nagad8 Privacy Policy

1. Overview

This Privacy Policy applies to all services provided by nagad8 through the website at nagad8.biz and any related mobile-optimised versions of the platform. It governs the collection, processing, storage, and disclosure of personal data belonging to users who access the nagad8 platform from Bangladesh and other territories.

By registering an account with nagad8, completing the identity verification process, making a deposit, or otherwise using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the nagad8 platform.

This Privacy Policy should be read alongside the nagad8 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a matter of data privacy, this Privacy Policy shall take precedence.

2. Data Controller

nagad8 acts as the data controller for all personal data collected through the nagad8 platform. As data controller, nagad8 determines the purposes for which personal data is collected and the means by which it is processed. All data protection enquiries, requests to exercise data subject rights, and privacy-related complaints should be directed to the nagad8 data protection contact at [email protected].

Where nagad8 engages third-party service providers to process personal data on its behalf — such as payment processors or identity verification providers — those providers act as data processors and are bound by contractual obligations that require them to process data only in accordance with nagad8's instructions and to maintain appropriate technical and organisational security measures.

3. Data We Collect

nagad8 collects personal data across the following categories:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph	Yes — for KYC verification
Contact Data	Mobile number, email address, residential address in Bangladesh	Yes — for account registration
Financial Data	bKash/Nagad/Rocket/Upay mobile number, transaction reference numbers, deposit and withdrawal amounts in ৳	Yes — for payment processing
Account Data	Username, hashed password, account balance, betting history, game session logs, bonus history	Yes — for platform operation
Technical Data	IP address, browser type and version, device type, operating system, screen resolution, time zone	Collected automatically
Usage Data	Pages visited, games played, session duration, click patterns, search queries within the platform	Collected automatically
Communications Data	Support chat transcripts, email correspondence, complaint records	When you contact support
Responsible Gaming Data	Deposit limits set, cooling-off periods activated, self-exclusion requests, risk assessment flags	When tools are used

nagad8 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is contained in a government-issued identity document submitted for KYC purposes. Where an identity document incidentally contains such information, it is used solely for identity verification and is not processed for any other purpose.

4. How We Collect Your Data

4.1 Directly From You

The majority of personal data nagad8 holds is provided directly by you at the point of account registration, during the KYC identity verification process, when making deposits or withdrawal requests via bKash, Nagad, Rocket, or Upay, when contacting our support team, or when completing any form or survey on the platform.

4.2 Automatically Through Platform Use

When you access the nagad8 platform, our servers automatically record certain technical and usage data. This includes your IP address, the pages and games you access, the duration of your sessions, the device and browser you use, and error logs generated during your session. This data is collected using server logs, cookies, and similar tracking technologies described in Section 10 of this Policy.

4.3 From Third-Party Service Providers

nagad8 may receive supplementary data about you from third-party partners engaged to support platform operations. This includes identity verification providers who confirm the authenticity of documents submitted during KYC, fraud detection agencies that provide risk scores based on device fingerprinting and behavioural patterns, and payment processors who confirm the status of financial transactions. Data received from these sources is used only for the specific purposes for which it was obtained and is not combined with your profile data for marketing purposes.

5. Legal Basis for Processing

nagad8 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and nagad8 — including operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legitimate Interests: Processing necessary for nagad8's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality and performance of the platform — provided those interests are not overridden by your data protection rights.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, record-keeping requirements, and responding to lawful requests from competent authorities.
• Consent: Where nagad8 relies on your consent to process data — for example, for sending optional promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

6. Purposes of Processing

nagad8 uses the personal data it collects for the following purposes:

• Creating, managing, and maintaining your nagad8 account, including processing your registration information and verifying your identity through the KYC process.
• Processing financial transactions — deposits via bKash, Nagad, Rocket, and Upay, and withdrawal requests — and maintaining accurate records of your account balance and transaction history.
• Settling bets, resolving game outcomes, calculating winnings, and crediting or debiting your account balance accordingly.
• Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other forms of prohibited conduct as defined in the nagad8 Terms & Conditions.
• Complying with applicable AML and know-your-customer obligations, including filing reports with competent authorities where legally required.
• Administering responsible gaming tools — including deposit limits, cooling-off periods, and self-exclusion — and monitoring account activity for signs of problem gambling behaviour.
• Providing customer support and resolving complaints, disputes, and account enquiries submitted to the nagad8 support team.
• Sending transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — to your registered email address or mobile number.
• Sending promotional and marketing communications where you have provided consent to receive them, including information about bonuses, tournaments, and seasonal promotions relevant to Bangladesh.
• Analysing platform usage data in aggregate and anonymised form to improve the design, performance, and content of the nagad8 platform.

7. Data Sharing & Disclosure

7.1 Payment Processors

To process deposits and withdrawals, nagad8 shares the minimum necessary financial and identity data with the relevant mobile financial service — bKash, Nagad, Rocket, or Upay — as required to authenticate and complete the transaction. nagad8 does not store full payment credentials on its own servers.

7.2 Identity Verification Providers

During the KYC process, copies of identity documents you submit are shared with third-party identity verification providers. These providers are contractually bound to use your documents solely for the purpose of verifying your identity for nagad8 and to delete or return documents once verification is complete.

