haglutopup Privacy Policy
What we hold, why we hold it, how long it stays and how to ask us to change or remove it. Written for players in Bangladesh.
Where this policy applies
haglutopup runs the site at haglutopup.org and the Android app of the same name. This page explains what happens to personal data when you register an account, add money, place a bet, open a game or message support. It covers the website, the haglutopup app and live chat.
Two things sit outside our control. A wallet or bank handles the data you type on its own screens, and a site we link to follows its own notice. We have kept the wording here plain on purpose. If a sentence is unclear, live chat will explain it in simple terms, any hour of the day.
Details you give us when you register
Opening a haglutopup account takes a full name, a date of birth, a mobile number, a district and a password. Your mobile number is the key to the account, because it receives the one-time password that confirms a login on a new phone. The password is stored hashed, never as plain text, and no member of staff can read it.
Papers we check before your first withdrawal
Money rules in Bangladesh require us to match the name on a haglutopup account to a real person before funds leave it. Upload a photo of your National ID card, passport or driving licence. The review takes about 12 hours and happens once, before your first withdrawal, not on every cash-out after that. Blur nothing on the photo, because a covered corner means a second upload.
What staff will never ask for
No haglutopup employee will ask for your bKash PIN, your Nagad PIN, a wallet OTP or your card CVV, in chat or by phone. Anyone who does is not calling from us. Report the message in live chat and we will trace the number.
Payment records we keep
Every deposit and withdrawal leaves a record: the amount, the time, the provider's transaction ID and the last four digits of the sending wallet. haglutopup does not store your wallet PIN or your full bank account number. Minimum deposits are ৳150 and minimum withdrawals ৳500, and each movement is tied to your account so a dispute can be settled months later without guesswork.
Withdrawals usually land within about 18 minutes once a request is approved. The approval step is where a record is created and where a first-time identity check may pause the payout.
Device data and cookies
haglutopup logs your IP address, browser, phone model and the pages you open. Those logs keep sessions secure, flag a login from an unusual location and show which pages load slowly on the phones most people use here. Cookies do three jobs: keeping you signed in, remembering layout and language choices, and measuring page speed.
We run no third-party advertising cookies and we do not build profiles to sell. The haglutopup app keeps a login token on the phone until you log out or uninstall it, so signing in once on a personal handset is usually enough.
What we use your information for
The table below is the short version of why haglutopup holds each record. If a purpose is not listed, we do not use your data for it.
| Purpose | Data used | Kept on file |
|---|---|---|
| Running and securing your account | Name, mobile number, password hash, login device | While the account stays open |
| Checking identity before a payout | ID document copy, name, date of birth | As long as financial record rules require |
| Processing deposits and withdrawals | Amount, time, provider transaction ID, last four digits | As long as financial record rules require |
| Answering support chats | Chat transcript, account number | Until the case is closed |
| Spotting fraud and bonus abuse | Bet history, device data, linked accounts | Life of the account and any linked one |
| Service messages | Mobile number | Until you ask us to stop |
Who sees your data
Game studios such as JILI, PG Soft and Playtech see a session and a bet result. They never see your name, mobile number or ID document. Payment partners receive what a transfer needs, the verification team sees the document you upload, and a regulator may see it where the law asks for it.
Access inside haglutopup is limited to the person doing the task. An agent on chat does not open your ID file unless the case needs it, and every view of a document or transcript is logged.
haglutopup does not sell personal data. We do not share it with advertisers or data brokers, and no partner is allowed to use it for its own marketing.
How long records stay on file
Two clocks run here. Profile data such as your name, mobile number and play history stays while the account is open and is removed or anonymised once you close it. Transactions and identity records follow a different clock: Bangladesh financial rules make us keep them for a set period after closure, so a closed haglutopup account still leaves a payment trail behind.
Chat transcripts are dropped when a case is closed, unless the case ended as a payment dispute. In that situation the transcript stays with the transaction record so both sides can check what was agreed.
Security on our side and yours
On our side: encrypted connections, hashed passwords, logged access to admin tools, and a rule that no single employee can move money alone. Repeated failed logins lock an account, and you can sign the haglutopup app out remotely from the website if a phone goes missing.
On yours: use a password you have not reused elsewhere, keep the app updated, and hang up on anyone who asks for a code. If a message feels wrong, live chat can confirm within a minute whether it came from us.
Requests you can make
There are four things you can ask for. A copy of the data held on your account. A correction to a misspelled name or a wrong birth date. An end to bonus and offer messages. Closure of the account, with personal details deleted wherever the rules allow it.
Send the request through live chat and answer the short identity check first, because haglutopup will not act on a request that arrives from an unverified number. If a record has to stay for a financial reason, we tell you which one and why.
Age checks and under-18 accounts
haglutopup is for adults. Registration asks for a date of birth, and an account that fails the age check is closed with any deposit returned to the wallet it came from. Where an adult's document was used by someone under 18, we close the account and freeze the balance while the money goes back.
A parent who finds an account like this can report it through 24/7 live chat. Send the account number and the mobile number used, and the case goes to the verification team the same day.
When this page gets updated
We edit this page when a payment method, a game provider or a rule changes. What you read here is the version in force, and a material change to how haglutopup uses your data is announced in the account area before it starts. Older versions can be requested from the help centre.
Straight answers to haglutopup privacy questions
Can I open a haglutopup account without an ID document?
Does the site store my bKash or Nagad PIN?
Who reads my live chat messages?
What survives after I close my account?
How do I stop offer messages?
Still stuck on a privacy question? Live chat is open 24/7 and an agent can open your haglutopup account while you talk. You can also go back to the homepage and carry on where you left off.