Privacy Policy — bagh3 Online Casino

1 Information We Collect

bagh3 collects personal data from players in Bangladesh through several channels: directly from you when you register an account, from your ongoing use of the platform, from third-party payment processors you authorise, and — where required for identity verification — from identity verification service providers. The categories of personal data we collect are described below.

Account Registration Data

When you create a bagh3 account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, email address, mobile phone number, and your chosen username. You may also be asked to provide a residential address during the Know Your Customer (KYC) verification process.

Identity Verification Data

To comply with our obligations to prevent underage gambling and financial crime, bagh3 may request copies of government-issued identification documents, proof of address, and proof of payment method ownership. Documents collected may include your National Identity Card (NID), passport, driving licence, or utility bills. These documents are processed under strict confidentiality protocols.

Financial and Transaction Data

We record all deposits and withdrawals processed through your bagh3 account. This includes the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), the mobile number or account number associated with that payment method, the transaction amount in BDT, the date and time of the transaction, and the transaction reference number. We do not store full payment credentials on our servers — payment processing is handled securely by our payment partners.

Technical and Usage Data

When you access bagh3 via a web browser or mobile device, we automatically collect certain technical data. This includes your IP address, browser type and version, device type and operating system, the pages you visit within the bagh3 platform, the time and duration of your sessions, and gameplay activity such as games played, wagers placed, and outcomes recorded. This data is used to maintain platform security, detect fraud, and improve the user experience.

Communications Data

If you contact bagh3 support by email or live chat, we retain a record of that correspondence. This includes the content of your messages, the date and time of communication, and any attachments you share with us. This data is used to resolve support queries and to improve our customer service operations.

2 How We Use Your Data

bagh3 processes personal data only for legitimate, defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The following table summarises the primary purposes for which we process player data, along with the legal basis for each activity.

Where bagh3 relies on your consent as the legal basis for processing — particularly for promotional communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bagh3 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human oversight. Where automated systems flag accounts for review (for example, in fraud detection), a member of our compliance team reviews the flagged case before any action is taken.

3 Cookies and Tracking Technologies

bagh3 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and gather anonymised usage analytics. A cookie is a small text file placed on your device by a web server. Cookies cannot execute code or deliver viruses; they serve only as a data identifier that the server can read when you return to the site.

The following categories of cookies are used by bagh3:

• Strictly Necessary Cookies: These cookies are essential for the bagh3 website to function. They enable core features such as session authentication, account security, and navigation. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your chosen language or display settings — so you do not need to re-enter them on each visit. These cookies do not track your activity across other websites.
• Analytics Cookies: bagh3 uses anonymised analytics to understand how players interact with the platform. This data helps us identify pages that are difficult to navigate, features that are underused, and areas where performance improvements are needed. All analytics data is aggregated and does not identify individual users.

bagh3 does not use advertising cookies, retargeting pixels, or third-party social media tracking tools. We do not permit third-party advertisers to place cookies on the bagh3 platform.

4 Data Sharing and Disclosure

bagh3 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the minimum data required to complete the transaction is shared with the relevant payment processor. Each payment partner operates under its own privacy policy and is bound by applicable financial regulations in Bangladesh.
• Identity verification providers: Where bagh3 uses a third-party KYC service to verify your identity, your identification documents and associated data are shared with that provider solely for verification purposes. These providers are contractually prohibited from using your data for any other purpose.
• Game software providers: To facilitate your gameplay, technical session data (such as your account ID and session token) may be passed to game software providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive only the data necessary to authenticate your session and record game outcomes. They do not receive your full personal profile.
• Legal and regulatory authorities: bagh3 will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh when required to do so by a valid legal obligation, court order, or applicable law. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or transfer of bagh3's business or assets, player data may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer that materially changes how their data is processed.

5 Data Retention Policy

bagh3 retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, to maintain your account, and to meet our legal and regulatory obligations. The specific retention periods applicable to each category of data are set out below.

• Account registration data: Retained for the duration of your account's active status, plus a minimum of five years following account closure, to satisfy applicable anti-money-laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of verification, or for five years following account closure, whichever is the later date. This period reflects standard financial regulatory obligations.
• Financial and transaction records: Retained for a minimum of six years from the date of each transaction, consistent with standard accounting and financial compliance requirements.
• Gameplay activity logs: Retained for a maximum of two years from the date of each session, after which logs are anonymised and aggregated for statistical analysis only.
• Customer support communications: Retained for two years from the date of the last message in each support thread, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until final resolution.
• Analytics and technical data: Aggregated and anonymised within 90 days of collection. Anonymised analytics data does not identify individual players and may be retained indefinitely for trend analysis.
• Marketing consent records: Retained for the duration of your active consent plus three years following withdrawal, to demonstrate historical compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Players who request account closure may request confirmation that their data has been deleted, subject to the retention obligations described above.

6 Your Data Rights

bagh3 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data bagh3 holds about you, along with information about how it is being processed. We will provide this information in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Players may update basic contact details directly from their account settings dashboard.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal data retention obligations — data that must be retained under applicable law cannot be deleted prior to the mandatory retention period expiring.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing pending verification of legitimate grounds — you may request that we restrict processing of your data to storage only.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where bagh3 relies on your consent to process personal data (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to the processing of your personal data where bagh3 relies on legitimate interest as the legal basis, or where data is used for direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7 Data Security Measures

bagh3 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes both technical controls and organisational policies maintained by our dedicated security and compliance team.

Key technical measures currently in place include:

• TLS/SSL encryption: All data in transit between your browser or device and the bagh3 platform is encrypted using current-generation TLS protocols. Our SSL certificate is maintained and renewed regularly.
• Encrypted data storage: Sensitive fields within our databases — including personal identification details and payment references — are encrypted at rest using strong symmetric encryption. Database servers are not publicly accessible and sit behind multiple network security layers.
• Access controls: Access to personal data within bagh3's internal systems is restricted on a need-to-know basis. All internal access is logged, and privileged access requires multi-factor authentication.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous activity. Automated alerts notify our security team of unusual access patterns, failed login attempts, or other indicators of compromise in real time.
• Regular security assessments: bagh3 conducts periodic internal security reviews and works with independent security professionals to assess the integrity of our platform. Identified vulnerabilities are remediated according to a defined priority schedule.
• Incident response: bagh3 maintains a documented data breach response procedure. In the event of a security incident involving personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

While bagh3 takes all reasonable technical and organisational measures to protect your data, no digital platform can guarantee absolute security. We strongly encourage all players to use strong, unique passwords for their bagh3 accounts, to enable two-factor authentication where available, and to avoid accessing their accounts over unsecured public Wi-Fi networks, including in public spaces across Dhaka, Chittagong, and other cities in Bangladesh.

8 Updates to This Policy

bagh3 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date displayed at the top of this page will be revised each time a material change is made.

When we make material changes to this Privacy Policy, we will notify registered players by posting a prominent notice on the bagh3 platform and, where appropriate, by sending a notification to your registered email address. Your continued use of bagh3 following the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms.

We encourage all players to review this Privacy Policy regularly to remain informed about how bagh3 collects, uses, and protects personal data. If you have questions or concerns about any aspect of this Privacy Policy, or if you wish to exercise any of the data rights described in Section 6, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 30 days of receiving a complete and valid request
• Language: All privacy correspondence is handled in English

This Privacy Policy applies exclusively to personal data processed by bagh3 in connection with the bagh3.net platform. It does not apply to third-party websites, payment provider portals, or game provider interfaces that you may access via links or embedded content. bagh3 is not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies before submitting personal data to them.