Privacy Policy — nogad9 Data Protection Commitment

1 Introduction

nogad9 ("we", "us", "our") operates the online gaming and sports betting platform accessible at nogad9.app (the "Platform"). We are committed to protecting the personal data of every individual who uses the Platform, whether as a registered account holder, a visitor, or in any other capacity.

This Privacy Policy ("Policy") is intended to provide you with a comprehensive, transparent, and accessible explanation of our data practices. It covers what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how long we retain it, who we share it with, and what rights you have with respect to your own information.

This Policy applies to all users of the Platform, including individuals based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations from which the Platform is accessed. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Privacy Policy should be read together with the nogad9 Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and nogad9.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

"Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, mobile number, location data, or online identifier.
"Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
"Data Controller" means nogad9 as the entity that determines the purposes and means of processing personal data collected through the Platform.
"Data Subject" means the natural person whose personal data is being processed — in this context, you as a user or visitor of the Platform.
"Third Party" means any natural or legal person, other than you and nogad9, who is involved in the processing of your personal data under a contractual or regulatory relationship with nogad9.
"Cookies" means small text files placed on your device by the Platform for the purpose of tracking, session management, analytics, or personalisation.
"KYC" means Know Your Customer — the identity verification and age verification process applied to registered user accounts.

3 Data We Collect

3.1 Registration and Account Data

When you create an account on the nogad9 Platform, we collect the following categories of personal data:

Full legal name as it appears on your government-issued identification document.
Date of birth (used to verify that you meet the minimum age requirement of 18 years).
Mobile phone number (used for account verification, OTP authentication, and communication).
Email address (used for account-related communications and security alerts).
Preferred username and encrypted password.
Residential address and district within Bangladesh.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age and identity, nogad9 may request and collect the following documents and associated data:

National Identity Card (NID) number and a scanned or photographed copy.
Passport or driving licence details (where NID is not available).
Proof of residential address (e.g., utility bill, bank statement).
Selfie or live photograph for facial verification purposes.
Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account).

3.3 Financial and Transaction Data

nogad9 records all financial transactions conducted through the Platform, including:

Deposit amounts, dates, payment method identifiers (e.g., bKash mobile number, Nagad account reference), and transaction IDs.
Withdrawal requests, amounts, destination account references, and processing timestamps.
Bonus credits received, wagering activity related to bonus funds, and bonus expiry records.
Account balance history and net gaming revenue attributable to your account.

3.4 Gaming and Betting Activity Data

We collect detailed records of your activity on the Platform, including:

Games played, bet amounts, outcomes, and session durations.
Sports betting markets accessed, selections made, odds accepted, and settlement outcomes.
Responsible gaming tool settings (e.g., active deposit limits, cooling-off periods, self-exclusion status).

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information, including:

IP address and approximate geolocation (country and city level).
Device type, operating system, and browser version.
Session start and end times, pages visited, and navigation paths.
Referring URL and search terms used to reach the Platform (where applicable).

3.6 Communications Data

If you contact nogad9 via email, WhatsApp, or Live Chat, we retain records of those communications including the content of messages, timestamps, and any supporting documents shared during the interaction.

Data Minimisation: nogad9 applies the principle of data minimisation — we collect only the personal data that is necessary for the specific purposes described in this Policy. We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) except where it is voluntarily disclosed by you in the context of a responsible gaming inquiry.

4 How We Collect Your Data

nogad9 collects your personal data through the following channels and mechanisms:

Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
Automatically through the Platform: When you browse or interact with the Platform, our servers and analytics systems automatically record technical and behavioural data as described in Section 3.5.
Through cookies and similar technologies: As described in Section 8, we use first-party and select third-party cookies to support session management, analytics, and platform performance.
From payment processors: When you transact via bKash, Nagad, Rocket, or Upay, our payment processing partners may share transaction confirmation data with nogad9 for reconciliation and fraud prevention purposes.
From identity verification services: Where nogad9 uses third-party KYC service providers to assist with document verification, those providers may return verification results and risk scores to us in connection with your account.

5 Purposes of Processing

nogad9 processes your personal data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, device data
Age and identity verification (KYC)	KYC documents, registration data
Processing deposits and withdrawals	Financial data, registration data
Anti-fraud and anti-money laundering checks	Financial data, KYC data, device data, activity data
Responsible gaming compliance	Activity data, registration data
Customer support	Communications data, registration data, activity data
Platform security and fraud prevention	Device data, activity data, financial data
Analytics and platform improvement	Technical data, activity data (anonymised where possible)
Promotional communications (where consented)	Registration data, activity data
Legal and regulatory compliance	All categories, as required by applicable law

6 Legal Basis for Processing

nogad9 processes your personal data on the following legal bases:

Contractual necessity: Processing required to perform the contract between you and nogad9 — including account registration, game play, deposits, withdrawals, and customer support — is conducted on the basis of contractual necessity.
Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering laws, age verification requirements, and tax record-keeping, is conducted on the basis of legal obligation.
Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and analytics is based on nogad9's legitimate interests in operating a secure, lawful, and sustainable platform, provided those interests are not overridden by your fundamental rights and freedoms.
Consent: Where we send you optional marketing communications or promotional notifications, we do so on the basis of your prior consent. You may withdraw this consent at any time by contacting support or adjusting your account notification settings.

7 Sharing Your Personal Data

7.1 Payment Processors

nogad9 shares transaction-level data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank solely for the purpose of processing your deposits and withdrawals. These partners act as independent data controllers with respect to their own payment services and are subject to their own privacy policies.

7.2 KYC and Identity Verification Providers

Where automated identity verification is employed, your KYC documents and personal data may be shared with vetted third-party identity verification service providers acting as data processors on behalf of nogad9 under strict contractual data protection obligations.

