nbalee Privacy Policy

Data We Collect

When you interact with nbalee — whether by browsing the site, creating an account, making a deposit, placing a bet, or contacting support — we may collect several categories of personal data. We collect only what is necessary to provide our services securely and in compliance with responsible gaming standards. Below is a full breakdown of the data categories nbalee collects.

Registration and Identity Data

When you register a new nbalee account, we collect the information you provide during the sign-up process. This includes your full legal name as it appears on your government-issued identification document, your date of birth, your Bangladesh mobile phone number (used for one-time password verification), and your email address. This data forms the foundation of your account record and is required to create and maintain your nbalee account.

Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we require players to submit a copy of a valid government-issued photo identification document — typically a Bangladesh National ID Card (NID) or a passport. We may also request proof of payment method ownership (for example, a screenshot of your bKash or Nagad account showing your registered mobile number) and, in some cases, proof of address. These documents are used solely for identity and age verification and fraud prevention purposes.

Financial Transaction Data

When you make a deposit or request a withdrawal, we record the transaction details including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), the transaction amount in Bangladeshi Taka (৳), the date and time of the transaction (in BST, UTC+6), and relevant reference numbers provided by the payment provider. We do not store full card numbers or mobile banking PINs on our servers at any point.

Gaming Activity Data

We record your gaming activity on nbalee, including the games you play, the bets you place, the outcomes of those bets, your session durations, and the total amounts wagered and won or lost over time. This data is used to process your wagers accurately, to detect responsible gaming concerns, to investigate disputes, and to personalise your experience on the platform.

Device and Technical Data

When you access nbalee, our systems automatically collect certain technical information about your device and connection. This includes your IP address, device type (mobile, tablet, or desktop), operating system, browser type and version, screen resolution, and referring URL. This technical data is used for platform security, fraud detection, and service improvement purposes.

Communications Data

If you contact nbalee support — via email to [email protected] or through any in-platform messaging feature — we retain records of that communication, including the content of your messages, timestamps, and any attachments. This data is used to resolve your query, to maintain records of complaints and resolutions, and to improve our customer support quality.

How We Use Your Data

nbalee uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those purposes without first obtaining your consent. The table below summarises the primary purposes for which we process your data and the corresponding lawful basis for that processing.

Marketing Communications

nbalee may send you promotional emails or SMS messages about new games, bonus offers, seasonal promotions (such as Pohela Boishakh or BPL cricket season specials), and platform updates — but only if you have opted in to receive such communications during registration or via your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your nbalee account or by emailing [email protected]. Withdrawal of marketing consent does not affect service-essential communications, which we are required to send regardless of marketing preferences.

Automated Decision-Making

nbalee uses automated systems for certain account-level decisions, including real-time fraud scoring during login and transactions, responsible gaming alerts triggered by gaming pattern thresholds, and bonus eligibility checks. Where an automated decision results in an adverse outcome for you — such as a transaction being flagged or an account being temporarily suspended — you have the right to request human review of that decision by contacting our support team.

Data Sharing & Disclosure

nbalee does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Game and Technology Providers

To deliver casino games on the nbalee platform, we share certain session-level data with our game providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. The data shared is limited to what is technically required to initiate and settle a game session (typically a session token, player ID, and currency identifier). These providers do not receive your full name, NID, or payment details.

Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels, we share the minimum transaction data required by each payment provider to execute the transaction. This may include your registered mobile number, the transaction amount in BDT, and a transaction reference. We do not share your NID, passport, or gaming history with payment providers.

Identity Verification Services

nbalee may use third-party identity verification services to assist with KYC document checks. These services receive a copy of the identification documents you submit and return a verification result (pass or fail). They are contractually prohibited from retaining or using your document data for any purpose beyond the verification check.

Fraud and Security Services

We may share device fingerprints, IP addresses, and transaction patterns with specialist anti-fraud and cybersecurity service providers to detect and prevent fraudulent activity on the nbalee platform. This sharing is carried out under strict data processing agreements that limit the use of your data to fraud prevention purposes only.

Legal and Regulatory Disclosure

nbalee may be required by law, court order, or regulatory instruction to disclose certain player data to relevant authorities. Where we are legally compelled to make such a disclosure, we will notify you in advance where we are permitted to do so. We will not disclose more data than is strictly required by the applicable legal obligation.

Cookies & Tracking

nbalee uses cookies and similar browser-based technologies to operate the platform correctly and to understand how players use our services. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute programmes or deliver viruses to your device; they are used solely to help the website function and to collect usage information.

Types of Cookies We Use

• Essential cookies: These are strictly necessary for the nbalee platform to function. They manage your login session, maintain your account state during gameplay, and handle security tokens. Without these cookies, core platform features cannot operate. You cannot opt out of essential cookies while using nbalee.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you do not have to re-enter them on each visit.
• Analytics cookies: nbalee uses privacy-respecting analytics tools to understand aggregate usage patterns on the platform — for example, which game categories are most popular, which pages have high exit rates, and where technical errors occur. Analytics data is processed in aggregate and is not linked to individual player identities.
• Security cookies: These cookies support our fraud detection systems by helping to identify unusual or suspicious login and transaction patterns across sessions.

