nepk Privacy Policy —
How We Protect Your Data

nepk collects personal information from you in the course of providing our online gaming platform services. The categories of information we collect, the specific data points within each category, and the purpose for which each is collected are set out below.

1.1 Registration and Account Data

When you create a nepk account, we collect the information you provide directly in the registration form. This includes:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address (used for account verification, transactional notifications, and support communications).
• Mobile phone number (used for SMS-based two-factor authentication and account recovery).
• Residential address, including division, district, and postal code within Bangladesh.
• Username and encrypted password (passwords are stored as one-way hashed values and are never readable by nepk staff).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations — which are a condition of processing withdrawal requests — we collect copies of identity and address verification documents. These may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (data page photograph).
• Driver's licence (where used as an alternative identity document).
• Proof of address: a utility bill, bank statement, or government-issued correspondence dated within the past three months, showing your name and residential address.
• Source of funds documentation where enhanced due diligence is required.

KYC documents are stored in an encrypted document management system with restricted staff access. They are retained for a minimum period in accordance with our data retention obligations described in Section 5.

1.3 Payment and Transaction Data

To process deposits and withdrawals, nepk collects transaction-related data. This includes:

• Payment method identifier: your bKash wallet number, Nagad account, Rocket number, Upay account, Visa or Mastercard last four digits, or bank account reference (as applicable to your chosen method).
• Transaction amounts, timestamps, and reference codes for all deposits and withdrawals.
• Transaction history within your nepk account, including all gameplay stakes and winnings.

nepk does not store full card numbers, CVV codes, or full bank account numbers. Full payment credentials are processed by our payment gateway partners under their own PCI-DSS compliance obligations.

1.4 Gameplay and Behavioural Data

In the course of your use of the platform, nepk automatically records:

• Games played, bet amounts, game outcomes, session durations, and win/loss records.
• Bonus claims, wagering activity related to promotions, and promotional eligibility history.
• Responsible gaming interactions: use of deposit limits, session timers, cooling-off periods, and self-exclusion requests.
• Customer support interactions: chat transcripts, email correspondence, and support ticket records.

1.5 Technical and Device Data

When you access the nepk platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geolocation (used for fraud detection and to verify that you are accessing from Bangladesh).
• Device type, operating system version, and browser type and version.
• Unique device identifiers and mobile advertising identifiers (where applicable).
• Pages visited, features accessed, clickstream data, and session timestamps.
• Referring URL (the web page from which you navigated to nepk.app).

nepk uses the personal information it collects for the specific purposes set out below. We do not use your data for purposes that are incompatible with those listed here without first obtaining your explicit consent or providing advance notice.

2.1 Platform Operation

• Creating and maintaining your nepk account.
• Processing deposits and withdrawals through your chosen payment method.
• Making games, betting markets, and other platform features available to you.
• Calculating and crediting winnings, bonuses, and promotional rewards to your account.
• Providing customer support and responding to your enquiries.

2.2 Legal and Compliance Obligations

• Verifying your age and identity to comply with our 18+ policy and KYC obligations.
• Monitoring transactions for signs of money laundering, fraud, or other financial crime, as required by applicable anti-money laundering standards.
• Retaining transaction and account records for the minimum periods required by applicable law.
• Responding to lawful requests from competent authorities, courts, or regulatory bodies.

2.3 Security and Fraud Prevention

• Detecting, investigating, and preventing unauthorised access to accounts.
• Identifying and acting on suspected bonus abuse, multi-accounting, or collusion.
• Monitoring gameplay patterns for signs of problem gambling to support our responsible gaming obligations.
• Ensuring the integrity of our platform against bots, automated tools, and other exploitation techniques.

2.4 Communications

• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts to your registered email or mobile number.
• Sending promotional communications about bonuses, new games, and special offers — only where you have opted in to marketing communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].
• Notifying you of material changes to these Terms or this Privacy Policy.

