bdbag Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bdbag ("we", "us", "our", or "the Platform") collects, uses, stores, and protects the personal information of its members and website visitors ("you" or "your"). This Policy applies to all personal data processed by bdbag in connection with the operation of the website located at https://bdbag.org and all services offered through it, including online casino games, sports betting, crash games, and fish shooting.

By registering an account on bdbag, accessing the platform, or submitting personal information through any form on the site, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree, you must not use the bdbag platform. We encourage you to review this Policy periodically, as we may update it from time to time. The date at the top of this page reflects when this Policy was last revised.

2. Information We Collect

bdbag collects personal information that you provide directly to us, as well as information generated automatically when you use the platform. The categories of personal information we may collect include:

• Identity information: full legal name, date of birth, gender, and copies of government-issued identity documents (such as a national ID card or passport) provided during the KYC verification process.
• Contact information: mobile phone number, email address, and physical address as provided during registration or account updates.
• Financial information: transaction history (deposits and withdrawals), payment method identifiers (e.g. bKash wallet number, Nagad account reference), and account balance records.
• Gaming activity data: game history, betting records, wager amounts, session durations, responsible gaming tool settings, and bonus activity.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, referring URL, and approximate geographic location derived from IP.
• Communications data: messages, enquiries, and support tickets submitted to bdbag via email or the platform's messaging function, including any attachments you send.

Where bdbag requests information that is optional, this will be made clear at the point of collection. You are not obligated to provide optional data, though declining to do so may limit certain platform features or promotional eligibility.

3. How We Use Your Information

bdbag uses the personal information we collect for the following purposes:

• Account administration: to create, manage, and maintain your bdbag member account, including processing your registration, verifying your identity through the KYC process, and enabling you to log in securely.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, and other approved payment channels, to verify transaction authenticity, and to maintain accurate financial records.
• Service delivery and improvement: to provide access to casino games, sports betting markets, crash games, and other platform features; to diagnose and fix technical issues; and to improve the overall quality, speed, and reliability of the bdbag platform.
• Responsible gaming: to monitor gaming behaviour and apply responsible gaming tools (deposit limits, session limits, self-exclusion) in accordance with member requests, and to identify patterns that may indicate problem gambling.
• Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, to respond to lawful requests from law enforcement or regulatory authorities, and to enforce these Terms and Conditions.
• Marketing communications: to send promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

bdbag processes personal data on one or more of the following legal bases, depending on the specific activity:

• Contractual necessity: processing is necessary to perform the contract between bdbag and the member — for example, processing deposits, enabling gameplay, and paying out winnings.
• Legal obligation: processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful government requests.
• Legitimate interests: processing is carried out for bdbag's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the platform experience — provided these interests are not overridden by your privacy rights.
• Consent: where we rely on your consent as the legal basis (e.g. for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any prior processing.

5. Sharing Your Information

bdbag does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may, however, share your information with carefully selected third parties in the following limited circumstances:

• Payment processors: we share the minimum necessary financial and identity data with payment service providers (including bKash, Nagad, Rocket, and banking partners) solely to process transactions on your behalf.
• Game providers: we share session tokens and game activity data with our licensed game suppliers (e.g. Pragmatic Play, Evolution Gaming, Spribe) to enable gameplay and ensure fair-play integrity.
• Legal and regulatory authorities: we may disclose personal data to government bodies, law enforcement agencies, or regulators where required to do so by law, court order, or to protect the rights and safety of bdbag or its members.
• Technology and analytics providers: we may share anonymised or aggregated (non-personally-identifiable) usage data with platform analytics and infrastructure providers to support the technical operation and performance monitoring of bdbag.

All third parties with whom bdbag shares personal data are contractually required to process that data only for the specified purpose, to maintain adequate security standards, and not to retain it beyond the period necessary for that purpose.

6. Payment Data and Financial Information

bdbag processes financial data — including deposit amounts, withdrawal requests, and payment method identifiers — solely to facilitate transactions on behalf of its members. All financial data transmitted between your device and bdbag is protected by 256-bit SSL encryption. bdbag does not store full payment card numbers. Where mobile financial services such as bKash and Nagad are used, only the last four digits or a masked reference of the wallet number is retained in bdbag's records beyond the immediate transaction.

