bag333 Privacy Policy

1. Who We Are

bag333 operates the online casino and sports betting platform accessible at bag333.bet, offering cricket betting, live casino, slot games, crash games, and related services to adult players aged 21 and above across Bangladesh. In this Privacy Policy, "bag333", "we", "us", and "our" refer to the operator of the bag333 platform. "You" and "your" refer to any individual who accesses, registers with, or uses the bag333 platform.

We act as the data controller for all personal information collected through the bag333 platform. This means we determine the purposes and means of processing your personal data and are responsible for doing so lawfully and securely.

2. Information We Collect

We collect personal information from you in several ways — directly when you provide it, automatically as you use the platform, and occasionally from third-party sources as part of our verification obligations.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, Bangladeshi mobile number, and email address provided when you create your bag333 account.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or other identity documents submitted during the KYC (Know Your Customer) process.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile number, or bank account details associated with deposits and withdrawals. We do not store full card numbers or mobile money PINs.
• Support communications: The content of messages, emails, or live chat conversations you send to the bag333 support team, including any attachments.
• Responsible gaming requests: Information you provide when setting deposit limits, requesting cooling-off periods, or applying for self-exclusion.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution collected when you access the platform.
• Session data: Login timestamps, session duration, pages visited, game titles played, bet amounts, and navigation paths within the platform.
• Transaction logs: Records of all deposits, withdrawals, bonus credits, wagers placed, and game outcomes associated with your account.
• Cookies and similar technologies: See Section 9 (Cookies) for full details on how we use cookies and tracking technologies on the bag333 platform.

2.3 Information from Third Parties

• Payment providers: bKash, Nagad, Rocket, Upay, and our banking partners confirm transaction status and the registered name associated with a mobile money account to enable payment matching.
• KYC verification services: We may use third-party identity verification providers to cross-check the documents you submit against official records, solely for the purpose of confirming your identity and age.
• Fraud prevention services: Third-party fraud and anti-money-laundering screening services may provide risk scores or flag alerts associated with an account or transaction.

3. Legal Basis for Processing

bag333 processes your personal data only where we have a valid legal basis to do so. Depending on the purpose, we rely on one or more of the following grounds:

• Contract performance: Processing your registration data, payment details, and transaction records is necessary to provide the services you signed up for.
• Legal obligation: Identity verification, age checks, and transaction record-keeping are required by our anti-money-laundering and responsible gaming obligations.
• Legitimate interests: Fraud prevention, platform security, and responsible gaming monitoring are carried out in the legitimate interests of the platform and the wider player community.
• Consent: Sending promotional communications is carried out only where you have provided explicit consent at registration or at a later point. You may withdraw this consent at any time.

4. How We Share Your Information

bag333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

4.1 Payment Processors

To process deposits and withdrawals, we share your mobile number and transaction amount with bKash, Nagad, Rocket, Upay, and relevant banking partners. These providers receive only the minimum information required to complete the transaction and are contractually obligated to handle it securely.

4.2 Identity Verification Providers

KYC documents submitted during the verification process may be shared with certified third-party identity verification services. These providers process your documents solely for the purpose of confirming your identity on our behalf and do not retain your documents beyond the verification event.

4.3 Game Providers

Third-party game providers — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — receive a pseudonymous player identifier and session token to enable gameplay. They do not receive your name, mobile number, or financial details.

4.4 Fraud and AML Services

To meet our anti-money-laundering obligations and protect the platform against fraud, we may share account and transaction data with specialist screening services. Information shared for this purpose is processed under strict data processing agreements.

4.5 Legal and Regulatory Disclosure

We may disclose personal data if required to do so by a valid legal process, court order, or regulatory authority. In such cases we will disclose only what is specifically required and, where permitted, will notify the affected player.

5. Data Retention

We retain your personal data for as long as your account is active and for a defined period after account closure, in line with our legal and compliance obligations. Specifically:

• Account and transaction records: Retained for a minimum of five years from the date of the last transaction, as required by anti-money-laundering regulations.
• KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for three years from the date of the conversation, unless the content relates to an ongoing dispute or legal matter.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, even after the exclusion period ends.
• Marketing consent records: Retained for the duration of your account and for two years following account closure, as evidence of the consent you provided.

When data is no longer required for any of the purposes described in this policy and no legal retention obligation applies, we securely delete or anonymise it.

6. Data Security

bag333 implements technical and organisational measures proportionate to the risk posed by processing your personal data. These include:

• Transport Layer Security (TLS 1.3) encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for sensitive data fields including identity document files and payment credentials.
• Role-based access controls ensuring that staff can access only the data necessary to perform their specific job function.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.
• Two-factor authentication requirements for all administrative access to data systems.

No data transmission over the internet can be guaranteed as completely secure. While we apply best-practice protections, we cannot warrant the absolute security of information transmitted to us. Players are responsible for keeping their own account credentials secure.

7. Your Data Rights

As a bag333 player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with your account username and a description of your request. We aim to respond within 30 days.

8. International Data Transfers

The bag333 platform serves players in Bangladesh. Our primary data infrastructure is located in the Asia-Pacific region. Some of our third-party service providers — including certain game providers and fraud screening services — may process data in other jurisdictions. In each case, we ensure that appropriate data transfer safeguards are in place, including contractual commitments from the receiving party to apply data protection standards equivalent to those described in this policy.

We do not transfer your personal data to any country known to have inadequate data protection standards without first putting in place the appropriate contractual safeguards described above.

9. Cookies and Tracking Technologies

The bag333 platform uses cookies and similar technologies to operate correctly and to improve the player experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate between pages, and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Collect anonymised data about how players interact with the platform — which pages are visited most, where players encounter errors, and how long sessions last. This data is used exclusively to improve the platform and is never shared with advertisers.
• Functional cookies: Remember your preferences such as language settings and notification preferences so you do not need to re-enter them on each visit.

You can manage cookie preferences through your mobile browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. We do not use third-party advertising or behavioural tracking cookies.

10. Children and Minors

The bag333 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been created by or on behalf of a minor, we will immediately close the account, return any deposited balance following investigation, and securely delete the personal data associated with the account. If you believe a minor may have created a bag333 account, please notify us immediately at [email protected].

11. Third-Party Links

The bag333 platform does not contain links to third-party websites or services for advertising or affiliate purposes. All navigation within the platform remains within bag333.bet. This Privacy Policy applies solely to data collected and processed by bag333 and does not cover the practices of any external platform.

12. Changes to This Privacy Policy

bag333 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players via the email address on their account at least 7 days before the updated policy takes effect. The updated policy will also be published on this page with a revised effective date. Your continued use of the platform after the effective date of any change constitutes your acceptance of the updated policy.

We encourage you to review this page periodically so you remain informed about how we protect your data.

13. Contact Us About Privacy

If you have questions, concerns, or requests relating to this Privacy Policy or the way bag333 handles your personal data, please contact our data team. We take privacy enquiries seriously and aim to respond within 5 business days.

Privacy contact email: [email protected]

Please include "Privacy Request" in the subject line of your email along with your registered account username to help us handle your enquiry promptly.