Privacy Policy
At bage, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold as a bage account holder or visitor operating from Bangladesh or anywhere in the world.
Our Privacy Commitments
Six core principles that govern how bage handles your personal information. These commitments apply to every account holder on the platform.
Encrypted Storage
All personal data stored on bage systems is protected with industry-standard 256-bit SSL encryption. Sensitive fields such as passwords are hashed using bcrypt with a high work factor. bage conducts regular vulnerability assessments to ensure storage infrastructure remains secure against emerging threats.
No Data Sales
bage does not sell, rent, or trade your personal data to third parties for marketing or advertising purposes. Data sharing is limited strictly to the service providers required to operate the platform — including payment processors such as bKash and Nagad, identity verification services, and fraud-prevention partners — and only under contractual data-protection obligations.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data at any time by contacting [email protected]. bage will respond to all data requests within 30 days of receipt. Where a legal obligation requires us to retain certain records (such as transaction histories for anti-money-laundering compliance), we will inform you of that limitation clearly.
Minimal Data Collection
bage applies a data-minimisation principle: we collect only the personal information that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or for purposes that have not been disclosed in this Privacy Policy.
Breach Notification
In the unlikely event of a data security incident that materially affects your personal information, bage commits to notifying affected account holders via the email address registered to the account within 72 hours of the breach being confirmed. We will provide a clear description of the incident, the data affected, and the steps we are taking to remediate it.
Defined Retention Periods
Personal data is not kept indefinitely. bage defines retention periods for each category of data based on the purpose for which it was collected and the legal obligations applicable to online gaming operators. Account data is retained for a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements.
Full Privacy Policy
Effective 1 January 2026This Privacy Policy applies to all visitors, registered account holders, and any person who accesses or uses any service provided by bage at https://bage.ws. By using the bage platform, you acknowledge that you have read and understood this policy and consent to the data practices described herein.
Introduction
bage is an online betting and casino platform serving players primarily in Bangladesh and internationally. We are committed to handling all personal data entrusted to us with the highest standards of care, transparency, and security. This Privacy Policy has been written to be clear and accessible, not buried in impenetrable legal language, so that every bage account holder — whether based in Dhaka, Chittagong, Sylhet, Khulna, or anywhere else — understands precisely how their information is used.
This document forms part of bage's broader legal framework alongside the Terms & Conditions and the Responsible Gaming policy. Where this Privacy Policy conflicts with any other document, this Privacy Policy takes precedence in matters relating to personal data.
bage processes personal data for multiple purposes, including account management, payment processing, identity verification, fraud prevention, responsible gaming obligations, and platform improvement. Each of these purposes is described in full in the sections that follow.
Section 2Data We Collect
2.1 Registration Data
When you create a bage account, we collect the following information: your full legal name, date of birth, email address, mobile phone number, and the username and password you select. This information is required to create and maintain your account. Providing false registration data is a breach of the Terms & Conditions and may result in account closure.
2.2 Identity Verification (KYC) Data
Before processing withdrawals or when required for regulatory compliance, bage may request identity verification documents. These may include a copy of your national identity card, passport, or driving licence, as well as proof of address such as a recent utility bill or bank statement. KYC documents are processed securely and are not retained beyond the applicable legal retention period.
2.3 Financial Data
bage records transaction data associated with your account, including deposit amounts, withdrawal requests, bet history, and payment method identifiers (such as the last four digits of a card or a masked bKash or Nagad account number). bage does not store full payment card numbers or full mobile wallet account numbers on its own servers — these are handled by our certified payment processing partners.
2.4 Usage and Technical Data
When you use the bage platform, we automatically collect technical information including your IP address, browser type and version, operating system, device type, session duration, pages visited, games played, and betting activity. This data is used for platform security, fraud detection, responsible gaming monitoring, and service improvement purposes.
2.5 Communications Data
If you contact bage support via email or live chat, we retain a record of that communication including the content of your messages and any attachments. This data is used to resolve your query, improve support quality, and in some cases to satisfy regulatory record-keeping requirements.
