nm88 Privacy Policy

nm88 ("nm88", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who visit, register with, or interact with the nm88 online betting and casino platform, accessible at nm88.io ("the Platform"). This Privacy Policy ("Policy") describes in transparent and precise terms what personal data we collect, the purposes for which we process it, the legal bases upon which we rely to do so, who we share it with, how long we retain it, and the rights you hold in relation to your personal data.

This Policy applies to all personal data collected from members, prospective members, visitors to the nm88 website, and any individuals who contact nm88 via its support channels. It covers data collected through the nm88 website, any nm88 mobile-optimised interface, and any direct communications between you and nm88.

We encourage all members to read this Policy carefully in conjunction with the nm88 Terms and Conditions and Responsible Gaming policy, both of which are available through the links in the footer of this page. This Policy is written in plain English to ensure it is accessible and clearly understood by all nm88 members across Bangladesh.

For the purposes of this Privacy Policy, nm88 acts as the data controller in respect of all personal data collected and processed through the nm88 Platform. As data controller, nm88 determines the purposes for which and the manner in which personal data is processed.

If you have any questions about how nm88 handles your personal data, or if you wish to exercise any of your data rights described in Section 11 of this Policy, you may contact nm88's designated data point of contact at:

• Email: [email protected] (plain text — not a clickable link)
• Support availability: 24 hours a day, 7 days a week
• Response time target: Within 30 business days of receipt of a written data rights request

nm88 collects the following categories of personal data from members and platform visitors. The specific data points collected will vary depending on the nature of your interaction with the Platform:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (to verify compliance with the 21+ age requirement)
• Residential address (city, district, and country)
• Username selected at registration
• Encrypted account password

3.2 Contact Data

• Email address (used for account communications and support)
• Mobile phone number (used for SMS-based two-factor authentication where enabled)

3.3 KYC and Identity Verification Data

• Scanned or photographed copy of a valid government-issued photo identification document (such as a Bangladeshi National Identity Card, passport, or driving licence)
• Proof of residential address (such as a recent utility bill or bank statement)
• Proof of payment method ownership (such as a screenshot of the registered bKash, Nagad, Rocket, or Upay account)

3.4 Financial and Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method identifiers (e.g., masked mobile wallet number, masked card number)
• Transaction reference numbers
• Account balance history
• Bonus redemption and wagering activity records

3.5 Gaming and Betting Activity Data

• Bet placement records (sport, market, selection, odds, stake, outcome)
• Casino game session records (game title, studio provider, stake, result, session duration)
• In-play betting activity and timing data
• Responsible gaming tool activations (deposit limits, time-outs, self-exclusion requests)

3.6 Technical and Device Data

• IP address at time of registration and subsequent logins
• Device type, operating system, and browser version
• Screen resolution and language preferences
• Session duration and navigation path data
• Cookie identifiers (see Section 8)

3.7 Communications Data

• Content of support tickets and live chat transcripts submitted to nm88
• Email correspondence with nm88 support
• Records of promotional communications sent to you and your interaction with them (open rates, click-through data)

nm88 collects personal data through the following channels and mechanisms:

• Direct submission by you: Data you voluntarily provide when completing the nm88 registration form, completing KYC verification, making a deposit or withdrawal request, contacting nm88 support, or subscribing to nm88 promotional communications.
• Automated technical collection: Data collected automatically when you visit or interact with the nm88 Platform, including IP address, device identifiers, session data, and cookie-based tracking data. This collection occurs whether or not you are logged into a member account.
• Payment processing partners: Transaction confirmation data received from nm88's approved payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank) to verify and reconcile deposit and withdrawal transactions.
• Identity verification service providers: In certain circumstances, nm88 may engage third-party identity verification service providers to assist with KYC document checks. These providers return a verification result and may share limited data from your submitted documents solely for the purpose of confirming identity.
• Anti-fraud and security monitoring systems: Data derived from nm88's internal fraud detection and risk management systems, which analyse behavioural patterns and transaction activity to identify and prevent fraudulent conduct.

nm88 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose and category of data involved:

nm88 uses the personal data it collects for the following specific and defined purposes:

