12bang Privacy Policy

1. Introduction

12bang ("12bang", "we", "us", "our") operates the online casino and sports betting platform available at 12bang.bio. This Privacy Policy ("Policy") describes how 12bang collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "the Player") who access or use the 12bang platform, including all associated services, features, games, and payment facilities.

12bang is committed to protecting the privacy and personal data of all players, particularly those based in Bangladesh. We apply data protection principles consistent with internationally recognised privacy standards in the operation of our platform. This Policy should be read alongside our Terms & Conditions, which govern your overall use of the 12bang platform.

This Policy applies to all personal data collected through the 12bang website, player account system, customer support channels, payment processing services, and marketing communications. It does not apply to third-party websites or services that may be linked from the platform — you are encouraged to review the privacy policies of any third-party services you access independently.

2. Data We Collect

12bang collects personal data that is necessary to provide the services available on the platform, comply with legal and regulatory obligations, and maintain the security and integrity of player accounts. The categories of personal data we collect include:

2.1 Account Registration Data

• Full legal name (as it appears on your Bangladeshi National Identity Card)
• Date of birth
• Bangladeshi mobile phone number
• Email address
• Username and hashed password
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

2.2 Identity Verification (KYC) Data

• Copy of Bangladeshi National Identity Card (NID) or passport
• Proof of address documentation
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Selfie or photograph for identity confirmation, where required

2.3 Financial Transaction Data

• Deposit and withdrawal amounts in BDT (৳)
• Payment method details (bKash wallet number, Nagad number, Rocket number, Upay number, or masked Visa/Mastercard details)
• Transaction reference numbers and timestamps
• Account balance history

2.4 Gaming Activity Data

• Games played, bets placed, wager amounts, and game outcomes
• Sports betting market selections and settlement records
• Bonus and promotion participation history
• Session duration and login/logout timestamps

2.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Mobile network operator (e.g., Grameenphone, Robi, Banglalink, Teletalk)
• Cookies and similar tracking technologies (see Section 9)
• Platform interaction logs and error reports

2.6 Customer Support Data

• Content of communications submitted to [email protected]
• Support ticket reference numbers and resolution records
• Any documentation submitted in connection with a support query

3. How Data Is Collected

12bang collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically: When you access and use the platform, through cookies, server logs, and analytics tools that record technical and behavioural data about your session.
• From payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment processing systems when you make a deposit or withdrawal.
• From identity verification services: Data returned by third-party KYC and identity verification services used to confirm the authenticity of documents you submit.

4. Purpose of Processing

12bang processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your 12bang player account, including authentication and password management.
Service Delivery	Enabling access to casino games, sports betting markets, and all platform features available to registered players.
Payment Processing	Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transactions and resolving payment disputes.
KYC & Age Verification	Verifying that all players are at least 18 years of age and confirming the identity of account holders before processing withdrawals.
Fraud & Security	Detecting and preventing fraudulent activity, money laundering, multiple account creation, and other prohibited conduct as defined in our Terms & Conditions.
Responsible Gaming	Monitoring account activity to identify signs of problem gambling and providing access to responsible gaming tools including deposit limits and self-exclusion.
Customer Support	Responding to queries, resolving disputes, and providing assistance to players via email support.
Legal Compliance	Meeting obligations imposed by applicable law, including record-keeping requirements, responding to lawful requests from authorities, and enforcing our Terms & Conditions.
Marketing	Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications.
Platform Improvement	Analysing aggregated usage data to improve platform performance, game selection, payment options, and overall user experience.

5. Legal Basis for Processing

12bang processes personal data on the following legal grounds:

• Contract performance: Processing your registration data, KYC data, and transaction data is necessary to create and operate your player account and deliver the services you have requested.
• Legal obligation: Processing for KYC verification, age verification, and anti-money laundering checks is required to comply with applicable legal and regulatory obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is carried out in the legitimate interests of 12bang and the broader player community, where those interests are not overridden by your privacy rights.
• Consent: Processing your data for direct marketing communications is carried out on the basis of your consent, which you may withdraw at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

6. Data Sharing

6.1 Third-Party Service Providers. 12bang shares personal data with carefully selected third-party service providers who assist in delivering the platform's services. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — for the purpose of processing deposits and withdrawals in BDT.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Play'n GO, Spribe, and Ezugi — for delivering game content; these providers may receive session identifiers to authenticate players within their game environments.
• Identity verification services: Third-party KYC providers used to verify the authenticity of identity documents submitted by players.
• Cloud infrastructure and hosting providers: Hosting and data storage services that hold platform data under contractual data processing agreements with 12bang.
• Analytics services: Aggregated, anonymised usage data may be shared with analytics providers to support platform improvement activities.

