nagad9 Privacy Policy

This Privacy Policy ("Policy") describes how nagad9 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "Member", "User") who access or use the nagad9 online casino and sports betting platform at nagad9.today, including all associated pages, services, and payment facilities.

This Policy applies to all members and visitors located in Bangladesh, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. By registering an account or continuing to use the nagad9 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions that govern your use of the nagad9 platform. Where there is a conflict between this Policy and those documents, this Policy governs with respect to privacy and data protection matters.

nagad9 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and in some cases from third-party identity verification or payment processing partners. The categories of data we collect are as follows:

nagad9 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you voluntarily disclose such information through support communications, it will be handled with the highest level of care and will not be used for profiling or marketing purposes.

nagad9 uses your personal data only for specific, defined purposes. We do not process personal data in any manner that is incompatible with those original purposes. The primary uses of your data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your profile, and manage your login credentials securely.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate transaction records in BDT.
• Identity and age verification: To confirm that you are aged 18 or above and that the payment accounts linked to your nagad9 profile are registered in your own legal name, as required by our Terms & Conditions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Customer support: To respond to your queries, resolve complaints, and improve the quality of our support services based on interaction history.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and make data-informed improvements to the nagad9 website and game offering.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour and to apply self-exclusion or account restrictions where appropriate, in line with our Responsible Gaming policy.
• Legal compliance: To meet obligations under applicable law, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

nagad9 does not use your personal data for automated profiling that produces legal or similarly significant effects on you without your explicit consent. We do not use your data to send unsolicited third-party marketing communications.

nagad9 processes your personal data on the basis of one or more of the following recognised legal grounds, depending on the specific purpose of processing:

1. Contractual necessity: Processing is required to perform the contract you entered into when registering your nagad9 account — including providing access to games, processing payments, and managing your account balance.
2. Consent: Where you have given your express consent to a specific processing activity, such as receiving promotional communications from nagad9. You may withdraw consent at any time by contacting [email protected].
3. Legitimate interests: Processing is necessary for the legitimate interests of nagad9 or a third party, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security, analytics, and responsible gaming monitoring.
4. Legal obligation: Processing is necessary for nagad9 to comply with a legal obligation, including identity verification, anti-money-laundering checks, and responding to lawful requests from authorities.

nagad9 does not sell, rent, or trade your personal data to any third party for their own commercial use. We share personal data only in the following limited circumstances:

• Payment service providers: We share necessary financial data with bKash, Nagad, Rocket, Upay, and partner banks solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the specified payment purpose.
• Identity verification services: Where required, we may share identity data with trusted KYC (Know Your Customer) verification partners to confirm your identity and age. These partners are bound by strict confidentiality and data protection obligations.
• Game content providers: Technical session data may be shared with game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely to the extent necessary to deliver and maintain game functionality within your account session.
• IT and security service providers: We may share technical data with trusted providers of hosting, security monitoring, and platform infrastructure services. All such providers process data only on our documented instructions.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other unlawful activity.
• Business transfers: In the event that nagad9 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and any change to this Policy that results from it.

nagad9 uses cookies and similar tracking technologies (such as web beacons and local storage) to maintain session continuity, improve platform performance, and analyse aggregate usage patterns. Cookies are small text files placed on your device by your browser when you visit nagad9.today.

The types of cookies used on the nagad9 platform are as follows:

nagad9 does not use cookies for cross-site advertising, behavioural retargeting, or building individual advertising profiles. Strictly necessary cookies are set without requiring your consent, as they are essential for the platform to function. Functional and analytics cookies are set on the basis of your implied consent through continued use of the platform.

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent some or all features of the nagad9 platform from functioning correctly.

nagad9 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any applicable legal or compliance obligations that require a longer retention period. Our general retention standards are as follows:

• Account data (identity, contact, and login information) is retained for the duration of your active account and for a period of up to 5 years following permanent account closure, to satisfy anti-money-laundering and fraud prevention obligations.
• Financial transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC verification documents (copies of NID, passport, or other identity documents) are retained for the duration of the account plus 5 years post-closure.
• Support communications (chat transcripts, email correspondence) are retained for up to 3 years from the date of the interaction.
• Technical and usage data (server logs, session data, analytics) is retained for up to 12 months in identifiable form, after which it is anonymised or deleted.

