nag88 Privacy Policy

nag88 operates the online gaming and sports betting platform accessible at https://nag88.bio (the "Platform"). This Privacy Policy applies to all users who access or use the Platform, regardless of the device or connection method used.

This Privacy Policy has been drafted in compliance with applicable data protection principles, including the principle of lawfulness, fairness, and transparency. It is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the nag88 Platform.

This Privacy Policy should be read alongside the nag88 Terms & Conditions, which govern the overall relationship between you and nag88. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail except in matters relating specifically to data privacy, where this Privacy Policy governs.

nag88 is committed to protecting the personal data of all players, with particular sensitivity to the Bangladesh market context. All personal data is handled with the utmost care and is used only to provide, improve, and secure the nag88 Platform and the services it delivers to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the nag88 operating entity that owns and operates the Platform at https://nag88.bio.

If you wish to contact the data controller regarding any matter relating to this Privacy Policy, the processing of your personal data, or the exercise of any data rights, please use the following contact channel:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Data-related enquiries are acknowledged within 2 Working Days and fully addressed within 5 Working Days.

nag88 collects the following categories of personal data, depending on how you interact with the Platform:

nag88 does not intentionally collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by law or explicit regulatory mandate.

nag88 collects personal data through the following means:

• Direct Interactions: Data you voluntarily provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting our support team, or opting in to marketing communications.
• Automated Technologies: Data collected automatically when you visit or use the Platform, including through cookies, server logs, pixel tags, and similar technologies. This includes technical data and usage data as described in Section 3.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. nag88 receives confirmation references and transaction amounts but does not store full mobile banking credentials.
• Identity Verification Partners: If nag88 uses a third-party identity verification service to assist with KYC checks, that service will return a verification result (pass/fail/refer) to nag88. The identity documents themselves are processed by the verification partner under its own privacy obligations.
• Fraud Prevention Services: nag88 may receive risk signals from fraud detection providers that analyse device fingerprinting and behavioural patterns for security purposes. These signals are used to protect the integrity of the Platform and do not involve profiling for marketing purposes.

nag88 processes your personal data only for the specific, explicit, and legitimate purposes listed below. We do not process your data in any manner incompatible with these stated purposes:

• Account Creation and Management: To register your account, authenticate your identity on login, manage your account settings, and maintain your account history.
• Payment Processing: To facilitate deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka (৳), and to maintain accurate financial records.
• Identity Verification (KYC/AML): To verify that you meet the minimum age requirement of 21 years, to confirm your identity, and to comply with anti-money-laundering obligations.
• Platform Delivery and Improvement: To operate and maintain the nag88 Platform, resolve technical faults, improve platform performance, and develop new features based on usage patterns.
• Customer Support: To respond to your support requests, resolve disputes, and follow up on feedback submitted through the live chat or email channels.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide responsible gaming resources in accordance with our obligations under the Responsible Gaming policy.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Legal and Regulatory Compliance: To comply with any applicable legal obligation, including responding to lawful requests from competent authorities.
• Marketing Communications (where consented): To send promotional emails, SMS notifications, and in-platform messages about nag88 bonuses, new games, and special offers, where you have explicitly opted in to receive such communications.

nag88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and nag88 (i.e., the Terms & Conditions you agreed to upon registration), including account management and payment processing.
• Legal Obligation: Processing that is required to comply with applicable legal and regulatory obligations, including KYC/AML checks and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of nag88's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, and usage analytics for platform improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — specifically, the sending of marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

nag88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only with parties that are bound by appropriate confidentiality and data protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit or withdrawal transaction (such as your wallet number and transaction amount).
• Identity Verification Partners: Third-party KYC/identity verification providers receive the identity documents you submit, solely for the purpose of verifying your identity and age as required by nag88's anti-money-laundering procedures.
• Fraud Prevention and Security Services: Risk management and fraud detection service providers may receive technical data (device identifiers, IP addresses, behavioural signals) to assist in protecting the Platform from abuse.
• IT Infrastructure Providers: Cloud hosting and data storage providers that underpin the nag88 Platform infrastructure will process data on nag88's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: nag88 may disclose personal data to competent governmental, law enforcement, or regulatory authorities where required to do so by applicable law, court order, or legally binding regulatory request. We will notify you of such disclosures where we are legally permitted to do so.

