bg398 Privacy Policy

1 Who We Are

bg398 is an online betting and casino platform operating at https://bg398.io, serving registered players located in Bangladesh. The Platform offers sports betting (including cricket, boxing, and other disciplines), live casino games, slots, and crash-game products, all denominated in Bangladeshi Taka (৳) and accessible via local mobile payment services including bKash, Nagad, and Rocket.

For the purposes of this Privacy Policy, bg398 acts as the data controller in respect of the personal data it collects directly from players during registration, account management, and transactional activity. Where bg398 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual terms that bind them to the same standards of care described in this Policy.

All questions, requests, and complaints relating to data privacy should be directed to: [email protected]

2 Data We Collect

bg398 collects the following categories of personal data from players and prospective players:

3 How We Collect Your Data

bg398 collects personal data through the following mechanisms:

• Direct input at registration: When you create a bg398 account, you voluntarily provide your name, date of birth, mobile number, email address, and preferred mobile wallet details. This information forms the foundation of your player profile.
• Account activity: As you use the Platform — placing bets on cricket or BPL markets, spinning slots, playing live casino tables, or using crash games — bg398 automatically records your activity to maintain accurate account balances, settle bets correctly, and generate your transaction history.
• Payment processing: When you initiate a deposit via bKash, Nagad, Rocket, or Upay, or request a withdrawal, the relevant payment processor shares transactional confirmation data with bg398 to allow the transaction to be credited or debited accurately to your account balance in ৳.
• KYC verification: When you submit identity documents in connection with KYC verification, those documents are processed by our third-party verification partner, which returns a verified identity result to bg398 along with the specific data fields required for compliance purposes.
• Cookies and tracking technologies: bg398 uses cookies, web beacons, and similar technologies to collect Technical Data automatically each time you visit or use the Platform. See Section 9 for full details of our cookies policy.
• Customer support interactions: When you contact the bg398 support team via live chat, email, or WhatsApp, the content of those communications is recorded and associated with your player account for quality assurance, dispute resolution, and compliance purposes.
• Third-party sources: bg398 may receive data about you from third-party fraud-prevention services or identity verification databases where we have a legitimate interest in verifying the information you have provided.

4 Legal Basis for Processing

bg398 processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: The majority of processing activities are necessary for the performance of the contract between bg398 and you as a registered player — including account creation, processing deposits and withdrawals, settling bets, and maintaining your account balance in Bangladeshi Taka. Without this processing, bg398 cannot provide its services to you.
• Legal obligation: Certain processing activities — particularly KYC identity verification, anti-money-laundering (AML) screening, and transaction record-keeping — are required of bg398 as a responsible online platform operator. bg398 processes your data for these purposes to comply with applicable legal and regulatory obligations.
• Legitimate interests: bg398 processes Technical Data and behavioural data for fraud detection, platform security, abuse prevention, and internal analytics to improve the platform experience. These legitimate interests are weighed against your privacy interests; bg398 does not override your fundamental rights in pursuing these interests.
• Consent: Where bg398 sends you direct marketing communications — such as promotional email offers, bonus announcements, or seasonal promotions relating to events like the BPL, IPL, or T20 World Cup — it does so on the basis of your explicit consent, provided at registration or through account marketing preferences. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting [email protected].

5 How We Use Your Data

bg398 uses the personal data it collects for the following specific purposes:

• Account creation and management: Creating and maintaining your bg398 player account, verifying your identity and age (21+ requirement), and managing your account settings, preferences, and responsible gaming tools.
• Transaction processing: Processing deposits from bKash, Nagad, Rocket, Upay, and bank transfer channels; processing withdrawal requests back to your registered payment method; maintaining an accurate real-time account balance in ৳; issuing transaction receipts and records.
• Bet settlement and game operation: Accurately recording, processing, and settling all bets placed on cricket (including BPL and IPL markets), boxing, slots, live casino, and crash games; crediting winnings to your account balance.
• KYC and compliance: Fulfilling age verification and identity verification obligations; screening against anti-money-laundering watchlists; maintaining transaction records in accordance with applicable compliance frameworks.
• Customer support: Responding to your queries, resolving complaints, and providing technical assistance via live chat, email, and WhatsApp in a timely and informed manner by reference to your account history.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent account activity, collusive betting, unauthorised access, chargeback abuse, and other misuse of the Platform.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling indicators; enforcing deposit limits, loss limits, cooling-off periods, and self-exclusions applied to your account; proactively contacting Players who may be displaying signs of gambling-related harm.
• Marketing and promotions: Where you have provided consent, sending you information about bg398 promotions, deposit bonuses, free bets, seasonal offers (Eid, Pohela Boishakh, BPL season), and platform updates that may be of interest to you. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform, identify performance bottlenecks, and continuously improve the bg398 experience.

