ng888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ng888 ("ng888", "we", "us", or "our") collects, uses, stores, shares, and protects personal information belonging to individuals ("you", "your", or "the Player") who access or use the ng888 platform at ng888.io and all associated sub-pages, mobile interfaces, and services.

By creating an account on ng888, depositing funds, placing wagers, or otherwise engaging with the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the ng888 platform immediately.

This Policy should be read alongside the ng888 Terms & Conditions, which governs the overall relationship between ng888 and its players. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

2. Data Controller Identity

For the purposes of this Privacy Policy, ng888 acts as the data controller — the entity that determines the purposes and means by which personal data is processed. All requests relating to your personal data, including access requests, correction requests, deletion requests, and marketing opt-out requests, should be directed to ng888 using the contact details provided in Section 15 of this Policy.

Where ng888 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification services, or fraud prevention tools), those parties act as data processors under contractual arrangements that obligate them to process data solely in accordance with ng888's instructions and to maintain appropriate security standards.

3. Data We Collect

ng888 collects several categories of personal data in the course of providing its services. The table below summarises the main data categories, the specific data points within each, and the primary reason for collection.

ng888 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is required for mandatory identity document verification (such as a photograph on a government ID).

4. How We Collect Your Data

ng888 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC forms, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar technologies as you navigate and interact with the ng888 platform (see Section 10 on Cookies).
• Third-party verification: Identity and address data returned to ng888 by KYC verification partners as part of the document review process. These partners are bound by strict data-sharing agreements.
• Payment processors: Transaction confirmation data (amount, timestamp, status) received from bKash, Nagad, Rocket, Upay, and other payment channel partners during deposit and withdrawal processing.
• Fraud prevention services: Risk signals and device fingerprinting data provided by fraud detection tools to help ng888 identify and prevent fraudulent account activity.

5. Legal Basis for Processing

ng888 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the ng888 Terms & Conditions — including account management, game provision, payment processing, and withdrawal handling.
• Legal compliance: Processing necessary to meet our obligations under applicable financial integrity, anti-money-laundering, responsible gaming, and age-verification standards.
• Legitimate interests: Processing conducted to protect ng888 and its players from fraud, to maintain platform security, to improve service quality through usage analytics, and to manage the overall player relationship — provided these interests are not overridden by your rights.
• Consent: Processing carried out on the basis of your explicit, freely given consent — primarily the sending of promotional and marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6. How We Use Your Data

ng888 uses the personal data we collect for the following purposes:

• To create, verify, and manage your ng888 player account
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment channels
• To conduct mandatory identity and age verification (KYC) before processing your first withdrawal
• To provide customer support, investigate disputes, and resolve complaints
• To detect and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited activities defined in the Terms & Conditions
• To monitor your gaming activity for responsible gaming purposes, including identifying signs of problem gambling and applying protective limits where appropriate
• To personalise your experience on ng888, including surfacing relevant games, promotions tied to events such as the BPL, IPL, Eid, and Pohela Boishakh
• To send account-related transactional communications (deposit confirmations, withdrawal status updates, security alerts)
• To send promotional and marketing communications where you have opted in to receive them
• To analyse aggregate, anonymised usage data for platform improvement and performance optimisation
• To comply with applicable legal and regulatory requirements

7. Data Sharing and Disclosure

ng888 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum financial data necessary to process your transactions. These parties operate under their own privacy policies and are independently responsible for their data handling practices.
• KYC and identity verification providers: Specialist third-party services that review and verify your identity documents on ng888's behalf. These providers are contractually bound to handle your data securely and exclusively for verification purposes.
• Fraud prevention and security services: Providers of device fingerprinting, IP reputation analysis, and transaction risk-scoring tools that help ng888 protect players from unauthorised access and fraudulent activity.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive limited session and gameplay data necessary to deliver their games through the ng888 platform. These studios are established, independently audited companies operating under their own data agreements.
• Legal and regulatory authorities: Where ng888 is compelled by lawful order, subpoena, or regulatory directive to disclose specific player data, ng888 will comply with the minimum scope of data required by the applicable legal requirement and will endeavour to notify the affected player where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of ng888's business or assets, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

8. International Data Transfers

ng888 is a platform serving players in Bangladesh (BST, UTC+6). Certain third-party service providers engaged by ng888 — including KYC verification partners, game studios, and cloud infrastructure providers — may process or store data on servers located outside Bangladesh.

