Privacy Policy — naga 888

1. Information We Collect

naga 888 collects personal data that is necessary to operate a safe, fair and legally compliant online gaming platform for players based in Bangladesh. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically when you use our services, and occasionally from trusted third-party sources as part of our identity verification process.

1.1 Information You Provide Directly

When you create a naga 888 account or engage with our support team, you may provide the following categories of personal data:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, National Identity Card (NID) number, passport number	Account registration; KYC verification
Contact Data	Email address, mobile phone number, residential address (division, district, upazila)	Account registration; account settings
Financial Data	bKash wallet number, Nagad wallet number, Rocket account number, Upay account number, bank account details, transaction history	Deposit or withdrawal request
Verification Documents	Photo of NID ( front and back), passport scan, utility bill, bKash/Nagad transaction screenshot	KYC verification process
Support Communications	Email correspondence, chat transcripts, complaint details	When you contact our support team

1.2 Information Collected Automatically

When you access the naga 888 platform, our systems automatically record certain technical data about your device and session. This data is used to ensure platform security, prevent fraud, and improve our services:

• Device Data: Device type, operating system version, browser type and version, screen resolution, device language settings.
• Network Data: IP address, internet service provider (ISP), approximate geolocation derived from IP (city/region level only — not GPS-level precision).
• Usage Data: Pages visited, games played, bet amounts and outcomes, session start and end times, features used, links clicked within the platform.
• Cookie and Tracking Data: Session cookies, persistent cookies, pixel tags and similar technologies as described in Section 4 of this Policy.

1.3 Information from Third Parties

In some circumstances, naga 888 may receive personal data about you from third-party sources, including identity verification service providers, fraud detection agencies, and payment processors such as bKash, Nagad and Rocket. Data received from these sources is used solely for the purposes described in this Policy and is handled with the same level of care as data you provide directly.

2. How We Use Your Data

naga 888 processes your personal data only for legitimate, specified purposes. We do not sell your personal data to third parties for their own marketing purposes. The table below sets out the primary purposes for which we use your data and the lawful basis for each:

Purpose	Data Used	Lawful Basis
Creating and managing your account	Identity, Contact	Contract performance
Processing deposits and withdrawals	Financial, Identity	Contract performance
Age verification and KYC compliance	Identity, Verification Documents	Legal obligation
Fraud prevention and platform security	Network, Usage, Financial	Legitimate interests
Responsible gaming monitoring	Usage, Financial	Legal obligation; legitimate interests
Customer support and dispute resolution	Identity, Contact, Support Communications	Contract performance; legitimate interests
Sending account-related notifications	Contact	Contract performance
Sending promotional communications (opt-in only)	Contact, Usage	Consent
Platform analytics and service improvement	Usage, Device, Cookie	Legitimate interests

2.1 Marketing Communications

naga 888 will only send you promotional emails, SMS messages or in-platform notifications about bonuses, tournaments, seasonal offers (such as those tied to Eid-ul-Fitr, the Bangladesh Premier League or Pohela Boishakh) if you have expressly opted in to receive such communications during registration or via your account notification settings. You may withdraw your marketing consent at any time by updating your preferences in your account dashboard or by contacting our support team at [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

naga 888 uses automated systems to detect patterns consistent with fraudulent activity, bonus abuse, underage gambling and problem gambling behaviour. Where an automated process triggers a restriction on your account (such as a deposit limit or temporary suspension), you have the right to request human review of that decision by contacting our support team. We will respond to such requests within 5 business days (Bangladesh Standard Time, UTC+6).

3. Data Sharing & Third Parties

naga 888 does not sell, rent or trade your personal data. We share your data only where it is strictly necessary to deliver our services, meet our legal obligations or protect the safety of our platform. The categories of recipients with whom we may share your data are set out below.

3.1 Payment Processors

To process your deposits and withdrawals, naga 888 shares the minimum necessary financial and identity data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, Islami Bank and Sonali Bank. Each of these partners operates under its own data protection obligations and is contractually prohibited from using your data for any purpose other than processing the specific transaction.

3.2 Identity Verification Providers

naga 888 uses third-party KYC (Know Your Customer) service providers to verify the identity documents you submit during the account verification process. These providers receive only the data necessary to perform verification (for example, a scan of your NID or passport) and are not permitted to retain or process your data beyond the scope of that verification task.

3.3 Game Studio Partners

Games in the naga 888 lobby are supplied by licensed studios including Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming, Ezugi and Spribe. When you play a game, certain session data (such as your player session token and game round results) is transmitted to the relevant studio's servers to render gameplay and calculate outcomes. This data does not include your full identity or financial details. All studio partners are contractually bound to process session data solely for game operation purposes.

3.4 Analytics Providers

naga 888 uses analytics tools to understand how players navigate the platform, which features are most used and where technical issues arise. Analytics providers receive anonymised or pseudonymised usage data only — your name, NID, financial account numbers and other directly identifying information are never transmitted to analytics services.

