Your Privacy Matters to Us

Introduction & Scope

This Privacy Policy describes how nagau88 ("the Platform", "we", "us", or "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "the Player") who visit, register on, or otherwise interact with our online casino and sports betting platform. This policy applies to all products and services offered under the nagau88 brand, including the website, mobile-optimised interface, live casino games, sports betting markets, and any promotional communications we send.

By registering an account or continuing to use nagau88 after this policy has been made available to you, you acknowledge that you have read and understood its contents. If you do not agree with any aspect of this Privacy Policy, you must refrain from using the Platform and, if you have already registered, contact support@nagau88 to request account closure.

Who This Policy Applies To

This Privacy Policy applies to all players accessing nagau88 from Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, as well as any other location from which the Platform is accessible. It also applies to individuals who interact with nagau88 customer support, participate in promotions, or communicate with us via email.

Changes to This Policy

nagau88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify active players by posting a prominent notice on the Platform and, where possible, sending a notification to the registered email address on file. The "Effective Date" at the top of this policy indicates when the current version came into force. We encourage you to review this policy periodically.

Data We Collect

nagau88 collects personal data through multiple channels: directly from you during registration and platform use, automatically through technical systems, and occasionally from trusted third-party sources. The categories of data we collect are described below.

Data You Provide Directly

When you register an account, undergo KYC verification, make deposits or withdrawals, contact support, or participate in promotions, you may provide the following types of personal data:

• Identity data: Full legal name, date of birth, gender, National ID (NID) number or passport number
• Contact data: Email address, Bangladesh mobile number, residential address
• Financial data: bKash wallet number, Nagad wallet number, Rocket account number, Upay account, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), Visa/Mastercard details (last four digits and expiry only — full card numbers are handled by our payment processor, not stored by nagau88)
• Verification documents: Copies of NID card, passport, utility bills, bank statements, and any other document submitted during KYC
• Account credentials: Username and encrypted password (passwords are hashed and never stored in plain text)
• Communications data: Content of messages sent to our support team via email or live chat

Data Collected Automatically

When you access nagau88, our systems automatically collect certain technical and behavioural data:

• Device and connection data: IP address, device type, operating system, browser type and version, screen resolution, language settings
• Usage data: Pages visited, games played, bets placed, session duration, click-stream data, navigation patterns, search queries within the Platform
• Transaction data: Deposit and withdrawal amounts, dates, times, payment methods used, bet history, game outcomes, bonus redemptions
• Location data: Approximate geolocation derived from IP address (used for fraud prevention and responsible gaming purposes; precise GPS location is not collected)

Data Received from Third Parties

We may receive personal data about you from the following third-party sources:

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and bank partners
• Identity verification services: Results from third-party KYC and AML screening services used to verify your identity against national databases
• Fraud prevention databases: Alerts and flags from shared fraud-prevention networks to protect the Platform and other players
• Analytics providers: Aggregated and anonymised behavioural data from our analytics tools to help us understand Platform usage patterns

Data Collected Through Cookies

nagau88 uses cookies and similar tracking technologies to enhance your experience, maintain session state, prevent fraud, and analyse Platform performance. Full details of our cookie practices are provided in the Cookies & Tracking Technologies section of this policy.

How We Use Your Data

nagau88 processes your personal data only where a lawful basis exists to do so. The primary lawful bases we rely upon are: contractual necessity (processing required to deliver our services to you), legitimate interests (processing for fraud prevention, security, and Platform improvement), legal obligation (processing required to comply with applicable law), and, in limited cases, your explicit consent.

Marketing Communications

If you have opted in to receive promotional communications from nagau88, we may send you emails or SMS notifications about bonuses, new game launches, BPL and IPL cricket betting offers, Eid promotions, Pohela Boishakh specials, and other seasonal campaigns. You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any email or by contacting support@nagau88. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations or withdrawal notifications).

Automated Decision-Making

nagau88 uses automated systems to assist with fraud detection, bonus abuse prevention, and responsible gaming interventions. These systems may result in automated decisions that affect your account — for example, flagging unusual betting patterns for manual review or temporarily restricting account functionality. Where a fully automated decision has a significant effect on you, you have the right to request human review of that decision by contacting support@nagau88.

Data Sharing & Disclosure

nagau88 does not sell your personal data. We share personal data only where necessary for the operation of the Platform, where required by law, or where you have given explicit consent. The categories of third parties with whom we share data are described below.

Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers are permitted to use your data only for the specific purpose for which it was shared and are required to maintain appropriate security measures. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard — for processing deposits and withdrawals
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi — limited session and transaction data is shared to facilitate gameplay and resolve disputes
• KYC and identity verification providers: Third-party services that verify identity documents and screen against sanctions and PEP (politically exposed persons) lists
• Cloud infrastructure and hosting providers: Secure data centres used to host the Platform and store data with appropriate physical and logical security controls
• Customer support platforms: Tools used to manage support tickets, live chat, and email communications
• Analytics providers: Services that help us understand Platform usage through aggregated and anonymised data

Legal and Regulatory Disclosure

nagau88 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or legal process. We may also disclose data where we have a good-faith belief that disclosure is necessary to protect the rights, safety, or property of nagau88, our players, or the public. We will notify you of such disclosures where legally permitted to do so.

Business Transfers

In the event that nagau88 undergoes a merger, acquisition, sale of assets, or other corporate restructuring, personal data held by the Platform may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected players of any such transfer and the applicable privacy terms before the transfer takes place.

International Data Transfers

Some of our service providers operate outside Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — including contractual protections and, where available, transfers to jurisdictions with adequate data protection standards. If you have questions about the specific safeguards applicable to your data, contact support@nagau88.