Where personal data is transferred internationally, ng888 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual data protection clauses, to ensure your data receives a level of protection consistent with recognised security standards. ng888 does not transfer data to jurisdictions with demonstrably inadequate data protection frameworks without implementing additional protective measures.

9. Data Retention

ng888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal and financial data is retained for the lifetime of your ng888 account plus a minimum period of five years following account closure, to comply with financial record-keeping and responsible gaming audit requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years following the last transaction on your account, in accordance with standard financial integrity requirements.
• Support communications: Live chat transcripts and support email records are retained for 24 months from the date of the communication to support dispute resolution.
• Marketing data: Marketing preference records and campaign interaction history are retained until you withdraw consent, plus a short period required to process the opt-out.
• Technical and log data: Server logs and session data are retained for up to 12 months for security and fraud investigation purposes, then purged.

When personal data is no longer required and the applicable retention period has expired, ng888 deletes or anonymises it in a manner that prevents reconstruction or re-identification.

10. Cookies and Tracking Technologies

ng888 uses cookies — small text files stored on your device — and similar technologies such as web beacons and local storage to deliver and improve the ng888 platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the basic functioning of the ng888 platform, including maintaining your login session, remembering your language preference, and processing transactions. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymised data about how players navigate and interact with ng888 pages, enabling us to identify performance bottlenecks and improve the user experience. These cookies do not identify you personally.
• Functional cookies: Used to remember optional preferences such as your last-played game category, display settings, or notification preferences. Disabling these cookies may reduce the personalisation of your experience.
• Security cookies: Short-lived cookies used for anti-fraud and session integrity purposes, including CSRF token validation and suspicious activity detection.

ng888 does not use third-party advertising cookies to serve targeted advertising on external platforms. Your gameplay and account data are not shared with advertising networks for retargeting purposes.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or conducting transactions on ng888.

11. Your Privacy Rights

As a player using the ng888 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact ng888 using the details in Section 15.

• Right of access: You may request a copy of all personal data ng888 holds about you in a readable format. ng888 will respond to verified access requests within 30 days.
• Right of rectification: If any of the personal data ng888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed promptly.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). Note that certain data must be retained for compliance purposes and cannot be deleted on request.
• Right to restrict processing: In certain circumstances, you may request that ng888 restrict the processing of your data — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where ng888 relies on your consent to process personal data (primarily marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of ng888's legitimate interests. ng888 will assess whether its legitimate interests are overridden by your rights and circumstances.

12. Children and Minors

ng888 is an adults-only platform. Players must be at least 21 years of age to register and use the ng888 platform. ng888 does not knowingly collect personal data from individuals under the age of 21.

If ng888 becomes aware that personal data has been collected from a player who is under 21 years of age, the affected account will be immediately suspended, all funds held in the account will be reviewed and handled in accordance with the ng888 Terms & Conditions, and the personal data will be deleted as promptly as legal obligations permit.

Parents or guardians who believe a minor has accessed or registered on ng888 should contact our support team immediately at [email protected] so that the account can be investigated and closed without delay.

13. Security Measures

ng888 takes the security of your personal data seriously and maintains a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ng888 platform
• Encrypted storage of sensitive data fields including financial details and identity document references
• Role-based access controls ensuring that only authorised ng888 personnel can access player data, and only to the extent necessary for their role
• Regular security audits and vulnerability assessments of the ng888 platform infrastructure
• Two-factor authentication options available to players for account login security
• Automated monitoring systems that detect and alert on anomalous login activity or unusual transaction patterns
• Staff training on data protection obligations and secure data handling practices

While ng888 implements these robust security measures, no digital platform can guarantee absolute security against all conceivable threats. In the event of a data breach that poses a material risk to players, ng888 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach.

14. Changes to This Policy

ng888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. Material changes — defined as changes that meaningfully affect how we collect, use, or share your personal data — will be communicated to registered players via email to the address on file, or via an on-platform notification, at least 7 calendar days before the changes take effect.

Minor updates such as typographical corrections, clarifications of existing practices, or updated contact details may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the ng888 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

15. Contact and Data Requests

For all privacy-related queries, personal data access requests, correction requests, deletion requests, consent withdrawals, or data portability requests, please contact the ng888 data team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account name
• Live Chat: Available 24/7 directly from your ng888 account dashboard — suitable for general privacy queries and urgent data concerns
• Response Time: ng888 aims to acknowledge all privacy-related requests within 48 hours and to provide a full substantive response within 30 days
• Verification: To protect your data, ng888 will verify your identity before actioning any access, correction, or deletion request. You may be asked to confirm account details or provide a copy of your registered ID