Your privacy matters to us. This policy explains exactly what personal data bagh collects from Bangladesh players, how we use it, who we share it with, and what rights you have over your own information.
How Bagh Protects Your Privacy
Six principles that guide how bagh handles your personal data — built around transparency, security, and your control.
Bagh collects only the personal data that is genuinely necessary to operate the platform, verify your identity, and process your payments. We do not collect data for the sake of it. If we don't need it to serve you as a bagh player, we don't ask for it.
Bagh does not sell your personal data to third parties. Ever. Your name, phone number, payment history, and gaming activity on bagh are not sold to advertisers, data brokers, or any other commercial entity. Your data is used to run bagh — nothing else.
All personal data stored by bagh is encrypted at rest and in transit. Your account credentials are hashed using industry-standard algorithms. Payment data is handled through PCI-compliant payment processors and is never stored in plain text on bagh's servers.
Bagh gives you meaningful control over your personal data. You can request a copy of everything we hold about you, ask us to correct inaccurate information, or request full account deletion. These rights are available to all bagh players and can be exercised by contacting [email protected].
Bagh only sends promotional communications to players who have opted in. If you have set responsible gaming limits or self-excluded, bagh will not send you any promotional messages during that period. You can opt out of marketing emails at any time from your account settings or by contacting support.
This privacy policy is written to be understood by real people, not just lawyers. If any part of this policy is unclear, contact bagh's support team at [email protected] and we'll explain it in plain terms. You deserve to know exactly how your data is handled on bagh.
This Privacy Policy describes how bagh (operated at bagh.one) collects, uses, stores, and protects the personal data of players and visitors based in Bangladesh and elsewhere. By registering on bagh or using the platform in any way, you confirm that you have read and understood this policy.
Bagh is committed to handling your personal data responsibly. We operate in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These aren't just words — they shape every decision we make about how your data is handled on bagh.
This policy applies to all personal data collected through the bagh website at bagh.one, the bagh mobile app, and any communications between you and bagh's support team. It does not apply to third-party websites or services that may be linked from bagh's platform.
Bagh was built specifically for Bangladesh players. The data we collect is the minimum required to verify your identity, process BDT payments via bKash, Nagad, and Rocket, and keep your account secure. We understand that privacy is important to our players, and we take that seriously.
Bagh collects personal data in three main ways: data you provide directly when registering or using the platform, data generated automatically when you use bagh, and data received from third-party payment providers when you make a deposit or withdrawal.
When you make a deposit or withdrawal via bKash, Nagad, Rocket, or bank transfer, bagh receives confirmation data from the payment provider including transaction reference numbers and the account name associated with the payment. Bagh does not receive your full payment account credentials from these providers.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, DOB, NID, passport | Account verification, KYC compliance |
| Contact Data | Email, phone, address | Account communication, support |
| Financial Data | bKash/Nagad number, transaction history | Payment processing, fraud prevention |
| Technical Data | IP address, device info, browser | Security, platform optimisation |
| Usage Data | Games played, bets, session times | Platform improvement, responsible gaming |
| Marketing Data | Communication preferences | Sending relevant promotions (opt-in only) |
Bagh uses your personal data only for the purposes described in this policy. We do not use your data for purposes that are incompatible with the reason it was originally collected. Here is a clear breakdown of how bagh uses each category of data:
Bagh processes your personal data on the following legal bases:
The majority of data processing on bagh is necessary to perform the contract between bagh and you as a registered player. This includes processing your registration data, verifying your identity, processing payments, and managing your account. Without this processing, bagh cannot provide its services to you.
Bagh processes certain data — including technical and usage data — on the basis of legitimate interests. This includes fraud prevention, platform security, and improving the bagh platform. Bagh has assessed that these legitimate interests are not overridden by your privacy rights, given the limited and proportionate nature of the processing involved.
Bagh is required by law to collect and retain certain data, including identity verification records and transaction histories, for anti-money laundering and fraud prevention purposes. This processing is mandatory and cannot be opted out of.
Where bagh processes your data on the basis of consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
Bagh does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with this policy.
When you make a deposit or withdrawal, bagh shares the minimum necessary data with the relevant payment provider — bKash, Nagad, Rocket, or your bank — to process the transaction. These providers have their own privacy policies governing how they handle your data.
Bagh may use third-party identity verification services to assist with KYC checks. These providers receive only the data necessary to perform the verification and are contractually prohibited from using it for any other purpose.
The games available on bagh are provided by third-party game studios. These providers may receive technical data — such as your session ID and bet history — necessary to operate the game. They do not receive your name, payment details, or contact information.
