n1baje Privacy Policy

01 Introduction

This Privacy Policy applies to all services offered by n1baje, including the website at https://n1baje.app, the player account system, the casino and sports betting platform, and all associated support channels. It describes how n1baje collects, processes, stores, shares, and protects the personal data of registered players and visitors based in Bangladesh and elsewhere.

By creating an account on n1baje or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. This policy should be read alongside the n1baje Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and n1baje.

We review and update this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or platform features. The effective date of the current version is stated at the top of this document. Continued use of n1baje after any update constitutes your acceptance of the revised policy.

02 Data We Collect

n1baje collects the following categories of personal data from players and platform visitors. We collect only what is necessary for the purposes described in this policy.

We do not knowingly collect sensitive personal data beyond what is required for identity verification and age confirmation. Where KYC documents contain sensitive categories of data (such as national identification numbers), that information is handled with heightened security controls and is not used for any purpose beyond verification.

03 How We Collect Your Data

n1baje collects personal data through the following channels:

• Account registration: When you create a player account, you provide identity, contact, and login credential information directly to n1baje.
• KYC submissions: When you submit verification documents (NID, passport, proof of address, payment method screenshots) in response to a KYC request.
• Deposits and withdrawals: When you conduct financial transactions on the platform via bKash, Nagad, Rocket, or Upay, transaction metadata is recorded.
• Platform activity: Your gaming behaviour, bet placement history, session activity, and bonus usage are recorded automatically as you use n1baje.
• Support interactions: Any communication you have with the n1baje support team — via live chat, email, or any other support channel — is recorded and retained.
• Cookies and tracking technologies: When you visit the n1baje website, certain technical and usage data is collected automatically via cookies and similar technologies. See Section 8 for full details.
• Third-party sources: In limited circumstances, n1baje may receive data about you from third-party identity verification providers or payment processors, for the purpose of completing KYC checks or verifying transaction authenticity.

04 How We Use Your Data

n1baje uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your player account, including processing login requests and account setting changes.
• Identity and age verification: Confirming that you meet the 18+ age requirement and that your account details are accurate, as part of our KYC and responsible gaming obligations.
• Payment processing: Facilitating BDT deposits and withdrawals via supported local payment methods, and maintaining accurate transaction records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring gaming patterns to identify players who may be at risk and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: Analysing usage data in aggregate to improve the n1baje platform, optimise game performance, and enhance the player experience.
• Customer support: Responding to support requests, investigating complaints, and resolving disputes in a fair and timely manner.
• Legal compliance: Meeting our obligations under applicable anti-money-laundering, data protection, and responsible gaming regulations.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

05 Legal Basis for Processing

n1baje processes personal data only where a legitimate legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing that is necessary to perform the contract with you — i.e., to operate your player account, process payments, and deliver the gaming services you have requested.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money-laundering obligations and responsible gaming requirements, such as age verification and the administration of self-exclusion requests.
• Legitimate interests: Processing that is necessary for n1baje's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing for which we have obtained your explicit consent, primarily in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

n1baje does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment processors: Your financial transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment partners solely for the purpose of processing your deposit or withdrawal. Each payment partner operates under its own privacy and data security policies.
• KYC and identity verification providers: Where we engage a third-party provider to assist with identity document verification, your KYC documents may be shared with that provider under strict confidentiality and data processing agreements.
• Game technology providers: Technical gaming data — such as game session logs and bet records — may be shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to resolve disputes or investigate technical issues. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: We may share technical data (such as IP addresses and device fingerprints) with specialist fraud detection services to protect the integrity of the platform and its players.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of n1baje, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of n1baje's assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom n1baje shares personal data are required to handle that data securely, to use it only for the purpose for which it was shared, and to comply with applicable data protection standards.

07 Data Retention

n1baje retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years after account closure, to meet anti-money-laundering and responsible gaming record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping practice.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction, unless the subject matter relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved.
• Marketing consent records: Retained for the duration of your account, or until you withdraw consent, whichever is sooner.
• Technical and usage data: Typically anonymised or deleted within twelve (12) months of collection, where it is no longer needed for security or analytical purposes.

Where personal data is no longer required for any lawful purpose and the applicable retention period has expired, n1baje will securely delete or anonymise that data in accordance with our internal data disposal procedures.