When personal data is no longer required for its original purpose and no legal obligation requires further retention, nagad9 will securely delete or irreversibly anonymise that data in accordance with our internal data lifecycle procedures.

As a member of nagad9, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You may request a copy of the personal data that nagad9 holds about you, including information on how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that nagad9 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to retention obligations described in Section 7.
• Right to restriction of processing: You may request that we temporarily restrict the processing of your data — for example, while a dispute about accuracy is resolved — without deletion.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. nagad9 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

nagad9 will respond to all verified data rights requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days, in which case we will notify you in advance. All requests are handled free of charge unless manifestly unfounded or excessive.

The nagad9 platform is strictly intended for adults aged 18 years and above. nagad9 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18. If you are under 18, you must not register an account or attempt to use any part of the nagad9 platform.

If nagad9 becomes aware that personal data has been collected from an individual who is under 18 years of age, we will take immediate steps to permanently close the associated account, void any transactions made through it, and securely delete all data collected in connection with that account.

nagad9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nagad9 servers.
• Encrypted storage of sensitive data fields including passwords (hashed using bcrypt), payment account identifiers, and identity document references.
• Access controls: Personal data is accessible only to nagad9 staff and authorised service partners who have a specific, documented need to access it. Access is logged and monitored.
• Intrusion detection and monitoring: nagad9 maintains 24/7 automated monitoring for suspicious access patterns, failed login attempts, and data anomalies.
• Regular security reviews: The nagad9 platform and data infrastructure undergo periodic security assessments to identify and remediate vulnerabilities.
• Incident response: In the event of a confirmed data breach that poses a risk to members, nagad9 will notify affected users as promptly as practicable and take immediate steps to contain and remediate the incident.

Despite these measures, no internet-based platform can guarantee absolute security. Members are also responsible for maintaining the security of their own account credentials and for notifying nagad9 promptly if they suspect any unauthorised access to their account.

The nagad9 platform may, from time to time, contain references or links to third-party websites, game content delivered by external providers, or payment service interfaces operated by partners such as bKash, Nagad, and Rocket. This Privacy Policy applies exclusively to data processed by nagad9 and does not extend to data practices of any third-party website, application, or service that you access through or in connection with the nagad9 platform.

When you interact with a third-party payment interface or are redirected to an external service as part of a transaction, you are subject to the privacy policy and terms of that third party. nagad9 is not responsible for the privacy practices, data security, or content of any third-party platform and encourages you to review the relevant privacy documentation before submitting personal information to any external service.

nagad9 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform functionality, or data processing practices. When a material change is made to this Policy, the "Effective Date" at the top of this page will be updated accordingly.

Where a change significantly affects how we process your personal data — such as a new category of data collection or a new sharing arrangement with a third party — nagad9 will endeavour to provide advance notice through the platform's notification system or by email to the address registered on your account. Your continued use of the nagad9 platform following any update to this Policy constitutes your acknowledgement of the revised terms.

You are encouraged to review this page periodically to remain informed of how nagad9 protects your privacy. If at any time you disagree with the terms of this Policy, you should cease using the platform and may request account closure by contacting the support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 8, or want to raise a privacy concern, please contact the nagad9 support team using the details below. All privacy-related enquiries are treated with strict confidentiality.

• Email: [email protected] — responses within 6 hours for general queries; data rights requests handled within 30 days.
• Live Chat: Available 24/7 directly within the nagad9 platform for immediate assistance.

When submitting a data rights request, please include your registered username, the nature of your request, and any relevant supporting details to help us verify your identity and process your request efficiently. nagad9 will not action data rights requests from unverified individuals to protect the privacy of account holders.

nagad9 is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with the outcome of a privacy complaint, you may escalate the matter through any applicable dispute resolution mechanism available under the laws of Bangladesh.