Privacy Policy — How nadg88 Protects Your Data

1. Information We Collect

nadg88 collects personal information from you at the point of registration, during ongoing account use, and through your interactions with our platform features. We collect only the data that is genuinely necessary for the purposes described in this Privacy Policy. The categories of information we collect are set out below.

Account registration data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 18+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other) and postal code.
• Email address (used for account communication and security alerts).
• Mobile number (used for account authentication and payment verification).
• Username and encrypted password hash (your plaintext password is never stored).

Identity verification (KYC) data:

• Scanned or photographed copies of government-issued photo identification (National ID Card, passport, or equivalent).
• Proof of residential address documents dated within the last 90 days.
• Proof of ownership of the payment method(s) used to fund the account.
• In some cases, a selfie or video verification may be requested to confirm document authenticity.

Financial transaction data:

• Details of deposits made via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, including transaction reference numbers and amounts in BDT.
• Withdrawal requests, payment method details, and processing status records.
• Bonus redemption history and associated wagering activity records.

Platform usage and technical data:

• IP address and approximate geolocation at the time of login and platform activity.
• Device type, operating system, browser type, and version.
• Session timestamps, pages visited, games played, bets placed, and in-session navigation patterns.
• Communication records including live chat transcripts, email correspondence, and support tickets submitted to the nadg88 support team.

2. How We Use Your Information

nadg88 processes your personal data on the basis of contractual necessity (to deliver the services you signed up for), legal obligation (to comply with anti-money laundering and age verification requirements), and legitimate interest (to maintain platform security and improve user experience). We do not process your data based on consent in circumstances where another lawful basis applies.

The specific purposes for which we use your data are as follows:

nadg88 will not use your personal data for any purpose that is incompatible with the purposes described above. If we intend to process your data for a new purpose, we will update this Privacy Policy and, where required by applicable law, seek your prior consent before doing so.

3. Data Sharing & Third Parties

nadg88 does not sell, rent, or trade your personal data to any third party. We share your information only where strictly necessary to operate the platform, fulfil our legal obligations, or protect the interests of our members. The categories of third parties with whom we may share your data are described below.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum necessary transaction data (amount, reference, account identifier) to process deposits and withdrawals. These providers are independently regulated financial services entities with their own data protection obligations.
• Identity verification services: Third-party KYC and document verification providers may process identity documents on our behalf under strict data processing agreements. These providers are authorised to use your data only for verification purposes and may not retain it beyond the period required to complete verification.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, Pragmatic Play Live, Ezugi, Microgaming, NetEnt, and Spribe receive anonymised session identifiers necessary to deliver game functionality. They do not receive your name, address, or financial information.
• Fraud prevention and AML compliance services: nadg88 uses third-party risk-management and AML screening tools that may process IP addresses, device fingerprints, and transaction patterns. These services are engaged solely to protect the platform and its members from financial crime.
• Regulatory and law enforcement authorities: Where we are required by applicable law or a valid court order to disclose personal data to regulatory authorities or law enforcement agencies, we will comply. We will notify you of any such disclosure unless we are legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the nadg88 business, your personal data may be transferred to the acquiring entity. We will notify affected members before any such transfer takes effect and provide options to request data deletion where legally permissible.

All third-party service providers engaged by nadg88 are bound by data processing agreements that restrict their use of your personal data to the specific purposes for which it was shared. nadg88 remains responsible for the appropriate handling of your data at all times and will investigate and remediate any third-party data breach that affects our members.

4. Cookies & Tracking Technologies

The nadg88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and — where you have given consent — to analyse usage patterns and deliver relevant promotional content. A cookie is a small text file stored on your device by your browser when you visit a website.

The cookies used on the nadg88 platform fall into the following categories:

You can manage your cookie preferences at any time through your browser settings or through the nadg88 account dashboard under Privacy Settings. Please note that disabling essential cookies will prevent you from logging in and using the platform. Disabling analytics or marketing cookies will not affect your ability to place bets, access games, or make financial transactions.

nadg88 does not use any persistent device fingerprinting technology designed to track your activity across websites that are not part of the nadg88 platform. Our tracking technologies are limited to the cookies described above and are used exclusively in connection with your use of nadg88.net.

