nebjee Privacy Policy

1. Information We Collect

nebjee collects personal information from you through several channels during the lifecycle of your account. The categories of data we collect, and the circumstances under which each category is gathered, are described in detail below.

1.1 Registration Data

When you create a nebjee account, we collect the following information to establish and manage your account:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address, including city, district, and postcode
• Email address (used for account communications and password recovery)
• Mobile phone number (used for account security and two-step verification)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of identity and address verification documents, including:

• National identity card (NID), passport, or driving licence
• Proof of address documents such as utility bills or bank statements dated within the last 90 days
• Proof of payment method ownership, such as a screenshot of your bKash, Nagad, or Rocket account registration details
• A selfie photograph alongside your identity document, where required by our compliance team

1.3 Financial Transaction Data

When you make deposits or withdrawals on the nebjee platform, we collect transaction records including the payment method used, the transaction amount in BDT, the date and time of the transaction, and the transaction reference number assigned by your payment provider. We do not store complete credit or debit card numbers on our servers; card data is tokenised by our payment processing partners.

1.4 Gameplay and Betting Data

We maintain records of all bets placed, games played, win and loss outcomes, bonus claims, and wagering activity associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention purposes.

1.5 Technical and Device Data

When you access the nebjee platform through a web browser or mobile device, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and click-path data. This information is used to maintain platform security, optimise performance, and detect unusual or suspicious access patterns.

1.6 Communications Data

If you contact our customer support team via live chat, email, or WhatsApp, we retain records of those communications for quality assurance, training, and dispute resolution purposes. We may also retain records of any voluntary feedback or survey responses you submit.

2. How We Use Your Data

nebjee processes your personal data only for clearly defined and lawful purposes. The primary purposes for which we use the data we collect are set out below.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contractual necessity
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial transaction data, payment method details	Contractual necessity
Fraud prevention and AML compliance	Transaction data, device data, betting history	Legal obligation / Legitimate interest
Responsible gaming monitoring	Betting history, session data, self-exclusion flags	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity / Legitimate interest
Platform security and abuse prevention	Device data, IP address, login history	Legitimate interest
Service improvement and analytics	Anonymised or aggregated technical data	Legitimate interest
Account-related transactional emails	Email address, account activity	Contractual necessity
Promotional communications (where consented)	Email address, preferences	Consent

2.1 Marketing Communications

nebjee will only send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, and seasonal offers if you have actively opted in to receive such communications during registration or through your Account Settings. You may withdraw your consent and opt out of marketing communications at any time by updating your preferences in Account Settings or by replying "STOP" to any marketing message. Opting out of marketing communications does not affect your receipt of essential transactional account communications.

3. Data Sharing & Disclosure

nebjee does not sell, rent, or trade your personal data. We share your information with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals, we share relevant transaction data with our authorised payment processing partners, including mobile wallet providers (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard). These partners receive only the minimum data required to execute the transaction and are contractually bound to handle that data in accordance with applicable data protection standards.

3.2 Identity Verification Providers

nebjee works with third-party KYC and identity verification service providers to authenticate the documents submitted during the account verification process. These providers process your identity document data solely for verification purposes and are prohibited from using it for any other purpose.

3.3 Game and Technology Providers

The casino and sports betting products available on the nebjee platform are powered by third-party game studios and technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your anonymised or pseudonymised player ID and session data to operate the games and maintain their own integrity and fraud prevention systems. They do not receive your full name, contact details, or financial information.

3.4 Legal and Regulatory Disclosure

nebjee may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by applicable law, by a valid legal order, or where disclosure is necessary to prevent, detect, or prosecute financial crime including money laundering, fraud, or terrorist financing. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that nebjee undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, nebjee will take reasonable steps to ensure that the acquiring entity honours the commitments set out in this Privacy Policy. Registered users will be notified of any material change in data controller identity prior to any such transfer taking effect.

4. Cookies & Tracking Technologies

The nebjee platform uses cookies and similar tracking technologies to operate core platform functions, maintain your session state, and gather anonymised analytics data to improve the service. This section explains the types of cookies we use and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state across pages, remember your language preference, and ensure that security features such as CSRF protection operate correctly. Essential cookies cannot be disabled without breaking core platform functionality.

