ngpms Privacy
Policy

1 Data Controller Information

For the purposes of this Privacy Policy, ngpms operates as the data controller responsible for all personal data collected through the ngpms.app platform. References to "ngpms", "we", "us", or "our" throughout this document refer to the ngpms platform and its operating entity.

As data controller, ngpms determines the purposes and means by which personal data is processed. We are committed to handling all personal data in a manner that respects the privacy rights of individual users and reflects internationally recognised data protection principles, including those aligned with the General Data Protection Regulation (GDPR) framework, even where specific national data legislation may differ.

If you have any queries about how your personal data is managed, or wish to exercise any of your privacy rights as described in Section 9 of this policy, please contact the ngpms support team at [email protected] (plain text — not a clickable link). All privacy-related enquiries are handled within five business days during standard Bangladesh Standard Time (BST, UTC+6) operating hours.

2 Data We Collect

ngpms collects personal data from users through several touchpoints across the platform lifecycle. The categories of data we collect are described below, along with the primary source of each category.

2.1 Registration Data

When you create an ngpms account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Mobile phone number (registered with your bKash, Nagad, or Rocket wallet)
• Email address
• Preferred username and encrypted password
• Residential city or region within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling and fraud, ngpms may request the following documents from registered users prior to processing withdrawals or at any point during the account lifecycle:

• Government-issued National Identity Card (NID) or passport
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
• Confirmation of mobile wallet ownership (screenshot or statement from bKash, Nagad, Rocket, or Upay)
• Selfie or live-verification photograph where required by our compliance process

2.3 Financial Transaction Data

When you make deposits or request withdrawals on ngpms, we record the following transaction data:

• Transaction amount in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank)
• Mobile wallet number or masked card number associated with the transaction
• Transaction timestamps and reference identifiers
• Deposit and withdrawal history linked to your account

2.4 Gameplay and Betting Activity Data

ngpms records data relating to your activity on the platform, including game sessions, betting history, wager amounts, game outcomes, and responsible gaming tool usage (deposit limits, session time alerts, cool-off periods, and self-exclusion requests). This data is retained to ensure platform integrity, resolve disputes, and support responsible gaming obligations.

2.5 Device and Technical Data

When you access ngpms.app, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, preferred language settings, referring URL, and session duration. This information is collected via server logs and, where applicable, cookies as described in Section 6 of this policy.

2.6 Communications Data

If you contact ngpms support by email or through any on-platform messaging channel, we retain records of the content of those communications along with associated metadata (date, time, subject matter) for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Data

ngpms uses the personal data it collects for the following defined purposes. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining your explicit consent.

4 Legal Basis for Processing

ngpms processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between ngpms and the registered user — for example, processing your deposit so you can place wagers, or processing a withdrawal to your bKash wallet.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and age verification obligations.
• Legitimate interests: Processing carried out to pursue the legitimate business interests of ngpms, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you marketing communications or using non-essential cookies. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

ngpms does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Payment Processing Partners

To process deposits and withdrawals, ngpms shares transaction data with the relevant payment service providers. Depending on the payment method you use, this may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or the card networks Visa and Mastercard. Each of these providers operates under its own privacy terms and security obligations.

5.2 Game Content Providers

Live dealer games and RNG-based slot titles on ngpms are delivered by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level data (such as anonymised game round identifiers and stake amounts) to facilitate gameplay integrity and audit functions. They do not receive your full identity or financial details.

5.3 Identity Verification Services

Where ngpms uses a third-party KYC or identity verification provider to assist in document checks and age verification, the minimum necessary data (identity document images and biographic data) will be shared with that provider under a binding data processing agreement.

5.4 Regulatory and Law Enforcement Authorities

ngpms may be required to disclose personal data to relevant authorities — including financial intelligence units, law enforcement agencies, or other regulatory bodies — if required to do so by applicable law, court order, or regulatory directive. In such cases, ngpms will disclose only the data specifically required by the legal instrument.

5.5 Business Continuity

In the event of a merger, acquisition, restructuring, or transfer of all or part of the ngpms platform to a new operating entity, user data may be transferred to the successor entity as part of that transaction. Affected users will be notified of any such transfer via their registered email address prior to the change taking effect, with the option to close their account if they do not wish their data to be transferred.