2.6 Cookies and Tracking Data
bage uses cookies and similar tracking technologies on the platform. Please refer to Section 6 of this policy for a full description of the cookies we use, their purposes, and how you can manage your cookie preferences.
| Data Category | Examples | Collected At |
|---|---|---|
| Registration Data | Name, date of birth, email, phone number | Account creation |
| KYC Documents | NID, passport, proof of address | Verification request |
| Financial Data | Deposit/withdrawal records, bet history | Each transaction |
| Technical Data | IP address, device type, session logs | Each platform visit |
| Communications | Support chat logs, email exchanges | Each support interaction |
| Cookie Data | Session tokens, preference flags | Each browser session |
How We Use Your Data
bage uses the personal data it collects for the following specific purposes:
- Account Management: To create, maintain, and administer your bage account, including processing login requests, updating account preferences, and communicating account-related notifications.
- Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to process withdrawal requests to your registered payment method.
- Identity Verification: To verify your age and identity in compliance with our obligations to prevent underage gambling and financial crime, including anti-money-laundering (AML) and Know Your Customer (KYC) procedures.
- Fraud and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, multiple-account violations, and other security incidents that could harm you or the bage platform.
- Responsible Gaming: To monitor account activity for indicators of problem gambling behaviour and to apply responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion, where warranted.
- Customer Support: To respond to your enquiries, resolve disputes, and improve the quality and consistency of bage support services.
- Legal Compliance: To comply with applicable laws, regulations, and court orders, including financial record-keeping obligations and cooperation with law enforcement where legally required.
- Platform Improvement: To analyse aggregated and anonymised usage data to improve game performance, navigation, load times, and the overall user experience on the bage platform.
- Marketing Communications: With your consent, to send you information about promotions, bonuses, and new features on bage. You may withdraw your marketing consent at any time by contacting [email protected].
Legal Basis for Processing
bage processes personal data on the following legal bases depending on the nature of the processing activity:
- Contractual Necessity: Processing required to perform the contract between you and bage — including account creation, transaction processing, and bet settlement — is carried out on the basis of contractual necessity.
- Legal Obligation: Processing required to comply with applicable laws — including KYC identity verification, AML transaction monitoring, and record retention — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing conducted for fraud prevention, platform security, and service improvement is based on bage's legitimate interests, provided those interests are not outweighed by your rights and freedoms.
- Consent: Processing for marketing communications and optional analytics cookies is conducted only where you have given your explicit, informed consent. You may withdraw this consent at any time.
Where bage relies on your consent as the legal basis for processing, you have the absolute right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact [email protected].
Data Sharing and Disclosure
5.1 Service Providers
bage shares personal data with third-party service providers who assist in operating the platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC services, fraud-detection and risk-management systems, customer support platform providers, and cloud infrastructure and hosting services. All service providers are bound by contractual data-processing agreements that prohibit them from using your data for any purpose other than providing the service to bage.
5.2 Game Providers
Certain game-play data — specifically your account identifier (not your full personal details) and in-session transaction values — is shared with game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe for the purpose of game integrity verification and payout processing. These providers operate their own data environments and are subject to their own privacy standards applicable to regulated gaming operators.
5.3 Legal and Regulatory Disclosure
bage may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally compelled to do so. In such cases, bage will disclose only the minimum data necessary to satisfy the legal obligation and will, where permitted, notify you of the disclosure.
5.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bage's business, personal data held by bage may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new controller before your data is processed under a different privacy policy.
5.5 No Sale of Data
bage does not sell, rent, licence, or trade your personal data to third parties for commercial or advertising purposes under any circumstances. This commitment applies unconditionally and is not subject to exceptions.
Section 6Cookies and Tracking Technologies
bage uses cookies — small text files placed on your device — and related tracking technologies to operate core platform functions and improve your experience. Cookies used on bage fall into the following categories:
| Cookie Type | Purpose | Required |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, login state, load balancing | Yes — cannot be disabled |
| Functional | Language preferences, display settings, game configuration | Optional |
| Analytics | Aggregated page-view counts, session duration, error logging (anonymised) | Optional (consent-based) |
| Fraud Prevention | Device fingerprinting and behavioural anomaly detection for account security | Yes — legitimate interest |
bage does not use third-party advertising or retargeting cookies. You can manage your optional cookie preferences by contacting [email protected]. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may make it impossible to log in or place bets.
Section 7Data Retention
bage retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
- Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
- Transaction records: Retained for a minimum of seven years from the date of the transaction in accordance with financial record-keeping obligations.
- KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
- Support communications: Retained for three years from the date of the last interaction, unless the communication relates to a dispute or regulatory matter in which case it is retained for the duration of that matter plus two years.
- Marketing consent records: Retained for the duration of your marketing consent plus three years to evidence compliance, even if you withdraw consent during that period.
