Privacy Policy
How bgaee Protects Your Data

Introduction

bgaee (referred to in this document as "bgaee", "we", "us", or "our") operates the online betting and casino platform accessible at bgaee.io (the "Platform"). This Privacy Policy applies to all personal data collected through the Platform, including any related websites, mobile-optimised pages, in-platform communication tools, and customer support channels operated by bgaee.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bgaee and are available at bgaee.io/terms-conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data processing, this Privacy Policy takes precedence.

We operate the bgaee Platform for players based in Bangladesh (BDT — Bangladeshi Taka) and other eligible markets. References to "your jurisdiction" throughout this policy mean the country or territory from which you are accessing the Platform and in which you are a resident. All support communications are available in English, and our primary player documentation — including this policy — is published in English.

Personal Data We Collect

bgaee collects the following categories of personal data. We collect only the information that is necessary for the stated purposes described in Section 4 of this policy.

bgaee does not collect or store payment card numbers (Visa, Mastercard). All payment processing for supported methods (bKash, Nagad, Rocket) is handled by certified payment partners whose own privacy policies govern the data processed during payment transactions. bgaee receives only a confirmation token and the registered mobile number of the payment account from these partners — not the full account credentials.

How We Collect Your Data

bgaee collects personal data through the following channels and mechanisms:

1. Direct collection during registration. When you create a bgaee account, you provide identity, contact, and account data directly through the registration form.
2. Identity verification (KYC). When you complete our Know Your Customer verification process — required before your first withdrawal — you upload government-issued identification documents. These documents are processed by our secure verification partner and the results (verified / not verified) are stored on our systems.
3. Payment transactions. When you deposit or withdraw funds via bKash, Nagad, or Rocket, our payment partner returns a confirmation containing your registered mobile number and transaction reference. This is stored as part of your financial data record.
4. Platform activity. As you use the Platform — browsing games, placing bets, using the live casino — our systems automatically record technical and usage data to maintain service quality, personalise your experience, and detect unusual activity.
5. Cookies and tracking technologies. bgaee uses first-party cookies and similar technologies on the Platform. See Section 7 for full details on our cookie usage.
6. Customer support interactions. When you contact bgaee via live chat or email, the content of those communications is collected and stored to ensure continuity of service and for training purposes.
7. Responsible gaming tool usage. When you activate or modify self-exclusion settings, deposit limits, or session reminders, this is recorded to ensure the instructions are applied correctly and consistently across all sessions.

Why We Use Your Personal Data

bgaee processes your personal data for the following specific, legitimate purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent.

• Account creation and management: to create, maintain, and administer your bgaee account, including authentication and security.
• Age and identity verification: to confirm you are at least 21 years of age and that you are who you claim to be, as required for responsible gaming compliance.
• Service delivery: to allow you to place bets, play casino games, access the live casino, and use all features of the bgaee Platform.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain an accurate transaction history for your account.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Legal and regulatory compliance: to meet our obligations under applicable anti-money laundering (AML), know your customer (KYC), and responsible gaming regulations.
• Customer support: to respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible gaming enforcement: to apply and maintain the self-exclusion, deposit limit, cooling-off, and session reminder settings you configure on your account.
• Platform improvement: to analyse usage patterns and improve the functionality, design, and content of the bgaee Platform.
• Personalisation: to show you game recommendations and promotions relevant to your activity, where you have not opted out of personalised communications.
• Marketing communications: to send you promotional emails or in-platform notifications about bgaee offers and seasonal promotions (e.g., BPL, Eid, Pohela Boishakh specials) where you have opted in to receive marketing. You may opt out at any time via your account settings or by contacting support.

Legal Basis for Processing

bgaee processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

Where bgaee relies on legitimate interest as its legal basis, we have conducted a balancing assessment to confirm that our legitimate interest does not override your fundamental rights and freedoms. If you would like further information about any such assessment, please contact us at [email protected].

Data Sharing & Third Parties

bgaee does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share your data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors (bKash, Nagad, Rocket): We share the minimum data necessary to initiate and confirm payment transactions. These partners are contractually obligated to handle your data securely and in compliance with applicable payment industry standards.
• Identity verification partner: Your identity documents (NID, passport, proof of address) are shared with our certified KYC verification partner for the sole purpose of confirming your identity and age. This partner processes document data within a secure, ISO-27001-certified environment.
• Game content providers: When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited session data (player session token, currency, bet amount) is shared with that provider solely to operate the game. No identity data is shared with game providers.
• IT infrastructure and cloud hosting providers: bgaee uses third-party cloud infrastructure to host the Platform. These providers process data on our behalf under strict data processing agreements and have no independent right to use or access your data.
• Fraud prevention and AML service providers: In cases of suspected fraud or money laundering, we may share relevant account and transaction data with specialist risk and compliance service providers to assist in the investigation.
• Law enforcement and regulatory authorities: bgaee will disclose personal data to law enforcement agencies, regulatory bodies, or courts when we are required to do so by applicable law, court order, or lawful government request. We will notify you of such disclosure where we are legally permitted to do so.
• Business succession: In the event that bgaee is acquired by or merges with another entity, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance where practicable, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

Cookies & Tracking Technologies

bgaee uses cookies and similar technologies on the Platform to ensure it functions correctly, to remember your preferences, to keep your session secure, and to understand how players use the Platform so we can improve it.

bgaee does not use advertising cookies, retargeting pixels, or third-party social media tracking scripts. All analytics cookies used on the Platform are first-party and anonymised before processing.

