bag88 Privacy Policy — Your Data, Your Rights
At bag88, protecting the personal information of our members is a fundamental commitment. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and the rights you hold as a member based in Bangladesh.
Section 1
Data We Collect
bag88 collects personal data only to the extent necessary to provide a safe, fair, and legally compliant platform for our members. We collect data through three primary channels: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third-party sources.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, National ID (NID) number, passport details | Provided by you during registration or KYC verification |
| Contact Data | Mobile number, email address, city and district (e.g., Dhaka, Chittagong, Sylhet) | Provided by you during registration or account updates |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, transaction amounts, deposit and withdrawal history | Provided by you when making deposits or requesting withdrawals |
| Technical Data | IP address, browser type and version, device type, operating system, time zone (BST UTC+6), session duration | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, bets placed, bet amounts, bet outcomes, bonus activity, login timestamps | Collected automatically through platform activity logs |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Collected when you contact the bag88 support team |
- Mandatory vs. Optional Data: Some data is mandatory for the operation of your account — without it, bag88 cannot provide services. This includes your name, date of birth, mobile number, and payment wallet details. Other data, such as preferred communication language or optional profile details, is collected voluntarily and does not affect your access to platform features.
- Sensitive Data: bag88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification requirements make it necessary (for example, reviewing a photo ID document as part of KYC). Such data is handled with additional safeguards and is not used for any purpose beyond the specific verification task it supports.
- Data from Minors: bag88 is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been provided by a person under 18, that data will be immediately deleted and the associated account closed.
- Indirect Collection: Where permitted, bag88 may receive limited data about you from third-party fraud prevention services, identity verification providers, and payment gateway partners. This data is used solely to verify your identity and protect the security of your account and the platform.
Identity Verification
We collect identity documents such as your National ID Card or passport solely to verify your age and identity as required by our responsible gaming and anti-fraud commitments.
Mobile Wallet Data
Your bKash, Nagad, Rocket, or Upay mobile wallet number is collected when you make a deposit or withdrawal. It is used only for transaction processing and is never shared with unrelated third parties.
Platform Activity
Usage data — games played, bets placed, session durations — is collected to improve platform performance, detect unusual activity, and provide you with a more relevant gaming experience.
Support Communications
When you contact bag88 support via live chat or email, the content of that communication is recorded and retained to help resolve your query and improve our service quality.
Section 2
How We Use Your Data
bag88 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that you would not reasonably expect given the nature of the platform and the data involved. The following explains each purpose and the legal basis on which we rely to process your data for that purpose.
- Account Management: We use your identity and contact data to create and maintain your bag88 member account, verify your identity, communicate essential account notifications (e.g., deposit confirmations, withdrawal processing updates, security alerts), and respond to your support queries. This processing is necessary to fulfil the service contract between you and bag88.
- Transaction Processing: Your financial data — specifically your registered mobile wallet details — is used to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay. This processing is contractually necessary and cannot be avoided without preventing us from paying out your winnings.
- Age & Identity Verification: We process your identity documents to confirm that you meet the mandatory 18+ age requirement and to comply with our Know Your Customer (KYC) obligations. This processing is necessary for legal compliance.
- Fraud Prevention & Platform Integrity: Technical and usage data is analysed to detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions. This processing is in bag88's legitimate interest and is necessary to protect all members who use the platform fairly.
- Responsible Gaming Monitoring: Usage data — including session duration, deposit frequency, and betting patterns — is processed to identify members who may be displaying signs of problematic gambling behaviour, so that responsible gaming interventions (deposit limit prompts, self-exclusion reminders) can be offered proactively. This processing serves both bag88's legal obligations and the direct interest of our members' wellbeing.
- Platform Improvement: Aggregated and anonymised usage data is used to analyse platform performance, identify technical issues, improve game recommendations, and enhance the overall member experience. No individual can be identified from this aggregated data.
- Marketing Communications: Where you have opted in to receive promotional communications, bag88 may use your contact data to send you information about relevant promotions — such as BPL cricket betting offers, Eid special bonuses, or new game launches. You may opt out of marketing communications at any time by contacting support. Opting out of marketing does not affect your ability to use the platform or receive essential account communications.
