bahgoo Privacy Policy

01 Information We Collect

When you register for and use a bahgoo player account, we collect personal data across several categories. The information we collect depends on how you interact with the platform — some data is provided directly by you, some is collected automatically as you use the site, and some may be received from third-party payment partners.

Data you provide directly to us:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address in Bangladesh (city, district, postal code).
• Identity verification documents: Photographs or scans of your National Identity Card (NID), passport, or driving licence submitted during KYC verification.
• Proof of address documents: Utility bills, bank statements, or official correspondence confirming your residential address.
• Payment method information: The mobile number associated with your bKash, Nagad, Rocket, or Upay account; bank account details for bank transfer withdrawals. bahgoo does not store full card numbers or mobile banking PINs.
• Support communications: Messages, emails, and chat transcripts sent to our support team at [email protected] or via live chat.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and session time limit preferences you apply to your account.

Data collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage and behavioural data: Pages visited, games played, bets placed, session start and end times (recorded in Bangladesh Standard Time, UTC+6), in-game actions, and navigation paths through the platform.
• Transaction data: Deposit amounts, withdrawal amounts, bonus activations, wagering history, and game result records. This data is retained for audit and dispute resolution purposes.
• Cookies and similar technologies: Session cookies, authentication tokens, and analytics identifiers. See the Cookies section below for full details.

02 How We Use Your Data

bahgoo uses the personal data we collect for the following specific and legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes disclosed at the time of collection.

bahgoo does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for risk review, a member of the bahgoo compliance team will conduct a manual assessment before any material action is taken.

03 Legal Basis for Processing

bahgoo processes your personal data on the following legal grounds:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the bahgoo Terms and Conditions — including account creation, payment processing, KYC verification, and game participation — is conducted on the basis that it is necessary to perform the contract between you and bahgoo.
• Legitimate interests: Processing for fraud detection, platform security, abuse prevention, and aggregate analytics is conducted on the basis of bahgoo's legitimate interests in operating a safe and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable law — including anti-money laundering obligations, record-keeping requirements, and responses to lawful authority requests — is conducted on the basis of legal obligation.
• Consent: Processing for marketing communications and non-essential cookies is conducted on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

04 Data Sharing and Disclosure

bahgoo does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processing partners: bKash, Nagad, Rocket, Upay, City Bank, and BRAC Bank receive the minimum necessary payment data to process deposit and withdrawal transactions. These providers operate under their own privacy policies and are contractually required to process data only for the purposes of completing your transaction.
• Game and platform technology providers: Game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised or pseudonymised session data necessary to deliver their games within the bahgoo platform. They do not receive your full identity data.
• Identity verification services: Third-party KYC verification service providers may process copies of your identity documents solely for the purpose of age and identity verification. These providers are bound by strict data processing agreements.
• Fraud prevention and security services: Anonymised device fingerprint and behavioural risk signals may be shared with fraud detection partners to identify and prevent account abuse.
• Law enforcement and regulatory authorities: bahgoo will disclose personal data to law enforcement agencies, courts, or regulatory authorities in Bangladesh when compelled to do so by a valid legal order, warrant, or statutory obligation. bahgoo will notify affected players of such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bahgoo's business, your personal data may be transferred to the successor entity as part of the transaction. You will be notified by email if such a transfer will result in a material change to how your data is processed.

05 Cookies and Tracking Technologies

bahgoo uses cookies and similar client-side storage technologies to operate the platform, maintain your session, and gather aggregated analytics data. The following table describes the categories of cookies we use:

bahgoo does not use third-party advertising cookies, social media tracking pixels, or behavioural profiling technologies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bahgoo platform and may prevent you from logging in or completing transactions.

06 Data Retention

bahgoo retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your player account, plus a minimum of five (5) years following account closure, in accordance with record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction date, consistent with anti-money laundering record-keeping standards.
• Transaction records: Retained for a minimum of five (5) years following each transaction, for audit, dispute resolution, and legal compliance purposes.
• Support communications: Retained for three (3) years following the resolution of the relevant support interaction, for quality assurance and dispute reference purposes.
• Self-exclusion records: Retained indefinitely where a permanent self-exclusion has been applied, to prevent re-registration in breach of the exclusion order.
• Marketing consent records: Retained for the period of your account and for three (3) years following opt-out, as evidence of the consent decision.
• Anonymised analytics data: May be retained indefinitely in fully anonymised and aggregated form, as it no longer constitutes personal data.

When retention periods expire, personal data is securely deleted or irreversibly anonymised using industry-standard data sanitisation procedures. Where deletion is not immediately possible due to backup system architecture, data will be isolated from active processing until deletion can be completed.

07 Your Data Rights

As a player on the bahgoo platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request" and your registered account email address.

• Right of access: You have the right to request a copy of all personal data we hold about you, together with information about how it is processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Many data fields — such as email address and phone number — can be updated directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal obligation to retain certain data for the minimum periods described in the Data Retention section above.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format (JSON or CSV).
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection, if you believe your fundamental rights override those interests. You also have an absolute right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted before withdrawal.

08 Data Security Measures

bahgoo implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport encryption: All data in transit between your device and bahgoo's servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. Our SSL certificates are maintained and renewed continuously.
• Data at rest encryption: Personal data stored in bahgoo's databases — including identity documents, payment method references, and transaction records — is encrypted at rest using AES-256.
• Access controls: Access to personal data within bahgoo's internal systems is governed by a strict role-based access control (RBAC) policy. Only staff whose specific job function requires access to particular data categories are granted that access.
• Two-factor authentication (2FA): All internal staff accounts with access to production data systems require 2FA. We also offer OTP-based 2FA to players for their own account security.
• Intrusion detection and monitoring: bahgoo's infrastructure is monitored continuously for anomalous access patterns, unusual query volumes, and indicators of compromise. Automated alerts trigger immediate investigation by our security team.
• Penetration testing: bahgoo commissions independent security assessments of its platform infrastructure on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: bahgoo maintains a documented incident response plan for data security breaches. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify affected players without undue delay and will take immediate remedial action.

While bahgoo takes all reasonable measures to protect your data, no digital transmission or storage system is entirely impenetrable. You also play a role in protecting your account by maintaining a strong, unique password, enabling 2FA, and ensuring that your device and browser are kept up to date. If you believe your account has been compromised, contact [email protected] immediately.

09 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bahgoo has handled your personal data, please contact our data protection team using the details below. All privacy-related correspondence is handled confidentially.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction. bahgoo will cooperate fully with any investigation conducted by a competent authority.

bahgoo reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or legal obligations. When material changes are made, we will notify registered players via their registered email address and update the "Last Updated" date at the top of this page. Continued use of the bahgoo platform following notification of a Privacy Policy update constitutes your acceptance of the revised Policy.