Nabu88 Privacy Policy

1. Introduction

Nabu88 ("we", "us", "the Platform") is committed to protecting the personal information of every player who registers and uses our services. This Privacy Policy describes the types of data we collect, the purposes for which it is used, the safeguards we apply, and the rights available to you as a data subject.

This policy applies to all products and services offered on the Nabu88 platform, including sports betting on cricket (PSL, T20, international matches), Live Casino, Slots, Fish Games, and Bingo. It also covers our mobile app, email communications, and any other touchpoints you have with us.

By registering an account or using the platform in any capacity, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described here. If you do not agree, you should discontinue use of the platform and contact our support team to close your account.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming guidelines, both of which form part of your agreement with Nabu88.

2. Data We Collect

We only collect data that is necessary to operate the platform, verify your identity, process payments, and communicate with you. The main categories of personal data we hold are:

3. How We Use Your Data

Your data is used only for the purposes described below. We do not use it for any other reason without first informing you and obtaining appropriate consent where required.

We do not use your data to build profiles for sale to third-party advertisers, nor do we use it for any purpose incompatible with the reasons for which it was originally collected.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, payment information, and gaming activity is necessary to deliver the services you signed up for. Without this, we cannot operate your account.
• Legitimate interest: Fraud detection, security monitoring, and platform performance improvement are in our legitimate interest and that of our wider player community, provided this does not override your fundamental rights.
• Legal obligation: Identity verification and transaction record-keeping may be required by applicable laws and regulations. We retain this data for as long as legally required.
• Consent: For marketing emails and optional personalisation features, we rely on your explicit consent. You can withdraw consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

5. Payment Data

Nabu88 supports PKR transactions via JazzCash, Easypaisa, Raast, bank transfer, debit/credit cards, and other supported mobile wallets. Payment processing is handled by PCI-DSS compliant third-party gateways. This means:

• We never store full card numbers, CVV codes, or complete mobile wallet credentials on our own servers.
• Payment gateway providers receive only the data required to process a transaction and are bound by their own strict data security obligations.
• Transaction records — including amounts, dates, and masked payment identifiers — are retained for audit and dispute resolution purposes.
• In the event of a suspected fraudulent transaction, we may share transaction data with the relevant payment provider or law enforcement as required.

6. Cookies & Tracking

Nabu88 uses cookies and similar tracking technologies to keep you logged in, remember your preferences, and understand how you use the platform. We use the following categories of cookies:

• Essential cookies: Required for the platform to function — session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Analytics cookies: Help us understand which pages are most visited, how long sessions last, and where players encounter problems. Data is collected in aggregate and does not identify you personally.
• Preference cookies: Store settings like your preferred language, odds format, and notification preferences so you do not have to re-enter them each visit.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using Nabu88, but some personalisation features may not work as expected.

7. Data Sharing

We do not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data is shared only in the limited circumstances described below:

• Payment processors: JazzCash, Easypaisa, Raast, and other payment gateway partners receive only the transaction data required to process your deposit or withdrawal.
• Identity verification providers: KYC and age verification services may receive a copy of your identity document and supporting information solely for the purpose of verifying your account.
• Fraud prevention services: Aggregated or anonymised data may be shared with fraud detection partners to protect the integrity of the platform and all players on it.
• Legal and regulatory bodies: Where we are required by law or a lawful authority to disclose data, we will do so. We will notify you if legally permitted.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. You will be notified in advance of any such change.

All third parties who handle your data on our behalf are contractually required to process it only for the stated purpose and to apply security standards equivalent to our own.

8. Data Retention

We retain your personal data only for as long as it is necessary for the purposes set out in this policy, or as required by applicable legal obligations. The general retention periods are:

• Active accounts: All account and transaction data is retained for the duration your account remains open.
• Closed accounts: After account closure, core identity and transaction records are retained for a minimum of five years to satisfy audit and legal requirements.
• Marketing data: If you withdraw consent for marketing communications, your email address is removed from marketing lists within 30 days. A suppression record is kept to ensure we do not accidentally contact you again.
• Support chat logs: Retained for up to two years to assist with dispute resolution and quality assurance.
• Technical logs: IP addresses and session logs are typically purged after 12 months unless they form part of an active fraud or security investigation.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you personally.

9. Data Security

Protecting your data is a core responsibility at Nabu88. We apply multiple layers of technical and organisational security measures, including:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and our servers.
• PCI-DSS compliant payment processing — full card and wallet credentials are never stored on our infrastructure.
• Access controls: Only authorised personnel with a documented business need can access personal data. All staff access is logged and reviewed.
• Regular security audits and vulnerability assessments to identify and address potential weaknesses before they can be exploited.
• Intrusion detection systems that monitor for unusual access patterns and flag potential breaches for immediate investigation.

10. Your Rights

As a user of Nabu88, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email:

• Right of access: You can request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your data is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to erasure: You can request deletion of your personal data, subject to our legal retention obligations. We will erase data that is no longer necessary and is not subject to a legal hold.
• Right to restrict processing: You can ask us to limit how we use your data while a dispute or correction request is being resolved.
• Right to data portability: You may request your data in a commonly used, machine-readable format so you can transfer it to another service if you choose.
• Right to withdraw consent: Where processing is based on your consent — such as marketing emails — you can withdraw that consent at any time with immediate effect.
• Right to object: You can object to processing based on legitimate interest. We will review your objection and stop processing unless we can demonstrate compelling grounds to continue.

We aim to respond to all data rights requests within 30 days. In complex cases we may require up to 60 days, and will notify you if that is the case. There is no charge for exercising these rights under normal circumstances.

11. Children's Privacy

Nabu88 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register or use this platform in any capacity.

If we discover or are informed that an account has been opened by a minor, we will immediately suspend the account, void any transactions, and delete all associated personal data as quickly as technically possible.

If you are a parent or guardian and believe your child has registered on Nabu88, please contact our support team immediately so we can take swift action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address summarising what has changed.
• Display a notice on the platform for a reasonable period after the change takes effect.

Continued use of Nabu88 after the revised policy takes effect constitutes your acceptance of the changes. If you disagree with any update, you may close your account at any time by contacting support.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right, or need to raise a privacy concern, our support team is available 24/7 via the live chat on the platform.

You can also reach us by email at [email protected]. For privacy-related requests, please use the subject line "Privacy Request" and include your registered username so we can locate your account promptly.

We take every privacy concern seriously and commit to acknowledging your message within one business day.