- Legal Compliance: bag88 may be required to process and disclose your personal data to comply with applicable legal obligations, respond to lawful requests from regulatory authorities or law enforcement agencies, or to establish, exercise, or defend legal claims.
Section 3
Data Sharing & Third Parties
bag88 does not sell your personal data to any third party. We share data only where necessary to deliver our services, comply with legal obligations, or protect the security and integrity of the platform. The following categories of third parties may receive limited personal data from bag88 for the purposes specified.
- Payment Gateway Partners: To process your deposits and withdrawals in BDT, bag88 shares your registered mobile wallet number and the relevant transaction amount with your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay). These providers process your transaction data under their own privacy policies and are independently regulated by Bangladesh Bank.
- Identity Verification Providers: To complete KYC verification, bag88 may share your submitted identity documents with trusted third-party identity verification services. These providers are contractually restricted to using your data only for the specific verification purpose and are prohibited from retaining or repurposing it.
- Game Technology Providers: Certain game providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — may receive your member identifier and session token to facilitate game play and settle game rounds. These providers do not receive your full identity data, financial data, or contact details. They are contractually bound to process only the minimum data necessary to operate the game session.
- Fraud Prevention Services: bag88 uses third-party fraud detection and anti-money-laundering (AML) screening tools. Your IP address, device fingerprint, and transaction patterns may be processed by these tools to identify and prevent fraudulent activity. Data shared with these services is limited to technical and transactional indicators — not your full identity profile.
- Legal and Regulatory Authorities: bag88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or where we have reasonable grounds to believe disclosure is necessary to prevent or detect crime, protect the safety of individuals, or respond to a valid legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of bag88's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before your data is processed under a new ownership structure.
Section 4
Cookies & Tracking Technologies
bag88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session secure, and understand how members use the site so we can improve it. The following explains the types of cookies we use and how you can manage them.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, keep your account secure, prevent cross-site request forgery, remember your active language setting | No — required for the platform to function |
| Functional | Remember your betting preferences, saved payment methods (wallet type only, not wallet number), and display settings | Yes — disabling may reduce personalisation |
| Analytics | Track page views, session duration, navigation paths, and error rates to improve platform performance. Data is aggregated and anonymised. | Yes — disabling does not affect platform use |
| Fraud Detection | Device fingerprinting and behavioural analytics used to detect and prevent fraudulent access attempts and bonus abuse | No — required for platform security and member protection |
- Managing Cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Note that blocking strictly necessary or fraud-detection cookies may prevent you from logging in or accessing certain platform features.
- Session Cookies vs. Persistent Cookies: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a defined period (typically 30–365 days) to remember your preferences across sessions. All persistent cookies used by bag88 have a defined expiry date.
- Third-Party Cookies: Game providers embedded in the bag88 platform may set their own session-scoped cookies to operate game functionality. These cookies are governed by the respective provider's privacy policy. bag88 does not have direct control over third-party provider cookies.
Section 5
Data Retention & Storage
bag88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, and dispute-resolution requirements. The following retention periods apply as a general guide.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal compliance, dispute resolution |
| Financial Transaction Records | Duration of account + 7 years after closure | Financial record-keeping obligations |
| KYC Verification Documents | Duration of account + 5 years after closure | Anti-money-laundering (AML) obligations |
| Betting & Gaming Activity Logs | Duration of account + 3 years after closure | Dispute resolution, fraud investigation |
| Support Communications | 3 years from date of communication | Service quality, dispute evidence |
| Analytics Data (Anonymised) | Up to 24 months on a rolling basis | Platform improvement (no personal identifier retained) |
- Secure Deletion: When personal data reaches the end of its retention period and no legal hold or ongoing dispute requires its preservation, bag88 will securely delete or anonymise the data so that it can no longer be linked to you as an individual.
- Data Storage Location: Your personal data is stored on servers maintained within secure data centre facilities. bag88 takes reasonable technical and organisational measures to ensure that data storage meets industry-standard security requirements, including encryption at rest and in transit.
