bag88 Privacy Policy
At bag88, protecting the personal information of our players across Bangladesh is a fundamental part of how we operate. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your own information. Transparency is not optional for us — it is a commitment.
Our Commitment
How bag88 Protects Your Data
The following highlights summarise our core data-protection principles. They are provided for quick reference only. The full binding details are set out in the numbered policy sections further below.
256-Bit SSL Encryption
Every data exchange between your device and bag88 is protected by industry-standard 256-bit SSL encryption. Your personal details, payment information, and account credentials are transmitted securely at all times, whether you are on a mobile browser or desktop.
Minimal Data Collection
bag88 collects only the personal data that is strictly necessary to operate your account, process payments, comply with KYC obligations, and deliver a personalised platform experience. We do not collect data we have no legitimate use for.
No Third-Party Sales
bag88 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent marketing or commercial purposes. Your data belongs to you, and we treat it as such — sharing it only where operationally required or legally mandated.
Your Data Rights
As a registered bag88 player, you hold the right to access the personal data we hold about you, correct inaccurate records, request deletion of your data (subject to legal retention obligations), and opt out of non-essential marketing communications at any time.
Transparent Cookie Use
bag88 uses cookies to maintain your session, remember your preferences, and analyse aggregated platform usage patterns. We do not use cookies to track your activity on third-party websites. You can manage cookie preferences through your browser settings at any time.
Secure Data Storage
Player data is stored on secure, access-controlled servers. We apply role-based access controls, regular security audits, and strict internal data-handling procedures to ensure that only authorised personnel can access personal information, and only for legitimate operational purposes.
- Introduction and Scope
- Data Controller Information
- Personal Data We Collect
- How We Collect Your Data
- Purposes and Legal Bases for Processing
- Cookies and Tracking Technologies
- Data Sharing and Third-Party Disclosures
- International Data Transfers
- Data Retention
- Security Measures
- Your Rights as a Data Subject
- Marketing Communications
- Children and Age Restrictions
- Changes to This Privacy Policy
- Contact Us
Introduction and Scope
bag88 ("we", "us", "our") is committed to safeguarding the privacy and personal data of every individual who accesses or uses our online betting and casino platform at https://bag88.io (the "Platform"). This Privacy Policy sets out in clear, plain English precisely how we handle personal data in connection with the Platform and all associated services.
This policy applies to all visitors to the Platform, all registered account holders, and all individuals who communicate with bag88 through any channel, including email. It covers personal data collected through the Platform, through customer support interactions, through our analytics systems, and through any promotional or marketing activity conducted by bag88.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and bag88.
By registering a bag88 account or continuing to use the Platform after the effective date of this policy, you confirm that you have read and understood how we collect and process your personal data as described herein.
Data Controller Information
For the purposes of applicable data protection law, bag88 acts as the data controller with respect to the personal data of its registered players and Platform visitors. This means that bag88 determines the purposes for which, and the manner in which, personal data is processed.
If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our dedicated data-handling team using the contact details provided in Section 15 of this policy.
bag88 operates the Platform at https://bag88.io and provides its services primarily to players resident in Bangladesh. All currency references in this Privacy Policy are in Bangladeshi Taka (৳ / BDT).
Personal Data We Collect
bag88 collects the following categories of personal data in connection with the operation of the Platform and the provision of our services:
3.1 Identity and Contact Data
- Full legal name
- Date of birth
- Gender (optional, for promotional personalisation)
- Residential address (including city, district, and postcode)
- Email address
- Mobile phone number
- Nationality
3.2 Identity Verification (KYC) Data
- National ID card number or passport number
- Copies of government-issued identification documents
- Proof-of-address documentation
- Selfie or facial verification image (where required for enhanced KYC)
3.3 Financial and Transaction Data
- Payment method identifiers (e.g., bKash account number, Nagad account number, Rocket account number, bank account details, Visa/Mastercard last-four digits)
- Deposit and withdrawal transaction history
- Bonus and promotional credit history
- Account balance history
3.4 Betting and Gaming Activity Data
- Bet and wager history (sport, market, odds, stake, outcome)
- Casino and live dealer game session history
- Slot machine play history
- Virtual sports session history
- Win and loss records
- Responsible gaming tool settings (deposit limits, session alerts, self-exclusion status)
3.5 Technical and Usage Data
- IP address at the time of each login and session
- Device type, operating system, and browser version
- Mobile network operator (where applicable)
- Platform pages visited and features accessed
- Session duration and frequency
- Error and crash reports
3.6 Communications Data
- Records of customer support interactions (email correspondence, live chat transcripts)
- Feedback, complaints, and dispute records
- Preferences regarding marketing communications
Sensitive Data: bag88 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data beyond standard KYC facial verification, religious or political beliefs, or sexual orientation) unless required for a specific compliance purpose and with your explicit consent. If you voluntarily disclose sensitive information in a support communication, we will handle it with the highest level of care and will not retain it beyond the purpose for which it was shared.
