Privacy Policy

1. Who We Are

Nagad88 is an online casino and sportsbook for players in Bangladesh, operated at nagad88-bd.click and through the Nagad88 Android application and mobile web app. This policy explains what personal data we collect about you, why we collect it, who we share it with, how long we keep it and what control you have over it.

The controller of your personal data is the company operating the Nagad88 brand:

Legal name: COMPANY LEGAL NAME

Company registration number: COMPANY REGISTRATION NUMBER

Registered address: REGISTERED ADDRESS

The operator holds a gaming licence issued by Gaming Curaçao, licence number 365/JAZ. For any question about this policy, write to [email protected].

2. Scope

This policy covers the Nagad88 website, the Android application, the mobile web app, our cashier, our customer support channels and our marketing communications. It does not cover third-party websites, payment providers or game studios that operate under their own privacy policies, even where you reach them through our platform.

Gambling is a regulated activity. Part of the data described below is collected because our licence and anti-money-laundering obligations require it, not because we choose to collect it.

3. What Personal Data We Collect

3.1 Identity and contact data

Full name, date of birth, gender where provided, country of residence, address, email address and mobile number.

3.2 Account credentials

Username, hashed password, security questions, one-time codes and, where you register through Telegram, the identifiers that service returns to us.

3.3 Verification documents (KYC)

Photographs or scans of your national ID card, passport or driving licence; proof of address; proof of ownership of the payment wallet used; and, where required, evidence of source of funds such as salary statements or bank records. This is sensitive documentation and is handled with restricted access.

3.4 Financial and transaction data

The mobile financial service account you use (bKash, Nagad, Rocket or Upay), partially masked wallet numbers, deposit and withdrawal amounts, timestamps, references and balance history. All amounts are in Bangladeshi taka.

3.5 Gaming and betting data

Bets placed, markets and odds selected, stakes, settlement results, spins, session lengths, bonuses claimed and wagering progress.

3.6 Technical and device data

IP address, approximate location derived from it, device model, operating system version, application version, browser type, language setting, device identifiers, crash logs and login timestamps.

3.7 Behavioural and responsible-gambling data

Patterns of deposits, losses and session frequency that our monitoring systems assess for signs of gambling harm, together with any limits, time-outs or self-exclusions you set.

3.8 Support and communications data

Live chat transcripts, emails, complaint files and, where applicable, recordings or notes of telephone calls.

3.9 Marketing preferences

Your consents and opt-outs for promotional messages by email, SMS and push notification.

3.10 Cookies and similar technologies

Described separately in the Nagad88 Cookie Policy.

4. How We Collect It

  • Directly from you — at registration, during verification, in the cashier, when you contact support and when you set responsible-gambling limits. 
  • Automatically — through cookies, server logs and application telemetry as you use the Service. 
  • From third parties — identity-verification providers, payment providers and mobile financial services, game studios, fraud-prevention and anti-money-laundering databases, and affiliates who referred you to us. 

5. Legal Bases for Processing

Where data-protection law requires us to identify a legal basis, we rely on the following:

  • Performance of a contract — opening and running your Account, accepting wagers, settling them, and processing deposits and withdrawals. 
  • Compliance with a legal obligation — identity verification, anti-money-laundering and counter-terrorist-financing checks, age verification, record keeping required by our licence, tax and accounting duties, and responses to lawful requests from authorities. 
  • Legitimate interests — preventing fraud, collusion and bonus abuse; securing our platform; monitoring for signs of gambling harm; improving the Service; and defending legal claims. We balance these interests against your rights and do not rely on this basis where your interests override them. 
  • Consent — marketing communications and non-essential cookies. You may withdraw consent at any time without affecting processing carried out before withdrawal. 

6. How We Use Your Data

  • Creating, maintaining and securing your Account, and authenticating your logins across the website and the app. 
  • Verifying your identity and your age, and confirming that you are at least 21 years old. 
  • Carrying out anti-money-laundering, sanctions and source-of-funds checks. 
  • Processing deposits and withdrawals through bKash, Nagad, Rocket and Upay, and investigating failed or disputed payments. 
  • Accepting, settling and auditing your bets and game rounds. 
  • Administering bonuses and checking whether wagering requirements are met. 
  • Detecting and preventing fraud, multiple accounts, collusion and unauthorised access. 
  • Monitoring play for signs of gambling harm and applying limits, time-outs or exclusions. 
  • Providing customer support and handling complaints. 
  • Sending promotional offers where you have consented, and measuring how they perform. 
  • Meeting our reporting duties to the licensing authority and to auditors. 