What We Do Not Use

nbalee does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any tracking technology that monitors your behaviour across websites other than nbalee.net. We do not embed Facebook Pixel, Google Ads tags, or similar cross-site tracking on our platform.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers — including Chrome, Firefox, and Samsung Internet — allow you to view all stored cookies, delete individual cookies, and block cookies from specific websites. Note that disabling essential cookies will impair your ability to log in and use the nbalee platform. Disabling functional or analytics cookies will not prevent you from using core features but may reduce the quality of your experience.

Data Security

nbalee takes the security of your personal data seriously and applies multiple layers of technical and organisational protection to keep your data safe from unauthorised access, alteration, disclosure, or destruction.

Technical Measures

• Transport encryption: All data in transit between your device and nbalee servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page of the nbalee platform, including account login, game play sessions, and payment flows.
• Data at rest encryption: Personal data and KYC documents stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Password hashing: Account passwords are never stored in plain text. They are processed through a strong one-way cryptographic hashing algorithm (bcrypt) with per-account salting before storage.
• Access controls: Access to systems containing personal data is restricted to nbalee personnel with a demonstrated operational need. All internal access is logged, and access logs are reviewed periodically for anomalies.
• Two-factor authentication: nbalee offers 2FA for player accounts and enforces 2FA for all internal staff accounts with access to player data.

Organisational Measures

nbalee maintains internal data handling policies and provides regular data protection training to staff who process player data. Our compliance team conducts periodic reviews of data processing activities and access logs. Any suspected data breach is subject to an internal incident response process, and affected players are notified without undue delay where the breach poses a risk to their rights or interests.

While nbalee implements robust security measures, no digital platform can guarantee absolute security against all possible threats. We strongly encourage players to use a strong, unique password for their nbalee account, to enable two-factor authentication, and to avoid accessing their account over unsecured public Wi-Fi networks.

Data Retention

nbalee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply to the main categories of data we hold.

When personal data reaches the end of its retention period, nbalee securely deletes or anonymises it in a manner that makes re-identification impossible. KYC documents are deleted from our systems using secure deletion protocols that prevent recovery. Anonymised or aggregated data (data from which all identifying information has been permanently removed) may be retained beyond these periods for statistical and analytics purposes.

Self-Excluded Accounts

Where a player has requested permanent self-exclusion under nbalee's Responsible Gaming policy, we retain a minimal record of the self-exclusion — specifically the account identifier and the exclusion date — for a period of 7 years. This is necessary to prevent a self-excluded player from inadvertently re-registering an account during their exclusion period. The retained record contains only the data strictly necessary for this purpose.

Your Privacy Rights

nbalee respects your rights over your personal data. The following rights are available to all nbalee players with respect to the personal data we hold about them.

• Right of Access: You have the right to request a copy of the personal data nbalee holds about you. We will provide this in a readable format within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update certain data directly via your nbalee account settings. For data that cannot be self-corrected (such as KYC documents), contact [email protected].
• Right to Erasure: You may request that nbalee delete your personal data. We will comply where we are not legally required to retain the data. Note that data subject to mandatory retention periods (as listed in the Data Retention section above) cannot be deleted early.
• Right to Restrict Processing: You may ask nbalee to restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data while we investigate, or if you have objected to processing and we are considering your objection.
• Right to Data Portability: You may request a copy of the personal data you provided to nbalee in a structured, machine-readable format (such as JSON or CSV), so that you can transfer it to another service provider if you wish.
• Right to Object: You may object to nbalee processing your data on the basis of legitimate interests. We will cease processing unless we can demonstrate compelling grounds that override your interests. You may always object to direct marketing processing, and we will stop immediately upon receipt of that objection.
• Right to Withdraw Consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

To exercise any of these rights, contact nbalee at [email protected] with the subject line "Privacy Rights Request". Please include your registered email address and a clear description of the right you wish to exercise. We will verify your identity before processing any request and will respond within 30 days. Complex or high-volume requests may take up to 60 days, in which case we will notify you of the extension.

Policy Updates & Contact

nbalee reviews this Privacy Policy periodically to ensure it accurately reflects our data processing practices and any changes in applicable laws or platform features. When we make material changes to this policy — for example, adding a new category of data collection or a new sharing arrangement — we will notify registered players by email to the address on their nbalee account at least 14 days before the changes take effect.

Minor or clarificatory changes (such as correcting a typographical error or rephrasing a sentence without changing its meaning) may be made without advance notice. The "Last Updated" date at the top of this policy and in the sidebar will reflect the date of the most recent revision. Continued use of nbalee following the effective date of a revised Privacy Policy constitutes acceptance of the revised policy.

Previous Versions

Players who wish to review a previous version of this Privacy Policy may request a copy by emailing [email protected]. We retain archived versions of all previous policies for a minimum of 3 years.

Contact Us About Privacy

If you have any questions about this Privacy Policy, about how nbalee handles your personal data, or about exercising your privacy rights, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and professionally.

This Privacy Policy is written and published in English. In the event of any dispute or ambiguity regarding interpretation, the English-language version of this document is the authoritative version. This policy applies exclusively to data processed in connection with the nbalee.net platform and does not extend to any third-party websites or services linked from nbalee, or to the independent privacy practices of our game providers, payment partners, or other third parties.