nad88 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how nad88 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the nad88 platform at nad88.io, including all associated services, products, and features.

This Policy applies to all players registered on the nad88 platform who are located in Bangladesh, including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, as well as any individual who visits the nad88 website without registering. By accessing the nad88 platform, registering an account, or using any nad88 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the nad88 Terms & Conditions, which are available at /terms-conditions, and the nad88 Responsible Gaming Policy at /responsible-gaming. In the event of any conflict between this Policy and the Terms & Conditions in respect of data privacy matters, this Policy shall prevail.

nad88 is committed to protecting personal data in accordance with applicable data protection principles, including data minimisation, purpose limitation, storage limitation, data accuracy, integrity, and confidentiality. We take these obligations seriously and embed privacy considerations into every aspect of our platform design and operations.

2 Data Controller Information

For the purposes of this Policy, nad88 acts as the data controller in respect of personal data collected from players using the nad88 platform. As data controller, nad88 determines the purposes for which and the means by which personal data is processed.

For all data-related enquiries, requests to exercise your privacy rights, or complaints regarding our data practices, please contact the nad88 Data Privacy team using the contact details provided in Section 14 of this Policy. nad88 will acknowledge all data-related requests within 5 business days and will endeavour to resolve them within 30 days of receipt.

3 Personal Data We Collect

nad88 collects the following categories of personal data from players:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for age verification — 21+ requirement)
• Bangladesh mobile number (used for account registration, SMS verification, and support)
• Email address
• Residential address in Bangladesh
• National Identity Card (NID) number or passport number (collected during KYC verification)

3.2 Financial & Payment Data

• bKash, Nagad, Rocket, or Upay mobile number associated with your payment account
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other)
• Visa or Mastercard details (card number stored in tokenised form only — full card numbers are never stored on nad88 servers)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references

3.3 Account & Activity Data

• nad88 username and account ID
• Betting history, game history, wagering amounts, and win/loss records
• Bonus claims, wagering progress, and promotional participation records
• Account settings, responsible gaming preferences, and self-exclusion status
• Support ticket history and communications with the nad88 team

3.4 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, browser type and version
• Device fingerprint data (used for fraud detection and duplicate account identification)
• Session data including login times, session duration, and pages visited
• Referral source (how you arrived at nad88.io)

3.5 KYC & Verification Documents

• Scanned or photographed copy of NID, passport, or other government-issued photo identification
• Proof of payment method (e.g., screenshot of bKash account showing registered mobile number)
• Proof of address (where requested)
• Selfie or live photograph (where biometric verification is required)

nad88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request, in which case it is used solely to administer the exclusion and is not shared or used for any other purpose.

4 How We Collect Your Data

nad88 collects personal data through the following channels and methods:

nad88 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the nad88 platform or provide any personal data to nad88. See Section 12 for further details on our approach to minors.

5 Legal Basis for Processing

nad88 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between nad88 and the Player, including account registration, identity verification, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification obligations, fraud reporting duties, and data retention requirements imposed by law.
• Legitimate interests: Processing necessary for the legitimate interests of nad88, including fraud detection and prevention, platform security, improving the nad88 service, and responsible gaming monitoring — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, including sending marketing communications via SMS, email, or WhatsApp. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

nad88 uses the personal data we collect for the following purposes:

• To register and maintain your nad88 account, including verifying your identity and confirming your eligibility to use the platform (21+ age check).
• To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate financial records of all transactions.
• To deliver sports betting markets, live casino, slots, keno, and entertainment products to your account.
• To conduct Know Your Customer (KYC) verification as required prior to processing withdrawals.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited conduct on the nad88 platform.
• To enforce the nad88 Terms & Conditions and to take appropriate action where violations are identified.
• To administer responsible gaming tools including deposit limits, loss limits, time-out periods, and self-exclusion requests.
• To send you transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates.
• To send you promotional communications about nad88 bonuses, offers, and new products — only where you have provided your consent.
• To improve the nad88 platform through analysis of aggregated usage data, game performance metrics, and player feedback.
• To comply with legal obligations including responding to lawful requests from regulatory or law enforcement authorities.

nad88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing an alternative lawful basis for the new processing activity.

7 Data Sharing & Third Parties

nad88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. nad88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

Payment Processors

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are responsible for the security of data within their systems.

KYC & Identity Verification Providers

nad88 uses third-party identity verification services to conduct KYC checks. These providers receive your identity documents and biometric data solely for the purpose of verifying your identity and age. They are contractually prohibited from using this data for any other purpose.

Fraud Prevention & Security Services

nad88 uses fraud detection technology providers who process device fingerprint data, IP addresses, and behavioural signals to identify suspicious activity and protect the platform. Data shared with these providers is used solely for fraud prevention purposes.

Game Content Providers

Third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may process session-level data necessary to deliver their games. These providers do not receive your identity data, payment details, or contact information.

Legal & Regulatory Authorities

nad88 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by law, court order, or lawful regulatory request. nad88 will notify you of any such disclosure where it is legally permissible to do so.