- Anonymous analytics data: Retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.
When personal data is no longer required and its retention period has expired, bage will securely delete or irreversibly anonymise it in accordance with our data destruction procedures.
Section 8Security Measures
bage implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your browser or device and bage servers.
- Password hashing using bcrypt with a minimum cost factor of 12, ensuring that even in the event of a database breach, plaintext passwords cannot be recovered.
- Two-factor authentication (2FA) available to all account holders and mandatory for withdrawal requests.
- Role-based access controls within bage's internal systems, ensuring that staff members can only access the personal data required for their specific role.
- Regular penetration testing and vulnerability scanning of bage's public-facing infrastructure by qualified security professionals.
- Automated intrusion detection and anomaly-monitoring systems that generate alerts for suspicious access patterns in real time.
- Encrypted backups stored in geographically redundant locations with access controls matching those applied to primary systems.
No security system is impenetrable. While bage takes every reasonable measure to protect your data, we cannot guarantee absolute security of information transmitted over the internet. You are responsible for keeping your own login credentials and OTP codes confidential. bage will never ask for your password by email, live chat, or SMS.
Your Data Rights
As a bage account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your account username and a description of the right you wish to exercise. bage will respond within 30 days.
- Right of Access: You may request a copy of all personal data bage holds about you, along with information about how it is used and with whom it has been shared.
- Right to Rectification: If any personal data bage holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-critical data such as your name or date of birth, bage may require supporting documentation before making the correction.
- Right to Erasure: You may request that bage delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn the consent on which processing is based. Note that bage may be unable to erase data where a legal obligation requires its retention.
- Right to Restrict Processing: You may request that bage restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: You may request that bage provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
- Right to Object: You may object to processing carried out on the basis of bage's legitimate interests at any time. bage will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
Children and Minors
bage is strictly an adult platform. Registration is prohibited for any person under the age of 21. bage does not knowingly collect, process, or retain personal data relating to persons under the age of 21.
If bage becomes aware that an account has been registered by or that personal data has been collected from a person under the age of 21, the account will be immediately closed, the data will be securely deleted, and any funds associated with the account will be handled in accordance with our underage-gambling policy as described in the Terms & Conditions.
21+ Only. If you are a parent or guardian and believe that a person under 21 in your care has accessed or registered on the bage platform, please contact [email protected] immediately with details of the account. We will investigate and act promptly.
International Data Transfers
bage operates as an international platform and its infrastructure, data processors, and game providers may be located in countries other than Bangladesh. As a result, your personal data may be transferred to, stored in, or processed in countries outside Bangladesh.
Where such transfers occur, bage ensures that appropriate safeguards are in place to protect your data, including contractual data-processing agreements with all international data processors that incorporate data-protection standards equivalent to those applied within bage's own systems. bage does not transfer personal data to countries that do not provide an adequate level of data protection without first implementing the contractual safeguards described above.
Section 12Third-Party Links
The bage platform does not include links to third-party websites, social media profiles, or external services from within its main navigation or content areas. However, if you arrive at bage via an external link or if game providers display their own supplementary documentation within a game environment, those third-party destinations operate under their own privacy policies. bage accepts no responsibility for the privacy practices of any third party and recommends that you review the privacy policy of any external service you use.
Section 13Updates to This Privacy Policy
bage reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made to this policy, bage will notify registered account holders via the email address on file and will post a prominent notice on the bage platform for a minimum of 30 days following the update.
The "Effective Date" at the top of this document indicates when the current version entered into force. Continued use of the bage platform after a policy update constitutes acceptance of the revised Privacy Policy. If you do not accept a material change to this policy, you should close your bage account before the effective date of the revision.
It is your responsibility to ensure that the email address associated with your bage account is current and active so that you receive policy update notifications. bage is not responsible for your failure to receive notifications due to an outdated, inactive, or spam-filtered email address.
Section 14Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bage handles your personal data, please contact our support team using the details below:
- Email: [email protected]
- Support Hours: 24 hours a day, 7 days a week, 365 days a year
- Language: English
- Response Time: Within 30 days for data rights requests; typically within 24 hours for general privacy enquiries
When submitting a data rights request, please include your registered username and a clear description of the right you wish to exercise. This will allow bage to locate your account records and respond to your request accurately and efficiently. bage may request additional verification to confirm your identity before processing data access or deletion requests.