Privacy Policy
for bagevip

1. Data We Collect

bagevip collects personal information from players in Bangladesh in order to provide a safe, compliant, and personalised gaming experience. We collect data through three primary means: information you provide directly, information generated automatically through your use of the platform, and information received from trusted third-party verification partners.

1.1 Information You Provide Directly

When you register a bagevip account or interact with our services, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and nationality
• Contact data: Mobile phone number, email address, and residential address (city, district, and postal code within Bangladesh)
• Account credentials: Username and encrypted password
• Verification documents: Government-issued photo ID (National ID card, passport, or driving licence) and proof of address submitted during KYC verification
• Payment data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) and bank account details where relevant — we do not store full card numbers or PINs
• Communications data: Records of correspondence with our support team via email or live chat

1.2 Information Collected Automatically

When you access and use bagevip, certain technical and behavioural data is collected automatically by our systems:

1.3 Information from Third Parties

bagevip may receive supplementary identity and verification data from trusted third-party KYC service providers, fraud detection partners, and payment processors solely for the purposes of verifying your identity and preventing financial crime. We do not purchase personal data lists from data brokers or marketing aggregators.

2. How We Use Your Data

bagevip processes your personal data only where we have a lawful basis to do so. The primary bases on which we rely are: performance of the contract between you and bagevip (i.e., delivering our gaming services), compliance with legal obligations, our legitimate interests in operating a safe and commercially sustainable platform, and — where required — your explicit consent.

2.1 Service Delivery

We use your personal data to create and manage your bagevip account, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and connected bank accounts, provide access to the game library (slots, live casino, cricket betting, Teen Patti, Andar Bahar), issue bonuses and promotional credits, and handle your support requests and account inquiries.

2.2 Security & Fraud Prevention

bagevip uses technical and behavioural data to detect and prevent unauthorised account access, money laundering, bonus abuse, multi-accounting, and other forms of fraudulent activity. This processing is essential to protect both the player community and the integrity of the platform. Where fraud is detected, we may share relevant data with law enforcement or regulatory bodies as required by applicable law.

2.3 Regulatory Compliance

As an online gaming platform serving players in Bangladesh, bagevip is required to maintain certain records relating to player identity, transaction history, and responsible gaming interactions. We retain this data for the periods specified in Section 5 of this Policy and process it solely to meet our compliance obligations.

2.4 Marketing Communications

With your consent, bagevip may send you promotional communications about new games, seasonal bonuses (for example, Eid promotions, BPL cricket betting offers, or Pohela Boishakh specials), and platform updates. You may withdraw your consent and opt out of marketing communications at any time by contacting us at support@bagevip or updating your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.5 Platform Improvement

Aggregated and anonymised usage data helps bagevip understand which features players find valuable, identify technical issues, and prioritise improvements to the game library, payment flows, and overall user experience. This data cannot be used to identify any individual player.

3. Cookies & Tracking Technologies

bagevip uses cookies — small text files stored on your device — and similar tracking technologies to ensure the platform functions correctly and to improve your experience. Below is a summary of the types of cookies we use and their purpose.

3.1 Essential Cookies

These cookies are strictly necessary for the bagevip platform to operate. They manage your login session, maintain your account state during navigation, and enable security features such as CSRF protection. Essential cookies cannot be disabled without preventing core platform functionality from working correctly.

3.2 Preference Cookies

Preference cookies remember choices you have made — such as your preferred language, display settings, or recently played games — so that the platform can present a more personalised experience on your next visit. These cookies do not track your activity across other websites.

3.3 Analytics Cookies

bagevip uses analytics tools to collect aggregated, anonymised data about how players interact with the platform. This helps us understand traffic patterns, identify popular games, and measure the effectiveness of promotional campaigns. Analytics data is not used to identify individual players.

3.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies for specific websites. Please note that blocking essential cookies will prevent you from logging in to your bagevip account. For detailed guidance on managing cookies in your specific browser, refer to the browser's help documentation.

4. Data Sharing & Third Parties

bagevip does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection standards.

4.1 Service Providers

We work with carefully selected third-party service providers who process personal data on our behalf to support the operation of bagevip. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank process transaction data necessary to complete deposits and withdrawals
• KYC & identity verification providers: Third-party verification services that assist in confirming player identity and age
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios receive the minimum data required to deliver game sessions (typically a session token and account identifier)
• IT infrastructure providers: Cloud hosting and CDN partners that store and deliver platform content securely
• Customer support platforms: Tools used by our support team to manage and resolve player inquiries

All service providers operating under a data processing agreement with bagevip are required to process personal data only on our documented instructions and to maintain appropriate technical and organisational security measures.

