Privacy Policy
Your Data. Our Responsibility.

nbaze collects personal data through several distinct channels during the course of your relationship with the platform. We collect only the information that is necessary for the purposes identified in this policy. The categories of data we collect are as follows:

1.1 Registration and Account Data

When you create a nbaze account, we collect the information you provide during the registration process, including:

• Your full legal name as it appears on your government-issued identification document.
• Your date of birth, collected to verify that you meet the minimum age requirement of 18 years.
• Your email address, used for account communications, transaction confirmations, and (where you have opted in) marketing messages.
• Your mobile phone number, which is linked to your registered payment method and used for account authentication and support communications.
• Your chosen username and a hashed (encrypted) version of your account password. nbaze does not store passwords in plain text under any circumstances.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we collect and process identity verification documents prior to authorising your first withdrawal. This includes:

• A copy of a government-issued photo identification document — National ID card, passport, or driving licence.
• Proof of ownership of your registered payment method (for example, a screenshot of your bKash, Nagad, Rocket, or Upay account showing your registered mobile number and name).
• In cases of high-value transactions, we may request documentation evidencing the lawful source of deposited funds.

1.3 Financial Transaction Data

We record all financial transactions conducted through your nbaze account, including:

• Deposit amounts, timestamps, payment methods used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank ), and transaction reference numbers.
• Withdrawal requests, amounts, destination payment method details, and processing status.
• Bonus credits applied to your account, associated wagering activity, and bonus expiry records.
• Any chargebacks, disputed transactions, or payment reversals associated with your account.

1.4 Gaming and Betting Activity Data

We maintain a complete record of your gaming and betting activity on nbaze, including:

• All bets placed, game sessions participated in, stakes wagered, and outcomes recorded.
• Sports markets accessed, live in-play betting activity, and settled bet history.
• Casino game sessions including game title, studio provider, session duration, and net result.
• Responsible gaming tools you have activated, including deposit limits, session limits, cooling-off periods, and self-exclusion records.

1.5 Technical and Device Data

When you access nbaze via a web browser or mobile device, we automatically collect certain technical information, including:

• IP address and approximate geolocation derived from IP data.
• Device type, operating system, browser type and version.
• Pages visited within the nbaze platform, session duration, click-path data, and referral source.
• Cookie identifiers and similar tracking technologies (see Section 4 — Cookies & Tracking for full details).

1.6 Communications Data

We retain records of communications between you and nbaze, including live chat transcripts, email correspondence, and any feedback or complaints submitted through our support channels. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

nbaze processes your personal data for the following specific purposes. For each purpose, we identify the legal basis under which that processing takes place:

nbaze does not use automated decision-making processes that produce legal or similarly significant effects on individual users without human oversight. Where automated tools are used to flag unusual account activity (for example, patterns consistent with fraud or problem gambling), a trained member of the nbaze compliance or player welfare team reviews the flagged case before any material action is taken against the account.

nbaze may share your personal data with third parties only in the limited circumstances described below. In every case, data sharing is governed by appropriate data processing agreements that require the recipient to maintain confidentiality and process your data only for the stated purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is strictly required to execute and verify the transaction in question.

3.2 Game Studio and Technology Providers

Casino game studios and sports data providers (including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive limited technical session data necessary to deliver their games and markets to your device. These providers operate under contractual obligations that restrict them from using nbaze player data for any purpose other than service delivery.

3.3 Identity Verification Services

KYC document verification may be performed in part by specialist third-party identity verification providers. Any data shared with such providers is processed solely for verification purposes and is not retained beyond the verification workflow.

3.4 Legal and Regulatory Disclosure

nbaze may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where such disclosure is compelled by applicable law, a valid court order, or a binding regulatory direction. In such cases, nbaze will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected account holder.

3.5 Business Transfers

In the event that nbaze undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by nbaze may form part of the transferred assets. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from the transaction, with a minimum of 30 days' advance notice before the new policy takes effect.

nbaze uses cookies and similar tracking technologies to operate core platform functionality, improve user experience, and (where you have consented) to serve relevant promotional content. A cookie is a small text file stored in your browser that allows the platform to recognise your device across sessions.

The cookies deployed on nbaze fall into the following categories:

You may manage your cookie preferences at any time via your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling functional cookies will cause your preferences to reset on each visit. Disabling analytics and marketing cookies will have no impact on your ability to use the platform.

nbaze does not use third-party advertising networks that track your activity across external websites. Any tracking technologies in use are limited to activity within the nbaze platform itself.

nbaze implements a layered approach to data security that encompasses technical, organisational, and procedural controls designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Technical Controls:

• All data transmitted between your device and nbaze servers is protected by 256-bit SSL/TLS encryption. The padlock indicator in your browser confirms this encryption is active during each session.
• Account passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. Plain-text passwords are never stored or logged anywhere in our systems.
• Financial transaction data is stored in isolated, access-controlled databases separate from general platform data. Access to financial records is restricted to authorised payments personnel only.
• KYC identity documents are stored in an encrypted document vault with audit-logged access. Only compliance team members with a direct operational need may access submitted documents.
• Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular automated vulnerability scans.

Organisational Controls:

• All nbaze staff and contractors with access to personal data undergo privacy and data security training as part of their onboarding and annual refresher programme.
• Access to personal data is governed by a strict least-privilege principle — staff are granted access only to the data categories required to perform their specific job function.
• nbaze maintains an internal data breach response procedure. In the event of a confirmed data breach that is likely to result in a risk to affected individuals, nbaze will notify affected users within 72 hours of becoming aware of the breach, to the extent technically possible.

Your Responsibility: The security of your account also depends on the strength and confidentiality of your password. nbaze strongly recommends using a unique password of at least 12 characters that is not used on any other website or application. nbaze support staff will never ask for your password. If you receive any communication claiming to be from nbaze and requesting your login credentials, treat it as fraudulent and report it to our support team immediately.

nbaze retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply to the principal categories of data we hold:

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be attributed to an identifiable individual. Where deletion is technically complex due to backup architecture, data is suppressed from active systems immediately and purged from backups within the next scheduled backup cycle.

As a data subject whose personal information is processed by nbaze, you hold the following rights with respect to your data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

nbaze reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data processing practices, applicable law, or the services we offer. All amendments are effective from the date they are published on this page.

Where an update constitutes a material change to how we process your personal data — for example, a new category of data being collected, a new sharing arrangement with a third party, or a change to our retention periods — we will notify registered Players via the email address on file at least 14 days before the change takes effect. Continued use of the nbaze platform after the effective date of any updated policy constitutes acceptance of the revised terms.

The version of the Privacy Policy that was in force at the time of any particular data processing activity governs that activity. The effective date at the top of this page identifies the current version.

Contact Information: For all privacy-related enquiries, data subject access requests, or concerns regarding nbaze's data handling practices, please contact our support team via live chat (available 24/7 on Bangladesh Standard Time) or in writing to: [email protected]

We aim to resolve all privacy enquiries within 10 business days. For complex requests, we will provide an interim acknowledgement within 5 business days and a full response within 30 calendar days.