How We Collect Your Data
bag88 collects personal data through the following channels and mechanisms:
4.1 Direct Collection
The majority of personal data we hold is provided directly by you when you register a bag88 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
4.2 Automated Collection
When you access the Platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser type, and session behaviour. This data is collected through server logs, cookies, and similar tracking technologies. See Section 6 for a full explanation of our cookie practices.
4.3 Third-Party Sources
In some circumstances, bag88 may receive personal data about you from trusted third-party sources, including:
- Identity verification providers — Third-party KYC and age-verification services that cross-reference the identity documents you submit against official databases.
- Payment processors — Payment service providers such as bKash, Nagad, and Rocket may share transaction confirmation data with bag88 in connection with deposits and withdrawals.
- Fraud detection services — Specialist fraud prevention partners may provide risk-scoring or alert data in connection with suspicious account activity.
- Game providers — Casino and live dealer game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may provide session and outcome data in connection with the games you play on the Platform.
Purposes and Legal Bases for Processing
The table below summarises the key purposes for which bag88 processes personal data, together with the corresponding legal basis for each processing activity.
| Purpose of Processing | Categories of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, KYC data | Contract performance |
| Age and identity verification (KYC) | Identity, KYC, contact data | Legal obligation; contract performance |
| Processing deposits and withdrawals | Financial, identity data | Contract performance |
| Providing betting and casino services | Gaming activity, financial data | Contract performance |
| Customer support and dispute resolution | Communications, identity data | Contract performance; legitimate interests |
| Fraud prevention and security monitoring | Technical, financial, identity data | Legal obligation; legitimate interests |
| Responsible gaming monitoring and enforcement | Gaming activity, financial data | Legal obligation; legitimate interests |
| Anti-money laundering (AML) compliance | Financial, identity, KYC data | Legal obligation |
| Platform analytics and performance optimisation | Technical, usage data | Legitimate interests |
| Marketing and promotional communications | Contact, gaming activity data | Consent (where required) |
| Personalisation of platform experience | Gaming activity, usage data | Legitimate interests; consent |
| Compliance with legal and regulatory obligations | All categories (as required) | Legal obligation |
Where bag88 processes personal data on the basis of legitimate interests, we have assessed those interests against your rights and freedoms and are satisfied that our legitimate interests do not override your fundamental privacy rights in the relevant circumstances.
Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred language, login status, and session preferences, to improve your experience on subsequent visits.
6.2 Types of Cookies Used by bag88
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core functionality such as session management, authentication, and security. Without these cookies, the Platform cannot operate correctly. You cannot opt out of strictly necessary cookies.
- Functional Cookies: These cookies remember your preferences and settings (such as display language and saved login details) to provide a more personalised experience on the Platform.
- Analytical Cookies: We use analytical cookies to understand how players use the Platform in aggregate — which pages are visited most frequently, how long sessions last, and where users commonly exit. This information helps us improve the Platform. Analytical cookies do not identify you as an individual.
- Performance Cookies: These cookies monitor the technical performance of the Platform, helping us identify and resolve loading issues, errors, and slow-response areas rapidly.
6.3 Managing Cookies
You can manage or disable cookies through your web browser settings. Instructions for the most common browsers are available via the browser developer's help documentation. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may affect the functionality of the Platform and may prevent you from logging in or completing transactions.
bag88 does not use cookies to track your browsing activity on websites other than bag88.io. Our cookies operate exclusively within the bag88 Platform domain.
Data Sharing and Third-Party Disclosures
bag88 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:
7.1 Service Providers and Data Processors
bag88 engages trusted third-party service providers to assist with the operation of the Platform. These providers act as data processors — they process personal data only on bag88's documented instructions and are contractually prohibited from using your data for any other purpose. They include:
- KYC and identity verification providers
- Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks including Visa and Mastercard)
- Fraud detection and anti-money laundering service providers
- Casino and live dealer game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi)
- Cloud infrastructure and hosting providers
- Customer support platform providers
- Email delivery service providers
- Platform analytics service providers
7.2 Legal and Regulatory Disclosures
bag88 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent governmental bodies where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of bag88's assets, personal data held by bag88 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to the privacy terms that apply to their data in advance of the transfer taking effect.
7.4 Protection of Rights
bag88 may disclose personal data where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of bag88, our players, or third parties — for example, in connection with fraud investigations, chargeback disputes, or account security incidents.
International Data Transfers
The bag88 Platform serves players in Bangladesh. However, some of our third-party service providers — including cloud infrastructure partners, game studio providers, and KYC verification services — may process data in countries outside Bangladesh.
Where personal data is transferred internationally, bag88 takes appropriate steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual data protection clauses, vendor security assessments, and ongoing due diligence reviews of our third-party partners.