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent you from logging in to bgaee.

Data Security Measures

bgaee implements a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and bgaee servers is encrypted using 256-bit TLS 1.3, the current industry gold standard for web encryption.
• Password hashing: Account passwords are never stored in plain text. We use the bcrypt hashing algorithm with a high work factor to store password data, meaning even if our database were ever compromised, your actual password would remain protected.
• Access controls: Access to personal data is restricted on a strict need-to-know basis within bgaee. Only employees whose role requires access to specific data categories are granted that access, and all access events are logged and reviewed.
• Two-factor authentication (2FA): bgaee strongly encourages all account holders to enable 2FA on their account. 2FA is available and free for all registered players.
• Regular security audits: bgaee engages independent security specialists to conduct regular penetration testing and vulnerability assessments of our Platform infrastructure.
• Data isolation: Player financial data and identity documents are stored in isolated, access-controlled database partitions separate from general platform usage data.
• Incident response: bgaee maintains a documented data breach response plan. In the event of a confirmed personal data breach that is likely to result in risk to your rights, we will notify affected users within 72 hours of becoming aware of the breach, consistent with best-practice data protection standards.

Data Retention Periods

bgaee retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

When the applicable retention period expires, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data (e.g., platform-wide usage statistics) may be retained indefinitely as it no longer constitutes personal data.

Your Privacy Rights

As a bgaee account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and verify your identity by providing your registered email address and a brief description of your request.

• Right of access: You have the right to request a copy of all personal data bgaee holds about you. We will provide this in a commonly used, machine-readable format within 10 business days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact and preference data directly via your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will action this request to the fullest extent possible, subject to our legal obligation to retain certain categories of data (e.g., AML and financial records) for the periods specified in Section 9.
• Right to restriction of processing: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that we restrict processing of your data.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (JSON or CSV), and to request that we transmit this data directly to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where bgaee relies on legitimate interest as its legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time — we will action marketing opt-out requests immediately.
• Right to withdraw consent: Where bgaee processes your data on the basis of your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

bgaee will respond to all verified data rights requests within 10 business days. Where a request is complex or bgaee receives a high volume of requests, we may extend this period by a further 10 business days, in which case we will notify you of the extension and the reason for it within the initial 10-day window.

bgaee will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to process the request. We will always inform you before applying any charge.

Children & Minors

During the account registration process, bgaee requires all applicants to confirm that they are at least 21 years of age. As part of our Know Your Customer (KYC) verification process, we verify this declaration against a government-issued photo identification document. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be returned to the original payment method, and all associated data will be deleted to the fullest extent permitted by our AML retention obligations.

If you are a parent or guardian and you believe that a minor in your care has registered an account with bgaee or has provided personal data to bgaee, please contact us immediately at [email protected]. We will investigate promptly and take all appropriate steps to remove that data and close the account. We take underage gambling extremely seriously and cooperate fully with any responsible gaming or child protection investigation.

bgaee also strongly recommends that parents and guardians use internet filtering software to prevent minors from accessing online gambling content. Reputable filtering tools are available from organisations such as GamCare and Gamban, which can block gambling-related websites on shared or family devices.

International Data Transfers

bgaee operates a globally distributed infrastructure. As a result, your personal data may be processed and stored on servers located outside Bangladesh. Where such international transfers occur, bgaee ensures that adequate safeguards are in place to protect your data, consistent with the standards set out in this Privacy Policy.

Safeguards for international transfers may include:

• Contractual clauses in our agreements with data processors that require them to apply equivalent data protection standards to those described in this policy.
• Transferring data only to service providers in countries or jurisdictions that maintain recognised data protection standards.
• Ensuring that cloud infrastructure providers used by bgaee operate under internationally recognised security certifications (e.g., ISO 27001, SOC 2).

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

Changes to This Privacy Policy

bgaee reserves the right to update or amend this Privacy Policy at any time. We will post the updated version on this page with a revised "Last Updated" date at the top of the document. For material changes — those that significantly affect your rights or how we use your data — we will provide advance notice via email to your registered address and/or via an in-platform notification, at least 14 calendar days before the changes take effect.

Your continued use of the bgaee Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Privacy Policy, you have the right to close your account and request deletion of your personal data (subject to our legal retention obligations) before the change takes effect.

We recommend that you review this Privacy Policy periodically to stay informed about how bgaee protects your personal data. The current version is always available at bgaee.io/privacy-policy.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bgaee handles your personal data, please contact our Privacy & Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly, professionally, and in full.

Email: [email protected]
Subject line (recommended): Privacy Enquiry — [Your Account Username]
Support availability: 24 hours a day, 7 days a week
Live chat response time: 2–5 minutes
Email response time: Within 1–2 business days