Privacy Policy — bagi99

This Privacy Policy ("Policy") applies to bagi99 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at bagi99.bid (the "Platform"). This Policy describes how we collect, use, store, share, and protect the personal data of users ("you", "your") who access or use any part of the Platform, including but not limited to the website, mobile-optimised site, live chat, and email communications.

By registering an account on the bagi99 Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree to this Policy, you must discontinue use of the Platform and contact us to request account closure. This Policy is incorporated by reference into our Terms and Conditions, which you accepted upon registration.

bagi99 acts as the data controller in respect of the personal data it collects directly from users. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by appropriate data processing agreements that restrict their use of your data to the purposes we specify.

This Policy is written in English and applies to users located in Bangladesh and any other jurisdiction from which the Platform is accessed. The Platform is intended for adults aged 18 and above. We do not knowingly collect or process the personal data of individuals under the age of 18.

bagi99 collects personal data in the following categories, depending on how you interact with the Platform:

We collect only the minimum data necessary for the purposes described in Section 4 of this Policy. We do not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where the production of an identification document containing a photograph is required for KYC purposes, in which case any such photograph is processed solely for identity verification and is not used for biometric identification or profiling.

bagi99 collects personal data through the following mechanisms:

• Direct Provision by You: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or respond to a promotional offer, you directly provide us with personal data.
• Automated Technologies: When you access the Platform, our servers automatically record Technical Data including your IP address, browser type, device identifier, session timestamps, and navigation data. This is collected via server logs, cookies, and similar tracking technologies (see Section 9 for details on cookies).
• Payment Processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment processor confirms transaction details to bagi99, including partial payment account identifiers and transaction status.
• Identity Verification Partners: bagi99 may use third-party KYC verification services to cross-reference the identity documents you submit against official identity databases. These partners provide verification outcomes to bagi99 and are prohibited from retaining or using your data for any other purpose.
• Game Studio Providers: Certified game providers including Pragmatic Play, Evolution Gaming, Ezugi, and Spribe may provide bagi99 with aggregated game session data (rounds played, outcomes, bet sizes) for account management and responsible gaming monitoring purposes.
• Fraud Prevention Tools: Automated risk-scoring systems may analyse Technical Data and Usage Data to flag potentially fraudulent account activity. These systems do not make final decisions autonomously; flagged accounts are reviewed by a human compliance officer before any action is taken.

bagi99 processes your personal data for the following specific and documented purposes:

• Account Registration and Management: To create and maintain your bagi99 account, authenticate your identity at login, and administer your account settings and preferences.
• Identity Verification (KYC): To comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations by verifying your identity and age before processing withdrawal requests. This is a legal requirement and cannot be waived.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile transaction records, and to investigate disputed transactions.
• Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, promotional offers, and all other features of the bagi99 Platform.
• Customer Support: To respond to your enquiries, resolve complaints, process refund requests, and manage disputes through bagi99's internal resolution process.
• Responsible Gaming Monitoring: To monitor account activity for signs of problem gambling behaviour, to apply self-imposed limits you have activated, and to enforce cooling-off periods and self-exclusion requests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Legal Compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities, including data retention obligations and mandatory reporting duties.
• Marketing Communications: To send you promotional emails, SMS notifications, and personalised bonus offers, where you have given explicit consent or where we have a legitimate interest in communicating relevant offers to active players. You may withdraw consent at any time by updating your account notification preferences or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the bagi99 Platform. This analysis does not involve the use of personally identifiable information.

bagi99 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, other than the fraud-scoring process described in Section 3 (which is subject to human review before any account action is taken).

bagi99 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bagi99 — specifically, to operate your account, process deposits and withdrawals, deliver games and betting services, and provide customer support. Without this processing, bagi99 cannot fulfil its contractual obligations to you.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including AML/KYC obligations, data retention requirements, and any mandatory reporting obligations imposed by competent authorities.
• Legitimate Interests: Processing that serves bagi99's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, responsible gaming safeguards, and platform analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time without detriment, except in relation to processing already completed prior to withdrawal.

bagi99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, solely to the extent required to process your transactions. These providers are independent data controllers for their own processing activities and are governed by their own privacy policies.
• KYC and AML Partners: Accredited identity verification and fraud-prevention service providers that assist bagi99 in meeting its compliance obligations. These parties process your data under strict data processing agreements and are prohibited from using your data for any purpose beyond verification.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified providers who operate the games available on the Platform. Providers receive only the minimum account data necessary to authenticate game sessions and record bet outcomes.
• IT Infrastructure and Hosting Providers: Cloud hosting and content delivery providers who maintain the servers, databases, and infrastructure on which the bagi99 Platform operates. These providers act as data processors under our instruction and are contractually bound to implement appropriate security measures.
• Legal and Regulatory Authorities: Where we are required to disclose data by applicable law, court order, or at the request of a competent regulatory authority, we will comply with such requirements. Where permitted by law, we will endeavour to notify you of any such disclosure.
• Professional Advisers: Lawyers, auditors, and financial advisers who require access to personal data in the course of providing professional services to bagi99, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of bagi99's business or assets, personal data held by bagi99 may form part of the transferred assets. You will be notified in advance of any such transfer and of any material change to how your data is processed as a result.

