nagad8 Privacy Policy

nagad8 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you, including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money-laundering obligations, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for nagad8's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of prior processing.

nagad8 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners require transaction data to process deposits and withdrawals. Their own privacy policies govern their use of your data.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist in verifying your identity and age as required for responsible gaming and compliance purposes.
• Game content providers: Platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver their games. These studios operate under their own data processing agreements.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical support partners who process data solely on nagad8's instructions and under binding data processing agreements.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, and regulatory bodies where nagad8 is required by law to disclose information.

All third-party data processors engaged by nagad8 are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which they have been engaged.

nagad8 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function, including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and game history for a more personalised experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how you interact with nagad8 — pages visited, features used, and session duration — to help us improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

By continuing to use nagad8 after being presented with cookie information, you consent to the placement of non-essential cookies. You may manage cookie preferences through your device browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

nagad8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Active account data: Retained for the duration of your account relationship with nagad8 plus a minimum period of five years following account closure, to satisfy legal and audit obligations.
• Transaction records: Retained for a minimum of seven years from the date of the transaction, in accordance with financial record-keeping requirements.
• Identity verification documents: Retained for the period required by applicable anti-money-laundering regulations, typically five to seven years from the end of the account relationship.
• Customer support records: Retained for three years from the date of the last interaction, to assist with dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of the consent and for a reasonable period thereafter to evidence that consent was properly obtained.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with nagad8's data disposal procedures.

As a nagad8 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered username and a description of your request:

• Right of access: You may request a copy of the personal data nagad8 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For most account details, you can update information directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nagad8's legal retention obligations.
• Right to restriction of processing: You may request that nagad8 restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract with you, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on nagad8's legitimate interests where you believe your rights and interests override those interests.

nagad8 will respond to all valid data rights requests within 30 calendar days. In cases of exceptional complexity or high volume, this period may be extended by a further 60 days; if so, we will notify you within the initial 30-day period.

nagad8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• All data transmitted between your device and nagad8's servers is encrypted using TLS 1.2 or higher (256-bit SSL encryption).
• Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. nagad8 support staff cannot view your password in plain text.
• Access to personal data within nagad8's systems is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations.
• Regular penetration testing and security audits are conducted on nagad8's infrastructure by qualified security professionals.
• Intrusion detection systems and real-time monitoring are in place to identify and respond to suspicious activity.
• Data backups are encrypted and stored in geographically separate, access-controlled facilities.

In the event of a personal data breach that poses a risk to your rights and interests, nagad8 will notify affected individuals without undue delay and take immediate steps to contain and remediate the breach.

nagad8 is strictly intended for adults aged 21 years and above. The platform does not knowingly collect, process, or store personal data from individuals under the age of 21.

If nagad8 becomes aware that personal data has been submitted by a person under the age of 21 — whether discovered through routine verification checks, third-party reports, or any other means — we will immediately suspend the associated account, void any transactions, and permanently delete all related personal data from our systems.

Parents or guardians who believe that a minor has accessed or registered on nagad8 are encouraged to contact us immediately at [email protected] so that appropriate action can be taken promptly.

In operating the nagad8 platform, certain personal data may be processed by service providers or infrastructure partners whose servers are located outside Bangladesh. Where such transfers occur, nagad8 takes steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy, including:

• Entering into data processing agreements with all recipient organisations that include binding obligations to protect your personal data.
• Applying equivalent technical and organisational security measures to transferred data as are applied to data processed within Bangladesh.
• Transferring data only to recipients in countries or organisations that provide an adequate level of data protection, or where appropriate safeguards are in place.

By using nagad8, you acknowledge that your personal data may be transferred to and processed in locations outside your country of residence as described above.

nagad8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the platform. When a material change is made, we will notify registered players via their registered email address or through an in-platform notification prior to the change taking effect.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. We encourage you to review this policy periodically. Your continued use of nagad8 following the effective date of any update constitutes your acknowledgement of the revised policy.

If you have any questions about changes to this Privacy Policy, please contact our support team at [email protected].