Bhagg's Privacy Policy — Your data is safe with us

01Introduction & Scope

Bhagg (bhagg.best) places the highest importance on protecting the personal information of every member who uses its services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.

This policy applies to Bhagg's website, mobile app, and all associated services. By using any Bhagg service, you are agreeing to this Privacy Policy.

We make one promise — Bhagg will never use your data against you. Your information is used solely to provide you with a better experience.

02What Information We Collect

Bhagg collects different types of information depending on the context. Full details are provided below.

Information provided at registration

• Full Name (as per National ID)
• Mobile Number & Email Address
• Date of Birth
• Password (stored in encrypted form — not readable in plain text)

During KYC Verification

• Photo of National ID or Passport
• Selfie or Live Verification Photo
• Proof of Address (where applicable)

Data Collected Automatically While Using the Platform

03Why & How We Use Your Data

Bhagg believes in being fully transparent about every reason your data is used. The main purposes are outlined below.

Service Delivery & Operations

Your data is used to create and manage your account, process transactions, run games, and provide customer support. This is the foundation of our service — Bhagg cannot operate without it.

Security & Fraud Prevention

Login activity, IP addresses, and transaction patterns are monitored to detect and prevent multiple accounts, bonus abuse, money laundering, and other fraudulent behaviour. This is essential to protect all legitimate players.

Legal Compliance

Certain data must be retained to meet the requirements of licensing authorities and financial regulators. This information is not shared with any party unless required by law.

Service Improvement

Bhagg continuously improves the platform by analysing which games are most popular and where users encounter difficulties. This analysis typically uses anonymised data.

Communication & Notifications

Important account notifications, transaction confirmations, and security alerts are sent via SMS or email. Separate consent is obtained before sending any marketing messages — and you can opt out at any time.

04How Your Data Is Shared

Bhagg does not sell your data. However, in certain specific circumstances, limited information may be shared with designated parties — the reason for each case is clearly outlined below.

• Payment Providers (bKash, Nagad, Rocket, DBBL): Only the minimum data required to process a transaction is shared. Card numbers and PINs never reach Bhagg.
• Identity Verification Service: A licensed verification provider is used for the KYC process. They verify your identity only and do not retain your data.
• Game Provider: Providers such as Pragmatic Play and Evolution Gaming receive only the session data necessary to run games. They do not receive your identity or payment information.
• Legal Authority: Specific information may be disclosed in response to a court order or a lawful directive from a regulatory authority. This is not at Bhagg's discretion — it is a legal obligation.
• Anti-Fraud Network: Industry-standard blacklist databases are checked to prevent fraud. This is a one-way process — Bhagg receives verification results only, and shares no data.

05Cookies & Tracking

Bhagg's website and app use cookies — small files stored in your browser that help manage your session.

Types of Cookies Used by Bhagg

• Essential Cookies: Required to maintain login sessions and verify security. The site cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: Used to remember your preferences (language, odds format). Disabling these means you will need to reconfigure your settings each visit.
• Analytics Cookies: Anonymous data such as pages visited, time spent, and clicks is used to improve our services. This can be disabled through your browser settings.

Cookie Controls

Cookies can be disabled or deleted through your browser settings. However, disabling essential cookies will prevent you from logging in or playing games. Cookie management options are available under "Privacy & Security" settings in Chrome, Firefox, and other browsers.

06Data Security Measures

Bhagg maintains multiple layers of security to protect your data. These are not just policies on paper — they are actively enforced in day-to-day operations.

Technical Security

• SSL TLS 1.3: All data transfers are secured with the highest standard of encryption
• Password Hashing: Your password is hashed using the bcrypt algorithm — no one can read it in plain text
• Two-Factor Authentication (2FA): An OTP is sent with every login
• Firewall & DDoS Protection: Servers protected against cyber attacks
• Encrypted Database: Sensitive data is encrypted both in transit and at rest.

Procedural Safeguards

• Staff access is limited strictly to the data required for their role (Least Privilege principle).
• Data protection training is mandatory for all staff
• Regular third-party security audits and penetration testing
• Policy to notify affected members within 72 hours in the event of a data breach

07Data Retention

Bhagg does not retain data beyond what is necessary. A separate retention period is defined for each category of information.

• Account Information: For as long as your account remains active. Following closure, data may be retained for up to 5 years in line with regulatory requirements.
• Transaction Records: 7 years in accordance with financial regulations. This is a legal requirement.
• KYC Documents: 5 years after account closure, or as directed by the relevant authorities.
• Game & Betting History: Retained for up to 3 years for dispute resolution purposes.
• Log Files: Retained for 90 days for security analysis, then automatically deleted.
• Marketing Consent Records: 1 year after consent is withdrawn (for verification purposes).

After the applicable retention period, data is securely deleted or anonymised. Once deleted, it cannot be recovered.

08Your Rights

Bhagg believes you should have full control over your own data. Your rights are outlined below.