najee Privacy Policy

1. Information We Collect

najee collects personal data from you in the course of operating our platform and providing our services. The categories of data we collect, and the circumstances in which we collect them, are described below.

Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with promotions, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and nationality as shown on your Bangladesh National Identity Card (NID) or passport.
• Contact data: Email address, Bangladesh mobile phone number, and residential address.
• Identity verification documents: Scanned copies or photographs of your NID, passport, or other government-issued identity document, together with proof of address documents.
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details, or card details (Visa / Mastercard). Note that full card numbers are not stored by najee — card payments are processed by PCI-DSS certified third-party payment processors.
• Account credentials: Username and encrypted password hash. najee does not store passwords in plain text.
• Communication records: Records of your correspondence with our support team via live chat or email, including the content of your messages.

Data Collected Automatically

When you access and use the najee platform, certain technical and behavioural data is collected automatically through our systems and through cookies and similar technologies:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, clicks, navigation paths, game sessions played, bet history, deposit and withdrawal transaction history, and login timestamps.
• Location data: Approximate geographic location derived from your IP address. najee does not collect precise GPS location data.
• Cookie data: Data collected via cookies, pixel tags, and similar tracking technologies as described in Section 5 of this Policy.

Data from Third Parties

We may receive personal data about you from third parties in limited circumstances, including:

• Identity verification service providers used to validate your KYC documents.
• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm the status of your payment transactions.
• Fraud detection and anti-money laundering (AML) service providers who may flag accounts or transactions for review.

2. How We Use Your Data

najee uses the personal data we collect for the following purposes. We will not use your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your consent.

Marketing Communications

If you have provided consent during registration or subsequently opted in, najee may contact you with promotional information about bonuses, free bets, seasonal offers (including BPL season promotions, Eid specials, and Pohela Boishakh offers), and new platform features. You may withdraw your consent to marketing communications at any time without affecting your ability to use the platform. To opt out, contact our support team via live chat.

3. Legal Basis for Processing

najee processes your personal data on one or more of the following legal bases, depending on the purpose for which the data is being used:

• Contractual necessity: Processing required to perform the contract between you and najee — for example, operating your account, processing payments, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining financial records, conducting AML checks, and fulfilling age verification obligations.
• Legitimate interests: Processing carried out in pursuit of najee's legitimate business interests where those interests are not overridden by your fundamental rights — for example, fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending marketing communications. You may withdraw consent at any time without detriment.

4. Data Sharing and Disclosure

najee does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

najee engages third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard acquiring banks — for the purpose of processing deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party providers used to validate identity documents and confirm age eligibility.
• Fraud and AML monitoring services: Providers who analyse transaction patterns and behavioural signals to detect suspicious activity.
• Game software providers: Including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — who may receive anonymised session data necessary for game operation and fairness auditing.
• Cloud infrastructure and security providers: Who host and protect najee's platform infrastructure.

All third-party processors are contractually bound to process personal data only in accordance with our instructions, to maintain appropriate security standards, and to keep your data strictly confidential.

Legal and Regulatory Disclosure

najee may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies in Bangladesh and internationally where we are legally required to do so — for example, in response to a valid court order, or in connection with an investigation into suspected fraud, money laundering, or match-fixing. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation.

Business Transfers

In the event that najee undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by najee may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the email address on your account prior to the transfer taking effect, and the successor entity will be required to honour the commitments made in this Privacy Policy.

5. Cookies and Tracking Technologies

najee uses cookies and similar technologies to operate and improve our platform. Cookies are small text files placed on your device when you visit a website. They serve several distinct functions on the najee platform:

Types of Cookies We Use

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that blocking strictly necessary cookies will prevent you from logging in to your najee account and using core platform features. Detailed instructions for managing cookies are available in the help documentation of your browser.

najee does not use third-party advertising or retargeting cookies. We do not serve personalised advertisements via third-party ad networks.

6. Data Security Measures

najee takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the najee platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock indicator in your browser confirms this encryption is active.
• Encryption at rest: Sensitive personal data, including identity documents and financial data, is stored in encrypted form on secured servers.
• Password hashing: Account passwords are never stored in plain text. We use modern one-way cryptographic hashing algorithms to store password credentials securely.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised najee personnel with a legitimate operational need may access identifiable personal data, and all such access is logged and monitored.
• Two-factor authentication (2FA): najee supports two-factor authentication for account login. We strongly encourage all account holders to enable 2FA to add a second layer of protection to their account.
• Fraud monitoring: Automated systems continuously monitor account activity, transaction patterns, and login behaviour for signs of unauthorised access or fraudulent activity. Alerts are reviewed by our security team on a 24/7 basis.
• Penetration testing and security audits: Our platform undergoes regular security assessments conducted by independent specialists to identify and remediate vulnerabilities proactively.

While najee implements robust security measures, no system is completely immune to risk. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, najee will notify affected account holders promptly and take all necessary steps to contain and remediate the breach.

7. Data Retention and Deletion

najee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the najee platform.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering obligations applicable to financial services platforms operating in the Bangladesh market.
• KYC identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer support communication records: Retained for three (3) years from the date of the interaction, to allow for dispute resolution and service quality review.
• Analytics and usage data: Retained in anonymised or aggregated form for up to twenty-four (24) months for the purpose of platform improvement analysis.
• Marketing consent records: Retained for as long as you hold a najee account, or until you withdraw consent, whichever comes first. Records of withdrawn consent are retained for three (3) years to demonstrate compliance.

Account Closure and Data Deletion

Upon voluntary closure of your najee account, we will cease active use of your personal data for marketing and profiling purposes immediately. Certain categories of data — particularly identity documents and financial records — will be retained for the minimum periods required by law, as described above. After the applicable retention period expires, your data will be securely deleted or irreversibly anonymised.

To request deletion of personal data that is not subject to a mandatory legal retention period, please contact our support team via live chat. We will respond to deletion requests within a reasonable timeframe and inform you of any data that cannot be deleted due to legal obligations.

8. Your Rights Over Your Data

As a najee account holder whose personal data we process, you have the following rights. To exercise any of these rights, contact our support team via live chat. We will not charge a fee for reasonable requests and will respond within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal data najee holds about you, together with information about how that data is being processed. This is commonly referred to as a Subject Access Request (SAR).

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account details such as your email address or phone number, you may also update these directly through your account settings where the platform permits.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no legitimate legal basis for continued retention. This right is subject to overriding legal retention obligations, as described in Section 7.

Right to Restrict Processing

In certain circumstances — for example, while the accuracy of your data is being verified — you have the right to request that we restrict our processing of your personal data to storage only.

Right to Object

You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. You also have an unconditional right to object to processing for direct marketing purposes at any time.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to najee in a structured, commonly used, machine-readable format.

9. Contact and Complaints

Contacting najee About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which najee processes your personal data, please contact our support team. The preferred method of contact is via the live chat feature available on the najee platform, which is monitored 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6). All support is provided in English.

You may also contact us by email at the following address (plain text — not a clickable link): [email protected]

Changes to This Privacy Policy

najee reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered account holders via the email address associated with their account prior to the changes taking effect. The "Effective Date" displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed of how we protect your data.