bdbagi Privacy Policy

1. Introduction

1.1 bdbagi ("the Platform", "we", "us", "our") operates the website at https://bdbagi.club and provides online sports betting, casino gaming, and related services to adult players in Bangladesh. We understand that your personal information is important, and we are committed to handling it with care, transparency, and in accordance with applicable data protection principles.

1.2 This Privacy Policy describes the categories of personal data we collect about you, the purposes for which we use that data, the legal bases on which we rely, the circumstances in which we may share it with third parties, and the rights you have in relation to your personal information. Please read this document carefully alongside our Terms & Conditions.

1.3 This Privacy Policy applies to all users of the bdbagi platform, whether you are a registered account holder, a visitor browsing the site without an account, or a person who contacts us through any support channel. If you are using the platform on behalf of another person, you represent that you have obtained their consent to provide their data to us and to the processing described in this Policy.

2. Data Controller

2.1 For the purposes of this Privacy Policy, bdbagi acts as the data controller in respect of the personal information it collects directly from players through the platform. As data controller, bdbagi determines the purposes and means of processing your personal data.

2.2 Where bdbagi engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification services — those providers act as data processors and are bound by contractual obligations to process data only on bdbagi's instructions and to maintain appropriate security measures.

2.3 For all privacy-related queries, requests, or complaints, you may contact bdbagi directly. Contact details are provided in Section 15 of this Policy.

3. Data We Collect

3.1 bdbagi collects several categories of personal data, depending on how you interact with the platform. The main categories are set out below.

3.1 Identity & Contact Data

When you register an account on bdbagi, we collect your full legal name, date of birth, username, email address, and phone number. If you are required to complete identity verification (KYC), we may also collect copies of government-issued identity documents such as your National ID Card, passport, or driving licence.

3.2 Financial Data

To process deposits and withdrawals, bdbagi collects financial information such as your bKash mobile wallet number, Nagad account number, Rocket account number, Upay account details, or bank account information (City Bank, BRAC Bank, or similar). We do not store full payment card numbers on our servers; card processing is handled by PCI-DSS compliant third-party payment providers.

3.3 Transaction Data

We maintain records of all deposits, withdrawals, bets placed, game sessions, bonus activations, and account balance movements associated with your bdbagi account. This data is retained for fraud prevention, dispute resolution, regulatory compliance, and responsible gaming monitoring purposes.

3.4 Technical & Usage Data

When you access the bdbagi platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, session duration, and click-stream data. This information is used to maintain the security and performance of the platform and to improve the user experience.

3.5 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and any attachments you provide, for quality assurance, training, and dispute resolution purposes.

3.6 Responsible Gaming Data

Where you use our responsible gaming tools — such as setting a deposit limit, requesting a time-out, or self-excluding — we record those requests and the associated restrictions applied to your account. This data is processed to fulfil our responsible gaming obligations and to protect your wellbeing as a player.

4. How We Collect Your Data

4.1 bdbagi collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, placing a bet, or contacting the support team.
• Automated technologies: Technical and usage data collected automatically when you access the platform, via cookies, server logs, and similar tracking technologies (see Section 8).
• Third-party sources: In certain circumstances, we may receive data about you from third parties, such as identity verification service providers, fraud prevention databases, and payment processors, in order to verify your identity, detect fraud, or comply with anti-money laundering obligations.

5. Legal Basis for Processing

5.1 bdbagi processes your personal data on the following legal bases, depending on the specific purpose of the processing:

Purpose of Processing	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Identity verification (KYC)	Legal obligation; legitimate interests (fraud prevention)
Anti-money laundering checks	Legal obligation
Fraud detection and prevention	Legitimate interests of bdbagi and its players
Responsible gaming monitoring and tools	Legal obligation; legitimate interests
Customer support communications	Performance of a contract; legitimate interests
Platform security and performance	Legitimate interests of bdbagi
Sending promotional communications	Consent (where given); legitimate interests
Statistical analysis and service improvement	Legitimate interests of bdbagi

6. How We Use Your Data

6.1 bdbagi uses the personal data it collects for the following purposes:

• To create and manage your bdbagi account, verify your identity, and maintain accurate account records.
• To process your deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and other supported payment channels.
• To settle bets, credit winnings, apply bonuses, and calculate and deduct applicable charges in accordance with the Terms & Conditions.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited conduct on the platform.
• To comply with legal and regulatory obligations applicable to the operation of the bdbagi platform.
• To administer responsible gaming tools, monitor player behaviour for signs of problem gambling, and enforce self-exclusion or deposit limit requests.
• To provide customer support, investigate complaints, and resolve disputes.
• To send you service communications such as account notifications, transaction confirmations, and security alerts.
• To send you promotional communications about bdbagi bonuses, game launches, and special events — where you have consented or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.
• To improve the performance, reliability, and user experience of the bdbagi platform through analysis of aggregated usage data.

7. Sharing Your Data

7.1 bdbagi does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances.

7.2 bdbagi may share your personal data with the following categories of third parties, strictly to the extent necessary to fulfil the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and any other payment processors engaged to facilitate deposits and withdrawals. These providers receive only the financial data necessary to complete the relevant transaction.
• Identity verification services: Third-party KYC providers who assist bdbagi in verifying the identity and age of players and in conducting anti-money laundering checks as required by applicable standards.
• Game studios and content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive session data necessary to deliver and settle game rounds. Game studios do not receive your full identity or payment details.
• IT infrastructure and cloud service providers: Third-party providers of hosting, database management, security monitoring, and content delivery services who process data on bdbagi's behalf under strict contractual data processing terms.
• Law enforcement and regulatory authorities: Where bdbagi is required by applicable law, court order, or regulatory direction to disclose personal data, we will comply with such requirements. Where permissible, bdbagi will notify the affected player before making such a disclosure.
• Professional advisers: Legal counsel, auditors, and accountants who require access to certain personal data in the course of providing professional services to bdbagi, subject to confidentiality obligations.