2.5 Platform Improvement and Analytics

nepk uses aggregated, anonymised behavioural and technical data to understand how players use the platform, identify areas for improvement, and make informed decisions about new features and game offerings. This analytics processing does not involve making decisions about individual players based on automated profiling.

nepk shares personal data with the following categories of third parties, in the circumstances and for the purposes described:

3.1 Payment Processing Partners

To process your deposits and withdrawals, nepk shares the minimum necessary payment data with our payment gateway partners, including the operators of bKash, Nagad, Rocket, Upay, and our card processing partners for Visa and Mastercard transactions. These partners receive only the data required to execute the specific transaction and are bound by their own applicable privacy and security standards.

3.2 Game Content Providers

Games hosted on the nepk platform are provided under licence from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a session token and bet amounts) in order to deliver game content. They do not receive your full account profile, KYC documents, or payment method details. Game providers operate under their own privacy and data security obligations as licensors.

3.3 Identity Verification Services

nepk may use third-party identity verification service providers to assist with KYC document checking and age verification processes. Such providers receive the minimum document data necessary to complete verification and operate under binding data processing agreements with nepk.

3.4 Legal and Regulatory Disclosure

nepk will disclose your personal data to competent law enforcement agencies, courts, regulators, or other public authorities where required to do so by applicable law, valid legal process, or in order to protect the legal rights, property, or safety of nepk, its players, or the public. nepk will, where legally permitted to do so, endeavour to notify the affected account holder prior to making such a disclosure.

3.5 Business Transfers

In the event that nepk undergoes a merger, acquisition, restructuring, or sale of all or a material portion of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will provide advance notice of any such transfer that affects your data and will ensure that the receiving entity is bound by privacy protections at least as stringent as those in this policy.

3.6 No Third-Party Marketing

nepk does not share your personal data with any third party for that party's own marketing, advertising, or commercial purposes. We do not participate in data broker programmes, third-party advertising networks, or any arrangement under which your personal data is monetised for commercial gain by an external party.

nepk uses cookies and similar technologies (collectively "cookies") on the platform to ensure proper operation, remember your preferences, maintain session security, and gather aggregated usage analytics. This section describes what types of cookies we use, what they do, and how you can manage them.

4.1 What Are Cookies

A cookie is a small text file placed on your device by a website when you visit it. Cookies help websites remember information about your visit — such as your preferred language, login status, and session state — so that the website functions correctly and you do not need to re-enter the same information repeatedly.

4.2 Types of Cookies We Use

nepk does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking cookies of any kind.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, or block cookies. Please note that disabling strictly necessary cookies will prevent the nepk platform from functioning correctly — you will not be able to log in, play games, or process transactions if these cookies are blocked. Instructions for managing cookies in common browsers are available in the browser's help documentation.

nepk retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, maintain compliance with applicable legal and regulatory obligations, and resolve any disputes that may arise in connection with your account.

5.1 Retention Schedule

5.2 Data Storage Location

All personal data collected by nepk is stored on secure servers. nepk takes reasonable steps to ensure that any international transfer of personal data is conducted under appropriate contractual safeguards that provide a level of data protection equivalent to that described in this policy.

5.3 Secure Deletion

When the applicable retention period for a data category has elapsed, nepk will securely delete or permanently anonymise the relevant data. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes without further notice.

As a player on the nepk platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or by writing to [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and fulfil it within 30 calendar days. In cases of exceptional complexity, the fulfilment period may be extended by up to a further 30 days, with prior notice to you.

6.1 Right of Access

You have the right to request a copy of the personal data that nepk holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). nepk will provide this information in a clear, structured format at no charge for the first request in any 12-month period.

6.2 Right to Rectification

If you believe that any personal data nepk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as updating your email address or phone number), you may also make changes directly through your account settings dashboard.

