Privacy Policy — How bdbagee Collects, Uses, and Protects Your Personal Data

This Privacy Policy applies to all services provided by bdbagee at bdbagee.net and any associated mobile or web applications, including the online casino, sportsbook, live dealer games, cashier, promotional system, customer support channels, and any other features offered by bdbagee to players located in Bangladesh. By creating an account or by continuing to use the bdbagee platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

bdbagee is committed to handling personal data responsibly, lawfully, and transparently. This policy has been written to be as clear and accessible as possible. If you have any questions that this document does not answer, you are encouraged to contact our Data Protection Officer (DPO) using the details in Section 9.

1 Information We Collect

bdbagee collects personal data in several ways: directly from you during registration and verification, automatically through your use of the platform, and — in limited circumstances — from trusted third-party sources. The specific categories of data we collect are set out below.

1.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth — used to verify that you are 18 years of age or older.
• Residential address in Bangladesh, including district, thana, and postcode.
• Email address — used as your primary account identifier and communication channel.
• Mobile phone number — used for account authentication and linked to your bKash, Nagad, or Rocket wallet where applicable.
• Username and encrypted password — your account access credentials stored in hashed form.

1.2 KYC & Verification Documents

• Scanned copy or clear photograph of your National Identity Card (NID), valid passport, or driving licence.
• Proof of address document such as a utility bill, bank statement, or government correspondence dated within the past three months.
• Proof of payment method — confirmation that the bKash, Nagad, Rocket, or bank account used for deposits is registered in your name.

1.3 Financial & Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method details (mobile wallet number, bank account reference).
• Transaction history including game stakes, winnings, bonuses credited, and bonus wagering progress.
• Currency denomination — all bdbagee accounts are denominated in Bangladeshi Taka (BDT).

1.4 Technical & Usage Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Session start and end timestamps, pages visited, game sessions played, and features accessed.
• Geolocation data derived from your IP address — used for fraud prevention and regulatory compliance, not for precise physical tracking.
• Log files and error reports generated during your use of the platform.

1.5 Communications Data

• Content of live chat conversations, email exchanges, and support tickets submitted to the bdbagee customer support team.
• Responses to voluntary surveys, promotional communications, and responsible gaming check-ins.

2 How We Use Your Data

bdbagee uses personal data collected from players in Bangladesh for the following purposes. Each use is tied to a lawful basis, which is detailed in Section 3.

• Account management: Creating and maintaining your bdbagee account, authenticating your identity at login, and managing your account settings and preferences.
• Age and identity verification: Confirming that all players are 18 years of age or older and that account details correspond to a real, verifiable individual. This is a strict legal requirement that bdbagee takes seriously.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfers, and processing withdrawal requests to your verified payment method.
• Fraud prevention and AML compliance: Monitoring transaction patterns, account behaviour, and device fingerprints to detect and prevent fraud, money laundering, and other financial crime.
• Responsible gaming: Tracking deposit patterns, session durations, and gaming behaviour to identify potential problem gambling indicators. bdbagee uses this data to trigger responsible gaming interventions — such as suggested deposit limit reviews — when patterns suggest a player may be at risk.
• Customer support: Maintaining a record of your support interactions so that our team can provide consistent, informed assistance across live chat, email, and other channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the bdbagee platform — including game performance, cashier flow, mobile responsiveness, and feature development for the Bangladesh market.
• Marketing communications: Where you have provided explicit consent, sending you information about bdbagee promotions, bonus offers, seasonal events (such as Eid, Pohela Boishakh, or BPL cricket season offers), and other content relevant to your account. You may withdraw this consent at any time — see Section 7.
• Legal compliance: Meeting obligations imposed by applicable law, including data retention requirements, responding to lawful requests from regulatory or law enforcement authorities in Bangladesh, and maintaining audit records.

3 Legal Basis for Processing

Every instance of personal data processing at bdbagee rests on one of the following recognised legal grounds:

• Contractual necessity: Processing that is required to fulfil bdbagee's obligations under the account agreement with you — including account registration, identity verification, payment processing, game delivery, and customer support.
• Legal obligation: Processing that bdbagee is required to carry out by law — including KYC verification, AML record-keeping, age verification, and responding to lawful requests from authorities.
• Legitimate interests: Processing carried out in pursuit of bdbagee's legitimate business interests, provided those interests are not overridden by your own rights and freedoms. This includes fraud prevention, platform security, and aggregated analytics. bdbagee conducts a balancing test before relying on legitimate interests as a basis for processing.
• Consent: Processing based on your freely given, specific, and informed consent — used primarily for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Data Sharing & Third Parties

bdbagee does not sell your personal data to any third party. However, in order to operate the platform effectively and legally, we share certain data with the following categories of trusted service providers and partners. All third-party data sharing is governed by written data processing agreements that require recipients to handle your data in accordance with applicable data protection standards.

4.1 Payment Processors

To process deposits and withdrawals, bdbagee shares transaction-relevant data (name, mobile number, amount) with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers have their own privacy policies governing their processing of your data, and bdbagee encourages you to review those policies independently.

4.2 Game Software Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the games available on the bdbagee platform. Session data — including game round identifiers and stake/return values — is processed by these providers' systems to deliver the game experience. Game studios do not receive your full identity data; only anonymised or pseudonymised session identifiers are shared for game delivery purposes.

4.3 Identity Verification & KYC Providers

bdbagee may use specialist identity verification service providers to assist with KYC and AML screening. These providers process your identity documents and biometric data (where applicable) under strict contractual obligations to use the data solely for verification purposes on behalf of bdbagee.