4.2 Analytics Cookies

nebjee uses anonymised analytics cookies to understand how players navigate the platform — which pages are most visited, how long sessions last, and where users encounter difficulties. This data is aggregated and cannot be used to identify individual players. We use this information solely to improve the platform's usability and content.

4.3 Preference Cookies

Preference cookies remember choices you make on the platform, such as your preferred game categories, notification settings, and display preferences. These cookies improve your experience by ensuring the platform behaves consistently with your previously expressed preferences across sessions.

4.4 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please be aware that disabling cookies beyond the essential category may impair certain platform features. For instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

5. Data Security

nebjee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security practices include the following:

• Transport Layer Security: All data transmitted between your device and nebjee servers is encrypted using TLS 1.3 — the current industry standard for secure web communications.
• Encryption at Rest: Sensitive data stored on nebjee servers, including identity documents and financial records, is encrypted using AES-256 before being written to storage media.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using bcrypt with a per-user salt before storage, ensuring that even nebjee staff cannot read your password.
• Two-Step Verification: nebjee offers two-step verification (2SV) via SMS for all accounts. We strongly recommend enabling this feature in your Account Settings to add an additional layer of protection against unauthorised login attempts.
• Access Controls: Access to personal data within nebjee's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job function, and all access is logged and audited.
• Regular Security Testing: nebjee conducts regular penetration testing and vulnerability assessments of its platform infrastructure. Identified vulnerabilities are prioritised and remediated in accordance with their severity rating.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, nebjee will notify affected players without undue delay and, where required, report the breach to the relevant supervisory authority within the legally mandated timeframe.

6. Data Retention

nebjee retains your personal data for only as long as is necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The retention periods applicable to the main categories of data we hold are summarised below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal and regulatory obligation
KYC identity documents	Duration of account + 5 years post-closure	AML and KYC legal obligation
Financial transaction records	7 years from transaction date	Financial records legal obligation
Gameplay and betting history	Duration of account + 3 years post-closure	Dispute resolution and integrity
Customer support communications	3 years from last interaction	Dispute resolution and quality assurance
Marketing consent records	Until consent withdrawn + 1 year	Evidence of consent
Technical / device logs	13 months from collection	Security and fraud prevention

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from our systems or anonymised in a manner that makes re-identification impossible, depending on the operational requirements at the time. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a registered nebjee player, you hold a number of rights with respect to the personal data we hold about you. These rights are set out below, together with guidance on how to exercise each one.

7.1 Right of Access

You have the right to request a copy of the personal data that nebjee holds about you. Upon receipt of a valid access request, we will provide you with a summary of the data held, the purposes for which it is processed, and the categories of third parties with whom it has been shared, within 30 days.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly within your Account Settings. For corrections to identity documents or other sensitive data, please contact our support team.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that certain data must be retained for the legal retention periods described in Section 6 above, and erasure requests cannot override those obligations.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and we are considering that objection — you may request that we temporarily restrict the processing of your data while the relevant issue is resolved.

7.5 Right to Data Portability

Where our processing of your data is based on your consent or on contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, in which case we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.7 Exercising Your Rights

To exercise any of the rights described above, please contact our privacy team by email at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 calendar days. We may ask you to verify your identity before processing a rights request, to ensure that we do not disclose or alter data in response to a request made by an unauthorised party.

8. Contact & Policy Updates

8.1 Privacy Contact

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which nebjee handles your personal data, please contact our privacy team directly:

• Email: [email protected] (subject line: "Privacy Enquiry")
• WhatsApp: +880 1700 000 000 (08:00–24:00 BST)
• Live Chat: Available 24/7 directly on the nebjee platform

We aim to resolve all privacy-related concerns promptly and professionally. Where a concern cannot be resolved to your satisfaction through direct contact, you retain the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.

8.2 Changes to This Policy

nebjee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technological developments, or evolving legal requirements. Where amendments are material — meaning they affect your rights or the way we use your data in a significant way — we will notify all registered players by email to the address on file at least 14 days before the revised policy takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continued use of the nebjee platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account before the effective date of the changes.