5. Data Security Measures

nadg88 applies a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information against unauthorised access, disclosure, alteration, or destruction. The key security measures currently in place include:

• SSL/TLS encryption: All data transmitted between your device and the nadg88 platform is encrypted using TLS 1.2 or higher. The nadg88.net domain operates exclusively over HTTPS; unencrypted HTTP connections are automatically redirected.
• Password hashing: Member passwords are stored as salted cryptographic hashes using a strong hashing algorithm. nadg88 staff cannot read or retrieve your plaintext password under any circumstances.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to member data is logged and subject to regular audit review.
• Intrusion detection: The nadg88 platform employs automated intrusion detection and anomaly-monitoring systems that flag unusual access patterns and trigger security alerts in real time.
• KYC document storage: Identity documents submitted for KYC verification are stored in an encrypted document vault with restricted access, separate from the main platform database.
• Two-factor authentication: nadg88 supports optional two-factor authentication (2FA) for member accounts, adding an additional layer of protection against unauthorised login attempts.
• Regular security testing: The nadg88 platform undergoes periodic security assessments and vulnerability scanning to identify and address potential weaknesses before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, nadg88 will notify affected members without undue delay and, at a minimum, within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps we have taken or propose to take to address it.

6. Data Retention Policy

nadg88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account registration and profile data: Retained for the duration of your active account relationship with nadg88, plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of submission, as required under applicable anti-money laundering regulations. Documents may be retained for longer if required by a regulatory authority or ongoing investigation.
• Financial transaction records: All deposit, withdrawal, bonus, and wagering transaction records are retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Chat transcripts and email records are retained for 3 years from the date of the communication, to support dispute resolution and service quality review.
• Platform usage and analytics data: Anonymised usage data may be retained indefinitely for statistical and product development purposes. Personally identifiable usage data is retained for 2 years from the date of collection.
• Marketing preference records: Consent and opt-out records are retained for the duration of your account relationship, plus 1 year following account closure, to demonstrate compliance with marketing regulations.

When personal data is no longer required and the applicable retention period has elapsed, nadg88 will securely delete or anonymise it in accordance with our internal data disposal procedures. Secure deletion means that the data cannot be recovered or reconstructed following the disposal process.

7. Your Data Rights

As a nadg88 member, you hold a number of rights with respect to your personal data. These rights are described below. To exercise any of these rights, please contact the nadg88 data team in writing at [email protected] with the subject line "Data Rights Request" and sufficient information to identify your account. We will acknowledge all data rights requests within 48 hours and provide a substantive response within 30 calendar days.

• Right of access: You may request a copy of all personal data that nadg88 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. This service is provided free of charge.
• Right to rectification: If any personal data held by nadg88 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Many basic profile details (such as your email address and mobile number) can be updated directly in the nadg88 account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations — nadg88 cannot delete KYC and transaction data that we are legally required to retain.
• Right to restriction of processing: You may request that nadg88 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to data portability: Where nadg88 processes your personal data by automated means on the basis of contract or consent, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to object: You have the right to object at any time to nadg88's processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interest, although nadg88 may continue to process your data if there are compelling legitimate grounds that override your interests, rights, and freedoms.

nadg88 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request. We will notify you in advance if a fee applies.

8. Policy Updates & Contact

nadg88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date at the top of this page will always reflect the date of the most recent update. Where a material change is made to this Privacy Policy — for example, a new category of data being collected, or a new third-party data processor being engaged — nadg88 will notify all registered members via email and through a prominent notice on the platform dashboard at least 14 days before the change takes effect.

Your continued use of the nadg88 platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you may request account closure before the updated policy takes effect by contacting the support team.

For any questions, concerns, or requests relating to this Privacy Policy or nadg88's data processing practices, please contact the nadg88 data team using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry"
• Live chat: Available 24/7 in your nadg88 account dashboard — response time 2–5 minutes
• Response commitment: All privacy-related enquiries will receive a substantive written response within 5 business days of receipt.

nadg88 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy enquiry or data rights request, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction. We encourage you to contact us directly in the first instance so that we have the opportunity to resolve your concern before any formal escalation.