nm88 Privacy Policy — How We Protect Your Data

nm88 collects personal information through three main channels: information you provide directly during registration and account use; information generated automatically by your use of the Platform; and information received from third-party service providers involved in delivering Platform services. The specific types of data we collect include:

• Registration data: when you create an nm88 account you provide your name, date of birth, Bangladesh mobile number, and create an account password. This is the minimum information required to open an account and must be accurate.
• KYC verification documents: if nm88 requires identity verification at any point — including at withdrawal, bonus claim, or routine compliance review — you may be asked to submit a copy of your national identity card, passport, or other government-issued document. These documents are stored securely and used solely for identity verification and fraud prevention purposes.
• Transaction data: every deposit and withdrawal processed through bKash, Nagad, Rocket or Upay is logged against your account. This includes the transaction amount, date and time, wallet reference, and the resulting account balance change. This data is retained for financial compliance and dispute resolution purposes.
• Device and technical data: nm88 automatically logs your IP address, device type and model, operating system, browser version, mobile network operator, and approximate geographic region (derived from IP) each time you log in. This data is used for security monitoring, fraud detection, and to ensure the Platform displays correctly on your device.
• Communications data: if you contact nm88 support via live chat or email, the content of those communications — including your account ID, the nature of your query, and any supporting information you provide — is retained for customer service quality, training, and dispute resolution purposes.

nm88 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric information. If any such data is inadvertently provided by a player, it will be deleted promptly and not processed further.

nm88 uses your personal data for the following specific purposes, each of which has a defined legal basis as described in Section 3:

• Account creation and management: to register your nm88 account, verify your identity, manage your account settings, process deposits and withdrawals via bKash, Nagad, Rocket and Upay, and deliver the Platform's gaming services to you.
• Security and fraud prevention: to monitor account activity for unusual patterns, prevent unauthorised access, detect and investigate potential fraud, enforce our Terms and Conditions, and comply with anti-money laundering obligations. This includes automated monitoring systems that flag abnormal transaction volumes or login anomalies for manual review.
• Customer support: to respond to your questions, complaints, and account requests submitted via live chat or email; to investigate and resolve disputes relating to bets, transactions, and bonuses; and to maintain records of support interactions as required for quality assurance and compliance purposes.
• Responsible gaming: to operate the deposit limit, session alert, self-exclusion, and reality check tools available in your account; to identify players who may be exhibiting signs of problematic gambling behaviour and to take appropriate protective action; and to enforce self-exclusion periods once activated by a player.
• Service improvement and analytics: to analyse aggregated, anonymised usage patterns in order to improve the Platform's features, game selection, payment processing performance, and mobile experience for Bangladesh players. This analytics processing does not involve identifying individual players from aggregated data.

nm88 processes your personal data only where a valid legal basis exists for doing so. The four legal bases on which nm88 relies are:

• Contractual necessity: processing required to fulfil our agreement with you under the Terms and Conditions — for example, creating your account, processing deposits and withdrawals, delivering gaming services, and managing your account settings.
• Legal obligation: processing required to comply with applicable law, including anti-money laundering legislation, financial record-keeping requirements, and regulatory reporting obligations that apply to nm88's operations.
• Legitimate interests: processing where nm88 has a genuine operational need that is proportionate and does not override your privacy rights — including fraud detection, security monitoring, service improvement through anonymised analytics, and maintaining the integrity of the Platform for all players.
• Consent: where nm88 relies on your consent as the basis for processing — for example, sending you promotional offers by SMS or email — you may withdraw that consent at any time by updating your communication preferences in account settings or by contacting nm88 support.

nm88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your personal information may be shared with the following categories of third parties, strictly for the purposes described:

• Payment service providers: bKash, Nagad, Rocket and Upay receive the transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated. nm88 shares only the minimum data necessary to complete each payment transaction.
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Ezugi, NetEnt and other licensed game studios whose content is hosted on nm88 may receive anonymised session identifiers necessary to deliver game sessions and calculate RTP. They do not receive your full personal profile.
• Compliance and regulatory authorities: nm88 will disclose your personal information to law enforcement, regulatory bodies, or other governmental authorities when required to do so by applicable law, court order, or where nm88 reasonably believes disclosure is necessary to prevent fraud, money laundering, or serious harm.
• Technology service providers: cloud hosting providers, cybersecurity vendors, and platform infrastructure partners who process data on nm88's behalf under strict contractual data processing agreements that prohibit those parties from using your data for any purpose other than providing the contracted service to nm88.

In the event of a business restructuring, merger, or acquisition involving nm88, personal data held about players may form part of the transferred assets. In any such event, nm88 will ensure that player data continues to be protected under terms no less protective than this Privacy Policy, and will provide reasonable notice to affected players.

Given that nm88 processes all payments exclusively through Bangladesh mobile financial services — bKash, Nagad, Rocket and Upay — it is important to understand how payment data is handled. When you make a deposit or withdrawal, nm88 receives a transaction reference number, the registered name on the wallet, the wallet's mobile number, the transaction amount, and a timestamp. nm88 does not receive or store your mobile banking PIN, OTP, or any authentication credential associated with your mobile wallet.