3.5 Law Enforcement and Regulatory Bodies

naga 888 may disclose your personal data to law enforcement agencies, government authorities or regulatory bodies in Bangladesh or other relevant jurisdictions where we are legally required to do so, where we receive a valid court order, or where disclosure is necessary to prevent or investigate fraud, money laundering, underage gambling or other unlawful activity. Such disclosures are made without prior notice to the account holder where legally required.

4. Cookies & Tracking Technologies

naga 888 uses cookies and similar tracking technologies on the naga-888.net website to maintain your session, remember your preferences, prevent fraud and gather anonymised analytics data that helps us improve the platform experience for all players in Bangladesh.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent cross-site request forgery, load-balance server requests	Session (deleted on browser close)
Functional	Remember your language preference, notification settings and last-visited game category	Up to 12 months
Analytics	Collect anonymised data on page visits, session duration, game interaction patterns and error occurrences	Up to 24 months
Security	Detect suspicious login patterns, identify devices associated with known fraud signals	Up to 6 months

4.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your naga 888 account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play games or process transactions but may result in a reduced personalisation experience. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari and Samsung Internet.

5. Data Retention

naga 888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce our agreements. The following retention periods apply as a general guide:

• Account data (identity, contact, financial): Retained for the duration of your account and for a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last communication in a thread, or longer if the communication relates to an unresolved dispute.
• Usage and analytics data: Retained in anonymised or aggregated form for up to 24 months; directly identifying usage logs are deleted or anonymised within 12 months.
• Marketing consent records: Retained for as long as you hold a naga 888 account, and for 3 years after account closure as evidence of consent or withdrawal of consent.

When personal data is no longer required, naga 888 securely destroys or permanently anonymises it using industry-standard data disposal processes.

6. Data Security

naga 888 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security programme includes the following controls:

6.1 Technical Measures

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and our servers.
• Encryption at rest for stored personal and financial data using AES-256 or equivalent standards.
• Two-factor authentication (2FA) available to all player accounts and mandatory for all naga 888 staff accounts.
• Firewall and intrusion detection systems monitoring platform traffic for anomalous patterns around the clock.
• Regular penetration testing conducted by independent third-party security specialists.
• Payment credential isolation: bKash PINs, Nagad PINs and bank internet-banking passwords are never stored on or transmitted through naga 888 servers — authentication occurs directly within each provider's secure gateway.

6.2 Organisational Measures

• Access to personal data is restricted to naga 888 staff and contractors who require it to perform their specific job functions.
• All staff with access to personal data receive mandatory data protection training upon onboarding and annually thereafter.
• Third-party data processors are subject to contractual data protection obligations and periodic security assessments before and during their engagement with naga 888.

7. Your Privacy Rights

As a player based in Bangladesh, you hold a number of rights in relation to your personal data held by naga 888. We are committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, please contact our support team at [email protected] with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of the personal data naga 888 holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 calendar days.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data fields (such as your email address or mobile number) directly from your account settings. For changes to identity data (such as your legal name or date of birth), you will be required to submit supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies) or where you object to processing and there are no overriding legitimate grounds. Please note that naga 888 may be legally required to retain certain categories of data (particularly transaction records and KYC documents) for regulatory compliance periods even after account closure, as described in Section 5.

7.4 Right to Restrict Processing

You may request that naga 888 restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data or while your objection to processing is being considered.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format (such as CSV or JSON), and to request that it be transmitted to another service provider where technically feasible.

7.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving such an objection, naga 888 will cease all marketing communications to you without delay. This does not affect transactional communications that are necessary for the operation of your account (such as deposit confirmations, security alerts and withdrawal notifications).

8. Policy Updates & Contact

naga 888 reviews this Privacy Policy periodically to ensure it accurately reflects our data processing practices and remains consistent with applicable legal requirements. The most current version of this Policy is always available at naga-888.net/privacy-policy. The version number and effective date at the top of this document indicate when the current version was last published.

8.1 Notification of Material Changes

Where we make material changes to this Privacy Policy — meaning changes that significantly alter how we collect, use or share your personal data — we will notify registered players by email to the address on file at least 14 calendar days before the updated Policy takes effect. Non-material changes (such as clarifications, grammatical corrections or updated contact details) will take effect upon publication without prior individual notice.

8.2 Children's Privacy

The naga 888 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that a minor has created an account or submitted personal data, we will immediately suspend the account, delete the associated data and, if appropriate, report the matter to the relevant authorities. If you believe a minor has registered with naga 888, please notify us immediately at [email protected].

8.3 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the way naga 888 processes your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Operating hours: 24 hours a day, 7 days a week — including Eid, Victory Day (16 December) and Independence Day (26 March)
• Response language: English
• Time zone: Bangladesh Standard Time (BST, UTC+6)