bag999 Privacy Policy
This Privacy Policy explains how bag999 collects, uses, stores, and protects the personal information of players who access the bag999.app platform. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.
Your Privacy at bag999
These highlights capture the most important points of this Privacy Policy. The full detail is in the sections below — please read them carefully before using the platform.
SSL Encryption
All data transmitted between your device and bag999 servers is protected by industry-standard SSL/TLS encryption. Your payment details and personal information are never sent over unencrypted connections.
No Data Selling
bag999 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared with partners only where strictly necessary to operate the platform — and only under data protection agreements.
KYC Data Handled Securely
Identity documents submitted during KYC verification (NID, passport, proof of address) are stored securely with restricted access. These documents are used solely for verification and regulatory compliance purposes.
Cookies Used Transparently
bag999 uses cookies and similar tracking technologies to deliver a functional, personalised experience. You can manage your cookie preferences through your browser settings. Essential cookies cannot be disabled as they are required for platform operation.
Your Right to Access
You have the right to request a copy of the personal data bag999 holds about you, to correct inaccurate information, and to request deletion of your data where no overriding legal obligation requires us to retain it.
No Minors' Data
bag999 does not knowingly collect or process personal data belonging to individuals under the age of 18. Any account found to belong to a minor is immediately closed and associated data is handled in accordance with child protection obligations.
Data We Collect
bag999 collects personal data from you in several ways — directly when you register and use the platform, automatically when you interact with the website, and occasionally from third-party sources where permitted. The categories of data we collect are described below.
Registration and Account Data
When you create a bag999 account, we collect the following information:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (to verify you are aged 18 or above)
- Residential address (city, district, postal code)
- Mobile phone number
- Email address
- Preferred currency (BDT)
- Username and encrypted password
Identity Verification (KYC) Data
In order to process withdrawals and comply with responsible gaming obligations, bag999 requires identity verification. During the KYC process, we may collect:
- Copy of National ID Card (NID) or passport
- Proof of residential address (utility bill, bank statement)
- Selfie or live photo for liveness verification where requested
- Confirmation documents for your payment method (e.g., bKash or Nagad account screenshot)
Financial and Transaction Data
When you make deposits or withdrawals on bag999, we record transaction data including:
- Payment method type (bKash, Nagad, Rocket, Upay, bank transfer)
- Transaction amounts in BDT
- Transaction timestamps and reference numbers
- Partial payment account identifiers (we do not store full account credentials)
Gameplay and Betting Data
bag999 records your activity on the platform for operational, compliance, and responsible gaming purposes. This includes game sessions played, wager amounts, win and loss records, bonus claims and wagering progress, and sports betting selections and outcomes.
Technical and Device Data
When you access bag999.app, our servers and analytics tools automatically collect certain technical data:
- IP address and approximate geolocation (city/country level)
- Device type, operating system, and browser version
- Session duration and page interaction data
- Referring URL (the page you came from before visiting bag999)
Communication Data
If you contact bag999 via live chat, email, or any support channel, we retain a record of that communication including the content of the exchange, timestamps, and any resolution notes made by support staff. This data is used to resolve your enquiry and to improve service quality.
Data Categories Summary
| Category | Collected? |
|---|---|
| Account details | Yes |
| KYC documents | Yes |
| Transaction history | Yes |
| Gameplay records | Yes |
| Device / IP data | Yes |
| Biometric (non-KYC) | No |
| Health / political data | No |
| Children's data | No |
How We Use Your Data
bag999 processes your personal data only for lawful, specific, and clearly defined purposes. We do not use your data in ways that are incompatible with the purposes set out at the time of collection. The primary purposes for which bag999 processes personal data are as follows:
Account Management and Platform Access
Your registration data is used to create and maintain your bag999 player account, to authenticate your identity at login, to process account settings changes, and to communicate important account-related notices such as password resets, security alerts, and withdrawal confirmations.
Identity Verification and Fraud Prevention
KYC documentation and financial transaction data are processed to verify your identity, confirm your age as 18 or above, ensure that your payment methods belong to you, and detect patterns that may indicate fraud, money laundering, or other prohibited activities. This processing is necessary for compliance with responsible gaming and anti-money laundering obligations.
Transaction Processing
Financial data is used to process your deposit and withdrawal requests through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile your BDT balance, to apply bonus credits where applicable, and to generate transaction records for your account history.
Customer Support
Communication data from live chat and email interactions is used to respond to your enquiries, resolve disputes, process complaints, and improve the quality and effectiveness of the bag999 support team. Support records may also be reviewed in the context of investigating account disputes or prohibited conduct.
Personalisation and Responsible Gaming
Gameplay and betting data is used to personalise your experience on bag999 — for example, surfacing games you have played before or promotions relevant to your activity — and to operate responsible gaming monitoring tools that identify patterns associated with problem gambling. Where concerning patterns are detected, bag999 may contact you proactively to offer responsible gaming resources.