Corporate Transactions

In the event of a merger, acquisition, or sale of all or a portion of nad88's business, personal data held by nad88 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

8 Cookies & Tracking Technologies

The nad88 platform uses cookies and similar tracking technologies to operate the site, improve user experience, detect fraud, and — where you have consented — deliver relevant promotional content. The following types of cookies are used:

• Strictly necessary cookies: Essential for the nad88 platform to function. These cookies enable you to log in, maintain your session, and use core features. They cannot be disabled without preventing you from using the site.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the nad88 platform, such as which pages are visited most often and how long sessions last. This data is used solely to improve platform performance and user experience.
• Fraud detection cookies: Used to generate a device fingerprint that helps nad88 identify suspicious activity, detect duplicate accounts, and protect the platform from fraud and abuse.
• Preference cookies: These cookies remember your account preferences and settings, such as your preferred language and notification preferences, so you do not need to re-enter them on each visit.
• Marketing cookies: Where you have consented to receive marketing communications, these cookies help nad88 understand which promotions are most relevant to you. You may withdraw consent for marketing cookies at any time via your account settings.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the nad88 platform. Disabling other categories of cookies may affect the quality of your experience but will not prevent you from using core platform features.

9 Data Retention

nad88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data cannot be immediately deleted due to technical constraints, it is quarantined and access is restricted pending deletion.

10 Data Security

nad88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data exchanged between your device and nad88 servers is encrypted using 256-bit TLS/SSL protocols. The nad88 platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on nad88 servers, including identity documents and payment references, is stored in encrypted form using AES-256 encryption.
• Access controls: Access to personal data within nad88 is restricted on a strict need-to-know basis. Internal access rights are reviewed regularly and revoked immediately upon staff departure.
• Two-factor authentication (2FA): nad88 supports 2FA for player accounts and requires 2FA for all administrative access to systems containing personal data.
• Fraud detection systems: nad88 employs real-time monitoring to detect unusual account activity, including unusual login patterns, atypical transaction sizes, and other indicators of unauthorised access.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, nad88 will notify affected players promptly, in accordance with applicable law, and will take immediate steps to contain and remediate the breach.
• Vendor security assessments: All third-party service providers who process personal data on behalf of nad88 are subject to security assessments before engagement and are required to maintain security standards consistent with nad88's own requirements.

While nad88 takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system is completely secure. You are responsible for maintaining the confidentiality of your nad88 account credentials. If you suspect that your account has been compromised, contact nad88 support immediately via live chat or email.

11 Your Privacy Rights

As a nad88 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the nad88 support team using the details in Section 14. nad88 will respond to all valid requests within 30 days of receipt and will not charge a fee for exercising your rights in ordinary circumstances.

• Right of access: You have the right to request a copy of the personal data that nad88 holds about you, along with information about how it is used and with whom it is shared. nad88 will provide this information in a structured, commonly used format.
• Right to rectification: If any personal data that nad88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please ensure your account information is kept up to date by contacting support.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent and there is no other lawful basis for processing, or where processing has been unlawful. This right is subject to nad88's legal obligation to retain certain data for defined periods (see Section 9).
• Right to restriction of processing: You have the right to request that nad88 temporarily restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of nad88's legitimate grounds.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to object: You have the right to object to processing of your personal data where nad88 is relying on its legitimate interests as the legal basis for processing. nad88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

If you are not satisfied with nad88's response to your privacy request or believe that your rights have been infringed, you have the right to lodge a complaint with the relevant data protection authority.

12 Children & Minors

The nad88 platform is strictly for individuals aged 21 and above. nad88 does not knowingly collect personal data from, or provide services to, any person under the age of 21. The minimum age requirement is strictly enforced through our KYC verification process.

If nad88 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the nad88 platform, please contact our support team immediately so that we can investigate and take appropriate action.

nad88 strongly supports parental control tools and responsible gaming measures designed to prevent underage access to gambling platforms. For more information, please visit our Responsible Gaming page at /responsible-gaming.

13 Changes to This Policy

nad88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or a prominent notice on the nad88 platform at least 7 days before the changes take effect, except where an immediate change is required for legal or security reasons, in which case the change will take effect immediately upon publication.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how nad88 protects your personal data. Your continued use of the nad88 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

14 Contact & Data Enquiries

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding nad88's data practices, please contact the nad88 Data Privacy team through the following channels:

• Email: [email protected] — subject line: "Privacy Request"
• Live Chat: Available 24/7 via the nad88 platform support widget
• Response Time: Initial acknowledgement within 5 business days; full response within 30 days of receipt
• Operating Hours: Support available 24/7, Bangladesh Standard Time (BST, UTC+6)

When submitting a data access, rectification, or erasure request, please provide sufficient information to allow nad88 to verify your identity and locate your account. nad88 may ask for additional verification before processing requests to ensure that data is only disclosed to, or acted upon by, the account holder.

All privacy communications with nad88 are conducted in English. nad88 operates on Bangladesh Standard Time (BST, UTC+6) and provides support coverage on all Bangladesh public holidays.