nndk Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by nndk ("nndk", "we", "us", "our"), the operator of the online casino and sports betting platform available at nndk.io. This Policy governs the collection, use, storage, sharing, and protection of personal data relating to individuals ("Players", "Users", "you") who access or use the nndk platform.

nndk is committed to responsible data stewardship. We collect only the personal data that is genuinely necessary to deliver our services, comply with our legal obligations, and protect the integrity of our platform. We do not engage in the sale of personal data to third-party marketers.

This Policy is written in English and should be read alongside the nndk Terms & Conditions, which form part of the same contractual framework governing your use of nndk. In the event of any conflict between this Policy and the Terms & Conditions with respect to data-related matters, this Policy shall take precedence.

We encourage you to review this Policy periodically. The "Effective Date" at the top of this document indicates the date on which the most recent version entered into force. Continued use of nndk following any update constitutes your acceptance of the revised Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create an nndk account, we collect the following information as part of the mandatory registration process:

• Full legal name (as it appears on your government-issued identification document).
• Date of birth (to verify that you meet the minimum age requirement of 21 years).
• Residential address within Bangladesh (including division, district, and postal code).
• Mobile telephone number registered with your preferred payment service (bKash, Nagad, Rocket, or Upay).
• Email address for account communications, notifications, and support correspondence.
• Username and cryptographically hashed password (we do not store passwords in plain text).

2.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer (KYC) verification process, we may collect:

• Scanned or photographed copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of residential address documents issued within the last three months (utility bill, bank statement, or official correspondence).
• Proof of ownership of the payment method used for deposits (e.g., screenshot of a bKash or Nagad account showing your registered mobile number).
• Selfie or liveness check photograph for biometric identity matching, where required by our verification service provider.

2.3 Financial Transaction Data

We collect records of all financial transactions conducted through your nndk account, including:

• Deposit amounts, timestamps, and payment method identifiers (mobile wallet numbers for bKash, Nagad, Rocket, Upay).
• Withdrawal requests, amounts, processing status, and destination payment method identifiers.
• Account balance history and transaction reference numbers.
• Bonus credits received, wagering activity linked to bonus funds, and bonus withdrawal records.

2.4 Gaming & Betting Activity Data

We maintain detailed records of your activity on the nndk platform, including:

• Games played, bet amounts, outcomes, and session durations across all game categories (slots, live casino, fishing games, Lucky Dice, sports betting).
• Sports betting selections, stake amounts, odds accepted, and settlement records for cricket (BPL, T20 World Cup, IPL, Bangladesh Tigers), football, kabaddi, and other markets.
• Responsible gaming tool activations (deposit limits set, session limits, cooling-off periods, self-exclusion requests).

2.5 Technical & Device Data

When you access the nndk platform, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived therefrom.
• Device type, operating system version, and browser type and version.
• Session start and end timestamps, page views, and navigation paths within the nndk platform.
• Cookie identifiers and similar tracking technology identifiers (see Section 9 for full details).

2.6 Support Communication Data

When you contact nndk's support team — via email at [email protected] or via WhatsApp — we retain records of the communication, including the content of your messages, the contact channel used, timestamps, and the resolution outcome. These records are used to improve our service quality and to provide a consistent support experience across interactions.

3. How We Collect Your Data

nndk collects personal data through the following channels:

• Directly from you: During account registration, KYC submission, deposit and withdrawal requests, support communications, and when you use any feature of the nndk platform that requires you to input information.
• Automatically: Via our web servers, application logs, and cookie/tracking technologies deployed on the nndk platform whenever you visit or interact with any part of the site.
• From third-party service providers: Our KYC verification partners may provide enhanced identity data as part of their document verification and fraud-detection processes. Payment processors (bKash, Nagad, Rocket, Upay) confirm transaction status and mobile wallet ownership to facilitate deposits and withdrawals.
• From game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated game session data with nndk for the purpose of game integrity monitoring and dispute resolution.

4. Purposes of Processing

The following table summarises the purposes for which nndk processes your personal data:

nndk does not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by law.

5. Legal Basis for Processing

nndk processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, KYC documents, financial transaction records, and gaming activity data is necessary to perform the contract between you and nndk (i.e., to provide the online casino and sports betting services you have registered for).
• Legal obligation: Processing for KYC identity verification, AML compliance, fraud prevention, age verification, and responsible gaming enforcement is required to comply with applicable legal obligations.
• Legitimate interests: Processing technical/device data for platform security, fraud detection, abuse prevention, and aggregate analytics is carried out on the basis of nndk's legitimate interest in maintaining a safe, fair, and reliable platform. These interests do not override your fundamental privacy rights.
• Consent: Where nndk sends you promotional marketing communications by email or SMS, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in each marketing message.

6. Data Sharing & Disclosure

nndk does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below:

6.1 KYC and Identity Verification Partners

We share your identity documents and registration data with our contracted KYC service providers for the sole purpose of verifying your identity and age. These providers are bound by strict data processing agreements and are not permitted to use your data for any purpose beyond identity verification.

