nagad Privacy Policy

1 Introduction

nagad has been serving Bangladeshi players since 2020, offering cricket betting, live casino, slot games, crash games, and fishing game titles through a single, secure platform. As a platform that handles financial transactions and personal information, we are committed to the highest standards of data protection and user privacy.

This Policy has been drafted to be clear, comprehensive, and accessible to all players — whether you are a new visitor exploring nagad for the first time, or a long-standing account holder who wants to understand exactly how your data is managed. We encourage you to read it in full and to contact us if any section is unclear.

2 Data We Collect

nagad collects personal data through several channels and processes it for specific, documented purposes. The categories of data we collect are set out in the table below.

We do not knowingly collect special category data (e.g., health information, racial or ethnic origin, religious beliefs, political opinions) through the nagad platform. If you voluntarily disclose such information in support communications, it will be treated with the utmost confidentiality and used only to resolve your query.

3 How We Use Your Data

nagad processes your personal data for the following documented purposes only:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and process account closure requests.
• Transaction processing: To facilitate deposits, withdrawals, and bonus credits through your chosen payment method (bKash, Nagad, Rocket, Upay, bank cards, etc.) and to maintain accurate transaction records.
• Age and identity verification (KYC): To confirm that you meet the 18+ age requirement and that the identity associated with your account and payment methods is genuine. This is a legal and responsible gaming obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor betting patterns for indicators of problem gambling, to apply self-imposed limits set by the player, and to fulfil our duty-of-care obligations under our Responsible Gaming Policy.
• Customer support: To respond to your queries, complaints, and requests for account assistance in a timely and effective manner.
• Platform improvement: To analyse aggregated usage data and identify technical issues, improve game offerings, and optimise the user experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law-enforcement bodies, and maintain records as required by applicable financial regulations.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and platform updates via email or SMS where you have given your explicit consent. You may withdraw this consent at any time — see Section 9.

4 Legal Basis for Processing

Every processing activity nagad conducts is grounded in one or more of the following legal bases:

1. Contractual necessity: Processing required to perform the contract we hold with you — i.e., the Terms & Conditions you accepted when you created your nagad account. This covers account management, transaction processing, and core platform operation.
2. Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, age-verification duties, and responses to lawful governmental requests.
3. Legitimate interests: Processing carried out for nagad's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your privacy rights. We conduct a balancing assessment before relying on this basis.
4. Consent: Processing that is conditional on your freely given, specific, and informed consent — primarily marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

5 Data Sharing & Third Parties

nagad does not sell, rent, or trade your personal data. We share data only with the categories of third party listed below, and only to the extent necessary for each stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposit and withdrawal transactions. Each provider operates under its own privacy notice and applicable financial regulations.
• Identity verification providers: Third-party KYC services used to verify your identity, age, and the authenticity of documents submitted during account verification. These providers are contractually bound to use your data only for the verification purpose.
• Game providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised player identifiers to facilitate game sessions and report outcomes. They do not receive your full name, contact details, or financial data.
• Fraud prevention and security services: Specialist providers that help nagad identify suspicious activity, bot behaviour, and patterns consistent with money laundering or multi-accounting. Data shared is the minimum necessary to perform fraud analysis.
• Regulatory and law-enforcement authorities: Where nagad is legally compelled to disclose information — for example, in response to a court order, a regulatory inspection, or a lawful request from a Bangladeshi governmental authority — we will comply after verifying the legal validity of the request.
• IT and infrastructure service providers: Hosting companies, cloud storage providers, and cybersecurity vendors who process data on nagad's behalf under strict data processing agreements that prohibit independent use.

6 Cookies & Tracking

nagad uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate and improve the platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit displays. Disabling these will not prevent you from using the platform but may reduce convenience.
• Analytics cookies: Collect anonymised data about how players interact with nagad — such as which pages are most visited and where errors occur — to help us improve the platform. We use aggregated, non-personally-identifiable reports.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content. These cookies track whether you have been shown a particular offer and whether you engaged with it.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. For analytics and marketing cookies, you may update your consent preference by contacting our support team.

7 Data Retention

nagad retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention schedule is as follows:

Once the relevant retention period expires, data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymisation is not technically feasible within a specific storage system, data is instead pseudonymised and access-restricted pending deletion at the next scheduled purge cycle.

8 Data Security

nagad implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS encryption: All data exchanged between your device and nagad's servers is encrypted in transit using TLS 1.2 or higher. Our HTTPS implementation is verified with an industry-standard SSL certificate.
• Password hashing: User passwords are never stored in plain text. We use a strong, salted hashing algorithm. If you forget your password, a reset link is issued — we cannot recover your original password because it is not stored.
• Access controls: Internally, access to personal data is governed by the principle of least privilege. Staff members only access the data they need to perform their specific role. Access logs are maintained and regularly audited.
• Two-factor authentication: Where available, nagad supports two-factor authentication on player accounts to add a second layer of protection beyond username and password.
• Regular security testing: nagad conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses before they can be exploited.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, nagad will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

9 Your Rights

As a data subject, you hold meaningful rights over the personal data nagad processes about you. These rights are summarised below. To exercise any of them, contact our support team at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days:

• Right of access: You may request a copy of all personal data nagad holds about you, along with information about how it is being processed. We will provide this in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account details (such as contact information) can often be updated directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to exceptions for legal obligations — for example, financial records that we are required by law to retain cannot be erased on request.
• Right to restriction of processing: You may ask us to restrict how we use your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. For direct marketing, your objection will be honoured immediately and unconditionally.
• Right to withdraw consent: Where nagad processes your data on the basis of consent (most commonly for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

nagad will not charge a fee for handling data rights requests in ordinary circumstances. However, we reserve the right to charge a reasonable administrative fee or decline to act on requests that are manifestly unfounded or excessive.

10 Children's Privacy

nagad strictly enforces an 18-and-over access policy across the entire platform. The service is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately close the account, void all associated transactions, and securely delete the personal data associated with that account to the extent not required to be retained for fraud investigation or legal compliance purposes.

Parents and guardians are encouraged to use internet content filtering tools to prevent minors from accessing gambling platforms. If you believe a minor has created an account on nagad, please contact us immediately at [email protected] so we can take swift action.

11 International Transfers

nagad primarily processes and stores personal data within its operational infrastructure. In some cases, data may be transferred to or accessed by service providers (such as game studios, KYC providers, or cloud infrastructure vendors) whose systems are located outside Bangladesh. When such transfers occur, nagad ensures that adequate safeguards are in place — including contractual clauses that require the recipient to protect your data to a standard equivalent to that described in this Policy.

nagad does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual or technical safeguards. If you have questions about specific transfers, contact us at [email protected].

12 Changes to This Policy

nagad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make a material change to this Policy, we will notify you by posting a prominent notice on the nagad.bio platform and, where we hold a valid email address for you, by sending a notification to that address at least 14 days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how nagad protects your personal data. Your continued use of the platform after a notified change takes effect constitutes your acknowledgement of the revised Policy.

If you disagree with any changes to this Policy, you have the right to close your account and request erasure of your personal data (subject to the retention obligations described in Section 7). To do so, contact our support team at [email protected].

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nagad handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, 365 days a year.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Within 30 days for data rights requests; within 48 hours for general privacy queries.
• Operating hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

The full text of this Privacy Policy is always available at nagad.bio/privacy-policy. We recommend bookmarking this page and reviewing it whenever you receive a change notification from us.