Privacy Policy — bag333

1. Information We Collect

1.1 Information You Provide Directly

When you register a bag333 account or interact with our platform, we collect personal information that you provide directly to us. This includes:

• Registration data: full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), mobile phone number, and email address.
• Identity verification (KYC) documents: national ID card (NID), passport, driving licence, or other government-issued identity documents submitted during the verification process.
• Payment data: mobile financial service account numbers (bKash, Nagad, Rocket, Upay) and bank account details used to deposit or withdraw funds. bag333 does not store full card numbers or MFS PINs — payment credentials are handled by our payment processing partners.
• Communications data: messages, complaints, and support requests you send to the bag333 customer support team via live chat or email.
• Preference data: responsible gaming settings, communication preferences, bonus opt-in or opt-out choices, and any other account preferences you configure through your bag333 dashboard.

1.2 Information Collected Automatically

When you access and use the bag333 platform, certain technical and behavioural data is collected automatically through our servers and analytics systems:

• Device and access data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and network connection type.
• Usage data: pages visited, time spent on each page, games played, bet amounts and outcomes, session duration, navigation paths, and click-stream data.
• Transaction data: full history of deposits, withdrawals, bets placed, casino game rounds, bonus claims, and account balance changes.
• Cookie and tracking data: see the Cookies & Tracking Technologies section of this policy for full details.

1.3 Information from Third Parties

In certain circumstances, bag333 may receive personal data about you from third-party sources. This includes identity verification results returned by our KYC service providers, fraud and risk signals from payment processing partners, and sports data or odds information linked to your betting activity from our sports data feed providers. bag333 uses this third-party data solely in connection with the services we provide to you on the bag333 platform.

2. How We Use Your Data

bag333 processes your personal data only where we have a lawful basis to do so. The following table summarises the primary purposes for which we use your data and the corresponding legal basis for each:

bag333 does not use your personal data to make fully automated decisions that have a significant legal effect on you without providing a mechanism for human review. Where automated systems are used (for example, in fraud detection), a human review process is available upon request.

3. Data Sharing & Third Parties

3.1 Service Providers

bag333 shares personal data with carefully selected third-party service providers who assist in the operation of the bag333 platform. These providers are permitted to use your data only for the specific purpose for which it was shared and are contractually obligated to maintain appropriate data security standards. Service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — for the processing of deposits and withdrawals.
• KYC and identity verification providers: third-party services that assist in verifying the identity and age of bag333 account holders.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi — who may process technical game-session data in connection with the games you play on bag333.
• Analytics providers: services that help bag333 understand how the platform is used and identify areas for improvement, using anonymised or pseudonymised data wherever possible.
• Fraud prevention and cybersecurity providers: platforms that help bag333 detect and prevent fraudulent, abusive, or criminal activity.

3.2 Legal Disclosures

bag333 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, where we have a good-faith belief that disclosure is necessary to prevent criminal activity or protect the safety of any individual, or where disclosure is required to comply with a valid legal process such as a court order or government investigation.

3.3 Business Transfers

In the event that bag333 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, bag333 will ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this Privacy Policy, and we will notify affected users prior to any transfer taking effect where it is practicable to do so.

3.4 No Sale of Personal Data

bag333 does not sell, rent, lease, or otherwise commercially exploit your personal data for the benefit of any third party. Your data is not shared with advertisers, data brokers, or marketing networks. Any sharing of data described in this section is limited strictly to what is necessary to provide, protect, and improve the bag333 platform and services.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit the bag333 website. They allow the platform to recognise your device on return visits, remember your preferences and login session, and collect anonymised usage data for platform improvement. bag333 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

4.2 Types of Cookies Used by bag333

• Essential cookies: Required for the basic functioning of the bag333 platform. These cookies enable login sessions, maintain your account authentication, and ensure the security of your session. The platform cannot function correctly without them. These cookies cannot be opted out of.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the bag333 platform — for example, which pages are visited most frequently and whether any errors are encountered. This data helps bag333 improve the platform experience.
• Functionality cookies: Used to remember your preferences on the bag333 platform, such as your preferred language settings, display preferences, and responsible gaming configurations.
• Marketing cookies: Used (only with your consent) to track whether you arrived at bag333 via a promotional link and to measure the effectiveness of marketing campaigns. bag333 does not use third-party advertising networks for behavioural targeting.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse some or all cookies, delete existing cookies, and receive notifications when a new cookie is set. Please note that disabling essential cookies will impair your ability to use the bag333 platform, including logging in and managing your account. Instructions for managing cookies in popular browsers are available in the help documentation of your specific browser.