• Account creation and authentication: To create and manage your nm88 member account, authenticate your identity at each login, and enable access to platform features including sportsbook, live casino, and slot games.
• Age and eligibility verification: To verify that you meet the 21+ age requirement and all other eligibility conditions set out in the nm88 Terms and Conditions before granting access to real-money gaming features.
• Transaction processing: To process your deposit and withdrawal requests through nm88's approved payment partners, verify transaction completion, reconcile account balances, and maintain accurate financial records.
• KYC compliance: To conduct mandatory Know Your Customer identity checks as required prior to processing withdrawal requests, and to meet ongoing anti-money laundering and fraud prevention obligations.
• Customer support: To respond to your support queries, resolve account issues, process complaints, and communicate important account-related information to you.
• Personalised experience: To tailor the nm88 platform experience to your preferences, including surfacing relevant promotions, preferred game categories, and localised content for members in Bangladesh.
• Promotional communications: To send you information about nm88 bonuses, promotions, new game launches, and special offers, subject to your marketing preferences. You may opt out of promotional communications at any time via account settings or by contacting support.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, enforce responsible gaming tools you have activated (deposit limits, time-outs, self-exclusion), and proactively reach out where nm88's responsible gaming monitoring flags a concern.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, money laundering, multi-accounting, and other forms of prohibited conduct as defined in the nm88 Terms and Conditions.
• Platform analytics and development: To analyse aggregate and anonymised usage data to understand how members interact with the nm88 Platform, identify areas for improvement, test new features, and optimise platform performance.
• Legal and regulatory compliance: To fulfil nm88's obligations under applicable laws and to respond to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.

nm88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. nm88 may, however, share specific categories of your personal data with the following types of third parties where such sharing is necessary to operate the Platform, fulfil legal obligations, or protect the legitimate interests of nm88 and its members:

7.1 Payment Processing Partners

nm88 shares transaction-relevant data (such as transaction amount, date, and your payment method identifier) with its approved payment partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — solely to facilitate the processing of your deposit and withdrawal requests. Payment partners receive only the minimum data necessary to execute the transaction.

7.2 Identity Verification Providers

Where nm88 engages third-party KYC or identity verification service providers to assist with the processing of identity documents, those providers may receive copies of the documentation you submit. Such providers are contractually required to use that data solely for the purpose of identity verification and are prohibited from retaining, sharing, or using it for any other purpose.

7.3 Game Studio Partners

nm88's certified game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others — may receive a pseudonymous player session identifier and game activity data necessary to deliver their games on the nm88 Platform and to resolve any game-round disputes. Game studios do not receive your full name, contact details, or payment information.

7.4 Fraud Prevention and Anti-Money Laundering Services

nm88 may share data with specialist third-party fraud prevention and anti-money laundering screening services where required to meet its legal obligations or to investigate suspected fraudulent or criminal activity. Such sharing is conducted strictly on a lawful basis and is limited to the data necessary for the specific investigation or screening task.

7.5 Legal and Regulatory Authorities

nm88 will disclose personal data to regulatory bodies, law enforcement agencies, courts, and other public authorities where it is legally required to do so, or where nm88 determines in good faith that such disclosure is necessary to comply with a legal obligation, protect the rights of nm88 or its members, prevent fraud or illegal activity, or respond to a lawful court order or government request.

7.6 Business Transfers

In the event that nm88 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. nm88 will provide notice to affected members prior to any such transfer where reasonably practicable, and the acquiring entity will be required to honour the terms of this Privacy Policy.

nm88 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and analyse usage patterns. A cookie is a small text file placed on your device by a website server when you visit that site. Cookies cannot execute programs or transmit viruses; they are used solely to store and retrieve information about your interaction with the nm88 Platform.

8.1 Types of Cookies Used by nm88

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication cookies that keep you logged into your nm88 account during a session, security cookies that support fraud detection, and cookies that store your temporary game session state. These cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: These cookies remember your preferences (such as preferred language settings, display settings, and responsible gaming tool configurations) to provide a more personalised experience across sessions.
• Analytical cookies: nm88 uses analytical cookies to collect aggregated, anonymised data about how visitors interact with the Platform — including which pages are visited most frequently, typical session durations, and navigation paths. This data is used exclusively to improve the Platform and does not identify individual users.
• Marketing and attribution cookies: Where you have arrived at nm88 via a promotional link or affiliate channel, nm88 may place a cookie to attribute your registration to the relevant campaign. These cookies do not track your off-site browsing activity.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent the nm88 Platform from functioning correctly and may make it impossible to log in to your account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

nm88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active member account data: Retained for the full duration of the member's active account relationship with nm88, plus a minimum period of five years following account closure.
• KYC and identity verification documents: Retained for a minimum of five years from the date of submission, in accordance with anti-money laundering record-keeping requirements.
• Financial and transaction records: Retained for a minimum of seven years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Responsible gaming records: Retained for a minimum of five years from the date of the relevant interaction or tool activation, including self-exclusion records which are retained permanently to ensure a self-excluded member cannot re-register.
• Support communications: Retained for a period of three years from the date of the final communication in any support thread.
• Technical and device data (logs): Retained for a rolling period of 12 months, after which they are anonymised or deleted.