6 Sharing Your Data

bg398 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Your data may be shared with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard) receive only the transactional data necessary to process your deposit or withdrawal request.
• KYC and identity verification providers: Third-party KYC service providers receive the identity documents and data you submit for verification purposes. These providers are contractually prohibited from using your data for any purpose other than confirming your identity on behalf of bg398.
• Game software providers: Platform providers such as Evolution, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and game session data sufficient to operate their games within the bg398 environment. These providers do not receive your full identity data.
• Fraud prevention and AML screening services: bg398 may share data with specialised third-party services that screen transactions and account behaviour against fraud indicators and AML watchlists in order to fulfil its compliance obligations.
• Customer support platform providers: The third-party live chat, email, and support ticketing software used by bg398's support team may process your communications data as part of delivering support services.
• Legal and regulatory authorities: bg398 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory directive. bg398 will, where legally permissible, inform you of any such disclosure.
• Business successors: In the event of a merger, acquisition, or transfer of all or substantially all of the bg398 business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7 International Data Transfers

bg398 operates its platform infrastructure using a combination of servers and cloud service providers that may be located outside Bangladesh. Where your personal data is transferred to, stored in, or processed in a jurisdiction outside Bangladesh, bg398 takes reasonable steps to ensure that an adequate level of protection applies to your data, consistent with the standards described in this Privacy Policy.

Such steps may include entering into standard contractual data protection clauses with the relevant data recipients, selecting service providers that maintain internationally recognised security certifications (such as ISO 27001), or relying on other transfer mechanisms as appropriate given the nature of the transfer.

By registering an account with bg398, you acknowledge that your data may be processed outside Bangladesh as described in this section. If you have concerns about a specific international transfer, you may contact bg398 at [email protected] for further information about the applicable safeguards.

8 Data Retention

bg398 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Active account data: All personal data associated with your bg398 account is retained for the full duration of your active account relationship with the Platform.
• Post-closure retention: Following the closure of your account — whether initiated by you or by bg398 — your account data, transaction history, and KYC records are retained for a minimum of 5 years to satisfy anti-money-laundering record-keeping requirements and to allow bg398 to defend against any legal claims arising from the account relationship.
• Financial transaction records: Individual deposit and withdrawal records, including the amounts in ৳, the payment method used, and the timestamp, are retained for a minimum of 6 years for financial audit and compliance purposes.
• Support communications: Records of customer support interactions are retained for 3 years from the date of the interaction, or for the full duration of any related dispute, whichever is longer.
• Marketing consent records: Records of your marketing consent or opt-out preference are retained for the lifetime of your account plus 2 years to demonstrate compliance with consent requirements.
• Anonymised analytics data: Anonymised and aggregated data that cannot be attributed to any individual player may be retained indefinitely for platform analytics and improvement purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. bg398 conducts periodic data retention reviews to ensure that data is not held beyond its applicable retention period.

9 Cookies & Tracking Technologies

bg398 uses cookies and similar technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:

• Essential cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, preserve your language and currency display preferences, and support core security features such as CSRF protection. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytical / performance cookies: These cookies collect anonymised information about how players use the bg398 Platform — such as which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data helps bg398 improve the platform. These cookies do not identify you personally.
• Functional cookies: These cookies enable enhanced Platform features such as remembering your betting slip preferences, your preferred deposit method (bKash vs. Nagad, for example), and your responsible gaming settings so they persist across sessions.
• Security cookies: bg398 uses security-specific cookies to detect and prevent suspicious activity, including unusual login patterns, concurrent sessions from multiple geographic locations, and automated bot behaviour that could indicate account compromise or scraping.

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, and configure alerts before new cookies are set. Please note that restricting essential cookies may prevent you from logging in or using core platform features. bg398 does not use third-party advertising or retargeting cookies to serve advertisements for bg398 on other websites.