Transaction records are retained for a minimum period required by applicable financial regulations and AML compliance obligations. These records are accessible to our compliance team and, where legally required, to relevant regulatory or law enforcement authorities. They are not used for any purpose beyond regulatory compliance and the accurate administration of your account.

7. Cookies and Tracking Technologies

bdbag uses cookies and similar tracking technologies to enable essential platform functionality, remember your preferences, and analyse how the platform is used. Cookies are small text files placed on your device by your browser. The cookies bdbag uses fall into three categories:

• Essential cookies: required for the platform to function correctly. These include session authentication cookies that keep you logged in during a play session and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your language preference, display settings, and responsible gaming tool configurations across sessions. These enhance your experience but are not strictly necessary for the platform to operate.
• Analytics cookies: used to collect anonymised data about how members navigate the platform — which pages are visited most, how long sessions last, and where users exit. This information is used exclusively to improve the platform experience and is not linked to individual member identities.

You can manage or disable non-essential cookies through your mobile browser settings at any time. Please note that disabling functional cookies may affect your platform experience, such as resetting language preferences on each visit.

8. Data Retention

bdbag retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as are required by applicable law or regulation. The following general retention periods apply: account data and gaming records are retained for a minimum of five years following account closure to satisfy AML and financial record-keeping obligations; KYC identity documents are retained for a minimum of five years after the end of the member relationship; marketing preference records are retained until you withdraw consent or request deletion; technical and log data is typically retained for 12 months.

When personal data is no longer required and no legal retention obligation applies, bdbag will securely delete or anonymise it so that it can no longer be associated with you as an individual.

9. Data Security

bdbag implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for data at rest, role-based access controls limiting internal access to personal data on a strict need-to-know basis, regular security audits and vulnerability assessments of our platform infrastructure, and multi-factor authentication requirements for administrative access to systems that process member data.

While bdbag takes every reasonable precaution to protect your data, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights or freedoms, bdbag will notify affected members as soon as reasonably practicable and take all necessary steps to mitigate the impact.

10. Your Data Rights

As a member or user of the bdbag platform, you have the following rights in relation to the personal data we hold about you:

• Right of access: you may request a copy of the personal data bdbag holds about you, together with information about how it is being processed.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: you may request that we delete personal data we hold about you where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent, subject to our legal retention obligations.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to object to marketing: you may opt out of receiving marketing communications at any time by contacting bdbag support or using the unsubscribe option in any marketing message.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request. We may need to verify your identity before processing the request to protect against unauthorised access to your data.

11. Children's Privacy

The bdbag platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If we become aware that a person under 21 has provided personal data to bdbag, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the bdbag platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action. Parents and guardians are encouraged to use device-level parental controls to prevent underage access to online gaming platforms.

12. Marketing Communications

bdbag may send promotional messages, bonus notifications, and updates about new games or seasonal offers to members who have opted in to receive such communications. These messages may be delivered via SMS to your registered mobile number or by email. We will never send marketing communications without your prior consent, and we will always provide a clear, simple method to opt out of receiving future messages in every communication we send.

Transactional messages — such as deposit confirmations, withdrawal notifications, OTP codes, and account security alerts — are not classified as marketing communications. These will be sent to your registered contact details as necessary for the operation of your account, regardless of your marketing preference settings.

13. Third-Party Links

The bdbag platform may contain references to game providers whose services are integrated within the platform (such as Pragmatic Play, Evolution Gaming, and Spribe). While bdbag selects its game and technology partners with care, we are not responsible for the independent privacy practices of those providers. Each provider operates under its own privacy policy and data processing terms. Your interaction with game interfaces provided by third-party studios is subject to those studios' own terms. We recommend reviewing the privacy policies of our game providers if you have specific concerns about how your data is handled within their game environments.

14. Changes to This Privacy Policy

bdbag reserves the right to update or revise this Privacy Policy at any time. When we make material changes to the Policy, we will take reasonable steps to notify active members — for example, by sending a notification to your registered mobile number or email address, or by displaying a prominent notice on the platform's login page. The revised Policy will take effect from the date stated at the top of the page.

Your continued use of bdbag following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with a revised Policy, you must discontinue use of the platform and may request account closure in accordance with the Terms and Conditions.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bdbag processes your personal data, our dedicated privacy support team is available 24 hours a day, 7 days a week.

Email (plain text, not a link): [email protected]