Privacy Policy — ngpimc Online Casino

ngpimc collects personal data from you in a number of ways — directly when you provide it to us, automatically when you use the platform, and occasionally from trusted third-party sources as part of identity verification and fraud prevention processes. The categories of data we collect are described below.

Data You Provide Directly:

• Registration data: Full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, or Khulna), email address, and chosen username.
• Identity verification documents: Copies of your national identity card, passport, or other government-issued documents submitted during KYC (Know Your Customer) verification.
• Payment data: Details of the payment methods linked to your account, such as bKash wallet numbers, Nagad account references, Rocket identifiers, bank account details for Dutch-Bangla Bank or BRAC Bank transfers, and card details for Visa or Mastercard transactions. Full card numbers are not stored by ngpimc — they are handled exclusively by our PCI-DSS compliant payment processors.
• Communication records: The content of messages you send to our support team via live chat or email, including any attachments or screenshots you provide when raising a query or complaint.
• Responsible gaming preferences: Deposit limits, session time limits, self-exclusion elections, and cooling-off period requests that you set through your account.

Data Collected Automatically:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, game sessions initiated, betting history, session duration, login timestamps, and navigation paths through the ngpimc platform.
• Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 4 of this Privacy Policy.

Data From Third Parties:

• Identity verification providers may share the results of document checks and database matches with ngpimc as part of our KYC process.
• Fraud detection partners may provide risk signals and transaction analysis results to help us identify suspicious activity on the platform.
• Payment processors confirm transaction statuses — including successful deposits and withdrawal completions — directly to ngpimc.

ngpimc processes your personal data only for defined, legitimate purposes. The table below summarises the primary ways in which your data is used and the legal basis for each processing activity.

ngpimc will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by applicable law, obtaining your consent.

ngpimc does not sell your personal data. We share data only with the categories of third parties described below, and only to the extent strictly necessary for the stated purpose.

• Payment processors: We share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing partners (Visa, Mastercard) to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: During KYC checks, we may share identity document data with third-party verification specialists to confirm the authenticity of documents and cross-reference against sanction lists.
• Fraud prevention partners: Technical data such as IP addresses, device fingerprints, and transaction patterns may be shared with fraud detection services to protect the security of your account and the broader ngpimc platform.
• Game providers: When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited session and account data may be shared with that studio to facilitate gameplay and record results. Game providers are contractually required to handle this data in accordance with applicable data protection standards.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when we are legally compelled to do so, or when disclosure is necessary to protect the rights, property, or safety of ngpimc, our players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ngpimc business, player data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will continue to be honoured.

ngpimc uses cookies and similar tracking technologies (such as web beacons and local storage objects) to provide a functional, secure, and personalised experience on the platform. This section explains what types of cookies we use and how you can manage your preferences.

Types of Cookies We Use:

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable core features such as account login sessions, security token validation, and the retention of your basket or bet slip between pages. You cannot opt out of strictly necessary cookies without breaking the platform's core functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the ngpimc platform — for example, which pages are visited most frequently and where players encounter errors. This data helps us continuously improve the user experience.
• Functional cookies: These cookies remember your preferences — such as your chosen language, preferred odds format, or saved deposit method — so that you do not need to reconfigure settings on each visit.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing attempts, and suspicious session behaviour. These cookies are a core part of our platform security infrastructure.

Most web browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies at the browser level. Please note that blocking strictly necessary cookies will prevent you from logging into your ngpimc account and using core platform features.

ngpimc does not use third-party advertising cookies or social media tracking pixels. Any analytics data collected through performance cookies is aggregated and anonymised before analysis and is not linked back to individual player profiles.

ngpimc implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security approach includes, but is not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ngpimc platform, including login pages, account management pages, and payment flows.
• Encrypted storage for sensitive data at rest, including identity document copies and payment reference data. Encryption keys are managed under strict access controls.
• Multi-factor authentication options available for player accounts to add an additional layer of protection beyond username and password.
• Role-based access controls ensuring that ngpimc staff can access only the data necessary for their specific job function. Access to sensitive player data is logged and regularly audited.
• Intrusion detection systems and continuous monitoring of platform traffic for anomalous behaviour, unauthorised access attempts, and potential data exfiltration events.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, ngpimc will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

You also have a role to play in keeping your account secure. We strongly recommend using a unique, strong password for your ngpimc account, enabling any available multi-factor authentication, and logging out after each session — especially when using a shared or public device.

ngpimc retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, to maintain the player relationship, or to comply with applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active account data (registration details, account preferences, communication history): Retained for the duration of your active account relationship with ngpimc.
• Transaction records (deposits, withdrawals, betting history): Retained for a minimum of five years following the date of the transaction, in accordance with financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years following the closure of your account, in line with anti-money-laundering regulatory requirements.
• Support communications: Retained for three years following the resolution of the relevant query or complaint, to support dispute resolution and quality assurance.
• Analytics and usage data (anonymised): May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.
• Marketing consent records: Retained for the duration of your active consent and for a reasonable period after withdrawal of consent to demonstrate compliance.

When a retention period expires, data is securely deleted using industry-standard deletion methods, or anonymised so that it can no longer be linked to an identifiable individual. If you request early deletion of your data under your privacy rights (see Section 7), ngpimc will assess the request and delete or anonymise data wherever this is not prevented by a continuing legal obligation.

As a player using the ngpimc platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting the ngpimc support team via live chat or email at [email protected].

• Right of access: You have the right to request a copy of the personal data ngpimc holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly. Many account details can also be updated directly via your account settings.
• Right to erasure: Also known as the "right to be forgotten", you may request that ngpimc delete personal data we hold about you. This right is subject to limitations where continued retention is required by law — for example, transaction records retained for anti-money-laundering compliance.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you object to processing based on legitimate interest.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a structured, commonly used copy of the personal data you have provided to ngpimc, in a machine-readable format, for transfer to another service.
• Right to object: You have the right to object to the processing of your personal data where ngpimc relies on legitimate interest as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

ngpimc will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. Identity verification may be required before we fulfil a request, to ensure we do not disclose data to an unauthorised person.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how ngpimc handles your personal data, please contact our support team using the details below.

Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week, with an average response time of under 3 minutes.

When contacting us about a privacy matter, please include your registered username or account email address so that we can locate your account and respond efficiently. ngpimc aims to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days.

If you are not satisfied with ngpimc's response to your privacy concern, you have the right to escalate your complaint to an appropriate consumer protection or data protection authority in Bangladesh. ngpimc will cooperate fully with any formal investigation or inquiry by a competent authority.

ngpimc may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Any material changes will be communicated to registered players via the email address on their account and published on this page with a revised effective date. The current version of this Privacy Policy was last updated on 1 January 2026.