Marketing Communications
With your consent (provided during registration or subsequently via account settings), bag999 may send you promotional communications by SMS or email about new games, bonus offers, and seasonal campaigns relevant to the Bangladesh market — including Eid promotions, Pohela Boishakh offers, and BPL season specials. You may withdraw your consent to marketing communications at any time by contacting support or updating your notification preferences in your account settings.
Legal and Regulatory Compliance
bag999 retains certain categories of data — particularly transaction records and KYC documentation — for the period required to satisfy applicable legal and regulatory obligations, including anti-money laundering record-keeping requirements. This retention is mandatory and cannot be waived by individual players.
Processing Purposes
- Account creation & login
- Age & identity verification
- Fraud & AML detection
- Deposit & withdrawal processing
- Customer support resolution
- Gameplay personalisation
- Responsible gaming monitoring
- Promotional communications (with consent)
- Legal & regulatory compliance
Opt Out of Marketing
You can stop receiving promotional messages at any time. Contact the bag999 support team via live chat or update your notification preferences directly in your account settings panel.
Data Sharing & Third Parties
bag999 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only where appropriate data protection safeguards are in place.
Payment Service Providers
To process your deposits and withdrawals, bag999 necessarily shares certain transaction data with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, or your bank. The data shared is limited to what is required to execute the transaction. These providers operate under their own privacy policies and data security standards. bag999 does not store your full mobile banking PIN or bank account passwords.
Game Providers
Games on the bag999 platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Habanero. When you launch a game, a session token and your player identifier are shared with the relevant provider to authenticate your game session. Game providers do not receive your full personal profile, KYC documents, or payment method details.
Identity Verification Partners
bag999 may use third-party KYC verification services to assist with document authentication and liveness checks. These partners receive only the specific documentation necessary to complete the verification task and are contractually prohibited from using that data for any other purpose.
Analytics and Technical Infrastructure
bag999 uses technical service providers for website hosting, content delivery, platform monitoring, and analytics. These providers may process limited technical data (such as IP addresses and session data) in the course of delivering their services. They act as data processors under instruction from bag999 and do not have independent rights to use your data.
Legal and Regulatory Disclosure
bag999 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by applicable law, a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of bag999, its players, or the public. Where possible and permitted, bag999 will notify you before making such a disclosure.
Who May Receive Your Data
| Recipient | Purpose |
|---|---|
| bKash / Nagad / Rocket | Payment processing |
| Game providers | Game session auth |
| KYC partners | Identity verification |
| Hosting providers | Platform infrastructure |
| Law enforcement | Legal compliance only |
Cookies & Tracking
bag999 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and understand how players interact with the website. This section explains what cookies we use and how you can manage them.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session, and store preferences. Cookies do not execute code or carry viruses. They are widely used across the internet to make websites work efficiently.
Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Maintain your login session, security tokens, and platform functionality | No — required |
| Functional | Remember your language and display preferences | Yes |
| Analytics | Understand how players navigate the platform to improve UX | Yes |
| Marketing | Track sessions referred from promotional campaigns (internal only) | Yes |
Managing Cookies
You can control and delete cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Samsung Internet (widely used in Bangladesh), and Safari — allow you to view, block, and delete cookies. Please note that disabling essential cookies will impair your ability to log in and use core platform features. Disabling analytics or marketing cookies will not affect your ability to play games or make transactions.
Session Tokens
In addition to cookies, bag999 uses session tokens stored in your browser's local storage to maintain authenticated sessions between the client and server. These tokens are cryptographically signed, time-limited, and invalidated on logout. They are not accessible to third-party scripts running on the page.
Cookie Quick Guide
To manage cookies in your browser:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Samsung Internet: Settings → Privacy → Cookies
- Safari: Preferences → Privacy → Cookies
Blocking essential cookies will prevent you from logging in to bag999.
Data Security
bag999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, loss, disclosure, alteration, or destruction.
Technical Safeguards
- SSL/TLS Encryption: All data in transit between your browser and bag999 servers is encrypted using industry-standard TLS protocols. The bag999.app domain enforces HTTPS at all times.
- Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm before storage. bag999 staff cannot retrieve your password — only reset it.
- Database Encryption: Sensitive data fields — including KYC document references and partial payment identifiers — are encrypted at rest in bag999 databases.
- Access Controls: Access to production systems containing player data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication for administrative access.
Organisational Measures
bag999 internal policies require that all staff with access to player data are trained on data protection obligations and confidentiality requirements. Access to player data is granted on a need-to-know basis. Departing staff have their access credentials revoked immediately upon leaving the organisation.