All third-party service providers are bound by contractual data processing agreements that restrict their use of personal data to the specific purpose for which it was shared and require them to implement appropriate security measures.

6.2 Legal Disclosures. 12bang may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law or in response to a valid legal process. 12bang will, where permitted by law, notify the relevant account holder of any such disclosure request.

6.3 No Sale of Personal Data. 12bang does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes under any circumstances.

7. Data Retention

12bang retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of the player's active account relationship with 12bang.
• KYC and identity verification records: Retained for a minimum of 5 years from the date of the last transaction or account closure, in accordance with anti-money laundering record-keeping principles.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the relevant transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of the relevant session.
• Customer support records: Retained for 2 years from the date of resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of the consent and for 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

8. Data Security

12bang implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 12bang platform is encrypted using industry-standard SSL/TLS protocols.
• Password security: Player passwords are stored as salted cryptographic hashes. 12bang never stores plaintext passwords.
• Two-factor authentication: Players are strongly encouraged to enable SMS OTP two-factor authentication, available in account security settings.
• Access controls: Access to personal data within 12bang's systems is restricted to authorised personnel on a strictly need-to-know basis.
• Regular security reviews: 12bang conducts periodic reviews of its security practices and infrastructure to identify and address potential vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to player privacy, 12bang will notify affected players and take all reasonable steps to mitigate the impact of the breach.

9. Cookies & Tracking Technologies

12bang uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session continuity, and gather aggregated analytics data. The types of cookies used on the 12bang platform include:

• Essential cookies: Strictly necessary for the operation of the platform. These cookies maintain your login session, remember your language and display preferences, and enable core functionality. They cannot be disabled without impacting your ability to use the platform.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform experience.
• Marketing cookies: Used to track whether you have engaged with marketing communications from 12bang, and to personalise promotional content shown to you on the platform. These cookies are only set if you have consented to marketing communications.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain parts of the 12bang platform from functioning correctly. For detailed information about the specific cookies in use and instructions for managing them, please contact [email protected].

10. Your Data Rights

As a 12bang player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. 12bang will respond to all valid rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that 12bang holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 12bang be corrected or completed. Certain data (such as your legal name and date of birth as verified against your NID) cannot be altered unilaterally and must match your identity documentation.
• Right to erasure: You have the right to request that 12bang delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to 12bang's legal obligations to retain certain records (see Section 7).
• Right to restriction of processing: You have the right to request that 12bang restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of personal data you have provided to 12bang in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance.
• Right to object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though 12bang may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

11. Children's Privacy

The 12bang platform is strictly intended for adults aged 18 years and above. 12bang does not knowingly collect personal data from any individual under the age of 18. If 12bang discovers or has reason to believe that an account has been registered by a person under 18, the account will be suspended immediately, all transactions reviewed, and any balance returned to the source of funds. Personal data associated with the underage account will be deleted as soon as the review process is complete.

Parents and guardians who believe that a minor in their care has accessed the 12bang platform are encouraged to contact [email protected] immediately. 12bang also recommends the use of parental control software to restrict access to online gambling platforms for minors.

12. International Data Transfers

12bang's platform serves players in Bangladesh and its primary operations are focused on the Bangladesh market. However, some of the third-party service providers used by 12bang — including game content providers such as Pragmatic Play, Evolution Gaming, and NetEnt, as well as cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, 12bang ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to protect your data to a standard consistent with this Policy.

13. Third-Party Services

The 12bang platform integrates with third-party services including game providers, payment processors, and analytics tools. These third parties operate under their own privacy policies and 12bang is not responsible for the data practices of third-party services. The game studios whose products are available on 12bang — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Play'n GO, Spribe, and Ezugi — may process session data in accordance with their own privacy terms as part of delivering their game content. Payment providers including bKash, Nagad, Rocket, and Upay process transaction data in accordance with their own privacy policies and applicable Bangladeshi financial regulations.

12bang does not include links to external websites in the body of the platform. However, if you navigate to any external site independently, please review that site's privacy policy before submitting any personal information.

14. Changes to This Policy

12bang reserves the right to update or modify this Privacy Policy at any time. Where a material change is made, registered players will be notified via the email address associated with their account at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the 12bang platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should close your account before the effective date of the change.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 12bang processes your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours
• Language: English

For requests to exercise your data rights (access, erasure, rectification, etc.), please include your registered username, the mobile number associated with your account, and a clear description of your request. 12bang may request identity verification before processing a data rights request to ensure your data is not disclosed to an unauthorised party.