08 Cookies & Tracking Technologies

n1baje uses cookies and similar tracking technologies to improve your experience on the platform, to keep you logged in between sessions, and to analyse aggregate usage patterns. The following types of cookies may be active when you use n1baje:

• Strictly necessary cookies: These are essential for the platform to function. They enable core features such as user authentication, session management, and security checks. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: These remember your preferences — such as language settings and display options — to provide a more personalised experience across sessions.
• Analytics cookies: These collect anonymised or aggregated data about how visitors use the n1baje platform. This helps us understand which features are most used and where improvements should be made. No individual player is identified through analytics data.
• Security cookies: These assist in detecting and preventing fraudulent activity, including bot traffic and multi-account abuse, by associating a device fingerprint with an active session.

n1baje does not use third-party advertising cookies or behavioural tracking cookies for the purpose of displaying targeted advertisements on other websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect platform functionality.

09 Payment Data Security

n1baje takes the security of financial data with the utmost seriousness. The following safeguards are in place to protect your payment information:

• All payment transactions are processed over encrypted connections. No payment data is transmitted in plain text at any stage.
• n1baje does not store full payment credentials (such as bKash or Nagad PINs) on our servers. Only transaction reference numbers, wallet numbers, and transaction amounts are retained for record-keeping purposes.
• Our internal systems operate on a need-to-know basis. Only authorised support and finance team members have access to financial records, and all such access is logged and audited.
• Withdrawal requests are subject to identity verification checks to confirm that funds are being returned to the same payment method used for the original deposit, minimising the risk of unauthorised withdrawals.
• In the event of a suspected security breach affecting financial data, n1baje will notify affected players and take immediate remedial action, including temporary account suspension where necessary to protect player funds.

10 Your Rights Over Your Data

n1baje respects your rights in relation to your personal data. The following rights are available to all registered players:

• Right of access: You may request a copy of the personal data that n1baje holds about you at any time. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details (such as contact information) directly from your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records (see Section 7).
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is under review.
• Right to data portability: You may request a copy of the personal data you have provided to n1baje in a commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting the support team.
• Right to object: You may object to the processing of your personal data where that processing is based on n1baje's legitimate interests, where you have grounds relating to your particular situation.

To exercise any of the above rights, please contact the n1baje data team via the support email address stated in Section 14. We will verify your identity before processing any data request and will respond within 30 calendar days of receiving a valid request.

11 Children's Privacy

n1baje is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18. Our registration process includes an age declaration, and age verification is required before withdrawals are processed. If n1baje discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately suspend the associated account, delete all personal data related to that account, and void any transactions or bonus claims made during the period of underage access.

Parents and guardians who believe their child may have created an n1baje account should contact the support team immediately at [email protected] (plain text — not a link). We take reports of underage account access seriously and will act promptly upon receiving a credible report.

12 Marketing Communications

n1baje may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game releases, seasonal promotions (such as those tied to Eid, Pohela Boishakh, BPL season, or IPL), and other platform updates. We will only send marketing communications if you have explicitly opted in to receive them.

• Opting out: You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by updating your communication preferences in your n1baje account settings.
• Transactional messages: Opting out of marketing communications does not affect transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests — which are sent as a necessary part of operating your account.
• Frequency: We aim to keep marketing communications relevant and reasonably infrequent. We do not send unsolicited bulk messages or share your contact details with third-party marketers.

13 Changes to This Privacy Policy

n1baje reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will notify registered players via email or a prominent in-platform notice before the changes take effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy) may be made without advance notice.

The date of the most recent revision is stated at the top of this document. We encourage you to review this policy periodically to stay informed about how n1baje handles your personal data. Your continued use of the platform after any revision constitutes your acceptance of the updated policy.

14 Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the n1baje data and support team using the details below:

• Live Chat: Available 24 hours a day, 7 days a week, via the n1baje platform.
• Email: [email protected] (plain text — not a link). Email support hours: 09:00 – 23:00 BST (UTC+6), every day.

When submitting a data rights request by email, please include your registered account username, the specific right you wish to exercise, and a brief description of your request. We will verify your identity before processing the request and aim to respond within 30 calendar days.