Privacy Policy — How bd bagi Protects Your Personal Data

1. Data We Collect

1.1 Registration Data

When you create a bd bagi account, we collect the personal information you provide in the registration form. This includes your full legal name, date of birth, residential address in Bangladesh, email address, and the mobile phone number you register with. This information is required to create and maintain your account and to comply with Know Your Customer (KYC) obligations.

1.2 Identity Verification Data

Before processing your first withdrawal, bd bagi is required to verify your identity. During this process, we may collect copies of government-issued identity documents — typically your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request a selfie or a photograph holding your identity document for liveness verification purposes. These documents are stored securely and used solely for identity verification and anti-fraud purposes.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, bd bagi records the transaction details including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the registered mobile number or bank account associated with the transaction, the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction in Bangladesh Standard Time (BST), and the transaction reference number. This data is retained for financial audit, fraud prevention, and regulatory compliance purposes.

1.4 Gameplay and Betting Data

bd bagi automatically records data relating to your use of the platform's games and betting markets. This includes the games you play, the amounts wagered, the outcomes of each game session, the sports markets you bet on, and the duration of each session. This data is used to maintain accurate account balances, resolve disputes, improve the platform, and fulfil responsible gaming obligations.

1.5 Technical and Device Data

When you access bd bagi, our servers automatically collect certain technical data including your IP address, browser type and version, device type (desktop, mobile, or tablet), operating system, referring URL, and session timestamps. This information is used for security monitoring, fraud detection, and platform optimisation. We do not use this data to build advertising profiles.

1.6 Communication Data

If you contact bd bagi's support team via email or live chat, we retain a record of that communication including the content of messages exchanged, timestamps, and the resolution reached. This data is used to provide consistent customer support and to train our support team to handle similar queries more effectively.

2. How We Use Your Data

2.1 Account Management and Service Delivery

The primary purpose for which bd bagi processes your personal data is to provide you with the services you have requested — namely, operating and maintaining your player account, processing your deposits and withdrawals in BDT, delivering casino games and sports betting markets, and communicating important account-related information to you. Without processing your personal data, bd bagi cannot provide these services.

2.2 Identity Verification and Fraud Prevention

bd bagi uses your registration data, identity documents, and transaction data to verify your identity, confirm that you meet the 18+ age requirement, and detect and prevent fraudulent activity on the platform. This includes cross-referencing your information against internal fraud databases and, where required, third-party identity verification services operating in Bangladesh.

2.3 Responsible Gaming Compliance

Your gameplay data — including session durations, wagering patterns, and deposit frequency — is analysed by bd bagi's responsible gaming system to identify indicators of potentially problematic gambling behaviour. Where such indicators are detected, bd bagi may contact you with responsible gaming resources, apply cooling-off periods, or restrict account activity in accordance with our Responsible Gaming policy. This processing is carried out in your interest and is a fundamental part of how bd bagi operates as a responsible platform.

2.4 Customer Support

Communication data is used by our support team to respond to your enquiries, resolve disputes, process account closure requests, and follow up on outstanding issues. We retain communication records to ensure consistency of service when you contact us multiple times about the same matter.

2.5 Legal and Regulatory Compliance

bd bagi is required to retain certain categories of personal data and transaction records to comply with applicable anti-money laundering (AML) obligations and general financial record-keeping requirements. Data retained for legal compliance purposes is held securely in isolated storage and is accessed only by authorised compliance personnel.

2.6 Platform Improvement and Analytics

Aggregated, anonymised gameplay and technical data is used to improve the bd bagi platform — including optimising page load times, identifying popular game categories among Bangladeshi players, and improving the layout and usability of the sportsbook. This analysis is conducted on anonymised datasets and does not involve identifying individual players.

2.7 Marketing Communications

If you have opted in to receive promotional communications from bd bagi, we will use your email address to send you information about relevant bonuses, seasonal promotions (such as Eid or Pohela Boishakh offers), and new game releases. You may withdraw your marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for account management, compliance, or fraud prevention purposes.

3. Data Sharing & Third Parties

3.1 Our Commitment: No Sale of Personal Data

bd bagi does not sell, rent, barter, or otherwise transfer your personal data to any third party for commercial gain. Your data is shared only in the limited circumstances described in this section, and only to the extent necessary for the specific purpose stated.