6.3 Right to Erasure

You may request that nepk delete your personal data where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent (where consent is the basis for processing); or you object to processing and there is no overriding legitimate interest. This right is subject to nepk's legal retention obligations — data that must be kept to comply with anti-money laundering or other regulatory requirements cannot be erased until the applicable retention period has elapsed.

6.4 Right to Data Portability

Where nepk processes your personal data on the basis of your consent or the performance of a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to have that data transferred to another provider where technically feasible.

6.5 Right to Object to Marketing

You have the right to opt out of receiving promotional and marketing communications from nepk at any time. You may exercise this right by clicking the unsubscribe link in any marketing email, updating your communication preferences in your account settings, or by writing to [email protected]. Opting out of marketing does not affect the receipt of transactional communications (such as deposit confirmations or security alerts), which are essential to the operation of your account.

6.6 Right to Lodge a Complaint

If you believe that nepk has not handled your personal data in accordance with this Privacy Policy, you have the right to lodge a complaint. We encourage you to contact us in the first instance at [email protected] so that we can investigate and resolve the matter directly. We aim to respond to all privacy complaints within 14 business days.

nepk takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures are reviewed and updated on a regular basis in line with evolving best practices.

7.1 Technical Safeguards

• TLS/SSL Encryption: All data in transit between your device and the nepk platform is encrypted using TLS 1.2 or higher. The nepk.app domain enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm (bcrypt). Plain-text passwords are never stored or visible to nepk staff.
• Two-Factor Authentication: SMS OTP-based 2FA is available to all account holders and strongly recommended. 2FA significantly reduces the risk of account compromise even if your password is exposed.
• Encrypted Document Storage: KYC identity documents are stored in an AES-256-encrypted document management system with role-based access controls. Access is limited to specifically authorised compliance personnel.
• Fraud Detection Systems: Automated systems monitor account login patterns, transaction behaviour, and gameplay activity in real time to detect and flag anomalous behaviour indicative of account compromise or fraud.

7.2 Organisational Safeguards

• Access to personal data is restricted to nepk staff and contractors who require it to perform their defined job functions. All such personnel operate under confidentiality obligations.
• nepk conducts regular internal reviews of data handling practices and access logs.
• Third-party service providers who process personal data on nepk's behalf are subject to due diligence assessment and binding data processing agreements before access is granted.

7.3 Your Responsibilities

While nepk implements robust security measures, the security of your account also depends on actions you take. You are responsible for: keeping your password confidential and not sharing it with any other person; enabling two-factor authentication on your account; logging out of the platform when using shared or public devices; and notifying nepk immediately if you suspect any unauthorised access to your account. nepk accepts no liability for security breaches that result from your failure to maintain appropriate account security practices.

7.4 Security Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and interests, nepk will notify affected account holders without undue delay, and in any event within 72 hours of becoming aware of the breach. The notification will include a description of the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which nepk handles your personal data, please contact our support team using the details below. We are committed to handling all privacy-related enquiries promptly and transparently.

8.1 Updates to This Policy

nepk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as a change to the categories of data collected, a new data sharing arrangement, or a change to your rights — nepk will provide advance notice via a prominent notice on the platform or by email to your registered address at least 14 days before the changes take effect. The date at the top of this policy reflects the date of the most recent review. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

8.2 Children's Privacy

The nepk platform is strictly for adults aged 18 and over. nepk does not knowingly collect personal data from any person under the age of 18. If we become aware that an account has been created by or on behalf of a person under 18, that account will be immediately suspended, all data associated with the account will be deleted, and any funds in the account will be returned to the original payment source where possible. If you have reason to believe that a minor has created a nepk account, please contact us immediately at [email protected].

8.3 Links to Third-Party Services

The nepk platform may contain references to or integrations with third-party payment services (bKash, Nagad, Rocket, Upay , Visa, Mastercard) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). These third-party services operate under their own privacy policies, which are separate from and independent of this Privacy Policy. nepk is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the nepk platform.