nabu88 Privacy Policy

nabu88 is committed to protecting the privacy and personal data of every player. We operate in accordance with recognised data protection principles and apply technical and organisational measures appropriate to the sensitivity of the information we handle. This Policy applies to all personal data collected through our website, mobile-optimised interface, customer support channels, and payment processing flows.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and nabu88.

Privacy at a Glance

The six cards below summarise our core data-protection commitments. Full details are in the numbered sections that follow.

1 Data We Collect

nabu88 collects personal data in several ways: directly from you when you register an account or contact support; automatically when you use our platform; and from third-party sources such as payment providers and identity-verification services. The table below sets out the main categories of personal data we collect and the primary purpose for which each category is used.

2 How We Use Your Data

nabu88 uses your personal data strictly for the purposes for which it was collected, or for compatible purposes where we have a legitimate interest to do so. We process personal data on the following legal bases:

• Contract Performance: We process identity, contact, and financial data because it is necessary to deliver the services you have requested when registering an account — including accepting deposits, settling withdrawals, and awarding bonuses.
• Legal Obligation: We are required by applicable law to conduct age verification, identity verification (KYC), and anti-money-laundering (AML) checks. Retention of transaction records may also be mandated by financial regulations applicable to our operations.
• Legitimate Interests: We process technical and usage data to maintain platform security, detect and prevent fraud, improve our services, and conduct business analytics. We balance these interests against your right to privacy and will not rely on this basis where your interests override ours.
• Consent: Where we send you promotional emails or SMS messages about nabu88 offers, seasonal promotions (such as Eid or BPL specials), or new game releases, we do so on the basis of your consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected].
• Responsible Gaming Monitoring: We analyse your betting patterns and session behaviour to identify early indicators of problem gambling. This processing is in your vital interest and supports our responsible gaming obligations. You can review and adjust your limits at any time via your account dashboard.
• Dispute Resolution: Communications data — including support chat logs and email correspondence — may be retained and reviewed for the purpose of resolving disputes, investigating complaints, and defending legal claims.

3 Data Sharing & Third Parties

nabu88 does not sell your personal data. We share data only where it is necessary to deliver our services, comply with legal requirements, or protect the integrity of our platform. The categories of third parties with whom we may share your data are set out below.

• Payment Providers: When you make a deposit or request a withdrawal, the minimum necessary financial data is shared with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard. Each provider operates under its own privacy policy and data protection obligations.
• Identity Verification Services: nabu88 may engage third-party KYC and AML service providers to verify identity documents and screen against sanctions lists. These providers receive only the data required to complete the verification check.
• Game Content Suppliers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content and RNG certificates. They do not receive your identity or financial data directly.
• Analytics Providers: We use privacy-compliant analytics tools to understand how players interact with our platform. Data shared for analytics purposes is aggregated or pseudonymised wherever possible.
• Legal and Regulatory Authorities: nabu88 will disclose personal data to law enforcement, regulatory bodies, or other authorised government agencies where required by applicable law, a court order, or to protect the rights and safety of nabu88 or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of nabu88's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy choices available to you.

4 Cookies & Tracking Technologies

nabu88 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform, remember your preferences, maintain your logged-in session, and analyse usage patterns. Cookies do not contain your full name, password, or financial details.

• Essential Cookies: These are strictly necessary for the platform to function. They enable core features such as account login sessions, security tokens, and navigation. You cannot opt out of essential cookies while using the platform.
• Functional Cookies: These remember your preferences such as preferred language settings, display configurations, and responsible gaming limit selections. Disabling these may affect your user experience.
• Analytics Cookies: We use anonymised analytics cookies to understand page performance, identify technical issues, and improve the platform. No personally identifiable information is included in analytics reports.
• Managing Cookies: You can manage cookie preferences through your mobile browser settings. Note that restricting certain cookies may limit your ability to access some features of the nabu88 platform. Clearing cookies will log you out of your current session.

5 Data Retention

nabu88 retains your personal data for as long as your account is active and for a defined period after account closure, in order to comply with legal, regulatory, and contractual obligations.

• Active Account Data: All personal, financial, and usage data associated with an active account is retained for the duration of the account relationship.
• Post-Closure Retention: Following account closure — whether initiated by you or by nabu88 — we retain identity and transaction records for a minimum of 5 years to satisfy financial record-keeping requirements and to enable us to respond to legal claims or regulatory inquiries.
• Support Communications: Customer support chat logs and email correspondence are retained for 2 years from the date of the last interaction, after which they are securely deleted.
• Analytics Data: Aggregated and anonymised analytics data, which cannot be used to identify you as an individual, may be retained indefinitely for statistical and service-improvement purposes.
• Secure Deletion: When personal data reaches the end of its retention period, nabu88 securely deletes or anonymises it using industry-standard data destruction methods so that it can no longer be associated with your identity.

6 Your Data Rights

nabu88 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected]. We will respond to all verified requests within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a clear, readable format. We may request proof of identity before processing an access request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain information directly through your account settings.
• Right to Erasure: You may request that we delete your personal data. We will comply where there is no overriding legal or regulatory obligation to retain the data. We will inform you if we are unable to fulfil an erasure request and explain the reason.
• Right to Restrict Processing: You may request that we pause the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a structured, machine-readable copy of your data so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have the right to withdraw consent for marketing communications at any time, with immediate effect.
• Right to Complain: If you are unhappy with how nabu88 has handled your personal data, you have the right to raise a complaint by contacting us directly at [email protected]. We take all privacy complaints seriously and will acknowledge receipt within 5 business days.

7 Data Security

nabu88 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• SSL / TLS Encryption: All data transmitted between your browser or mobile device and the nabu88 platform is encrypted using SSL/TLS protocols. You can verify a secure connection by looking for the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are never stored in plain text. nabu88 uses industry-standard hashing algorithms to store password credentials securely. Even nabu88 staff cannot read your password.
• Access Controls: Access to personal data within nabu88's internal systems is strictly limited to staff and contractors who require it to perform their duties. All access is logged and subject to regular audit.
• Fraud Monitoring: nabu88 employs automated and manual fraud detection systems that analyse account activity in real time. Suspicious activity — including unusual login locations or rapid withdrawal requests — triggers an immediate security review.
• Your Responsibilities: You play an important role in keeping your account secure. Never share your nabu88 password with anyone. Use a strong, unique password that you do not use on other websites. If you suspect your account has been accessed without your permission, contact [email protected] immediately.

8 Minors & Under-Age Players

The nabu88 platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If you are a parent or guardian and you believe your child has registered an account on nabu88 without your knowledge, please contact us immediately at [email protected]. We will investigate and, if confirmed, immediately suspend the account and delete all associated personal data.

9 Updates to This Policy

nabu88 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this Policy, we will notify registered players via the email address on their account or via an in-platform notification prior to the change taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the nabu88 platform after notification of a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you may close your account by contacting [email protected] before the effective date of the change.

10 Contact & Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nabu88 handles your personal data, please contact our Privacy and Support team using the details below. All enquiries are treated in strict confidence and will be acknowledged within 5 business days (Bangladesh Standard Time, UTC+6).

• Email: [email protected] — please include "Privacy Enquiry" in the subject line to ensure prompt routing to the correct team.
• Response Time: We aim to resolve all privacy enquiries within 10 business days of receipt. Complex requests involving data access or erasure may take up to 30 calendar days, in which case we will keep you informed of progress.
• Identity Verification: For security reasons, we may request proof of identity before actioning any data access, rectification, or erasure request. Acceptable forms of identification include a Bangladesh National Identity Card or a valid passport.