3.2 Payment Processing Partners

To process your deposits and withdrawals, bd bagi shares the minimum necessary transaction data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and our partner banks such as Dutch-Bangla Bank and BRAC Bank. These partners receive only the data required to process the specific transaction and are contractually prohibited from using that data for any other purpose.

3.3 Game Technology Providers

bd bagi's casino and sportsbook products are powered by third-party game technology providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session identifiers to facilitate game delivery. They do not receive your full name, address, payment method details, or identity documents.

3.4 Identity Verification Services

To fulfil KYC obligations, bd bagi may use third-party identity verification service providers. Where this is the case, your name, date of birth, and a copy of your identity document will be transmitted to that provider over an encrypted connection for verification purposes only. The provider is contractually required to delete the data once verification is complete.

3.5 Legal Obligations

bd bagi may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so. We will not disclose data beyond what is specifically required by the relevant legal instrument. Where permitted by law, bd bagi will inform you of such a disclosure request unless doing so would prejudice an investigation or legal proceeding.

3.6 Business Succession

In the event of a merger, acquisition, or sale of all or part of bd bagi's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bd bagi will notify affected players and ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this Privacy Policy.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit — such as your login session state or preferred language — so that the site can function correctly during subsequent visits. Cookies do not contain executable code and cannot be used to access other files on your device.

4.2 Cookies Used by bd bagi

bd bagi uses a limited set of cookies for the following purposes:

• Essential Session Cookies: These cookies maintain your login session while you are using the platform. Without these cookies, you would be logged out every time you navigate to a new page. They are deleted automatically when you close your browser.
• Security Cookies: bd bagi uses short-lived security tokens stored as cookies to protect against cross-site request forgery (CSRF) attacks. These cookies are generated per-session and cannot be used to track you across other websites.
• Analytics Cookies: bd bagi uses anonymised analytics cookies to understand aggregate patterns of platform usage — such as which pages are most frequently visited and which device types are most commonly used by Bangladeshi players. These cookies do not identify you personally.
• Preference Cookies: If you set display preferences within the bd bagi platform (such as table layout options in the casino lobby), preference cookies remember those choices for your next visit.

4.3 What We Do Not Use

bd bagi does not use third-party advertising cookies, cross-site tracking pixels, browser fingerprinting, or any similar technology designed to track your behaviour across websites you visit outside of bd-bagi.com. We do not participate in advertising networks and your browsing behaviour on other sites is not visible to or used by bd bagi.

4.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that blocking essential session cookies will prevent you from logging in to your bd bagi account and using the platform's services. Most modern browsers provide cookie management tools in their settings menus. Refer to your browser's help documentation for specific instructions.

5. Data Security Measures

5.1 Encryption in Transit

All data transmitted between your device and the bd bagi platform is protected by 256-bit Transport Layer Security (TLS) encryption. This applies to every page of the platform — including the login page, the casino lobby, the sportsbook, and the account management section. The presence of HTTPS in your browser's address bar confirms that the connection is encrypted.

5.2 Encryption at Rest

Sensitive personal data stored on bd bagi's servers — including identity documents, payment method details, and account credentials — is encrypted at rest using industry-standard encryption algorithms. Plaintext passwords are never stored; passwords are hashed using a strong one-way algorithm before storage.

5.3 Access Controls

Access to personal data within bd bagi's systems is governed by strict role-based access controls. Only employees and contractors who require access to personal data in order to perform their specific job function are granted that access. Access privileges are reviewed periodically and revoked immediately when an employee's role changes or their employment ends.

5.4 Security Monitoring

bd bagi operates continuous security monitoring on its infrastructure to detect unusual access patterns, potential data breaches, and attempted intrusions. Automated alerts are configured to notify our security team of anomalous activity in real time. Penetration testing is conducted periodically to identify and remediate vulnerabilities before they can be exploited.

5.5 Data Breach Response

In the unlikely event of a data security incident that affects your personal data, bd bagi will assess the scope and severity of the incident as quickly as possible. Where the incident is likely to result in a risk to your rights or interests, we will notify you at the email address registered on your bd bagi account within a reasonable timeframe. The notification will describe the nature of the incident, the categories of data affected, and the steps bd bagi is taking to address it.