The mobile wallet number associated with your nm88 account is used exclusively for processing your withdrawals back to the same source wallet. nm88 will never initiate an outbound payment to a different wallet number than the one registered on your account without first completing additional identity verification. If you believe an unauthorised payment has been initiated from your nm88 account, contact nm88 support immediately via live chat.

nm88 uses cookies and similar lightweight tracking technologies to operate the Platform correctly and to improve your experience. The three categories of cookies used by nm88 are:

• Essential cookies: strictly necessary for the Platform to function. These include your session authentication token (which keeps you logged in while you play), CSRF protection tokens, and the cookie that remembers your language preference. Essential cookies cannot be disabled without breaking the Platform's core functions.
• Analytics cookies: used by nm88 to understand aggregated user behaviour on the Platform — for example, which games are most popular, which payment methods are most frequently used, and which pages generate the most support queries. Analytics data is anonymised before analysis and is never linked back to an individual account.
• Preference cookies: used to remember your in-Platform settings such as your preferred game view, sound settings, and notification preferences so that those settings are restored each time you log in. These cookies improve convenience but are not essential for basic Platform operation.

You may disable non-essential cookies by adjusting your browser or mobile device settings. Please be aware that disabling cookies may affect certain Platform features. nm88 does not use third-party advertising cookies or cross-site tracking technologies. No tracking data is shared with advertising networks.

nm88 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The general retention periods applied by nm88 are: account data and KYC documents are retained for a minimum of 5 years following account closure, in line with standard financial compliance requirements; transaction records are retained for a minimum of 5 years from the date of the transaction; customer support communications are retained for 2 years from the date of the interaction; device and technical log data is retained for a rolling 12-month period for security monitoring purposes.

When personal data is no longer required and no legal retention obligation applies, nm88 will securely delete or anonymise that data so that it can no longer be linked to an individual player. Players who close their nm88 accounts may request confirmation that their data has been scheduled for deletion by contacting nm88 support after the applicable retention period has expired.

As an nm88 player, you have the following rights in relation to the personal data nm88 holds about you. To exercise any of these rights, contact nm88 support via live chat or email at [email protected] with the subject line "Privacy Rights Request":

• Right to access: you may request a copy of the personal data nm88 holds about you. nm88 will provide a structured summary of your account data within 30 days of receiving a valid access request.
• Right to rectification: you may request that inaccurate personal data nm88 holds about you is corrected. Where a correction is made to identity data, re-verification may be required. Corrections to contact data (mobile number) may also require verification to prevent unauthorised changes.
• Right to erasure: you may request that nm88 delete your personal data. This right is subject to nm88's legal retention obligations — for example, nm88 cannot delete transaction records that must be retained under financial compliance law. Where deletion is not possible, nm88 will explain why and confirm when deletion will be possible.
• Right to restrict processing: you may request that nm88 suspends processing your data in certain circumstances — for example, while you contest the accuracy of data nm88 holds, or while a complaint you have raised about nm88's use of your data is being assessed.
• Right to object: you may object to nm88 processing your personal data where that processing is based on nm88's legitimate interests. You also have an unconditional right to object to processing your data for direct marketing purposes — if you exercise this right, nm88 will immediately cease sending you promotional communications.

nm88 will respond to all valid privacy rights requests within 30 days. Where a request is complex or nm88 receives a large volume of requests, this period may be extended by a further 30 days, with notice to you. nm88 will not charge a fee for handling your privacy rights request unless the request is manifestly unfounded or excessive.

nm88 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and nm88's servers; encryption at rest for stored account data and KYC documents; two-factor authentication (2FA) available to all account holders; automated intrusion detection and real-time security monitoring; role-based access controls that limit employee access to personal data to only those with a defined operational need; and regular security audits of Platform infrastructure.

Despite these measures, no internet transmission or electronic storage system is 100% secure. nm88 cannot guarantee absolute security of data transmitted over the internet. In the event of a data security incident that is likely to result in a risk to player rights, nm88 will notify affected players as soon as practicable and will take all reasonable steps to contain and mitigate the incident.

nm88 is strictly an adult platform. The Platform is not directed at, and is not intended to be used by, any person under the age of 21. nm88 does not knowingly collect or process personal data relating to individuals under 21 years of age. If nm88 becomes aware that personal data has been collected from a person under 21, that data will be permanently deleted immediately and the associated account will be closed.

nm88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the Platform's services. Where a proposed amendment involves a material change to how nm88 collects or uses your personal data, nm88 will provide at least 7 days' advance notice via a notification on the Platform or via your registered mobile number before the change takes effect.

The current version of this Privacy Policy is always available on this page and is identified by the "Last updated" date shown at the top of the document. Your continued use of nm88 following the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with a proposed change, you must stop using nm88 and contact support to close your account before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or nm88's handling of your personal data, you may contact the nm88 Data Privacy team via live chat available 24/7 from within your nm88 account, or by email. Our team is available in English and can assist with all data privacy matters including access requests, correction requests, and deletion requests.

You may also reach us by email at: [email protected]