6 Cookies & Tracking

ngpms.app uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by our web server when you visit the site. Cookies do not contain executable code and cannot access other files on your device.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for core platform functions such as session authentication, remembering your login state, and maintaining your account security. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language, preferred game lobby view, deposit limit reminders, and last-used payment method to improve your experience on return visits.
• Analytics cookies: Help ngpms understand how users navigate the platform — which pages are visited most frequently, which games attract the highest engagement, and where users experience friction. This data is collected in aggregated, anonymised form.
• Security cookies: Used to detect suspicious login patterns, enforce two-factor authentication sessions, and prevent cross-site request forgery (CSRF) attacks.

6.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your ngpms account and using core platform features. Analytics and functional cookies may be disabled without affecting your ability to play or transact on the platform.

6.3 No Third-Party Advertising Cookies

ngpms does not permit third-party advertising networks to place tracking or retargeting cookies on ngpms.app. We do not serve behavioural advertising and do not share cookie-derived data with ad technology companies.

7 Data Retention

ngpms retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status on the ngpms platform.
• Transaction and financial records: Retained for a minimum of five years following each transaction, in line with standard financial record-keeping obligations applicable to payment service platforms.
• KYC and identity documents: Retained for a minimum of five years from the date of account closure or the date the document was submitted, whichever is later.
• Gameplay and betting history: Retained for up to three years from the date of each session, to support dispute resolution and responsible gaming monitoring.
• Support communications: Retained for up to two years from the date of the final message in each support thread.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded users, even after account closure.
• Device and technical logs: Retained for up to 12 months from the date of collection, then anonymised or deleted.

When personal data is no longer required and no legal retention obligation applies, ngpms will either permanently delete the data from its systems or irreversibly anonymise it so that it can no longer be linked to any individual.

8 Data Security Measures

ngpms takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect against unauthorised access, accidental loss, alteration, or disclosure of personal data. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ngpms.app servers, ensuring that login credentials, financial details, and personal data cannot be intercepted in transit.
• Encrypted password storage using industry-standard hashing algorithms. ngpms never stores passwords in plain text, and our support team cannot retrieve your password — only reset it through a secure authenticated process.
• Two-factor authentication (2FA) available to all registered users and strongly recommended for account access security.
• Access controls and role-based permissions ensuring that ngpms staff can only access the minimum personal data necessary to perform their job function.
• Regular security audits and penetration testing conducted by qualified security professionals to identify and remediate potential vulnerabilities in platform infrastructure.
• Segregated data environments separating production data from development and testing environments, ensuring that real user data is never used in non-production systems.
• Incident response protocols enabling ngpms to detect, contain, and notify affected users of any confirmed data breach within a reasonable timeframe.

9 Your Privacy Rights

As a user of the ngpms platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered username and mobile number for identity verification purposes. ngpms will respond within 30 days of receiving a valid, verified request.

• Right of access: You may request a copy of all personal data ngpms holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your ngpms account.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that this right is subject to overriding legal retention obligations (see Section 7) and responsible gaming safeguards (self-exclusion records are exempt from erasure requests).
• Right to restrict processing: You may request that ngpms temporarily restricts the processing of your personal data while a dispute about its accuracy or the lawfulness of processing is resolved.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) to transfer to another service provider, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Upon receipt of a valid objection to marketing, ngpms will cease sending promotional communications within two business days.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Children's Privacy

The ngpms platform is strictly for adults aged 18 and above. ngpms does not knowingly collect, process, or retain personal data from any person under the age of 18. The platform's age verification and KYC procedures are specifically designed to prevent underage individuals from registering or using ngpms services.

If ngpms becomes aware — through any means, including parental notification, KYC review, or internal audit — that personal data has been collected from a person under 18 years of age, we will immediately suspend the associated account, purge all personal data collected from that individual from our systems (excluding any records required for regulatory compliance), and return any deposited funds to the original payment source.

11 Policy Updates

ngpms may revise this Privacy Policy from time to time to reflect changes in platform functionality, applicable law, industry standards, or our data processing practices. When we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered users via their registered email address or through an on-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how ngpms protects your personal data. Your continued use of the ngpms platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change to this policy, you may request account closure in accordance with Section 8.1 of the ngpms Terms & Conditions.

12 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ngpms handles your personal data, please get in touch with the ngpms privacy team using the contact details below. All communications should be sent in English for the fastest possible response.

Email: [email protected] (plain text — not a clickable link)

Response time: Privacy enquiries are acknowledged within one business day and fully responded to within five business days, during standard Bangladesh Standard Time (BST, UTC+6) working hours.

Postal enquiries: If you prefer to submit a privacy request in writing, please include your full registered name, username, registered mobile number, and a clear description of your request. Written requests take longer to process due to additional identity verification requirements.