bhago Privacy Policy
How We Protect Your Data

When you register for and use the bhago platform, we collect personal data in several categories. The table below summarises the main types of data collected and the context in which each is gathered.

bhago does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is directly required by a specific regulatory obligation. We do not collect biometric data for identification purposes.

bhago uses your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with these stated purposes without obtaining your explicit consent first.

• Account Management: To create, verify, and maintain your bhago player account, including processing your registration information and confirming your identity and age (21+ requirement).
• Service Delivery: To process your bets, deposits, and withdrawals, to settle winnings accurately, and to provide access to all bhago sportsbook and casino features.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. This includes monitoring unusual transaction patterns and verifying payment methods.
• Regulatory Compliance: To fulfil our obligations under applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements, including retaining records as required.
• Customer Support: To handle your enquiries, resolve disputes, process complaints, and provide technical assistance through bhago's 24/7 support channels.
• Platform Improvement: To analyse aggregated usage data and improve the bhago platform's performance, game selection, user experience, and feature design.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests as described in our Responsible Gaming policy.
• Marketing Communications: To send you promotional offers, bonus notifications, and event updates where you have provided your consent to receive such communications. You may opt out at any time by contacting [email protected] (plain text).

bhago processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is required to fulfil the agreement between bhago and you as a registered player — for example, processing deposits, settling bets, and managing your account balance.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including KYC identity checks, AML transaction monitoring, and record-keeping obligations.
• Legitimate Interests: Processing serves bhago's legitimate business interests, such as fraud detection, security monitoring, and platform performance analysis, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities such as marketing communications and non-essential cookies, bhago relies on your explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Where bhago relies on legitimate interests as the legal basis for processing, we have assessed that the processing is proportionate and that adequate safeguards are in place to protect your rights as a data subject.

bhago does not sell your personal data to third parties. Your data may be shared with the following categories of recipients under strict contractual data protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners require certain financial data to process deposits and withdrawals on your behalf. These providers are bound by their own regulatory frameworks and data protection commitments.
• Game Technology Providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive anonymised session data for game performance and fairness auditing purposes. No directly identifiable player data is shared with game providers beyond what is technically necessary for game delivery.
• Identity Verification Services: Third-party KYC and AML verification providers may process your identity documents and personal data to complete mandatory compliance checks. These providers operate under strict contractual confidentiality obligations.
• Regulatory Authorities: bhago may be required to disclose player data to law enforcement agencies, financial intelligence units, or regulatory bodies where compelled by law or a valid legal order. In such cases, bhago will comply with the minimum disclosure required and, where legally permitted, will notify the affected player.
• IT and Security Providers: Hosting, infrastructure, and cybersecurity partners may process technical data as part of platform operations. All such providers are contractually required to maintain confidentiality and implement appropriate security measures.

bhago requires all third-party processors to handle your data in accordance with applicable data protection principles and to implement technical and organisational security measures appropriate to the risk involved.

The bhago platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files stored on your device when you access the bhago website. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the bhago platform to function. They enable secure login sessions, maintain your authenticated state while you navigate the site, and prevent fraudulent access. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, display options, and notification preferences — so you do not need to re-enter them on each visit.
• Analytical Cookies: These cookies collect anonymised data about how players navigate the bhago platform, which pages are visited most frequently, and where users encounter difficulties. This data helps bhago improve the platform experience over time. No individually identifying data is recorded.
• Marketing Cookies: Where you have consented, these cookies allow bhago to deliver relevant promotional content based on your gaming activity and preferences. You may withdraw consent for marketing cookies at any time through your browser settings.

You can manage, restrict, or delete cookies through the settings panel of your web browser. Note that disabling strictly necessary cookies will affect your ability to use core bhago features, including the login process.

bhago retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with bhago, plus a minimum of five years following account closure to meet AML and financial record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of seven years from the date of the transaction to satisfy financial compliance obligations.
• KYC Documentation: Identity and verification documents are retained for a minimum of five years following account closure, in line with standard AML retention requirements.
• Support Communications: Customer support records, including chat logs and email correspondence, are retained for three years from the date of the interaction.
• Technical and Usage Data: Server logs and usage analytics data are retained for a maximum of 12 months unless a longer retention period is justified by a specific security investigation.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as necessary to demonstrate compliance with your preferences.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. bhago reviews its retention schedules periodically to ensure they remain proportionate and compliant.

As a bhago player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] (displayed as plain text — not a clickable link). bhago will respond to all data rights requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data bhago holds about you, together with an explanation of how and why it is used.
• Right to Rectification: If any personal data held by bhago is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that bhago delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to bhago's legal and regulatory retention obligations. Note that erasure may not be possible while mandatory retention periods are in force.
• Right to Restriction: You may request that bhago restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request that bhago provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where bhago relies on legitimate interests as the legal basis, or where data is processed for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bhago will not charge a fee for exercising your data rights in ordinary circumstances. Where a request is manifestly unfounded or excessive, bhago reserves the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided.

bhago implements a comprehensive set of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and bhago's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all platform interactions including login, deposit, withdrawal, and account management.
• Encryption at Rest: Sensitive personal data and financial records stored on bhago's servers are encrypted at rest to prevent unauthorised access in the event of a system breach.
• Access Controls: Access to personal data within bhago's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: bhago operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Account Security: bhago provides players with secure account features including password protection and session timeout controls. Players are responsible for maintaining the confidentiality of their own login credentials.

In the unlikely event of a data security breach that is likely to result in a high risk to your rights and freedoms, bhago will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

The bhago platform is strictly intended for adults aged 21 years and over. bhago does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the bhago registration process, and KYC checks are performed to confirm that players meet the minimum age requirement.

If bhago becomes aware that personal data has been collected from a person under the age of 21, that player's account will be immediately suspended, all associated data will be securely deleted, and any funds held in the account will be handled in accordance with our Terms and Conditions and applicable law.

If you believe that a minor has registered on the bhago platform or that personal data of a minor is being held by bhago, please notify us immediately at [email protected] (plain text — not a clickable link).

bhago reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When changes are made, the updated effective date shown at the top of this page will be revised accordingly.

Where changes are material — meaning they significantly affect how your personal data is processed — bhago will notify registered players via an on-site notice or by email to the address registered on your account, providing reasonable advance notice before the changes take effect.

Continued use of the bhago platform after the updated Privacy Policy takes effect constitutes your acknowledgement of the revised terms. bhago recommends that players review this page periodically to stay informed of the current data processing practices.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bhago handles your personal data, please contact the bhago data support team using the details below. All contact information is provided as plain text only and is not clickable.

• General Data Enquiries: [email protected]
• Responsible Gaming and Data Deletion: [email protected]
• Live Chat Support: Available 24/7 directly on the bhago platform

bhago aims to acknowledge all data-related enquiries within 5 business days and to resolve them fully within 30 calendar days. For complex requests involving large volumes of data or requiring coordination with third-party processors, bhago will communicate any necessary extension to this timeline in writing.