vaggo Privacy Policy

vaggo ("the Platform", "we", "us", "our") is an online gaming and sports betting platform operated at vaggo.bio, designed for adult players aged 21 and above in Bangladesh. We are committed to protecting the privacy and personal data of every player who uses our platform.

This Privacy Policy ("Policy") sets out in plain, formal English the personal data we collect from users of the vaggo platform, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share your data, the security measures we apply, how long we retain your data, and the rights you hold in relation to your personal information.

This Policy applies to all personal data collected through the vaggo website, mobile web interface, player account portal, customer support communications, and any other touchpoint through which a player interacts with the vaggo platform. This Policy should be read alongside the vaggo Terms & Conditions and Responsible Gaming Policy.

The effective date of this Policy is stated at the top of this page. vaggo will notify registered players of any material changes to this Policy via the email address associated with their account.

vaggo collects and processes the following categories of personal data:

vaggo does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly necessary for age and identity verification purposes.

vaggo collects personal data through the following channels:

• Direct registration: When you create a vaggo player account, you provide identity, contact, and optionally marketing preference data directly through the registration form.
• KYC verification submissions: When you submit identity documents and proof of address as part of our Know Your Customer process prior to your first withdrawal.
• Payment transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, financial transaction data is captured automatically.
• Gameplay and platform interaction: Technical data and gaming activity data are collected automatically as you navigate and play on the vaggo platform through server-side logging and session analytics.
• Customer support communications: When you contact vaggo support via live chat or email, the content and metadata of those communications are recorded.
• Cookies and similar technologies: As described in Section 7 of this Policy, cookies and browser-based tracking technologies collect certain technical data automatically when you visit the vaggo website.

vaggo does not purchase personal data lists from third parties or collect personal data from social media platforms without your explicit consent.

vaggo processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing that is required to perform the player account contract — including registration, KYC verification, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, financial crime prevention obligations, and age verification requirements, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of vaggo's legitimate business interests, provided those interests are not overridden by the rights and interests of the data subject.
• Consent: Where vaggo relies on consent as the legal basis for processing — for example, for non-essential marketing communications or optional analytics cookies — we will obtain your explicit, freely given, and revocable consent before processing commences. You may withdraw consent at any time by contacting [email protected].

vaggo uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your vaggo player account, including password resets, account security alerts, and player profile updates.
• Identity verification and KYC compliance: To verify that you meet the eligibility requirements to use the Platform, including age (21+), identity, and residential address confirmation.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain transaction records as required by financial compliance obligations.
• Game delivery and personalisation: To deliver the games and betting markets you access, record your preferences, and where applicable personalise game recommendations based on your platform activity.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour, apply deposit limits or self-exclusion measures you have requested, and deliver responsible gaming alerts and reality checks.
• Fraud prevention and security: To detect and prevent unauthorised access, bonus abuse, multi-accounting, money laundering, and other fraudulent or prohibited activity on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal compliance: To comply with anti-money laundering obligations, respond to lawful requests from competent authorities, and maintain records as required by applicable law.
• Marketing communications (with consent): To send you promotional emails, bonus notifications, and event-based messages relating to the vaggo platform, where you have provided consent. You may unsubscribe at any time.
• Platform improvement and analytics: To analyse aggregate, anonymised usage data to improve the design, performance, and content of the vaggo platform.

vaggo will not use your personal data for purposes that are incompatible with those stated in this Policy without first providing you with notice and, where required, obtaining your consent.

vaggo does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• KYC and identity verification providers: Regulated third-party providers are engaged to perform automated and manual identity document checks. These providers process data only as instructed by vaggo and under contractual data processing agreements.
• Mobile financial service providers: When processing deposits and withdrawals, vaggo shares the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to facilitate payment settlement.
• Certified game studios: Game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised session tokens and game-specific identifiers to deliver their game content. These providers do not receive your full identity data.
• Fraud prevention and security services: Third-party fraud detection platforms may receive technical data (IP address, device fingerprint, behavioural signals) to identify and prevent fraudulent activity.
• Legal and regulatory authorities: vaggo may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required or permitted by law, including in connection with anti-money laundering investigations.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a confidential, need-to-know basis in connection with their professional services to vaggo.

All third parties with whom vaggo shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared. vaggo does not authorise any third party to use your personal data for their own marketing or commercial purposes.

vaggo uses cookies and similar browser-based tracking technologies to operate, secure, and improve the platform. The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your security preferences, and prevent cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language and display settings — to provide a more personalised experience. Disabling functional cookies may affect the quality of certain features.
• Analytics cookies: With your consent, vaggo uses analytics cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data is used exclusively to improve platform performance and user experience. No personally identifiable information is included in analytics reports.
• Security and fraud prevention cookies: Short-lived cookies and local storage tokens are used by vaggo's fraud detection systems to identify suspicious access patterns and protect player accounts.