4.2 Legal Disclosures

bagevip may disclose your personal data to law enforcement agencies, regulatory authorities, or other governmental bodies when required to do so by applicable law, court order, or regulatory request. We will notify affected players of such disclosures wherever we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bagevip's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy with reasonable advance notice.

5. Data Security & Retention

bagevip implements a layered approach to data security, combining technical controls, operational procedures, and access management to protect your personal information from unauthorised access, loss, or disclosure.

5.1 Security Measures

Our security infrastructure includes, but is not limited to:

• SSL/TLS encryption for all data in transit between your device and bagevip servers
• Encryption of sensitive data fields (including passwords, which are hashed and salted) at rest
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security reviews and vulnerability assessments of platform infrastructure
• Two-factor authentication options available to players to secure their own accounts
• Automated monitoring for suspicious login attempts, unusual transaction patterns, and other indicators of potential compromise

5.2 Data Retention Periods

bagevip retains personal data for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, and contractual obligations. General retention guidelines are as follows:

• Active account data: Retained for the lifetime of your account plus a post-closure period required by applicable regulations
• Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements
• KYC documents: Retained for the duration of the account relationship plus five years following account closure
• Support correspondence: Retained for up to three years from the date of the last interaction
• Marketing preferences & consent records: Retained for the duration of the account relationship or until consent is withdrawn, whichever is earlier

When data is no longer required, bagevip securely deletes or anonymises it using industry-standard procedures so that it can no longer be attributed to any identifiable individual.

5.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, bagevip will take immediate containment steps, conduct a thorough investigation, and notify affected players as soon as reasonably practicable. We will provide clear guidance on recommended protective actions you should take to safeguard your account and personal information.

6. Your Privacy Rights

As a player on bagevip, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at support@bagevip. We will respond to all verifiable requests within 30 days of receipt.

6.1 Right of Access

You have the right to request confirmation of whether bagevip holds personal data about you, and if so, to receive a copy of that data along with information about how it is being processed. This is sometimes called a Subject Access Request (SAR). We will provide this information free of charge for the first request in any 12-month period.

6.2 Right to Rectification

If any personal data bagevip holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update many of your account details directly within your bagevip account settings. For data that cannot be self-updated (such as verified identity documents), please contact our support team.

6.3 Right to Erasure

In certain circumstances, you have the right to request that bagevip deletes your personal data — sometimes referred to as the "right to be forgotten". This right is not absolute; we may be required to retain certain data to comply with our legal obligations, resolve disputes, or enforce our agreements. Where erasure is not possible in full, we will explain the specific retention obligations that apply.

6.4 Right to Restrict Processing

You have the right to request that bagevip restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests pending our response.

6.5 Right to Object

You have the right to object to bagevip processing your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of legitimate interests where you believe your individual rights and freedoms outweigh those interests. bagevip will review all such objections and respond in writing.

7. Minors & Age Restriction

bagevip is strictly an adults-only platform. Our services are not directed at, intended for, or available to individuals under the age of 18. We do not knowingly collect personal data from anyone under the age of 18.

As part of our registration and KYC processes, bagevip takes reasonable steps to verify that all players are aged 18 or above before allowing real-money play. If we become aware that personal data has been submitted by or on behalf of a person under 18, we will immediately close the relevant account, delete the collected data, and return any deposited funds to the originating payment method following verification of the funding source.

Parents and guardians in Bangladesh who are concerned that a minor may have registered an account on bagevip should contact our support team at support@bagevip immediately. We take such reports extremely seriously and will investigate and act on them as a priority.

8. Policy Updates & Contact

8.1 Updates to This Policy

bagevip reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will update the effective date shown at the top of this document and, where practicable, notify registered players by email with a summary of what has changed.

Your continued use of bagevip following notification of a Privacy Policy update constitutes your acceptance of the revised terms. We encourage all players to review this page periodically to stay informed about how their personal data is being protected.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bagevip handles your personal data, please contact our Privacy team at:

Email: support@bagevip
Response time: Within 48 hours for general inquiries; within 30 days for formal data rights requests