5. Data Security Measures

5.1 Technical Safeguards

bag333 implements industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the bag333 platform is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols, identifiable by the padlock symbol in your browser address bar.
• Encrypted data storage: Sensitive personal data, including identity documents and payment information, is stored in encrypted form on bag333's secure servers.
• Access controls: Access to personal data within bag333's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for staff accounts.
• Firewall and intrusion detection: bag333's platform is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for unusual access patterns and potential security threats in real time.

5.2 Organisational Safeguards

In addition to technical controls, bag333 maintains a set of organisational policies and procedures that govern the handling of personal data by all staff and contractors. All personnel with access to personal data are required to complete data protection training and are bound by confidentiality obligations. bag333 conducts periodic internal reviews of its data handling practices to identify and address potential vulnerabilities.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, bag333 will take immediate steps to contain and remediate the breach, assess its scope and impact, and notify affected users without undue delay where the breach is likely to result in a high risk to their personal data. bag333 maintains an internal incident response plan that is reviewed and updated regularly.

6. Data Retention Policy

bag333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When personal data is no longer required for any of the above purposes, bag333 will securely delete or anonymise the data in accordance with our internal data disposal procedures. Anonymised or aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

7. Your Privacy Rights

bag333 respects your rights in relation to your personal data. The following rights are available to all bag333 users:

7.1 Right of Access

You have the right to request a copy of the personal data that bag333 holds about you. Requests for data access can be made by contacting bag333 customer support via live chat or by writing to the data protection contact address below. bag333 will respond to access requests within 30 days. In certain circumstances, bag333 may request proof of identity before processing an access request.

7.2 Right to Rectification

If you believe that any personal data that bag333 holds about you is inaccurate or incomplete, you have the right to request correction of that data. You can update most of your account information directly through your bag333 account dashboard. For changes to identity-verified data (such as your registered name or date of birth), you will need to contact customer support and provide supporting documentation.

7.3 Right to Erasure

In certain circumstances, you have the right to request that bag333 delete the personal data we hold about you. Please note that this right is subject to limitations: bag333 is required by law to retain certain categories of data (such as KYC and financial transaction records) for defined periods regardless of any deletion request. Where a deletion request cannot be fully fulfilled due to legal retention obligations, bag333 will inform you of which data must be retained and why.

7.4 Right to Withdraw Consent

Where bag333 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal. You can withdraw marketing consent by adjusting your communication preferences in your bag333 account dashboard or by contacting customer support.

7.5 Right to Restrict Processing

You have the right to request that bag333 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while a complaint about bag333's use of your data is under investigation. During any period of restricted processing, bag333 will continue to store your data but will not carry out further active processing beyond what is legally required.

7.6 Exercising Your Rights

To exercise any of the rights described above, please contact the bag333 data protection team via live chat (available 24/7 in Bangladesh Standard Time, UTC+6) or by writing to [email protected] with the subject line "Privacy Rights Request". bag333 aims to acknowledge all privacy rights requests within 5 business days and to fulfil them within 30 calendar days. Where a request is complex or involves multiple data categories, this period may be extended by a further 30 days, and you will be informed of the extension and the reason for it.

8. Policy Updates & Contact

8.1 Updates to This Privacy Policy

bag333 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, the effective date displayed at the top of this page will be updated accordingly. Where changes are significant, bag333 will notify registered users via the email address or mobile number associated with their account at least 7 days before the changes take effect. Continued use of the bag333 platform after the effective date of any updated policy constitutes acceptance of the revised terms.

8.2 Links to Third-Party Sites

The bag333 platform may contain references to third-party services, such as payment providers and game studios. This Privacy Policy applies solely to data collected and processed by bag333 directly. bag333 is not responsible for the privacy practices of third-party providers, and we encourage you to review the relevant privacy policies of any third-party services you interact with through the bag333 platform.

8.3 Children's Privacy

bag333 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If bag333 becomes aware that personal data has been collected from a person under 18, that account will be immediately suspended and all associated personal data will be securely deleted. If you believe a minor has registered a bag333 account, please contact us immediately using the details below so that we can take prompt action.

8.4 Contact Information

If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a data protection concern, please contact the bag333 data protection team using the following details:

• Email: [email protected] (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 via the bag333 platform — Bangladesh Standard Time (BST, UTC+6)
• Phone: +88 01700-000333

bag333 takes all privacy enquiries seriously and is committed to resolving concerns promptly. We aim to provide an initial response to all privacy-related communications within 24 hours.