7.3 Any third party that receives personal data from bdbagi is required to maintain the confidentiality and security of that data and is prohibited from using it for any purpose other than the specific purpose for which it was shared.

8. Cookies & Tracking Technologies

8.1 bdbagi uses cookies and similar tracking technologies on the platform to deliver, maintain, and improve the service. A cookie is a small text file placed on your device by a website server. Cookies do not harm your device and do not contain personally identifiable information in isolation.

8.2 The categories of cookies used on bdbagi include:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged into your bdbagi account. These cookies cannot be disabled without affecting the usability of the platform.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players interact with the platform — which pages are visited most frequently, where errors occur, and how the site performs across different devices and browsers. This data helps us improve the bdbagi experience.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-used payment method, so you do not need to re-enter them on each visit.
• Security cookies: Used to detect and prevent fraudulent activity on the platform, including repeated failed login attempts and bot traffic.

8.3 You may control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. However, disabling strictly necessary cookies will prevent you from logging into your bdbagi account and using core platform features.

9. Data Retention

9.1 bdbagi retains personal data for as long as your account remains active and for such period thereafter as is necessary to fulfil the purposes set out in this Privacy Policy or to comply with legal obligations. The following general retention periods apply:

• Account data and identity documents: Retained for the duration of your account and for a period of at least 5 years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years following the date of the transaction or wager, for regulatory compliance, audit, and dispute resolution purposes.
• Support communications: Retained for up to 3 years from the date of the communication, unless the communication forms part of an ongoing dispute that requires longer retention.
• Technical and usage data: Typically retained in identifiable form for up to 13 months, after which it is aggregated or anonymised for long-term analytical use.
• Responsible gaming records: Retained for the duration of any active restriction and for 5 years thereafter, to prevent circumvention of self-exclusion measures.

9.2 When the applicable retention period expires, bdbagi will securely delete or irreversibly anonymise the relevant data. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

10. Data Security

10.1 bdbagi implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and the bdbagi platform.
• Encryption of sensitive data fields — including identity document copies and financial account details — at rest in the bdbagi database.
• Access controls ensuring that personal data is accessible only to bdbagi staff and contractors who require it to perform their duties, subject to confidentiality obligations.
• Regular security assessments and penetration testing of the bdbagi platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Monitoring systems that detect and alert to suspicious login activity, unusual transaction patterns, and potential fraud.

10.2 While bdbagi takes the security of your personal data seriously, no online system can be guaranteed to be 100% secure. You are responsible for keeping your bdbagi account credentials confidential and for notifying us promptly if you suspect that your account has been compromised. bdbagi will never ask for your password via email or live chat.

11. Your Rights

11.1 Subject to applicable law and certain conditions, you have the following rights in relation to the personal data bdbagi holds about you:

• Right of Access: You may request a copy of the personal data bdbagi holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data bdbagi holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that bdbagi delete the personal data it holds about you. This right is subject to exceptions, including where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction of Processing: You may request that bdbagi restrict the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bdbagi relies on legitimate interests as the legal basis for processing, or where personal data is processed for direct marketing purposes.

11.2 To exercise any of the above rights, please contact bdbagi at the email address provided in Section 15. We will respond to all valid requests within 30 days of receipt. In complex cases we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it.

11.3 bdbagi will not charge a fee for handling data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be refused. We will inform you if either applies before proceeding.

12. Children's Privacy

12.1 The bdbagi platform is strictly for adults aged 18 years and above. bdbagi does not knowingly collect, use, or retain personal data from individuals under the age of 18. If you are under 18, you must not use the bdbagi platform, provide any personal information to bdbagi, or attempt to register an account.

12.2 If a parent or guardian becomes aware that their child has provided personal information to bdbagi, they should contact the bdbagi support team immediately at [email protected]. Upon receiving notification of a potential underage user, bdbagi will promptly investigate and, where confirmed, close the account and delete all associated personal data.

13. Third-Party Links

13.1 The bdbagi platform may, in certain sections, contain references or links to third-party content, including game provider interfaces hosted within the platform. These third-party services operate under their own privacy policies, which bdbagi does not control. bdbagi is not responsible for the data practices of any third-party provider whose interface you access through the bdbagi platform.

13.2 We encourage you to review the privacy policies of any third-party service you interact with through or in connection with the bdbagi platform, particularly those of payment providers such as bKash, Nagad, Rocket, and Upay, whose own privacy terms govern how they handle the data you provide directly to them.

14. Changes to This Privacy Policy

14.1 bdbagi reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page. For changes that materially affect how we use your personal data, we will endeavour to provide advance notice by posting a notice on the bdbagi platform or by sending a notification to the email address registered with your account.

14.2 Your continued use of the bdbagi platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of, and where required your consent to, the revised data practices described therein. If you do not agree to the revised Policy, you must stop using the platform and may request account closure.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdbagi handles your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on the bdbagi platform 24 hours a day, 7 days a week. Average response time: 2–5 minutes.
• Email Response Time: 2–6 hours during standard operating hours (Bangladesh Standard Time, UTC+6).

15.2 bdbagi takes all privacy-related queries and complaints seriously and will acknowledge your contact within 24 hours of receipt. We aim to provide a substantive response or resolution within 14 days for standard data subject requests.