All third-party data processors engaged by bagi99 are required to implement appropriate technical and organisational measures to protect the personal data they handle on our behalf, consistent with the security standards described in Section 8 of this Policy.

bagi99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with bagi99's internal data destruction procedures. Anonymised data — which cannot be used to identify you — may be retained indefinitely for aggregated analytics and reporting purposes.

Where you request deletion of your account and personal data under Section 10, bagi99 will action your request within 30 days, subject to any overriding legal retention obligations. Where we are required by law to retain certain data beyond the date of your deletion request, we will inform you of the categories of data being retained and the applicable retention period.

bagi99 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our core security practices include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bagi99 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored in bagi99's databases — including financial records, identity documents, and KYC data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to bagi99 personnel and authorised service providers who require it to perform their duties. All internal access is governed by role-based access control (RBAC) policies and is logged for audit purposes.
• Two-Factor Authentication: bagi99 offers two-factor authentication (2FA) via SMS for all user accounts. We strongly recommend all users enable 2FA to provide an additional layer of protection against unauthorised account access.
• Penetration Testing and Security Audits: The bagi99 Platform undergoes regular security assessments, including vulnerability scans and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: bagi99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, bagi99 will notify affected users without undue delay and will take all appropriate remedial steps.
• Staff Training: All bagi99 personnel with access to personal data receive regular training on data protection obligations, phishing awareness, and secure data handling practices.

While bagi99 employs best-practice security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact bagi99 support immediately at [email protected].

bagi99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the Platform to recognise your device, maintain your session, and remember your preferences between visits.

bagi99 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without preventing the Platform from operating correctly.
• Functional Cookies: These cookies allow the Platform to remember your preferences — such as your preferred language and display settings — to provide a more personalised experience. Disabling these cookies may affect the functionality of certain Platform features.
• Performance and Analytics Cookies: These cookies collect anonymised information about how you interact with the Platform, such as pages visited and session duration. This data is used exclusively to improve Platform performance and is not used to identify individual users.
• Marketing and Targeting Cookies: Where you have consented, these cookies allow bagi99 to deliver personalised promotional content based on your usage patterns and preferences. You may withdraw consent for marketing cookies at any time through your account settings.

Most web browsers are set to accept cookies by default. You can configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the Platform. Instructions for managing cookies are available in your browser's help documentation. Please note that third-party game providers may also set cookies on your device when you launch a game; these cookies are governed by the respective provider's privacy policy.

As a bagi99 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. bagi99 will respond to all verified requests within 30 days.

Please note that certain rights may be limited or inapplicable where bagi99 is required by law to retain or process data (for example, KYC and AML obligations). In such cases, bagi99 will explain the limitation in its response to your request. bagi99 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable fee may be applied.

The bagi99 Platform is strictly intended for individuals aged 18 years or older. bagi99 does not knowingly collect, process, or store the personal data of any person under the age of 18. Registration on the Platform requires users to confirm that they are of legal age, and bagi99 conducts age verification as part of the KYC process for all accounts prior to the processing of any withdrawal.

If bagi99 discovers or has reasonable grounds to believe that a registered account is held by an individual under the age of 18, the account will be immediately suspended, all balances will be forfeited (as the account was opened in breach of our Terms and Conditions), and all personal data associated with the account will be securely deleted in accordance with our data retention policy, subject to any mandatory legal requirements to retain evidence of the age-related breach.

If you are a parent or guardian and believe that a minor under your care has registered an account on the bagi99 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all appropriate action, including account closure and data deletion. 18+ only — gambling involves financial risk and is not suitable for minors.

bagi99 is operated primarily for the Bangladesh market. Some of our third-party service providers — including game studio providers such as Pragmatic Play, Evolution Gaming, and Spribe, as well as cloud infrastructure and KYC verification partners — may process or store personal data in jurisdictions outside Bangladesh. Where such international transfers occur, bagi99 takes appropriate measures to ensure that your personal data receives an equivalent level of protection to that afforded within Bangladesh.

These measures include ensuring that international data transfers are made only to service providers who:

• Are subject to a jurisdiction that provides an adequate level of data protection, as assessed by bagi99's compliance team;
• Have entered into appropriate data processing agreements with bagi99 containing contractual data protection obligations; or
• Are certified under a recognised international data protection framework.

If you require further information about the safeguards in place for a specific international transfer, please contact our support team at [email protected].

bagi99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The most current version of this Policy will always be available at bagi99.bid/privacy-policy. The effective date displayed at the top of this page will be updated whenever a new version is published.

Where changes to this Policy are material — meaning they substantively affect how we collect or use your personal data, or your rights in relation to that data — bagi99 will provide advance notice to registered users via the email address associated with their account, wherever reasonably practicable, at least 14 days before the changes take effect.

Your continued use of the bagi99 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated Policy. If you do not agree to the updated Policy, you must cease using the Platform and contact us to request account closure and data deletion.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bagi99 handles your personal data, please contact our dedicated privacy support team. We take all privacy enquiries seriously and commit to responding within 5 business days.

Privacy & Data Protection Enquiries:
Email: [email protected]
Subject Line: Privacy Policy Enquiry or Data Rights Request
Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)

When submitting a data rights request, please include your registered username or email address and a clear description of the right you wish to exercise. bagi99 may need to verify your identity before processing your request in order to protect your account from unauthorised third-party access.

bagi99 has appointed an internal Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be reached through the same email address above with the subject line "Attention: Data Protection Officer".