All third parties with whom nag88 shares personal data are contractually required to process that data only for the specific purposes for which it was shared and to maintain security standards at least equivalent to those applied by nag88.

nag88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

nag88 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and the nag88 Platform is encrypted using industry-standard TLS protocols.
• AES-256 Encryption at Rest: Sensitive personal data and financial records stored on nag88 servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within nag88 is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Secure Infrastructure: nag88's Platform is hosted on infrastructure that maintains physical security, environmental controls, and network perimeter protections consistent with industry standards.
• Intrusion Detection: nag88 deploys automated intrusion detection and anomaly monitoring systems that alert the security team to unusual access patterns or potential breaches in real time.
• Staff Training: All nag88 personnel who handle personal data receive regular training on data protection obligations and security best practices.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, nag88 will notify affected users and the appropriate authorities in a timely manner, in accordance with applicable data breach notification requirements.

nag88 uses cookies and similar client-side technologies to operate the Platform effectively and to improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged in during your visit and security tokens that protect your account from cross-site request forgery. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category, display settings, and notification choices — so that you do not need to re-enter them on each visit.
• Analytics Cookies: nag88 uses first-party analytics cookies to understand how the Platform is used — for example, which game categories attract the most engagement, which pages generate the most support queries, and how navigation flows are used. This data is aggregated and anonymised and is not linked to your personal account data.

nag88 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies on the Platform. No data collected via nag88 cookies is shared with advertising networks or social media platforms for targeting purposes.

You may manage or disable non-essential cookies through your browser's privacy settings. Note that disabling cookies may affect certain Platform features. Strictly necessary cookies cannot be disabled via browser settings while you are actively using the Platform.

As a nag88 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the nag88 support team at [email protected]:

• Right of Access: You have the right to request a copy of all personal data that nag88 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by nag88.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nag88's legal retention obligations (see Section 8).
• Right to Restriction of Processing: You have the right to request that nag88 restricts the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

nag88 will acknowledge all data rights requests within 2 Working Days and will provide a substantive response within 5 Working Days. In complex cases, we may extend this period by up to a further 10 Working Days, in which case we will inform you of the extension and the reasons for it.

The nag88 Platform is strictly intended for adults aged 21 years and older. nag88 does not knowingly collect personal data from individuals under the age of 21. The KYC identity verification process is specifically designed to confirm that all registered players meet this age requirement before any deposit or wagering activity is permitted.

If nag88 discovers — through KYC verification or any other means — that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all deposits will be returned to the originating payment method, and all personal data associated with that account will be securely deleted, except where retention is required for legal or regulatory compliance purposes.

nag88's primary Platform infrastructure is designed to serve the Bangladesh market. In certain operational circumstances — such as the use of international cloud hosting providers or identity verification partners — your personal data may be transferred to and processed in jurisdictions outside Bangladesh.

Where such transfers occur, nag88 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses binding the recipient to data protection standards equivalent to those applied by nag88.
• Transfers only to service providers that maintain ISO 27001 or equivalent information security certifications.
• Limiting transferred data to the minimum necessary for the specific processing purpose.

nag88 does not transfer personal data to jurisdictions that are known to have inadequate data protection frameworks without implementing compensating safeguards as described above.

nag88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a notice within the nag88 Platform informing active users of the change.
• Where the changes are significant and affect processing based on consent, send an email notification to your registered email address requesting your renewed consent where required.

Your continued use of the nag88 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically. The version of this Privacy Policy bearing the most recent "Last Updated" date is the version that currently governs the processing of your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how nag88 has handled your personal data, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the nag88 Platform interface.
• Subject Line: Please include "Privacy Request" or "Data Complaint" in your subject line to ensure your message is routed directly to our data protection team.

nag88 takes all privacy complaints seriously. Every complaint is investigated thoroughly and we will communicate the outcome to you within a reasonable timeframe. If you are not satisfied with nag88's response to your complaint, you retain the right to escalate the matter to the relevant competent authority in your jurisdiction.