7. Sharing and Disclosure

We do not sell your personal data. We share it only with the following categories of recipient, and only with the data they need:

  • Payment providers and mobile financial services — to process deposits and withdrawals and to resolve payment disputes. 
  • Identity-verification and anti-fraud providers — to check documents and screen against sanctions and fraud databases. 
  • Game and platform providers — the studios that supply our slots, live dealer tables and crash games, and the platform that runs the sportsbook, to the extent needed to deliver and audit gameplay. 
  • Affiliates and marketing partners — limited data confirming that a referral led to a registration or deposit; they do not receive your identity documents. 
  • IT, hosting, analytics and communications suppliers — acting on our instructions under written contracts. 
  • The licensing authority and auditors — Gaming Curaçao, licence number 365/JAZ, and independent testing or audit bodies, where our licence requires disclosure. 
  • Law enforcement, regulators and courts — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims. 
  • Group companies and successors — companies within the same corporate group, and any buyer in a corporate transaction, subject to equivalent protection. 

8. International Transfers

Our suppliers are located in several countries, so your data may be transferred outside Bangladesh — for example to hosting providers, verification providers or game studios based in Europe or Asia. Where data is transferred from the European Economic Area or the United Kingdom, we rely on an adequacy decision where one exists, or on Standard Contractual Clauses supported by additional technical and organisational measures. You may request details of the safeguards used by writing to [email protected].

9. Data Retention

We keep personal data only for as long as we need it, and then for as long as gambling and anti-money-laundering rules require us to keep it. As a guide:

  • Account, transaction, KYC and wagering records — retained for the life of the Account and, in line with anti-money-laundering and licensing requirements, for a period of five years after the Account is closed or after the last transaction. 
  • Support and complaint files — normally up to five years from closure of the case, so that we can evidence how a dispute was handled. 
  • Self-exclusion records — retained for the duration of the exclusion and afterwards for as long as needed to prevent the excluded person from re-registering. 
  • Marketing preferences and suppression lists — retained until you unsubscribe, and afterwards only as a record that you opted out. 
  • Technical logs — normally 12 to 24 months, longer where a security investigation is open. 

When a retention period ends, data is deleted or irreversibly anonymised.

10. Security

We protect your data with encryption of traffic between your device and our servers, encryption of stored verification documents, hashed passwords, role-based access limited to staff who need it, logging of access to sensitive records, supplier due diligence and regular review of our controls. No system is completely secure, so you should also protect your side of the connection: use a unique password, keep one-time codes to yourself and log out on shared devices. Report anything suspicious to [email protected].

11. Your Rights

Depending on where you live, you may exercise the following rights in relation to your personal data:

  • Access — obtain confirmation that we process your data and a copy of it. 
  • Rectification — have inaccurate data corrected or incomplete data completed. 
  • Erasure — ask us to delete your data, subject to the retention duties described in section 9. We cannot delete records we are legally required to keep. 
  • Restriction — ask us to limit processing while a dispute about accuracy or legitimate interests is resolved. 
  • Portability — receive the data you gave us in a structured, machine-readable format. 
  • Objection — object to processing based on legitimate interests, and object at any time to direct marketing. 
  • Withdrawal of consent — withdraw consent to marketing or non-essential cookies at any time. 
  • Complaint — lodge a complaint with the data-protection supervisory authority in your country and, where the matter concerns our gambling licence, with the licensing authority named above. 

Send requests to [email protected]. We answer within one month and may extend that period for complex requests, telling you if we do. To protect your Account, we verify your identity before acting on a request.

11.1 Additional rights for California residents

If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information and the purposes for collecting it; request deletion or correction; and opt out of any “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information for money. You will not be treated differently for exercising these rights. Submit requests to [email protected].

12. Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, protect your Account, measure how the platform is used and, with your consent, deliver and measure advertising. Categories, durations and the way to change your choices are set out in the Nagad88 Cookie Policy.

13. Age Restriction

The Service is strictly for adults. Only people aged 21 or over may register with Nagad88, and we do not knowingly collect personal data from anyone below that age. If we find that an account belongs to an underage person, we close it, void the wagers, return the deposited funds to the source of payment and delete the data except where records must be retained for legal reasons. If you believe a minor has given us personal data, contact [email protected] immediately.

14. Responsible Gambling

Some of the data we process exists specifically to protect you: deposit and loss patterns, session lengths and the limits you set are used to identify signs of gambling harm and to apply limits, time-outs or self-exclusion. You can request any of these tools at any time through live chat or at [email protected]. The Nagad88 Responsible Gambling page explains the tools in full. Gambling is entertainment, not a source of income.

15. Changes to This Policy

We review this policy regularly and update it when our processing, our suppliers or the law changes. The current version is always published on nagad88-bd.click with the date of the last update at the top. Where a change materially affects your rights, we notify you by email or through an on-site notice before it takes effect.

16. Contact

Privacy and data-protection requests: [email protected]

General support: [email protected]

Security reports: [email protected]

Support line: +880 9610 880088

Live chat: 24 hours a day, seven days a week, in Bengali and English.

Controller: Aurora Holdings N.V., Abraham de Veerstraat 9, Willemstad, Curaçao

21+. Gambling involves risk. Play responsibly and never wager money you cannot afford to lose.