7.3 Game Providers

To deliver casino games and live-dealer experiences, nogad9 integrates with licensed game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to facilitate game delivery. They do not receive your full personal profile unless required by their own regulatory obligations.

7.4 Regulatory and Law Enforcement Authorities

nogad9 may disclose your personal data to competent regulatory or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure to the extent permitted by law.

7.5 No Sale of Personal Data

              Important: nogad9 does not and will never sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Data sharing is strictly limited to the operational and legal purposes described in this section.
            

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the Platform. They allow the Platform to recognise your device across sessions, remember your preferences, and collect anonymous usage statistics.

8.2 Types of Cookies We Use

Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing cookies, and security tokens. These cannot be disabled without preventing the Platform from operating.
Functional Cookies: Used to remember your account preferences, language settings, and responsible gaming tool configurations between sessions.
Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — pages visited, session duration, device type — to help us improve performance and usability.
Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious login patterns.

8.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will impair your ability to log in, place bets, or access account features. Most modern browsers allow granular cookie control through their settings menus. Continuing to use the Platform without adjusting your browser settings constitutes acceptance of our use of cookies as described in this section.

Note: nogad9 does not use third-party advertising or behavioural targeting cookies. We do not participate in cross-site ad networks or retargeting programs.

9 Data Retention

nogad9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal and regulatory compliance
KYC documents	Duration of account + 5 years post-closure	Anti-money laundering obligations
Financial transaction records	7 years from transaction date	Tax and financial record-keeping law
Gaming activity logs	3 years from last activity	Responsible gaming and dispute resolution
Support communications	3 years from last interaction	Customer service quality and dispute records
Technical/device logs	13 months from collection	Security and fraud investigation
Marketing consent records	Until withdrawal of consent + 1 year	Evidence of consent basis

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

nogad9 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

256-bit SSL/TLS encryption for all data transmitted between your device and the Platform servers.
Bcrypt password hashing — plaintext passwords are never stored. All passwords are hashed using industry-standard one-way cryptographic functions.
Two-factor authentication (2FA) via OTP for account login and withdrawal processing.
Role-based access controls — internal access to personal data is restricted to nogad9 personnel who have a legitimate operational need and are bound by confidentiality obligations.
Regular penetration testing and vulnerability assessments conducted by independent security specialists.
Encrypted storage for KYC documents and sensitive identification data at rest.
Intrusion detection systems and real-time monitoring of access logs for anomalous activity.

Your Responsibility: While nogad9 takes all reasonable steps to protect your data, you are responsible for maintaining the security of your login credentials. Do not share your username or password with any third party. If you suspect unauthorised access to your account, contact [email protected] immediately.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, nogad9 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

11 Your Rights

As a data subject, you hold the following rights with respect to your personal data held by nogad9. To exercise any of these rights, please submit a written request to [email protected]. nogad9 will respond within 30 days of receiving a verifiable request.

Right of Access: You have the right to request a copy of the personal data nogad9 holds about you, together with information about how it is processed.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account.
Right to Erasure: Subject to our legal retention obligations, you may request the deletion of your personal data. Note that we may be required to retain certain data for up to seven years under applicable financial regulations even after account closure.
Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a disputed accuracy claim is being investigated.
Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention, where your particular circumstances justify such objection.
Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Identity Verification: Before processing any rights request, nogad9 will verify your identity to prevent unauthorised access to your data. This may involve providing a copy of your NID or responding to a security question sent to your registered mobile number.

12 Children's Privacy

The nogad9 Platform is strictly intended for adults aged 18 and above. nogad9 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18.

Underage Use: If nogad9 discovers or is notified that a person under the age of 18 has registered an account or provided personal data, we will immediately suspend the account, delete all associated personal data to the extent not required for legal investigation purposes, and report the matter in accordance with applicable child protection obligations.

If you believe that a minor has accessed the Platform or provided their personal data to nogad9, please notify us immediately at [email protected]. We take all such reports seriously and will act promptly.

Parents and guardians are encouraged to use parental control software and to speak openly with minors in their household about the risks of online gambling. For more information, please visit our Responsible Gaming page.

13 International Data Transfers

nogad9 primarily processes personal data within the region. However, certain third-party service providers — including game studios such as Evolution Gaming, Pragmatic Play, and NetEnt, as well as KYC and security technology vendors — may be headquartered or operate infrastructure in jurisdictions outside Bangladesh.

Where personal data is transferred to service providers in other jurisdictions, nogad9 takes all reasonable steps to ensure that such transfers are conducted under contractual data protection obligations that afford your personal data a standard of protection equivalent to that described in this Policy.

nogad9 does not transfer personal data to any country or territory that is known to present an inadequate level of protection for personal data without first implementing appropriate safeguards, such as standard contractual clauses or equivalent mechanisms.

14 Changes to This Privacy Policy

nogad9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last Updated" date displayed at the top of this document and, where practicable, provide notice to registered users via the Platform or by email to the address registered on your account.

Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to remain informed of how we handle your personal data. If you do not agree to a revised Policy, you may request account closure in accordance with Section 13.3 of our Terms and Conditions.

              Version History: This is version 2.1 of the nogad9 Privacy Policy, effective January 2026. It supersedes all prior versions of this document.
            

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which nogad9 handles your personal data, please contact our Data Support team using the details below. All privacy-related enquiries are treated with the highest priority.

Email: [email protected]
WhatsApp: +880 1700 000000
Live Chat: Available 24 hours a day, 7 days a week via the Platform
Response Time: Privacy enquiries are acknowledged within 24 hours and resolved within 30 calendar days of receipt
Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

              Effective Date: This Privacy Policy is effective as of January 2026. nogad9 — Bangladesh's Premium Gaming Platform. For adults aged 18 and above only.
            

nogad9 Privacy Policy