Cookies set by vaggo are first-party cookies. vaggo does not permit third-party advertising networks to set cookies on the vaggo domain. You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your vaggo account.

vaggo does not engage in cross-site behavioural tracking or sell cookie-derived data to advertising platforms.

vaggo retains personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following retention periods apply as general guidance:

• Active account data: Retained for the lifetime of the player account and for a period of five (5) years following account closure, in accordance with standard financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, as required for anti-money laundering compliance purposes.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a period of three (3) years from the date of the communication, unless a longer period is required in connection with an active dispute or legal proceeding.
• Technical and analytics data: Anonymised and aggregated analytics data may be retained indefinitely. Raw server log data containing IP addresses is retained for a maximum of twelve (12) months.
• Marketing consent records: Retained until consent is withdrawn, plus a further two (2) years as evidence of compliance.

Upon expiry of the applicable retention period, vaggo will securely delete or anonymise personal data in a manner that prevents reconstruction or re-identification. Players may request early deletion of their personal data subject to the legal retention obligations described above — see Section 10 for details of how to exercise this right.

vaggo implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between player devices and vaggo servers, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encryption at rest for all personally identifiable information and financial data stored on vaggo's servers, using industry-standard AES-256 encryption.
• Role-based access controls ensuring that only authorised vaggo personnel with a specific operational need can access personal data, with all access events logged and auditable.
• Multi-factor authentication required for all internal administrative access to systems containing personal data.
• Regular security audits and penetration testing conducted by independent third-party security professionals to identify and remediate vulnerabilities.
• Intrusion detection and monitoring systems that provide real-time alerting on anomalous access patterns or potential data breaches.
• Secure data disposal procedures ensuring that physical and digital storage media containing personal data is destroyed securely when no longer required.

While vaggo applies rigorous security practices, no method of transmission over the internet or electronic storage is completely secure. vaggo cannot guarantee absolute security of data and accepts no liability for breaches caused by factors outside its reasonable control, including attacks on third-party infrastructure. In the event of a data breach affecting your personal data, vaggo will notify you promptly in accordance with applicable legal requirements.

Players are reminded that they also bear responsibility for the security of their own account credentials. vaggo will never ask you to disclose your password via email, live chat, or any other channel.

As a vaggo player whose personal data we process, you hold the following rights in relation to that data. To exercise any of these rights, contact vaggo at [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the personal data vaggo holds about you, along with information about how it is processed. vaggo will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data vaggo holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account details directly through your account settings page.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. vaggo will fulfil such requests where the data is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right (for example, KYC and transaction records that must be retained for regulatory compliance).
• Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that vaggo restricts its processing of your data while the matter is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes, which vaggo will action immediately upon receipt.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

vaggo will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, and vaggo will notify you of any such extension within the initial 30-day window. There is no charge for exercising your data rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The vaggo platform is strictly intended for adults aged 21 and above. vaggo does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register a vaggo account or attempt to access the Platform.

If vaggo becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all personal data associated with that account will be securely deleted, and any deposited funds will be returned to the originating payment source after deducting any bonus-derived balances.

Parents or guardians who believe that a minor under their care has registered on the vaggo platform are encouraged to contact [email protected] immediately so that the account can be closed and data removed without delay.

The vaggo platform may contain references to the names of third-party payment providers, game studios, and sports leagues. The vaggo website does not contain outbound hyperlinks to third-party websites. However, if you independently navigate to the website of any payment provider, game studio, or other third party referenced on the vaggo platform, please be aware that those sites operate under their own privacy policies, which are entirely independent of this Policy.

vaggo accepts no responsibility for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you use in connection with your vaggo gaming activity, including those of your mobile financial service providers (bKash, Nagad, Rocket, Upay).

vaggo reserves the right to update or revise this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page and within the hero section above. All registered players will be notified of material changes to this Policy via the email address on their vaggo account at least seven (7) days before the revised Policy takes effect.

Non-material updates — such as corrections of typographical errors, clarifications that do not affect the substance of the Policy, or formatting changes — may be made without prior notice and will be reflected in an updated effective date.

Continued use of the vaggo platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to a revised Policy, you must discontinue use of the Platform and may request account closure by contacting vaggo support prior to the revision's effective date.

Previous versions of this Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to vaggo's handling of your personal data, please contact our support team using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Policy Enquiry"
• Response Time: Within 30 calendar days of receipt of a verified request
• Available Languages: English
• Support Hours: 24/7 via live chat and email

When submitting a data rights request by email, please include your registered vaggo username, the email address associated with your account, and a clear description of the right you wish to exercise or the concern you wish to raise. vaggo may need to verify your identity before processing your request to protect against unauthorised access to personal data.

vaggo takes all privacy concerns seriously and will acknowledge your contact within two (2) business days of receipt, even where the full response may take longer to prepare.