bhaggu Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by bhaggu ("bhaggu", "we", "us", "our"), the operator of the online gaming platform accessible at bhaggu.net. This Policy describes how bhaggu collects, uses, stores, shares, and protects personal data relating to registered players, prospective players, and visitors to the bhaggu platform (collectively referred to as "you" or "the data subject").

This Policy applies to all personal data processed in connection with your use of bhaggu, including data collected through the bhaggu website, mobile-optimised platform, customer support channels, and any promotions or tournaments organised by bhaggu. By registering an account on bhaggu or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the bhaggu Terms & Conditions, which form part of the overall agreement between you and bhaggu.

2. Data Controller Information

For the purposes of this Privacy Policy, bhaggu acts as the data controller in respect of the personal data of its registered players and platform visitors. The data controller is responsible for determining the purposes and means of processing personal data collected through the bhaggu platform.

If you have any questions, requests, or concerns regarding the processing of your personal data by bhaggu, please contact our data protection team at: support at bhaggu.net. We will respond to all data-related enquiries within a reasonable timeframe and, in any event, within 30 days of receipt.

3. What Personal Data We Collect

bhaggu collects the following categories of personal data about you, depending on how you interact with the platform:

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username chosen at registration

3.2 Verification and KYC Data

• Copy of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Payment method ownership documentation
• Selfie or liveness check images (where required for enhanced identity verification)

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method details (bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details)
• Bonus and promotion redemption history
• Account balance history

3.4 Gaming and Behavioural Data

• Betting history, game session logs, and wagering patterns
• Game preferences and product usage statistics
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Referring URL and navigation path within the bhaggu platform
• Time zone setting (Bangladesh Standard Time, UTC+6)

3.6 Communications Data

• Records of correspondence with bhaggu customer support (email content, live chat transcripts)
• Complaint and dispute records
• Survey responses and feedback submissions

4. How We Collect Your Data

bhaggu collects personal data through several channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically: when you access and navigate the bhaggu platform, through cookies, session tracking technologies, server logs, and analytics tools that record device and behavioural data.
• From payment providers: bhaggu receives transaction confirmation data from payment partners such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate deposits or withdrawals.
• From identity verification services: where bhaggu uses third-party KYC or fraud-screening services to verify the identity documents you provide during account verification.
• From public sources: bhaggu may cross-reference publicly available information (such as sanctions lists or politically exposed persons databases) as part of its anti-money-laundering compliance obligations.

5. How We Use Your Personal Data

bhaggu uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account registration and management	Registration data, identity data
Age and identity verification (KYC)	Verification data, identity documents
Processing deposits and withdrawals	Financial data, payment method data
Fraud prevention and anti-money-laundering compliance	All categories as required
Providing and improving gaming products	Gaming data, technical data
Responsible gaming monitoring and intervention	Gaming data, communications data
Customer support and complaint resolution	Communications data, registration data
Sending transactional notifications (deposit confirmed, withdrawal processed)	Registration data, financial data
Sending promotional communications (where you have opted in)	Registration data, gaming data
Platform analytics and performance optimisation	Technical data, behavioural data

6. Legal Basis for Processing

bhaggu processes your personal data on one or more of the following legal bases:

• Performance of a contract: Processing your registration data, payment data, and gaming history is necessary to provide you with the bhaggu service you have signed up for and to fulfil our obligations under the bhaggu Terms & Conditions.
• Legal obligation: bhaggu is required to collect and retain certain data (particularly identity and financial data) to comply with anti-money-laundering regulations, age verification requirements, and other applicable legal obligations.
• Legitimate interests: bhaggu processes certain technical and behavioural data on the basis of its legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the bhaggu product experience — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bhaggu sends marketing or promotional communications, we will only do so where you have provided explicit consent. You may withdraw your consent to marketing communications at any time by contacting support at bhaggu.net.

7. Data Sharing and Third-Party Disclosure

bhaggu does not sell or rent your personal data to any third party. However, we may share your data with the following categories of third parties in the circumstances described below:

7.1 Payment Service Providers

To process your deposits and withdrawals, bhaggu shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). These providers act as independent data controllers in respect of your payment data and are subject to their own privacy policies and applicable financial regulation.