10 Security Measures

bg398 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure:

• SSL/TLS encryption: All data transmitted between your device and the bg398 Platform is encrypted in transit using industry-standard SSL/TLS protocols. The padlock symbol in your browser's address bar confirms that your connection to bg398.io is encrypted.
• Data encryption at rest: Sensitive data fields — including payment information and identity document references — are encrypted at rest in bg398's database infrastructure using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within bg398's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. Access privileges are reviewed regularly and revoked promptly upon staff departure.
• Two-factor authentication: bg398 offers SMS-based two-factor authentication (2FA) for all player accounts and enforces 2FA for all internal staff accounts that have access to player data systems.
• Incident response: bg398 maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in risk to affected individuals, bg398 will notify affected players and, where required, relevant authorities, within the timeframes established by applicable data protection standards.
• Third-party security assessments: bg398 conducts periodic security assessments of its platform infrastructure and requires key data-processing vendors to demonstrate equivalent security standards.

11 Your Data Rights

As a bg398 player, you have the following rights in respect of your personal data, subject to applicable legal limitations and retention obligations:

• Right of access: You have the right to request a copy of the personal data that bg398 holds about you. bg398 will provide this in a readable format within a reasonable timeframe, typically within 30 days of a verified request.
• Right to rectification: If any personal data bg398 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data fields (such as email address and mobile number) directly through your account settings; for identity and KYC data corrections, contact [email protected] with supporting documentation.
• Right to erasure ("right to be forgotten"): You may request that bg398 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to bg398's legal retention obligations — bg398 cannot erase data it is legally required to retain (such as AML records) before the applicable retention period has expired.
• Right to restrict processing: You may request that bg398 restrict the processing of your data — for example, while a rectification request is being resolved — rather than delete it outright.
• Right to object: You have the right to object to bg398 processing your data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on bg398's legitimate interests, though bg398 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: Where bg398 processes your data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.

To exercise any of the above rights, please submit a written request to [email protected] with your full name, registered email address, and a description of the right you wish to exercise. bg398 may request identity verification before processing your request to ensure that data is not disclosed to an unauthorised party.

12 Children & Minors

bg398 strictly prohibits access to the Platform by individuals under the age of 21. The Platform is designed, marketed, and operated exclusively for adults aged 21 and above in Bangladesh. bg398 does not knowingly collect personal data from any person under the age of 21.

If bg398 becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, it will take immediate steps to delete that data from its systems and close the associated account. Any deposits made by an underage player will be returned to the payment method from which they originated after deducting the cost of any bets placed.

13 Third-Party Links

The bg398 Platform may, from time to time, contain references or links to third-party content — such as game provider interfaces (Evolution, Pragmatic Play, Spribe) or payment gateway pages (bKash, Nagad). Once you navigate away from the bg398 website to a third-party environment, this Privacy Policy no longer applies. Those third-party environments operate under their own privacy policies and data handling practices, for which bg398 accepts no responsibility.

bg398 recommends that you review the privacy policy of any third-party service you use in connection with the Platform, including the privacy policies of your chosen mobile wallet provider, to understand how they handle your personal data independently of bg398.

14 Updates to This Policy

bg398 reserves the right to update or revise this Privacy Policy at any time to reflect changes in its data processing practices, applicable legal requirements, or platform functionality. The revised Policy will be published on this page with an updated effective date displayed at the top of the document.

Where a change to this Policy is material — meaning it significantly affects the rights of existing players or introduces new categories of data processing — bg398 will provide advance notice to registered players via email to their registered address at least 7 days before the change takes effect. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

bg398 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being handled. If you have any questions about a specific change, please contact [email protected] for clarification before the revised Policy takes effect.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bg398 handles your personal data, please contact us through any of the following channels:

• Email (data privacy enquiries): [email protected] — please include "Privacy Request" in the subject line so your message is directed to the appropriate team member promptly.
• Live Chat: Available 24/7 via the bg398 website. Our support team can assist with data rights requests initiated through live chat, though written confirmation via email may be required for formal data subject requests.
• WhatsApp: +880 1800 000 000 — available 8:00 AM to 12:00 AM BST (UTC+6). WhatsApp is suitable for general privacy queries; formal data subject access requests must be submitted via email for audit trail purposes.

bg398 aims to respond to all privacy-related enquiries within 5 business days and to fulfil formal data subject requests within 30 days of identity verification. If a request is particularly complex or if you have submitted multiple requests simultaneously, bg398 may extend this period by a further 30 days and will notify you of the extension in writing.