Incident Response
In the event of a data security incident that poses a risk to your personal data, bag999 will take immediate steps to contain and remediate the incident. Affected players will be notified promptly with details of what data was involved, what steps bag999 has taken in response, and what actions you may wish to take to protect yourself. bag999 will also notify relevant authorities where required by applicable law.
Security Measures
- TLS encryption in transit
- At-rest database encryption
- Bcrypt password hashing
- Role-based access controls
- MFA for admin access
- Regular security reviews
- Staff data-protection training
- Incident response procedures
Data Retention
bag999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal compliance, dispute resolution |
| KYC documents | Duration of account + 5 years post-closure | AML / identity verification obligations |
| Transaction records | Minimum 5 years from transaction date | Financial regulatory requirements |
| Gameplay records | 3 years from last activity | Responsible gaming monitoring, disputes |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical / IP logs | 12 months on a rolling basis | Security monitoring, fraud detection |
| Marketing preferences | Until consent withdrawn + 1 year | Consent record management |
After the applicable retention period has elapsed, personal data is securely deleted or anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.
Account Closure and Data Deletion Requests
If you close your bag999 account, your active account data will be deactivated and made inaccessible within 30 days of closure confirmation. However, certain data categories — particularly transaction records and KYC documentation — must be retained for the periods set out above regardless of account closure, in compliance with applicable legal obligations. If you submit a data deletion request for data that is subject to a mandatory retention period, bag999 will notify you of the retention obligation and confirm which data can and cannot be deleted at that time.
Retention at a Glance
Key retention periods for common data types:
- Account data: 5 yrs post-closure
- KYC documents: 5 yrs post-closure
- Transactions: Min. 5 years
- Gameplay logs: 3 years
- IP / device logs: 12 months rolling
Your Privacy Rights
As a bag999 player, you have a number of rights in relation to the personal data we hold about you. bag999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the bag999 support team via live chat or at [email protected].
You may request a copy of the personal data bag999 holds about you. We will provide this within 30 days of receiving a verified request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (phone number, address) directly via your account settings. For corrections to KYC-verified data (e.g., name, date of birth), please contact support with supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that certain data must be retained for the mandatory periods described in Section 6, and erasure requests affecting that data will be partially fulfilled — with the retained data anonymised where possible.
In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that bag999 restrict the processing of your personal data. During a restriction period, bag999 will store your data but not actively process it beyond what is required to maintain the restriction itself.
Where bag999 processes your personal data on the basis of your consent or a contractual obligation, and that processing is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON). This right applies to data you have actively provided to bag999, such as account registration details and transaction history.
Where bag999 processes your data on the basis of your consent — most notably for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent, contact support or update your notification preferences in your account settings.
You have the right to object to processing of your personal data where bag999 relies on legitimate interests as its lawful basis. bag999 will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
Exercise Your Rights
To submit a privacy rights request, contact the bag999 support team:
Plain text only — not a clickable link. Include your username and the nature of your request. Identity verification is required before we can action your request.
Request Timeline
- Acknowledgement: Within 3 business days
- Identity verification: Up to 5 business days
- Full response: Within 30 calendar days
- Complex cases: Up to 60 calendar days
Policy Updates & Contact
Changes to This Privacy Policy
bag999 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, or updates to applicable law. When we make material changes to this Privacy Policy, we will notify active players via the email address or phone number registered on their account, and we will post a prominent notice on the bag999.app platform for a period of at least 14 days after the change takes effect.
The updated Privacy Policy will display the revised effective date at the top of the document. Your continued use of bag999 after a policy update constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Privacy Policy, you should stop using the platform and may request account closure by contacting support.
Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact details — may be made without individual notification, though the effective date will still be updated to reflect the revision.
Children's Privacy
bag999 is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. If we become aware that a player account was registered by a minor, we will immediately close the account, terminate all processing of that individual's data, and delete it as promptly as our legal obligations allow. If you believe a minor has registered an account on bag999, please contact us at [email protected] immediately.
Links to Third-Party Sites
The bag999 platform may contain references to third-party payment providers (bKash, Nagad, Rocket) and game studios (Pragmatic Play, Evolution Gaming, etc.). These third parties operate their own platforms under their own privacy policies. bag999 is not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party service you interact with in connection with your bag999 activity.
Contacting bag999 About Privacy
For all privacy-related enquiries, data rights requests, or concerns about how bag999 handles your personal data, please contact our support team. We aim to acknowledge all written privacy enquiries within 3 business days and to provide a substantive response within 30 calendar days.
Contact: [email protected] (plain text — not a clickable link). You may also use the live chat feature available directly on the bag999.app platform during operating hours.
Privacy Contact
Send your privacy enquiries or data rights requests to:
Plain text — not a clickable link. Please include your registered username and a clear description of your request.
Explore Everything bag999 Has to Offer
Now that you are familiar with how bag999 handles your data, discover our full range of games, cricket betting markets, and exclusive player promotions.