bdbaggi Privacy Policy

bdbaggi collects personal data from you through a number of channels: directly when you register an account, make a deposit or withdrawal, contact support, or participate in a promotion; automatically through your use of the platform via cookies and server logs; and from third-party payment and identity verification partners during the KYC process. The categories of personal data we collect are set out below.

Account Registration Data

When you create a bdbaggi account, we collect your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), email address, and a mobile number compatible with your preferred payment method (bKash, Nagad, Rocket, or Upay). This data is used to create and maintain your player account, verify your identity, and communicate with you about your account activity.

Identity Verification (KYC) Data

To comply with anti-fraud and responsible gaming obligations, bdbaggi collects copies of identity documents including National Identity Card (NID), passport, or Bangladesh driving licence. We may also collect a proof-of-address document (utility bill or bank statement) and proof of payment method ownership. These documents are used solely for identity verification and are not used for any marketing or profiling purpose.

Financial Transaction Data

bdbaggi records details of all deposits and withdrawals including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), the transaction amount in Bangladeshi Taka (BDT), and the transaction timestamp. We do not store full card numbers or mobile banking PINs — payment authentication is handled by the respective payment provider's own secure environment.

Betting & Gaming Activity Data

We retain records of all bets placed, casino game sessions, bonus claims, and wagering activity associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection. It is not shared with third parties for marketing purposes.

Technical & Device Data

When you access bdbaggi, our servers automatically record your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and clickstream data. This technical data is used to maintain platform security, detect suspicious access patterns, and improve platform performance. It is retained in anonymised or pseudonymised form after your session ends.

Communications Data

If you contact bdbaggi via Live Chat, email (support@bdbaggi.net), or WhatsApp, we retain a record of that communication including the content of your messages, the date and time, and any resolution actions taken. This data is used to resolve your query, train support staff, and maintain a dispute resolution record where relevant.

bdbaggi processes your personal data only for clearly defined and legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process personal data, and the corresponding lawful basis for each, are described below.

• Account creation and management: Processing your registration data to create and maintain your bdbaggi player account. Lawful basis: contract performance.
• Identity verification and KYC compliance: Verifying that you meet the minimum age requirement of 18 years and confirming your identity before processing withdrawals. Lawful basis: legal obligation and legitimate interests.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment methods. Lawful basis: contract performance.
• Customer support: Responding to your enquiries via Live Chat, email, or WhatsApp, and maintaining a record of support interactions for quality assurance and dispute resolution. Lawful basis: contract performance and legitimate interests.
• Platform security and fraud prevention: Analysing device data, IP addresses, and betting patterns to detect and prevent unauthorised access, fraudulent account activity, money laundering, and multi-accounting. Lawful basis: legitimate interests and legal obligation.
• Responsible gaming monitoring: Tracking betting and deposit frequency to identify players who may be exhibiting signs of problem gambling, enabling timely intervention and support. Lawful basis: legal obligation and legitimate interests.
• Personalised platform experience: Using your betting preferences and game history to present relevant promotions and game recommendations within your account dashboard. Lawful basis: legitimate interests. You may opt out of personalisation via account settings.
• Promotional communications: Sending you information about bonuses, seasonal promotions (Eid offers, Pohela Boishakh specials, BPL cricket bonus markets), and platform updates by email or SMS — only where you have provided explicit consent. You may withdraw consent at any time by contacting support@bdbaggi.net.
• Legal and regulatory compliance: Retaining records as required by applicable financial compliance obligations and responding to lawful requests from government authorities or law enforcement agencies. Lawful basis: legal obligation.

bdbaggi does not use automated decision-making or profiling in any way that produces legal or similarly significant effects on individual players without providing a mechanism for human review. Where automated systems flag an account for review (for example, due to suspected fraud), a member of the compliance team reviews the case before any action is taken.

In the course of operating the bdbaggi platform, we share limited categories of personal data with a small number of carefully selected third-party service providers. Each third party is contractually required to handle your data in accordance with standards consistent with this Privacy Policy and to use it solely for the specific purpose for which it was shared.

Payment Processing Partners

Transaction data — including your registered mobile number, transaction amount, and reference code — is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) for the sole purpose of processing your deposit or withdrawal. Each payment partner operates its own privacy and security framework. bdbaggi is not responsible for how payment providers handle data within their own systems beyond the point of transaction initiation.

Identity Verification Services

Where automated KYC document verification is used, your submitted identity documents may be processed by a third-party identity verification service provider. This provider acts as a data processor on behalf of bdbaggi and is permitted to use your documents only for the specific verification task. Document images are not retained by the provider beyond the verification session.

Game Software Providers

Casino games on bdbaggi are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your session data (player ID, bet amounts, game outcomes) is transmitted to the relevant game provider's servers to operate the game session. Game providers receive a pseudonymised player identifier — not your full name or contact details — and are contractually prohibited from using this data for any purpose other than operating the game session and maintaining RNG audit logs.

Analytics Providers

bdbaggi uses anonymised, aggregated analytics data to understand platform usage patterns and improve the user experience. Analytics data does not contain any personally identifiable information. Our analytics providers are contractually restricted from using this data for their own purposes or for cross-site tracking.

Legal and Regulatory Disclosures

bdbaggi may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where we are legally required to do so. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement. Where legally permitted, we will notify you of such a disclosure.