Upon the expiry of applicable retention periods, nm88 will securely delete or anonymise personal data so that it can no longer be attributed to an identifiable individual.

nm88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data in transit between your device and nm88 servers is encrypted using SSL/TLS protocols. This protects your login credentials, personal details, and payment information from interception during transmission.
• Encrypted password storage: Account passwords are never stored in plain text. nm88 uses industry-standard cryptographic hashing algorithms to store password data. In the event of a data breach, stored hashed passwords cannot be directly used to access your account.
• Two-factor authentication (2FA): nm88 offers optional two-factor authentication via SMS verification for all member accounts. nm88 strongly recommends all members activate 2FA to add an additional layer of security to their account.
• Access controls: Internal access to member personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to sensitive data systems is logged and subject to periodic audit.
• Fraud detection systems: nm88 operates real-time fraud detection and anomaly detection systems that monitor account activity for signs of unauthorised access, suspicious login patterns, and other indicators of account compromise.
• Secure data storage: Personal data is stored on secure servers with appropriate physical and logical access controls. KYC documents and sensitive identity data are stored in encrypted form with access restricted to the KYC compliance team only.

Notwithstanding these measures, no system of data transmission or storage can be guaranteed to be 100% secure. If you have reason to believe that your nm88 account has been compromised, you must notify nm88 immediately at [email protected] so that appropriate protective action can be taken without delay.

As a data subject whose personal data is processed by nm88, you hold the following rights in relation to that data. To exercise any of these rights, please submit a written request to [email protected]. nm88 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request confirmation of whether nm88 processes personal data about you, and to receive a copy of that data along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that nm88 holds about you. Where possible, corrections to basic account data (such as contact details) may be made directly through your nm88 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where nm88 no longer has a legitimate reason to retain it. Note that certain data cannot be erased where nm88 is required to retain it by law (for example, KYC and financial transaction records).
• Right to Restriction of Processing: You have the right to request that nm88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to nm88 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to nm88's processing of your personal data where that processing is based on legitimate interests. nm88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where nm88 processes your personal data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The nm88 Platform is intended exclusively for adults aged 21 and above. nm88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All registration attempts are subject to age verification procedures, and where nm88 discovers or has reason to believe that personal data has been submitted by an individual below the minimum age, nm88 will immediately suspend the associated account, void any transactions, and delete the relevant data.

If you are a parent or guardian and believe that a minor has registered an account on nm88 or submitted personal data to the Platform, please contact nm88 immediately at [email protected] so that the matter can be investigated and resolved without delay.

The nm88 Platform does not contain links to external third-party websites as a matter of policy. However, in the event that any third-party link or reference appears on the Platform, nm88 wishes to make clear that it has no control over the content, privacy practices, or data processing activities of any third-party website. nm88 accepts no responsibility or liability for the privacy practices of third parties. If you navigate to a third-party website from any reference on the nm88 Platform, you do so at your own risk and should review that website's own privacy policy before providing any personal data.

nm88 reserves the right to update, modify, or replace this Privacy Policy at any time. Where a material change is made to this Policy, nm88 will endeavour to notify affected members via the email address registered to their account, or by displaying a prominent notice on the nm88 Platform prior to the revised Policy taking effect. The date of the most recent update is displayed at the top of this page.

Your continued use of the nm88 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment to this Policy, you must cease using the nm88 Platform and may request account closure by contacting nm88 support at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nm88 handles your personal data, please contact the nm88 support team using the details below. All data rights requests and privacy-related enquiries must be submitted in writing in English.

• Email: [email protected] (plain text — copy the address manually; this is not a clickable link)
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time target: Within 30 days of receipt for formal data rights requests; within 24 hours for general privacy enquiries

nm88 is committed to resolving all privacy-related concerns fairly, transparently, and in a timely manner. We take our data protection responsibilities seriously and welcome feedback from members on how we can improve our privacy practices.