By registering a bag88 account, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh as part of the normal operation of the Platform.
Data Retention
bag88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention guidelines apply:
- Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to meet anti-money laundering and fraud prevention obligations.
- KYC documentation: Retained for a minimum of 5 years following the completion of KYC verification or account closure, whichever is later.
- Transaction records: Retained for a minimum of 5 years following each transaction, in accordance with financial record-keeping requirements.
- Customer support communications: Retained for a minimum of 3 years following the resolution of the relevant support interaction or dispute.
- Technical and usage logs: Typically retained for 12 months in aggregate form; individual session logs may be retained for up to 24 months where a security investigation is ongoing.
- Marketing preference records: Retained for as long as your account is active, or until you withdraw consent for marketing communications, whichever is earlier.
Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.
Security Measures
bag88 applies a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption applied to all data in transit between your device and the Platform.
- Encryption at rest for sensitive data categories including payment identifiers and KYC document copies stored on our servers.
- Role-based access controls ensuring that only specifically authorised personnel can access personal data, and only to the extent necessary for their role.
- Multi-factor authentication applied to all internal administrative systems that can access personal data.
- Regular penetration testing and vulnerability assessments conducted by independent security specialists.
- Continuous security monitoring of Platform infrastructure for suspicious activity, intrusion attempts, and anomalous behaviour.
- Incident response procedures that are activated in the event of a suspected data breach, including prompt notification to affected players where required.
Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, please contact us immediately at [email protected].
Your Rights as a Data Subject
As a registered bag88 player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".
11.1 Right of Access
You have the right to request a copy of the personal data bag88 holds about you, together with information about how that data is being processed. We will provide a response to verified access requests within 30 calendar days.
11.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay. For straightforward corrections (such as updating a mobile number or email address), you may also update certain details directly within your account settings.
11.3 Right to Erasure
In certain circumstances, you have the right to request that bag88 delete the personal data we hold about you. This right is subject to limitations — we may be required to retain certain data to fulfil our legal obligations (for example, KYC records for AML compliance) even following a deletion request. We will clearly explain the scope of any deletion we are and are not able to perform.
11.4 Right to Restriction of Processing
You have the right to request that bag88 restrict the processing of your personal data in certain defined circumstances, for example while the accuracy of the data is being contested or while a complaint is under investigation.
11.5 Right to Data Portability
Where personal data is processed on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
11.6 Right to Object
You have the right to object at any time to the processing of your personal data where that processing is based on bag88's legitimate interests. You also have an absolute right to object to the processing of your personal data for direct marketing purposes.
11.7 Rights Related to Automated Decision-Making
bag88 may use automated systems to assist with fraud detection, bonus eligibility assessments, and responsible gaming monitoring. Where an automated decision produces a significant legal or similarly significant effect on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome.
bag88 will not charge a fee for the exercise of data subject rights in ordinary circumstances. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive. We will verify your identity before processing any data rights request to protect against unauthorised disclosure.
Marketing Communications
bag88 may send you marketing communications relating to promotions, bonuses, new game releases, tournaments, and seasonal offers relevant to the Bangladesh market (such as Eid promotions, BPL cricket specials, Pohela Boishakh offers, and Victory Day bonus events). All marketing communications from bag88 are sent in English.
You will only receive marketing communications where you have provided your consent at registration or through your account settings. You may withdraw consent for marketing communications at any time by:
- Clicking the "Unsubscribe" link included in every marketing email; or
- Contacting bag88 support at [email protected] with the subject line "Unsubscribe from Marketing".
Withdrawing consent for marketing communications does not affect the delivery of operational and account-related messages (such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts), which are sent on the basis of contract performance and cannot be individually opted out of while your account remains active.
Children and Age Restrictions
The bag88 Platform is strictly restricted to individuals who are 21 years of age or older. bag88 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will immediately close the associated account and delete all personal data associated with that account in accordance with our data retention obligations.
If you are a parent or guardian and believe that your child has registered a bag88 account, please contact us immediately at [email protected] so that we can take appropriate action without delay.
Changes to This Privacy Policy
bag88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the Platform. When material changes are made, we will notify registered players via email to the address associated with their account, and will publish the revised policy on the Platform with a clearly updated effective date.
We encourage you to review this Privacy Policy periodically to stay informed about how bag88 handles your personal data. Your continued use of the Platform after any revision constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how bag88 handles your personal data, please contact our support team using the details below:
- Email: [email protected]
- Subject Line for Data Requests: "Data Rights Request" or "Privacy Policy Enquiry"
- Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 calendar days.
- Language: English
- Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or email [email protected] with the subject line "Responsible Gaming Request".
For general account and platform questions, our FAQ page addresses the most common topics raised by bag88 players across Bangladesh.