6.2 Payment Processors

We share the minimum data necessary with bKash, Nagad, Rocket, and Upay to initiate, confirm, and reconcile deposit and withdrawal transactions. This data is limited to your registered mobile wallet number, transaction amount, and a transaction reference identifier. Payment processors are not given access to your full gaming history or KYC documents.

6.3 Game Content Providers

Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and a pseudonymous player identifier to authenticate your game session. They do not receive your full name, residential address, or payment details. Game providers are required by contractual obligation to handle session data in accordance with their own certified data protection practices.

6.4 Legal and Regulatory Authorities

nndk may disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by a valid legal order, court judgment, or mandatory regulatory request. In such cases, nndk will disclose only the data specifically required and will use commercially reasonable efforts to notify you of such a disclosure where legally permissible.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of nndk's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the Privacy Policy governing your data will be updated accordingly before the transfer takes effect.

7. Data Retention

nndk retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following retention periods apply:

After the applicable retention period has expired, nndk will securely delete or irreversibly anonymise your personal data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8. Data Security

nndk employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nndk platform.
• One-way cryptographic hashing (bcrypt) for all account passwords. Passwords are never stored in readable form.
• Encrypted storage for KYC documents and financial records at rest, using AES-256 encryption.
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the nndk platform infrastructure.
• Automated anomaly detection to identify and respond to suspicious login attempts, unusual transaction patterns, and potential account takeover activity.
• Two-factor authentication (2FA) available to all registered players for enhanced account security.

While nndk implements industry-standard security measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, nndk will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable data protection requirements.

You are responsible for maintaining the confidentiality of your nndk account credentials. If you suspect that your account has been accessed without your authorisation, please contact our support team immediately at [email protected].

9. Cookies & Tracking Technologies

The nndk platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are deployed:

9.1 Strictly Necessary Cookies

These cookies are essential for the nndk platform to function correctly. They manage your login session, maintain your account state across page loads, apply your preferred responsible gaming settings, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised, aggregated data about how players navigate the nndk platform — which pages are visited most frequently, how long users spend on each section, and where navigation paths terminate. This data is used solely to improve the structure and usability of the nndk platform. No personally identifiable data is transmitted through analytics cookies.

9.3 Functional Cookies

Functional cookies remember your preferences across sessions — such as your preferred game categories, display settings, and language configuration — so that you receive a consistent experience on return visits without having to reconfigure settings each time.

9.4 Managing Cookies

Most modern web browsers allow you to control cookie behaviour through the browser settings menu. You can configure your browser to refuse all cookies, accept only first-party cookies, or delete cookies after each browsing session. Note that disabling strictly necessary cookies will impair or prevent access to the nndk platform. Instructions for managing cookies in commonly used browsers are available through each browser's official help documentation.

10. Your Data Rights

As a registered nndk player, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of all personal data that nndk holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that nndk delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to nndk's legal obligations — financial transaction records and KYC documents must be retained for the periods specified in Section 7 regardless of an erasure request.
• Right to Restrict Processing: You may request that nndk restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that nndk provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider.
• Right to Object: Where nndk processes your data on the basis of legitimate interests, you have the right to object to such processing. nndk will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

nndk will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

11. Third-Party Services & Links

The nndk platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While nndk takes reasonable steps to select reputable partners, we do not control the privacy practices of third-party services and are not responsible for the content of their privacy policies.

When you interact with a payment service provider's interface — for example, when confirming a bKash transfer — you are subject to that provider's own privacy policy and terms of service in addition to nndk's. We encourage you to review the privacy policies of any third-party services you use in connection with your nndk account.

12. Children's Privacy & Underage Player Protection

All account registrations are subject to mandatory age verification. If nndk discovers or is notified that a player is under the age of 21, we will immediately suspend the account, freeze any associated balance, delete the personal data of the underage individual (beyond what is required for regulatory reporting purposes), and report the incident in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor under your care has registered an nndk account, please contact our support team at [email protected] immediately. We will investigate and take appropriate action within 24 hours of receiving such a report.

13. Changes to This Privacy Policy

nndk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our services. When material changes are made, we will notify registered players by:

• Displaying a prominent notice on the nndk platform homepage for a period of not less than 14 days following the update.
• Sending an email notification to the address registered on your nndk account (for changes that materially affect your rights or the way we handle sensitive data categories).

The updated Policy will be published with a revised Effective Date at the top of this document. Your continued use of the nndk platform after the revised Policy has come into force constitutes your acceptance of the changes. If you do not accept the revised Policy, you must discontinue use of the platform and contact us to arrange account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nndk handles your personal data, please contact our Data Support team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

We are committed to resolving all privacy-related enquiries promptly and transparently. Our support team aims to provide an initial response to all privacy communications within 5 minutes during peak BST hours, and within 24 hours at all other times.