12bdt Privacy Policy – How We Handle Your Data

1. Introduction and Scope

12bdt operates an online casino and sports betting platform at 12bdt.club, primarily serving players in Bangladesh. We understand that the privacy of our players is important, and we take our obligations regarding the handling of personal data seriously. This Policy applies to all personal data we process in connection with your use of the 12bdt platform, including data collected through the website, through your account, through payment processing, and through your interactions with our customer support team.

This Policy does not apply to third-party websites, apps, or services that may be linked from the 12bdt platform. We are not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external services you use in connection with 12bdt.

2. Information We Collect

We collect several categories of personal data from you, either directly when you provide it to us or automatically through your use of the platform. The categories of data we collect include:

• Identity and contact information: your name, date of birth, mobile phone number, and any government-issued identification document you provide during account verification.
• Account credentials: your chosen username and encrypted password. We do not store your password in plain text — it is stored using one-way cryptographic hashing.
• Financial data: records of deposits, withdrawals, and transaction history on your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer) and transaction reference numbers. We do not store full mobile wallet PINs or banking passwords.
• Gaming activity: records of the games you play, bets placed, bet amounts, outcomes, bonus claims, and promotional participation. This data is used for account management, fair-play monitoring, and responsible gaming purposes.
• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, session timestamps, and pages visited on the 12bdt platform. This data is collected automatically via server logs and cookies.

We collect only the minimum personal data necessary to provide you with a functional, safe, and compliant online gaming experience. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data.

3. How We Use Your Information

12bdt uses the personal data it collects for the following purposes:

• Account management and service delivery: to create and maintain your account, verify your identity and age (21+ compliance), process deposits and withdrawals via bKash, Nagad, and other payment methods, and provide access to all games and features on the platform.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: to monitor gaming patterns and flag accounts that may show signs of problem gambling, to apply self-imposed limits requested by players, and to process self-exclusion requests.
• Customer support: to respond to your enquiries, process complaints, and provide assistance with account issues, payment queries, and technical problems.
• Legal and regulatory compliance: to fulfil our obligations under applicable law, including anti-money laundering (AML) requirements, know-your-customer (KYC) procedures, and any requests from lawful authorities.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: processing necessary to provide you with the services you have requested by registering an account and using the 12bdt platform.
• Legitimate interests: processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Legal obligation: processing required to comply with anti-money laundering laws, KYC verification requirements, age verification obligations, and any other applicable legal or regulatory requirements.
• Consent: for optional processing activities, such as sending you promotional communications about bonuses and new games, where you have given explicit consent. You may withdraw this consent at any time by contacting [email protected].

5. Sharing Your Information

12bdt does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: we share transaction data with bKash, Nagad, Rocket, Upay, and banking partners solely to process your deposits and withdrawals. These processors are contractually bound to keep your data confidential and to use it only for payment processing.
• Game providers: licensed game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming may receive session identifiers and game-play data to ensure fair game operation. These providers process data under strict confidentiality and data protection agreements.
• Legal and regulatory authorities: we may disclose your data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or to protect the rights, property, or safety of 12bdt, its players, or others.
• Service providers: technical service providers (including cloud hosting, analytics, and security monitoring providers) who process data on our behalf under strict data processing agreements. These providers may not use your data for their own purposes.

In all cases where we share your data with third parties, we ensure that appropriate contractual safeguards are in place to protect your personal information. We do not transfer your personal data outside of the regions where our service operates without ensuring an adequate level of data protection.

6. Payment Data and Financial Security

All payment transactions on 12bdt are processed through secure, verified payment channels. When you make a deposit via bKash or Nagad, your payment is processed directly through the respective mobile financial service provider's secure infrastructure. 12bdt receives only a transaction confirmation and reference number — we do not receive or store your full bKash PIN, Nagad PIN, or any other authentication credentials for your mobile wallet or bank account.

Financial transaction records are retained for a minimum period as required by applicable anti-money laundering regulations. These records are used solely for the purposes of regulatory compliance, dispute resolution, and fraud investigation. Access to financial records is restricted to authorised personnel only.

7. Cookies and Tracking Technologies

12bdt uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve the player experience. The types of cookies we use include:

• Essential cookies: these are required for the platform to function. They maintain your login session, remember your language preference, and ensure that your account balance displays correctly. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: we use anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data helps us improve 12bdt's performance and usability. Analytics data does not identify you personally.
• Security cookies: short-lived cookies used to detect and prevent fraudulent sessions, cross-site request forgery (CSRF) attacks, and other security threats. These cookies do not track your activity across other websites.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent some features of 12bdt from working correctly. We do not use advertising cookies or share cookie data with advertising networks.

8. Data Retention

12bdt retains your personal data for as long as your account remains active and for a period thereafter as required by law or legitimate business needs. Specifically: account and identity verification data is retained for a minimum of five years from the date of account closure to comply with anti-money laundering regulations; transaction records are retained for five years from the date of the transaction; gaming activity records are retained for two years from the date of the activity; customer support communications are retained for two years from the date of the interaction.

When the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with you. You may request earlier deletion of certain categories of data by contacting [email protected], subject to our legal retention obligations.

9. Your Rights Regarding Your Personal Data

You have the following rights in relation to the personal data that 12bdt holds about you:

• Right of access: you may request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a verifiable request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account information directly via your account settings.
• Right to erasure: in certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to withdraw consent: where we process your data on the basis of consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request" and a description of your request. We may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete and verifiable request.

10. Data Security Measures

12bdt implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include: SSL/TLS encryption for all data transmitted between your device and the 12bdt platform; encrypted storage of account credentials using one-way hashing algorithms; access controls that restrict access to personal data to authorised personnel only on a need-to-know basis; regular security assessments of our platform infrastructure; and session timeout mechanisms that automatically log out inactive accounts.

While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. In the unlikely event of a data breach that affects your personal data, we will notify affected players promptly and take all necessary steps to contain the breach and prevent further unauthorised access.

11. Children's Privacy

The 12bdt platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have collected personal data from a person under 21, we will immediately close the associated account, void any transactions, and securely delete all personal data associated with that account. If you believe that a person under the age of 21 has registered an account on 12bdt, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

12bdt reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the effective date at the top of this page. Where a change is material — for example, a change to the categories of data we collect, a new third-party sharing arrangement, or a change to how we use your data — we will notify registered players via their registered contact details or through a notice displayed upon login before the change takes effect.

Your continued use of the 12bdt platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically so that you are always aware of our current data practices.

13. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact our support team by email. We aim to respond to all privacy-related enquiries within 48 hours.

Email: [email protected]. Please include "Privacy Request" in your subject line and provide your registered username or mobile number so we can locate your account and handle your request efficiently.