4.4 Analytics & Security Tools

Technical data (IP addresses, device fingerprints, session logs) may be shared with fraud detection and cybersecurity service providers for the purpose of protecting the bdbagee platform and its players from unauthorised access, bot activity, and financial fraud. Only data necessary for these specific security purposes is shared.

4.5 Legal & Regulatory Authorities

bdbagee will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or other relevant jurisdictions where required to do so by law, court order, or where disclosure is necessary to prevent or investigate suspected criminal activity. bdbagee will not disclose more information than is strictly required by the relevant legal obligation.

5 Cookies & Tracking Technologies

The bdbagee website uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, and gather analytical information about how players use the site. This section explains what types of cookies we use and your options for managing them.

5.1 Strictly Necessary Cookies

These cookies are essential for the bdbagee platform to function. They enable core features such as maintaining your login session, remembering items in your bet slip, processing deposits, and keeping the cashier secure. These cookies cannot be disabled without impairing the core functionality of the site.

5.2 Functional Cookies

Functional cookies allow bdbagee to remember your preferences — such as preferred language setting (English), notification preferences, and responsible gaming limit settings — so that you do not need to re-enter them each time you visit.

5.3 Analytical Cookies

bdbagee uses analytical cookies to understand how players navigate the platform — which pages are visited most often, where users drop off during the registration process, and which game categories are most popular among players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other parts of Bangladesh. This data is aggregated and anonymised; it does not identify you personally. Analytical cookies may be disabled without affecting core platform functionality.

5.4 Managing Your Cookie Preferences

You can manage cookie settings directly within your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Please be aware that disabling strictly necessary cookies will affect your ability to use the bdbagee platform normally, including the ability to remain logged in. For guidance on managing cookies in your browser, refer to your browser's help documentation.

6 Data Retention

bdbagee retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulation. The retention schedule set out in the table in Section 1 provides specific timeframes for each data category. Key principles governing our retention approach are:

• Active accounts: Personal and transactional data associated with an active bdbagee account is retained for the lifetime of the account and for a post-closure period as required by AML and financial record-keeping obligations.
• Closed accounts: Following account closure — whether voluntary or at bdbagee's discretion — identity and financial data is retained for a minimum of five to seven years to comply with AML regulations applicable in Bangladesh and in the jurisdictions in which our payment processors operate.
• Self-excluded accounts: Where a player has voluntarily self-excluded from bdbagee, a record of the self-exclusion is retained for the full duration of the exclusion period and for a period thereafter to prevent the re-opening of the account during the exclusion window.
• Technical & analytical data: Anonymised or aggregated analytical data may be retained indefinitely for platform improvement purposes, as it no longer constitutes personal data once identifiers have been removed.
• Marketing consent records: Records of your consent to receive marketing communications — and any subsequent withdrawal of that consent — are retained for as long as they may be relevant to a complaint or regulatory inquiry, typically seven years.

When the applicable retention period expires, bdbagee will either securely delete the personal data or anonymise it so that it can no longer be attributed to you. Secure deletion methods are applied to both digital records and physical document copies where applicable.

7 Your Rights & Choices

As a bdbagee player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request". bdbagee will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of access: You have the right to request a copy of the personal data bdbagee holds about you, together with information about how it is being used. This is sometimes called a Subject Access Request (SAR). bdbagee will provide the information in a structured, readable format.
• Right to rectification: If any personal data held by bdbagee about you is inaccurate or incomplete, you have the right to request that it be corrected. Name corrections and address updates can often be handled directly via the account settings panel or through live chat support.
• Right to erasure: You may request that bdbagee delete your personal data — the so-called "right to be forgotten". This right is not absolute; bdbagee may be required by law to retain certain data (particularly KYC and financial records) for statutory retention periods even after account closure. Where erasure is not possible in full, bdbagee will explain the reason and delete what it is legally able to delete.
• Right to restrict processing: You may ask bdbagee to restrict the processing of your personal data in certain circumstances — for example, while a complaint is being resolved or where you contest the accuracy of data held about you. During a restriction, your data may be stored but not actively used.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bdbagee provide your personal data in a machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention purposes. bdbagee will consider your objection and cease processing unless there are compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time by updating your notification preferences in the account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

8 Data Security

bdbagee implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption on all data transmissions between your device and bdbagee servers, ensuring that data cannot be intercepted in transit.
• Password hashing using industry-standard algorithms — bdbagee never stores your password in plaintext.
• Two-factor authentication (2FA) available to all registered players as an additional layer of account security.
• Access controls — internal access to personal data is restricted to bdbagee staff whose roles require it, and is governed by the principle of least privilege.
• Regular security audits conducted on platform infrastructure, including penetration testing of the cashier, login system, and KYC document storage.
• Secure document storage — KYC documents are stored in encrypted, access-controlled repositories and are not retained on general-purpose file systems.

While bdbagee takes security seriously and applies robust measures, no online system can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, bdbagee will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent further harm.

9 Contact & Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or about how bdbagee handles your personal data, you are encouraged to contact us directly in the first instance. bdbagee's Data Protection Officer (DPO) oversees compliance with this policy and is your primary point of contact for all data protection matters.

• Contact method: Email only — [email protected] (subject line: "Privacy / DPO Enquiry")
• Live chat: Available 24/7 via the bdbagee platform — ask to be connected to the data protection team
• Response time: bdbagee aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 calendar days
• Language: All privacy and data rights correspondence is handled in English

bdbagee takes privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction. bdbagee will always cooperate with such authorities in good faith.