7.3 Fraud Prevention and Security Services

nagad8 may share technical data — including IP addresses, device identifiers, and behavioural session data — with specialist fraud prevention and cybersecurity service providers to detect and prevent fraudulent activity, account takeovers, and money laundering. This sharing is conducted on the basis of nagad8's legitimate interests in maintaining a secure platform.

7.4 Legal and Regulatory Disclosure

nagad8 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent public authorities where required to do so by applicable law, court order, or binding legal process. nagad8 will, where permitted by law, notify you of any such disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring affecting all or part of nagad8's business, personal data held by nagad8 may be transferred to the acquiring or successor entity. You will be notified of any such transfer and of any change to the data controller identity that results from it.

7.6 No Sale of Data

nagad8 does not sell, rent, lease, or otherwise trade your personal data to any third party for that party's own marketing or commercial purposes. This commitment applies regardless of the value of the data or the commercial relationship between nagad8 and the third party.

8. Data Retention

nagad8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to comply with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations.
• Betting and Game History: Retained for three (3) years following the date of the bet or game session, or for the duration of any unresolved dispute related to that activity, whichever is longer.
• Support Communications: Retained for two (2) years from the date of resolution of the relevant support case.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and may be retained indefinitely for statistical analysis.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediate — for example, data held in backup systems — nagad8 takes reasonable steps to isolate that data from active processing until it can be permanently deleted.

9. Data Security

nagad8 implements a comprehensive set of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, and destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the nagad8 servers is encrypted using industry-standard SSL/TLS protocols. This applies to all platform pages, payment flows, and API communications.
• Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes. nagad8 support staff cannot retrieve or view your password in plain text.
• Access Controls: Access to personal data within nagad8's internal systems is restricted to personnel who require it for their specific role. All internal access is logged, monitored, and subject to periodic review.
• Fraud Monitoring: Automated systems monitor account activity and financial transactions around the clock for patterns indicative of unauthorised access, account takeover attempts, or financial crime.
• Penetration Testing: nagad8's platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Data Minimisation: nagad8 collects only the personal data strictly necessary for the purposes described in this Policy. Payment instrument details — such as bKash mobile numbers — are masked in logs and never stored in full beyond what the payment provider requires for transaction processing.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that poses a risk to your rights and freedoms, nagad8 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and browsing behaviour — to improve your experience on subsequent visits.

10.2 Types of Cookies Used by nagad8

• Strictly Necessary Cookies: Essential for the operation of the nagad8 platform. They enable core functions such as maintaining your logged-in session, processing transactions, and ensuring platform security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences and settings — such as your preferred language and display options — to provide a more personalised experience across sessions.
• Analytical Cookies: Used in anonymised or aggregated form to understand how users interact with the nagad8 platform — which pages are visited most frequently, where users encounter errors, and how session flows can be improved.
• Security Cookies: Used to detect fraudulent activity, prevent account takeovers, and support the integrity of the authentication process.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from using core features of the nagad8 platform, including logging in and making transactions.

11. Your Data Rights

Subject to applicable law, you hold the following rights in relation to the personal data nagad8 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". nagad8 will respond to all verified requests within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data nagad8 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by nagad8. You may also update certain information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where it has been processed unlawfully — subject to nagad8's legal obligation to retain certain records for defined periods.
• Right to Restriction: You have the right to request that nagad8 restrict the processing of your personal data while a dispute regarding its accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of nagad8's legitimate interests, including profiling for fraud detection purposes. nagad8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12. Protection of Minors

nagad8 is strictly an adults-only platform. Registration is open exclusively to individuals who are eighteen (18) years of age or older. nagad8 does not knowingly collect personal data from any person under the age of eighteen. If nagad8 becomes aware that personal data belonging to a minor has been collected, that data will be permanently deleted immediately, the associated account will be closed, and any deposited funds will be returned to the payment source.

Parents and guardians who believe their child may have created an account on nagad8 are encouraged to contact the support team immediately at [email protected]. nagad8 treats such reports as a matter of the highest priority and will act on them within twenty-four hours of receipt.

nagad8 also recommends that parents and guardians install parental control software on shared devices to prevent access to gambling websites by persons under eighteen. Responsibility for supervising minors' access to online content ultimately rests with the parent or guardian in the household.

13. Changes to This Privacy Policy

nagad8 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, nagad8 will notify registered users through one or more of the following channels: a notification displayed on your next login, an email to your registered address, or a prominent notice on the nagad8 website.

The updated Policy will indicate the effective date at the top of the document. Your continued use of the nagad8 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account in accordance with the procedure described in the nagad8 Terms & Conditions.

nagad8 recommends that you review this Privacy Policy periodically. Previous versions of this document are available upon written request to [email protected].

14. Contact Us

All privacy-related enquiries, data rights requests, and complaints should be addressed to the nagad8 data protection team through the following contact:

Email: [email protected]
Subject Line: Privacy Enquiry / Data Rights Request
Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries
Support Hours: 24 hours a day, 7 days a week

If you are dissatisfied with nagad8's response to a privacy complaint and believe that your data has been processed in a manner that violates applicable data protection law, you have the right to escalate your complaint through the appropriate legal channels available in your jurisdiction.