Cookies & Tracking Technologies

nagau88 uses cookies — small text files placed on your device — and similar technologies such as web beacons, pixel tags, and local storage to deliver core Platform functionality, maintain your session, protect against fraud, and understand how players use the site.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary and fraud-prevention cookies are required for the Platform to function and cannot be disabled without disrupting core services. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling functional or analytical cookies may affect your Platform experience — for example, your preferences may not be remembered between sessions.

For detailed guidance on managing cookies in your specific browser, refer to the help documentation for your browser of choice. Since nagau88 is an English-language platform serving Bangladesh players, we do not currently integrate with third-party consent management platforms — cookie preferences are managed directly via your browser settings.

Data Retention

nagau88 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Retention periods vary depending on the type of data and the reason for retention.

Retention Schedule

• Account and identity data: Retained for the duration of the account relationship and for five years following account closure, to meet AML and regulatory record-keeping obligations.
• Transaction and betting records: Retained for five years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC verification documents: Retained for five years after the end of the business relationship, in line with standard AML best practices.
• Customer support communications: Retained for three years from the date of the last interaction, for dispute resolution and service improvement purposes.
• Marketing communication preferences: Retained until you withdraw consent or close your account, whichever comes first.
• Technical and usage logs: Retained for up to 13 months for fraud detection and Platform security purposes, after which they are deleted or anonymised.
• Cookie and session data: Retained in accordance with the durations set out in the Cookies section above.

Secure Deletion and Anonymisation

When personal data is no longer required and no legal retention obligation applies, nagau88 uses secure deletion methods to ensure data cannot be recovered. Where full deletion is not immediately practical (for example, data held in backup systems), we anonymise the data so it can no longer be linked to an identifiable individual and restrict any further processing until deletion is completed at the next scheduled backup cycle.

Retention Following Self-Exclusion

Where a player has self-excluded from nagau88 under our Responsible Gaming programme, we retain sufficient personal data for the duration of the self-exclusion period to prevent the player from re-registering. This retention is in your best interest and forms part of our commitment to responsible gaming. Please visit our Responsible Gaming page for more information.

Your Privacy Rights

nagau88 respects your rights over your personal data. The following rights are available to you as a player. To exercise any of these rights, contact our support team at support@nagau88 with your request. We will respond within 30 calendar days and may ask you to verify your identity before processing your request.

Right of Access

You have the right to request a copy of the personal data nagau88 holds about you. This is commonly known as a Subject Access Request (SAR). We will provide a structured summary of your data in a readable format. There is no fee for a standard SAR unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update many details — such as your contact email or phone number — directly in your account settings. For corrections to identity or KYC documents, please contact support@nagau88 and provide the accurate information along with supporting evidence.

Right to Erasure

You may request that nagau88 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been unlawfully processed. Please note that we may be unable to delete data that we are legally required to retain — for example, transaction records subject to AML retention obligations. In such cases, we will inform you of the specific retention obligation and delete the data as soon as the obligation period expires.

Right to Restrict Processing

In certain circumstances — such as where you contest the accuracy of your data or object to our processing — you may request that we restrict processing of your data while the matter is resolved. During a restriction period, we will continue to store your data but will not actively process it beyond what is strictly necessary.

Right to Data Portability

Where processing is based on your consent or contractual necessity, you have the right to receive the personal data you provided to nagau88 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller. Contact support@nagau88 to submit a portability request.

Right to Object

You have the right to object to processing based on our legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose immediately. Where you object to other legitimate-interest processing, we will assess whether our interests are overridden by your rights and communicate our decision within 30 days.

Right Not to Be Subject to Solely Automated Decisions

Where an automated decision has a significant legal or similarly significant effect on you, you have the right to request human review. Contact support@nagau88 with details of the decision you wish to challenge, and our compliance team will conduct a manual review and communicate the outcome to you.

Data Security Measures

Protecting your personal data is a core operational priority at nagau88. We implement a layered security architecture combining technical, administrative, and physical safeguards to protect data against unauthorised access, disclosure, alteration, and destruction.

Technical Safeguards

• SSL/TLS encryption: All data in transit between your device and nagau88 is encrypted using TLS 1.2 or higher, preventing eavesdropping on your connection.
• Data encryption at rest: Sensitive data stored in our databases — including identity documents, payment details, and account credentials — is encrypted using AES-256 or equivalent standards.
• Password hashing: Passwords are never stored in plain text. We use strong one-way hashing algorithms with salting to ensure that even our own staff cannot read your password.
• Two-factor authentication (2FA): Players are strongly encouraged to enable SMS-based 2FA on their accounts. Staff accounts with access to player data are required to use 2FA.
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and continuously monitored intrusion detection systems.
• Vulnerability management: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities before they can be exploited.

Administrative Safeguards

• Access to player data is restricted on a strict need-to-know basis. Only staff whose role requires access to personal data are granted it, and all access is logged and audited.
• All nagau88 staff who handle personal data receive regular training on data protection obligations and information security best practices.
• Data processing agreements are in place with all third-party service providers who process personal data on our behalf.
• An incident response plan is maintained and tested regularly to ensure that in the event of a data breach, affected players are notified promptly and appropriate remedial action is taken.

Reporting a Security Concern

If you become aware of any actual or suspected security vulnerability affecting nagau88, or if you believe your account has been compromised, please contact support@nagau88 immediately. We take all security reports seriously and commit to acknowledging reports within 24 hours and communicating our findings and remediation steps within a reasonable timeframe.

Contact for Privacy Enquiries

All privacy-related enquiries, requests, and concerns should be directed to our support team. We are committed to resolving privacy matters promptly and transparently.

General enquiries: support@nagau88

Responsible gaming concerns: rg-support@nagau88

Our support team operates 24 hours a day, seven days a week, and aims to respond to all privacy-related correspondence within five business days.