- Inactive Accounts: Accounts classified as inactive (no login for 12 consecutive months) are subject to a data review process. Where an inactive account has a zero balance and no outstanding legal hold, bag88 may close the account and archive or delete associated personal data in accordance with the retention periods above, following notification to the registered email address or mobile number.
Section 6
Data Security Measures
bag88 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.
SSL / TLS Encryption
All data transmitted between your device and the bag88 platform is encrypted using SSL/TLS protocols. The padlock icon in your browser confirms that your connection to bag88.app is secure at all times.
Encrypted Data Storage
Sensitive data stored in bag88's databases — including payment wallet identifiers and identity verification records — is encrypted at rest using industry-standard algorithms. Plain-text storage of sensitive fields is strictly prohibited.
Access Controls
Access to systems holding member personal data is restricted on a need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific job function. Access is logged and regularly audited.
Continuous Monitoring
bag88's platform is monitored continuously for unusual access patterns, login anomalies, and potential intrusion attempts. Automated alerts trigger immediate review by the security team when suspicious activity is detected.
Staff Training
All bag88 staff who handle member personal data receive training on data protection obligations, secure data handling practices, and the procedures to follow in the event of a suspected data incident.
Breach Response
In the unlikely event of a personal data breach that poses a risk to member rights, bag88 will notify affected members promptly — including describing what data was involved and the steps taken to contain and remediate the incident.
Section 7
Your Privacy Rights
As a member of the bag88 platform, you hold a set of privacy rights with respect to the personal data we hold about you. bag88 is committed to honouring these rights within a reasonable timeframe. To exercise any of the rights below, please contact the bag88 support team via live chat or email at [email protected]. Note that the email address is plain contact information — it is not a clickable link.
Right of Access
You have the right to request a copy of all personal data bag88 holds about you. We will respond to verified access requests within 30 days of receipt.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the correct details and supporting documentation.
Right to Erasure
You may request deletion of your personal data where there is no longer a legal or contractual basis for its continued retention. Note that some data must be retained for the periods specified in Section 5.
Right to Object
You have the right to object to processing of your personal data where bag88 relies on legitimate interest as its legal basis — for example, certain forms of fraud monitoring or marketing profiling.
Right to Restriction
In certain circumstances — such as while a dispute about accuracy is being resolved — you may request that bag88 restrict its processing of your personal data to storage only.
Right to Portability
Where bag88 processes your data on the basis of consent or contract, and processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Where bag88 processes your data on the basis of your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to Complain
If you believe bag88 has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a complaint with bag88 support. We will acknowledge and investigate all complaints promptly.
Section 8
Policy Updates & Contact
bag88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify active members via the registered mobile number or email address on file, and update the "Last Updated" date at the top of this page.
Your continued use of the bag88 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the platform and may request account closure at any time.
- Notification of Changes: For material changes — those that significantly affect how your data is collected, used, or shared — bag88 will provide at least 14 days' advance notice before the revised policy takes effect. Non-material changes (such as clarifications of existing practices or formatting updates) may be published without advance notice.
- Policy Version History: bag88 maintains an internal record of previous versions of this Privacy Policy. If you need a copy of a previous version of the Policy that was in effect at a specific date — for example, in connection with a dispute — please contact the support team with the relevant date and we will provide it on request.
- Contact for Privacy Matters: All privacy-related queries, data rights requests, and complaints should be directed to the bag88 support team via live chat or by email at [email protected]. The email address is provided as plain text contact information only — it is not a clickable link. Please include "Privacy Query" in the subject line of any email. We aim to respond to all privacy queries within 5 working days (Bangladesh Standard Time).
- Language of This Policy: This Privacy Policy is issued in English. In the event of any dispute about interpretation, the English-language version of this Policy is the authoritative reference. bag88 may provide translations for informational purposes; such translations do not constitute the legally binding version of the Policy.
Questions About Your Privacy at bag88?
Our support team is available 24/7 to handle data rights requests, privacy queries, and account security concerns. You can also explore our FAQ for quick answers, or review our Responsible Gaming resources.