Business Transfers

In the event that bdbaggi undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. In such an event, you will be notified via the email address registered to your account at least 30 days before the transfer takes effect, and you will have the option to close your account and request deletion of your data prior to the transfer.

bdbaggi uses cookies — small text files stored on your device by your web browser — and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to gather anonymous usage statistics. We do not use advertising cookies or cross-site tracking pixels of any kind.

You may control or delete cookies at any time through your browser settings. Most modern browsers allow you to block specific categories of cookies or clear all stored cookies on demand. Please note that disabling essential or security cookies will prevent you from logging in to your bdbaggi account and will significantly impair platform functionality.

bdbaggi does not currently use fingerprinting, supercookies, or any tracking technology designed to persist beyond a standard browser cookie deletion. We do not participate in cross-site advertising networks or retargeting programmes. Your bdbaggi browsing activity is not tracked outside of the bdbaggi.net domain.

bdbaggi retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and financial record-keeping obligations. The specific retention periods for each data category are listed in the table in Section 1 of this policy.

All player data is stored on secure servers protected by industry-standard physical and logical access controls. Access to production databases containing personal data is restricted to a small number of authorised technical staff and is subject to multi-factor authentication, access logging, and regular security audits.

Data Stored in Bangladesh

Where operationally possible, bdbaggi stores personal data of Bangladesh-resident players on servers located within the Asia-Pacific region. In cases where cross-border data transfer is necessary — for example, to a game provider's servers or an identity verification provider — bdbaggi ensures that appropriate contractual data protection safeguards are in place before any transfer occurs.

Data Deletion After Account Closure

When a player account is closed — whether voluntarily or by bdbaggi — personal data is not immediately deleted. Retention continues for the periods specified in the data table in Section 1, primarily to satisfy financial record-keeping obligations (7 years for transaction records) and to maintain a history that enables bdbaggi to enforce self-exclusion requests and prevent re-registration by permanently closed accounts. After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised.

Backups

bdbaggi maintains encrypted data backups for business continuity purposes. Backup files are subject to the same access controls as primary data stores and are deleted on a rolling schedule that aligns with the retention periods described in this policy. Backup deletion requests may take up to 90 days to propagate through all backup cycles.

As a player on bdbaggi, you hold the following rights in respect of your personal data. These rights are available to all registered players at no cost and without requiring any formal justification.

• Right of Access: You may request a copy of all personal data that bdbaggi holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as address updates) can also be made directly via your account settings dashboard.
• Right to Erasure: You may request that bdbaggi delete your personal data. We will honour erasure requests subject to our legal obligation to retain certain financial and compliance records for the periods specified in Section 5. Where full deletion is not immediately possible, we will inform you of the earliest date on which your data can be fully erased.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that bdbaggi restricts processing of your personal data to storage only, without using it for any other purpose.
• Right to Data Portability: You may request an export of personal data that you provided to bdbaggi in a structured, machine-readable format, suitable for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes or for purposes based on legitimate interests. Marketing opt-outs take effect immediately upon receipt of your request.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional email communications), you may withdraw that consent at any time by emailing support@bdbaggi.net or adjusting your notification preferences in the account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bdbaggi will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party. Identity verification typically involves confirming your registered email address and mobile number.

bdbaggi takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bdbaggi platform.
• AES-256 encryption at rest for all databases containing personal data, KYC documents, and financial records.
• Multi-factor authentication required for all internal staff accounts with access to player data, as well as optionally available to all registered players via SMS OTP.
• Role-based access control (RBAC) ensuring that staff members can only access the categories of data necessary to perform their specific job function. Support agents cannot access KYC document images; only the verification team can.
• Regular penetration testing conducted by independent security professionals at least twice per year, with critical findings remediated within 30 days.
• Intrusion detection systems (IDS) monitoring all network traffic to the bdbaggi platform for anomalous patterns indicative of a breach or attack.
• Comprehensive access logging of all read and write operations on databases containing personal data, with logs retained for 12 months for forensic review if needed.

Data Breach Response

In the event of a confirmed personal data breach that is likely to result in risk to affected players, bdbaggi will notify impacted players via their registered email address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the steps bdbaggi has taken to contain the incident, and any actions we recommend you take to protect yourself.

While bdbaggi implements robust security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their bdbaggi account, enable SMS OTP two-factor authentication, and contact support immediately at support@bdbaggi.net if they suspect unauthorised access to their account.

bdbaggi reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, introducing a new category of data collection or a new sharing arrangement — the effective date at the top of this page will be updated and registered players will be notified by email at least 14 days before the changes take effect.

Your continued use of the bdbaggi platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you have the right to close your account and request deletion of your data before the changes take effect by contacting support@bdbaggi.net.

For all privacy-related enquiries — including data rights requests, questions about this policy, or concerns about how your data has been handled — please contact the bdbaggi data team using the details below. We are committed to responding promptly and constructively to all privacy enquiries.

• Email: support@bdbaggi.net (subject: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 inside your account dashboard
• Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)

This Privacy Policy was last reviewed and updated in January 2026. It should be read in conjunction with bdbaggi's Terms & Conditions and Responsible Gaming policy, both of which are available on this website. In the event of any conflict between this policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall take precedence on data protection matters.