7.2 Identity Verification and KYC Providers

bhaggu may engage specialist third-party services to assist with identity document verification, age confirmation, and fraud screening. These providers process only the minimum data required to perform the verification function and are contractually bound to maintain the confidentiality and security of your data.

7.3 Technology and Infrastructure Providers

bhaggu works with technology partners — including cloud hosting providers, database services, and platform software vendors — who may process personal data as data processors acting under bhaggu's instructions and subject to binding data processing agreements.

7.4 Game Content Providers

Third-party game studios whose games are available on the bhaggu platform (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming) may receive anonymised or pseudonymised session data necessary to deliver and log game outcomes. bhaggu does not share directly identifiable personal data such as your name or contact details with game providers.

7.5 Legal and Regulatory Authorities

bhaggu may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, by court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. Such disclosures will be limited to the minimum data required and will be documented internally.

8. Cookies and Tracking Technologies

bhaggu uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser when you visit bhaggu.net. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the bhaggu platform to function correctly. They enable you to log in, maintain your session, and navigate securely. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: These cookies remember your preferences (such as preferred language and display settings) to provide a more personalised experience when you return to bhaggu.
• Analytics cookies: bhaggu uses anonymised analytics data to understand how players interact with the platform, which pages are most visited, and where navigation issues may exist. This data is used solely to improve the bhaggu product and is not linked to individually identifiable players.
• Security cookies: These cookies assist in fraud detection and prevention by identifying unusual patterns of platform access that may indicate bot activity or account takeover attempts.

You may control cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some features of the bhaggu platform. bhaggu does not use third-party advertising cookies or behavioural targeting technologies.

9. Data Retention

bhaggu retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with bhaggu and for a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five years from the date of each transaction, as required by financial record-keeping obligations.
• KYC and verification documents: Retained for the duration of your account and for a minimum of five years following account closure.
• Gaming and session data: Retained for up to three years from the date of each session, or for the duration required by applicable responsible gaming obligations.
• Customer support records: Retained for up to three years from the date of each support interaction, or longer where the interaction relates to an open dispute or legal claim.

Upon expiry of the applicable retention period, bhaggu will securely delete or irreversibly anonymise your personal data so that it can no longer be linked to you as an individual.

10. Data Security

bhaggu implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bhaggu platform.
• Encryption of sensitive data fields (including payment details and identity documents) at rest in bhaggu's database systems.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of the bhaggu platform infrastructure.
• Multi-factor authentication requirements for internal bhaggu administrative access to systems containing personal data.
• Incident response procedures that specify how bhaggu will identify, contain, and remediate any data security incidents.

While bhaggu takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own bhaggu account credentials and for notifying us immediately at support at bhaggu.net if you believe your account has been compromised.

11. Your Rights as a Data Subject

As a player on the bhaggu platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bhaggu at support at bhaggu.net. We will respond within 30 days and may need to verify your identity before processing your request.

• Right of access: You have the right to request a copy of the personal data bhaggu holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain information (such as your email address or phone number) directly through your bhaggu account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You have the right to request that bhaggu restricts the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bhaggu in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where bhaggu processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data on the basis of bhaggu's legitimate interests where you believe your fundamental rights and freedoms override those interests.

12. Children and Minors

The bhaggu platform is strictly intended for adults aged 18 and above. bhaggu does not knowingly collect or process personal data belonging to individuals under the age of 18. If bhaggu discovers or is notified that personal data has been collected from a person under 18, we will immediately close the relevant account, void any associated balances, and permanently delete the minor's personal data from our systems.

If you are a parent or guardian and believe that your child has registered an account on bhaggu, please contact us immediately at support at bhaggu.net so that we can take swift corrective action. bhaggu takes the protection of minors very seriously and conducts age verification checks as part of the standard account registration and KYC process.

13. Changes to This Privacy Policy

bhaggu reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the bhaggu platform. When material changes are made, bhaggu will notify registered players by email and by displaying a prominent notice on the bhaggu platform. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the bhaggu platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how bhaggu protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bhaggu, please contact our data protection team using the details below:

• Email: support at bhaggu.net (plain text — not a clickable link)
• Response time: Within 30 days of receipt for formal data rights requests; within 24 hours for general enquiries
• Operating hours: 7 days a week, Bangladesh Standard Time (BST, UTC+6)

bhaggu serves players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We are committed to handling all privacy-related enquiries with the highest level of care, transparency, and professionalism.