12bat Privacy Policy

12bat ("we", "us", "our", "the Company") is committed to protecting and respecting the privacy of all individuals who access or use the 12bat platform, located at https://12bat.io (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal data, and sets out the rights available to you in relation to that data.

This Policy applies to all personal data collected through your use of the Platform, including data collected during account registration, account verification, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

By accessing the Platform, registering an account, or placing a bet or wager of any kind, you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described. If you do not agree, you must immediately discontinue use of the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

12bat acts as the data controller in respect of the personal data collected and processed through this Platform. As data controller, 12bat determines the purposes and means of processing your personal data. All data-related queries, access requests, or complaints should be directed to our support team at:

We are committed to responding to all data-related inquiries within 10 business days of receipt. For complex requests or disputes, we will acknowledge receipt within 2 business days and provide a full response within 30 calendar days.

We collect personal data from you directly (when you provide it to us) and automatically (through your interaction with the Platform). The categories of personal data we collect include:

3.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (National ID, Passport, or Driving Licence number).
• Contact Data: Email address, mobile phone number, and residential address (including district, city, and postal code).
• Financial Data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, or bank account details used for deposits and withdrawals.
• Verification Documents: Copies of identity documents, proof of address documents, and payment method ownership screenshots submitted during KYC verification.
• Communications Data: The content of emails, live chat messages, and support tickets you send to our customer support team.
• Preferences Data: Marketing communication preferences, responsible gaming settings (deposit limits, time-out requests, self-exclusion requests), and language or display preferences.

3.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bet amounts and outcomes, session duration, and navigation paths through the Platform.
• Transaction Data: Details of all deposits, withdrawals, bets, and winnings processed through your account, including timestamps and transaction reference numbers.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 9 of this Policy.

We use the personal data we collect for the following purposes, each of which has a lawful basis for processing:

Where we rely on legitimate interest as the lawful basis for processing, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing carried out on this basis — see Section 10 for details.

12bat does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: We share necessary financial and identity data with our payment partners (including mobile financial service providers such as bKash, Nagad, Rocket, and Upay, and banking partners such as Dutch-Bangla Bank, BRAC Bank, and City Bank) to process your deposit and withdrawal transactions.
• Identity Verification Providers: We may share identity and document data with third-party KYC verification service providers who assist us in fulfilling our legal identity verification obligations.
• Game Content Providers: Usage and session data may be shared with game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) strictly to the extent necessary to deliver their games and maintain game integrity.
• Fraud Prevention Services: Technical and transaction data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the Platform and its users.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with an investigation of suspected illegal activity including money laundering or fraud.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 12bat's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via email or a prominent notice on the Platform.

All third parties with whom we share your data are contractually required to process it only for the specified purpose, to maintain confidentiality, and to apply appropriate technical and organisational security measures.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following retention periods apply:

• Account Data: Retained for the duration of your account plus a minimum of 5 years after account closure to comply with anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping regulations.
• Identity Verification Documents: Retained for 5 years following the end of the business relationship, or longer if required by law or ongoing investigation.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to a minimum retention period of 1 year for audit purposes.
• Technical and Usage Data: Retained for up to 24 months from collection for analytics and security purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, data is securely deleted or permanently anonymised in accordance with our internal data deletion procedures. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.

12bat takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Encrypted Data Storage: Personal data stored on our servers is encrypted at rest using AES-256 encryption or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised 12bat employees and contractors with a legitimate operational need are permitted to access your data.
• Two-Factor Authentication: We offer and encourage the use of two-factor authentication (2FA) for account login to provide an additional layer of security against unauthorised access.
• Regular Security Audits: Our Platform and infrastructure are subject to regular security assessments and penetration testing by qualified cybersecurity professionals.
• Staff Training: All 12bat employees and contractors who handle personal data receive regular training on data protection obligations and security best practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, 12bat will notify affected users via email as soon as reasonably practicable after becoming aware of the breach, and will take all appropriate steps to contain and remediate it.

12bat operates as an internationally hosted platform. Your personal data may be transferred to and processed on servers located outside Bangladesh. When such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy.
• Transfers only to service providers in jurisdictions with recognised adequacy standards for data protection.
• Regular reviews of international data transfer arrangements to ensure ongoing compliance and adequacy of safeguards.

By using the 12bat Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Bangladesh, subject to the safeguards described above.

The 12bat Platform uses cookies and similar tracking technologies to enhance your experience, analyse Platform performance, and support security and fraud prevention measures. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Help us understand how users interact with the Platform by collecting aggregated, anonymised usage statistics. This data is used to improve the Platform experience.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to provide a more personalised experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, identify unusual account behaviour, and protect the integrity of the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Platform. For more information on managing cookies, refer to your browser's help documentation.

As described in the summary section above, you have a number of rights in relation to your personal data held by 12bat. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise.

We will verify your identity before processing any data rights request to ensure we do not disclose or modify data at the request of an unauthorised party. We aim to respond to all valid requests within 30 calendar days. If your request is complex or numerous, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain, and we cannot provide access to data that would reveal information about another individual. Where a right is limited, we will explain the reason clearly in our response.

With your consent, 12bat may send you marketing communications about our latest promotions, new games, seasonal offers (such as Eid bonuses, BPL cricket promotions, and Pohela Boishakh special events), and other relevant updates. Marketing communications are sent via email and SMS to the contact details you provided at registration.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email we send you.
• Replying "STOP" to any marketing SMS message.
• Contacting our support team at [email protected] and requesting removal from our marketing list.
• Updating your communication preferences in your account settings panel.

Please allow up to 5 business days for your opt-out request to take effect. Withdrawing consent to marketing communications will not affect your ability to use the Platform or receive essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent regardless of marketing preferences.

The 12bat Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided us with personal data or has created an account on the Platform, we will immediately close the account, delete all associated personal data, and forfeit any winnings accrued.

The Platform may contain references to third-party services such as payment providers. Once you navigate away from the 12bat Platform to a third-party website or application (for example, opening your bKash app to complete a deposit), this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party services you use in connection with your 12bat account.

12bat accepts no responsibility for the privacy practices or content of third-party services, even where we have a commercial relationship with that third party for the purpose of providing services on the Platform.

12bat reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to your registered email address summarising the key changes.
• Display a prominent notice on the Platform for a period of at least 14 days following the update.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the Platform and may request account closure by contacting [email protected].

We recommend that you check this page periodically to stay informed of any updates. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us using the details below. We take all privacy-related inquiries seriously and are committed to resolving them promptly and transparently.

Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays. We aim to acknowledge all privacy-related inquiries within 2 business days and provide a full response within 10 business days. For complex matters, we will keep you informed of progress throughout the resolution process.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter through appropriate legal channels available to you under applicable law.