Your privacy matters deeply to ndajee. This Privacy Policy explains exactly what personal data we collect when you use the ndajee platform, why we collect it, how it is stored and protected, and the rights you hold over your own information. We are committed to handling your data with full transparency and the highest standards of security.
This Privacy Policy ("Policy") describes how ndajee ("we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your", "the Player") who access and use the ndajee website at https://ndajee.biz and all associated services (collectively, the "Platform").
ndajee is an online casino and sports betting platform serving the Bangladesh market. We are committed to protecting your personal data in accordance with sound data-handling principles. This Policy is incorporated by reference into our Terms & Conditions, and by registering an account or using the Platform, you acknowledge that you have read and understood this Policy.
If you have questions about how ndajee handles your personal data, you may contact our Data Protection contact at any time via live chat or by email at support@ndajee.biz. This email address is provided as plain text and is not a clickable link.
For the purposes of this Privacy Policy, ndajee acts as the data controller with respect to the personal information collected through the Platform. This means ndajee determines the purposes and means of processing your personal data. All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the ndajee support team using the contact details set out in Section 14 of this Policy.
ndajee collects the following categories of personal data from users of the Platform:
ndajee collects personal data through the following means:
ndajee processes your personal data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we use your data and the corresponding legal basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, login data | Performance of contract |
| KYC identity and age verification | Identity documents, selfie, NID/passport | Legal obligation; legitimate interest |
| Processing deposits and withdrawals | Financial and transaction data | Performance of contract |
| Fraud prevention and AML compliance | Transaction history, IP address, device data | Legal obligation; legitimate interest |
| Responsible gaming monitoring | Gameplay data, betting history, limit settings | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Performance of contract; legitimate interest |
| Platform security and abuse prevention | Technical data, session data, login history | Legitimate interest |
| Promotional communications (where opted in) | Contact data, gameplay preferences | Consent |
| Platform analytics and improvement | Anonymised technical and usage data | Legitimate interest |
Where we rely on your consent as a legal basis (for example, for promotional email communications), you have the right to withdraw that consent at any time by updating your notification preferences within your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
ndajee does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We may share your personal data with third parties only in the following limited circumstances:
We share the minimum data necessary to process your financial transactions with our payment partners, including bKash, Nagad, Rocket, Upay, and our banking partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers act as independent data controllers with respect to the payment transaction and are subject to their own privacy policies.
Where ndajee uses a third-party identity verification service to process KYC documents, your identity documents and related data are shared with that provider solely for the purpose of completing the verification. These providers are contractually prohibited from using your data for any other purpose.
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their game content to you. These providers do not receive your full personal profile, financial data, or KYC documents.
ndajee may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.
We engage third-party service providers to assist with platform operations, including cloud hosting, email delivery, analytics, and customer support tooling. These providers act as data processors and are bound by data processing agreements that restrict their use of your data to the specific service they provide to ndajee.
ndajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints, the data is isolated and protected from further active processing until deletion can be completed.
ndajee takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:
While ndajee employs industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, ndajee will notify affected users as promptly as possible and take all reasonable steps to contain and remediate the breach.
The ndajee Platform uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device when you visit a website. ndajee uses the following categories of cookies:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, CSRF protection. These cookies are essential for the Platform to function and cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering user preferences such as language settings and responsible gaming tool configurations. | Up to 12 months |
| Analytics | Anonymised data on page visits, navigation paths, and feature usage — used to improve Platform performance and user experience. No personally identifiable data is shared with analytics providers. | Up to 24 months |
ndajee does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in to your account.
As a user of the ndajee Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or email at support@ndajee.biz. We will respond to all valid requests within 30 days.
Please note that some requests — particularly erasure requests — may affect your ability to continue using the Platform, as certain data is essential for account maintenance and legal compliance. ndajee will explain any such implications before processing a deletion request.
The ndajee Platform is strictly intended for adults aged 18 years and above. ndajee does not knowingly collect personal data from any person under the age of 18. Mandatory KYC verification is required before any account becomes fully active, and age verification forms a core component of that process.
If ndajee discovers or has reasonable grounds to believe that a registered account belongs to a person under 18, the account will be immediately suspended, all associated data will be handled in accordance with our legal obligations, and any funds deposited will be returned to the payment source following investigation. If you believe that a minor has registered an ndajee account, please notify us immediately via live chat or by email.
The ndajee Platform primarily stores and processes data within infrastructure located in or serving the Bangladesh region. Where it becomes necessary to transfer personal data to a third-party service provider operating outside Bangladesh — for example, a cloud infrastructure provider or a global KYC verification partner — ndajee ensures that appropriate contractual safeguards are in place before any such transfer occurs.
These safeguards include standard contractual clauses, data processing agreements that restrict the use of your data to the specified service, and requirements that the receiving party maintains security standards equivalent to those described in this Policy. ndajee does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without putting in place such additional safeguards.
ndajee reserves the right to update or revise this Privacy Policy at any time. When we make changes, the "Last Updated" date at the top of this page and in the hero section will be revised accordingly. The most current version of this Policy is always available at https://ndajee.biz/privacy-policy.
For material changes that significantly affect how we use your personal data or your rights as a data subject, ndajee will notify registered users via email to the address on file at least seven (7) days before the revised Policy takes effect, where this is reasonably practicable. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact us to close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ndajee handles your personal data, please contact us through any of the following channels:
ndajee aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to provide a substantive response within 30 calendar days. Where a request is particularly complex, ndajee may extend this period by a further 30 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day period.
If you are not satisfied with ndajee's response to a privacy complaint, you have the right to escalate the matter. Please refer to the FAQ page for further information on our complaints escalation process, or review our Terms & Conditions for the full dispute resolution procedure.
These are not just words in a policy document. Every commitment below is backed by technical controls, contractual obligations with our partners, and ongoing internal audits.
Every byte of data transmitted between your device and the ndajee Platform is protected by 256-bit SSL/TLS encryption — the same standard used by leading financial institutions. Your login credentials, payment details, and personal information travel over the network in an unreadable encrypted form.
ndajee does not sell, rent, or trade your personal data to third parties for marketing purposes — ever. The data you share with us is used solely to operate your account, verify your identity, process transactions, and keep the Platform secure. Your information is not a product.
Mandatory identity and age verification using Bangladesh NID or passport ensures that only adults aged 18 and above can access the Platform's full features. This process also protects your account from impersonation and keeps your funds in the right hands.
Your bKash, Nagad, Rocket, and Upay account numbers are stored only in tokenised, masked form on ndajee servers. Full mobile banking credentials are never retained. This dramatically reduces the impact of any hypothetical data exposure on your financial accounts.
ndajee gives you direct control over your personal data. You can access the data we hold, request corrections, ask for portability, or submit a deletion request at any time — all via live chat or email. We respond to all data requests within 30 days, with no bureaucratic delays.
ndajee operates on the principle of data minimisation: we collect only the information genuinely required to deliver our services, meet legal obligations, and maintain platform security. We do not ask for data we do not need, and we do not retain data beyond the periods specified in this Policy.
You now understand exactly how ndajee handles your data. From 256-bit SSL encryption to zero data selling, we are built around your trust. Explore our casino, bet on cricket, or spin the slots — all in BDT via bKash and Nagad. 18+ only. Gamble responsibly.