Bagh may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities if required to do so by law, or if bagh reason ably believes that disclosure is necessary to protect the rights, property, or safety of bagh, its players, or the public.
Every third party that receives data from bagh is bound by a data processing agreement that prohibits them from using your data for any purpose other than the one for which it was shared. Bagh reviews these agreements regularly and will terminate relationships with any provider that fails to meet our data protection standards.
Bagh uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use bagh. Here is a breakdown of the types of cookies bagh uses:
These cookies are required for bagh to function. They keep you logged in during your session, remember your language and currency preferences, and ensure the platform operates correctly. You cannot opt out of essential cookies without stopping your use of bagh.
Bagh uses analytics cookies to understand how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised. It helps bagh improve the platform experience for all Bangladesh players. You can opt out of analytics cookies from your account settings.
Security cookies help bagh detect and prevent fraudulent activity, including account takeover attempts and bot traffic. These cookies are essential to the security of the platform and cannot be disabled.
If you have opted in to marketing communications, bagh may use cookies to understand which promotions you have seen and to avoid showing you the same offer repeatedly. Marketing cookies are only active if you have given explicit consent and can be disabled at any time from your account settings or by contacting [email protected].
Bagh does not use third-party advertising cookies or allow external ad networks to place cookies on the bagh platform. The cookies on bagh are operated by bagh directly or by our contracted service providers acting on our behalf.
Bagh retains your personal data for as long as your account is active and for a defined period after account closure, as required by applicable law and our legitimate business interests. The specific retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal obligation, fraud prevention |
| Identity verification documents | Duration of account + 5 years | AML compliance, regulatory requirement |
| Transaction history | Duration of account + 7 years | Financial record-keeping, legal obligation |
| Game activity logs | Duration of account + 2 years | Dispute resolution, responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Technical / session logs | 90 days | Security monitoring |
When the applicable retention period expires, bagh securely deletes or anonymises your personal data. Anonymised data — which cannot be linked back to you — may be retained indefinitely for statistical and platform improvement purposes.
Bagh takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:
Despite these measures, no online platform can guarantee absolute security. If you suspect that your bagh account has been compromised, contact [email protected] immediately. Bagh will investigate and take appropriate action, including temporarily locking your account to prevent further unauthorised access.
Use a strong, unique password for your bagh account. Enable two-factor authentication from your account settings. Never share your bagh login credentials with anyone. Bagh staff will never ask for your password. If you receive a message claiming to be from bagh and asking for your password, it is a phishing attempt — report it to [email protected] immediately.
As a bagh player, you have the following rights over your personal data. To exercise any of these rights, contact bagh's support team at [email protected]. Bagh will respond to all data rights requests within 30 days.
Request a copy of all personal data bagh holds about you. We will provide this in a clear, readable format within 30 days.
Request correction of any inaccurate or incomplete personal data bagh holds about you.
Request deletion of your personal data. Note that some data must be retained for legal compliance and cannot be deleted on request.
Request that bagh restricts processing of your data in certain circumstances, such as while a dispute is being resolved.
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
Object to bagh processing your data for marketing purposes or on the basis of legitimate interests. Marketing opt-outs take effect immediately.
Bagh is strictly an adults-only platform. You must be 18 years of age or older to register and play on bagh. Bagh does not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the bagh registration process, and bagh may request additional documentation to confirm your age at any point.
If bagh discovers that a player is under 18, the account will be immediately suspended, all funds will be returned to the payment source, and all personal data associated with the account will be deleted as soon as legally permissible. If you believe a minor has registered on bagh, please contact [email protected] immediately.
Bagh may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes — those that significantly affect how your data is used or your rights — we will notify registered bagh players via email at least 7 days before the changes take effect.
The updated policy will always be available at bagh.one/privacy-policy with a revised "Last Updated" date at the top of the page. Your continued use of bagh after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you may close your account by contacting [email protected].
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how bagh handles your personal data, please contact bagh's support team directly:
Bagh takes all privacy-related enquiries seriously. If you submit a data rights request, we will acknowledge it within 3 business days and provide a full response within 30 days. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Privacy questions can feel complicated, but getting answers from bagh shouldn't be. Drop us a message at [email protected] and our team will give you a straight, plain-language response. No legal runaround, no copy-paste replies — just a real answer about how your data is handled on bagh.
This Privacy Policy was last updated in January 2025. Bagh reviews its privacy practices regularly to ensure they remain accurate and fair for all Bangladesh players.
Contact bagh's support team at [email protected]. We respond to all privacy enquiries within 24 hours and to formal data rights requests within 30 days.
Your data is safe with bagh. Join over 500,000 Bangladesh players who trust bagh for fair games, fast BDT payments, and a platform that respects their privacy.