delete your personal data or anonymise it in a manner that prevents re-identification. Anonymised data may be retained indefinitely for aggregate statistical analysis and platform improvement purposes, as anonymised data does not constitute personal data under applicable data protection frameworks.

6.2 Requests for Early Deletion

You may request early deletion of your personal data by contacting [email protected] (plain text — not a clickable link). We will process your request within 30 days and inform you of the outcome. Note that we may be unable to delete data that we are required to retain by law (for example, financial transaction records required under applicable financial regulations), and we will explain the specific legal basis for any data we are unable to delete in response to your request.

7 Your Data Rights

As a player on the n bajji platform, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting our support team in writing. n bajji will acknowledge all data rights requests within two business days and will provide a substantive response within 30 calendar days of receiving a valid request.

7.1 Right of Access

You have the right to request a copy of the personal data n bajji holds about you. We will provide a structured summary of the data categories held, the purposes for which they are processed, the legal bases relied upon, and any third parties with whom they have been shared. This is commonly referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number or email address) can be made directly from your account settings. For corrections to identity data that has been verified through the KYC process, you will need to submit updated documentation to the support team.

7.3 Right to Erasure

You have the right to request that n bajji deletes your personal data. As noted in Section 6.2, we will fulfil erasure requests to the maximum extent possible, subject to any legal obligations that require us to retain certain data categories for a defined period. We will always explain which data we are unable to delete and why.

7.4 Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing under the legitimate interests basis and we are assessing your objection — you have the right to request that we restrict our processing of your data to storage only, pending resolution of the issue.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to n bajji in a structured, commonly used, machine-readable format (such as JSON or CSV). This right covers your account profile data and your transaction history, and may be exercised by contacting support.

7.6 Right to Object

You have the right to object to processing carried out under the legitimate interests legal basis. Upon receipt of an objection, n bajji will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7.7 Rights Related to Automated Decision-Making

Where n bajji makes automated decisions that have a material effect on your account (see Section 2.2), you have the right to request human review of those decisions. You also have the right to express your point of view regarding the automated decision and to contest the outcome. Human review requests are processed by our senior compliance team and are typically completed within two business days of the request being received.

8 Data Security

n bajji applies a multi-layered approach to the security of your personal data, combining technical controls, organisational policies, and third-party security audits. The following measures are in place to protect the integrity and confidentiality of the information we hold:

8.1 Technical Security Measures

• TLS/SSL encryption on all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data fields stored at rest, including passwords (stored as salted hashes only, never in plain text) and KYC document images.
• Web Application Firewall (WAF) to protect against injection attacks, cross-site scripting, and other common web-based threats.
• Intrusion detection and prevention systems (IDS/IPS) monitoring for anomalous activity patterns in real time.
• Rate limiting and brute-force protection on all authentication endpoints.
• Multi-factor authentication (MFA) available and recommended for all player accounts.
• Regular penetration testing conducted by independent third-party security specialists.

8.2 Organisational Security Measures

Access to personal data within the n bajji organisation is restricted on a need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All staff handling personal data undergo mandatory data protection training. Access permissions are reviewed quarterly and are revoked immediately upon a staff member leaving the organisation. n bajji maintains a documented incident response plan that is tested annually to ensure rapid, coordinated response in the event of a data security incident.

8.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, n bajji will notify affected players without undue delay and in any case within 72 hours of becoming aware of the breach. Notification will be sent to the email address registered on your account and will include a description of the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

8.4 Your Role in Security

While n bajji takes all reasonable steps to protect your data, you also play an important role in keeping your account secure. We strongly recommend that you:

• Use a strong, unique password for your n bajji account that you do not reuse on other platforms.
• Enable multi-factor authentication (MFA) from your account security settings.
• Never share your login credentials, OTP codes, or account recovery details with anyone, including n bajji staff — our team will never ask for your password.
• Log out of your account when using a shared or public device.
• Contact support immediately at [email protected] if you suspect unauthorised access to your account.

9 Contact & Data Controller

n bajji is the data controller in respect of all personal data processed through the n bajji platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which your personal data is handled, you may contact us through the following channels:

9.1 Policy Updates

n bajji reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to the Policy, we will notify registered players via the email address on their account at least 14 days before the updated Policy takes effect. The current version number and effective date are displayed at the top of this page. We encourage you to review this page periodically to stay informed about how your data is protected. Continued use of the n bajji platform following notification of an updated Policy constitutes your acknowledgement of the changes.

9.2 Governing Language

This Privacy Policy is written and published in English. In the event of any inconsistency between this English-language version and any translated summary or excerpt, the English-language version shall prevail.