6. Data Retention Policy

6.1 Active Accounts

While your bd bagi account is active, we retain all personal data associated with your account for the purpose of providing uninterrupted service, maintaining an accurate transaction history, and complying with ongoing legal obligations. You may request a copy of the personal data held on your account at any time by contacting [email protected].

6.2 Closed Accounts

When you request closure of your bd bagi account, your account data is flagged for retention for a period of 24 months following closure. This retention period exists to fulfil potential legal obligations, to allow resolution of any disputes that arise after account closure, and to support fraud prevention measures. After 24 months, your account data is anonymised — personal identifiers are removed and the remaining data is retained only in aggregated, non-identifiable form for statistical purposes.

6.3 Financial Records

Transaction records — including deposit and withdrawal history — are retained for a minimum of 5 years from the date of each transaction, regardless of whether the associated account has been closed. This retention period is determined by financial record-keeping requirements applicable to payment processing operations. These records are stored in isolated, access-controlled storage and are not used for marketing or profiling purposes.

6.4 Identity Documents

Copies of identity documents submitted during KYC verification are retained for the duration of the account's active period plus 24 months following account closure. After this period, identity document copies are permanently deleted from bd bagi's systems. In circumstances where a fraud investigation is ongoing at the time the retention period would otherwise expire, retention may be extended until the investigation is concluded.

6.5 Communication Records

Customer support communications — including email exchanges and live chat transcripts — are retained for 12 months from the date of the final message in each conversation. After 12 months, communication records are deleted unless they relate to an unresolved dispute or an ongoing investigation, in which case retention continues until resolution.

7. Your Privacy Rights

7.1 Right of Access

You have the right to request a copy of the personal data that bd bagi holds about you. To submit an access request, contact [email protected] with the subject line "Data Access Request" from the email address registered on your bd bagi account. We will respond within 14 days of receiving your request and provide your data in a structured, commonly used, machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data held on your bd bagi account is inaccurate or incomplete, you have the right to request its correction. For most account details, you can update your information directly through the account settings section of the platform. For changes to identity-verified information (such as your legal name or date of birth), you will be required to provide supporting documentation to confirm the correction.

7.3 Right to Erasure

You have the right to request deletion of your personal data where that data is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis for processing applies, or where the data has been unlawfully processed. Please note that bd bagi's legal obligation to retain financial records and KYC documentation means that a full erasure of all data cannot always be fulfilled immediately. In such cases, bd bagi will explain which data must be retained and for how long, and will anonymise all other data promptly.

7.4 Right to Withdraw Marketing Consent

Where you have previously opted in to receive marketing communications from bd bagi, you have the right to withdraw that consent at any time. You can do this by contacting [email protected]. Marketing communications will cease within 5 business days of your withdrawal request being processed. Withdrawal of marketing consent does not affect the validity of processing carried out while consent was in place.

7.5 Right to Lodge a Complaint

If you believe that bd bagi has handled your personal data in a manner that violates your privacy rights, you have the right to raise a complaint directly with us by contacting [email protected]. We are committed to resolving privacy complaints fairly and promptly, and will provide a written response within 21 days of receiving your complaint.

8. Contact & Privacy Complaints

8.1 Privacy Contact Point

For all privacy-related enquiries, requests, and complaints, bd bagi's designated privacy contact point is reachable via email. Please direct all privacy correspondence to [email protected] with a subject line that clearly describes the nature of your enquiry (for example: "Data Access Request", "Marketing Opt-Out", or "Privacy Complaint"). Plain-text email is the only accepted contact method for privacy matters — bd bagi does not accept privacy requests submitted via live chat or phone.

8.2 Response Timeframes

bd bagi commits to the following response timeframes for privacy-related correspondence:

• Data access requests: Response with data copy within 14 days of receipt.
• Rectification requests: Confirmation of correction within 7 days of receipt and supporting documentation where applicable.
• Erasure requests: Initial response within 7 days explaining what data can be erased immediately and what must be retained, and why.
• Marketing opt-out: Confirmed cessation of marketing communications within 5 business days.
• Privacy complaints: Written response within 21 days of receipt.

8.3 Policy Updates

bd bagi may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the clarity of our disclosures. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the change is significant, notify registered players via their account email address. We encourage you to review this Privacy Policy periodically to stay informed about how bd bagi protects your information.