Privacy & Security
Last Updated: January 2025

12xbajee Privacy Policy — Your Data, Protected

At 12xbajee, we take your privacy seriously. This policy explains exactly what personal data we collect, why we collect it, how we use it, and what rights you have over your own information. We've written it in plain language — no legal maze, no hidden surprises.


Six Ways 12xbajee Keeps Your Data Safe

These are the core privacy principles that guide how 12xbajee handles every piece of personal information you share with us.

End-to-End Encryption

All data transmitted between your device and 12xbajee is encrypted using industry-standard TLS protocols. Your login credentials, payment details, and personal information are never sent in plain text. Even on a mobile data connection, your data stays private.

No Data Selling — Ever

12xbajee does not sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose. Your information is used only for the purposes described in this policy. That's a firm commitment, not a conditional one.

You Control Your Data

You have the right to access, correct, or request deletion of your personal data at any time. These rights are not buried in a form — you can exercise them by contacting support directly. We process data requests within 30 days.

Secure Data Storage

Personal data stored by 12xbajee is held on secured servers with restricted access. Only authorised personnel with a legitimate operational need can access member data. Access logs are maintained and reviewed regularly as part of our security audit process.

Minimal Retention Periods

12xbajee retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised. We don't hold onto your information longer than we have to.

Breach Notification

In the unlikely event of a data breach that affects your personal information, 12xbajee will notify affected members promptly and take immediate steps to contain and investigate the incident. We maintain an incident response plan specifically for data security events.

1

Who We Are

This Privacy Policy applies to the 12xbajee platform, accessible at 12xbajee.io. 12xbajee is an online casino and sports betting platform operated for players in Bangladesh and other permitted jurisdictions. When this policy refers to "12xbajee", "we", "us", or "our", it means the operator of the 12xbajee platform.

As the operator of 12xbajee, we act as the data controller for the personal information you provide when registering, depositing, playing, or contacting support. This means we are responsible for deciding how and why your personal data is processed, and we are accountable for ensuring that processing is done lawfully and fairly.

If you have any questions about this Privacy Policy or how 12xbajee handles your data, you can contact us at any time via live chat or at [email protected]. We aim to respond to all privacy-related enquiries within 48 hours.

2

Data We Collect

12xbajee collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site, and in some cases from third-party verification services. Here is a breakdown of the categories of data we collect:

Category Examples How Collected
Identity Data Full name, date of birth, gender Registration form
Contact Data Email address, phone number Registration form, support
Financial Data bKash/Nagad account reference, transaction history Deposit and withdrawal actions
Verification Data National ID, passport scan, selfie KYC verification process
Technical Data IP address, device type, browser, OS Automatically on site visit
Usage Data Games played, session duration, bet history Automatically during gameplay
Communications Data Support chat logs, email correspondence When you contact support

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is directly relevant to a responsible gaming request you have made.

Minimum data principle: 12xbajee only collects data that is genuinely necessary for the purposes described in this policy. We do not collect data speculatively or "just in case".

3

How We Use Your Data

12xbajee uses the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis, which is explained in the next section.

  • Account creation and management: To register your account, verify your identity, and maintain your player profile on the 12xbajee platform.
  • Payment processing: To process deposits and withdrawals via bKash, Nagad, and other supported payment methods. Financial data is shared only with the payment processor handling your transaction.
  • Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, and unauthorised account access. This includes monitoring login patterns and transaction behaviour.
  • Legal compliance: To meet our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) regulations, and to respond to lawful requests from regulatory authorities.
  • Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
  • Platform improvement: To analyse how members use 12xbajee and identify areas where the platform can be improved. This analysis uses aggregated, anonymised data wherever possible.
  • Responsible gaming: To monitor for signs of problem gambling behaviour and to apply any limits or restrictions you have requested through the responsible gaming tools.
  • Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these. You can opt out at any time.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

4

Legal Basis for Processing

Every time 12xbajee processes your personal data, we do so on one of the following legal grounds:

  • Contract performance: Processing necessary to provide the services you have signed up for — account management, payments, gameplay, and support.
  • Legal obligation: Processing required to comply with AML regulations, KYC requirements, and responses to lawful authority requests.
  • Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where our interests do not override your privacy rights.
  • Consent: Processing for marketing communications and optional analytics features, where you have given clear, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Your consent matters: Where we rely on consent as our legal basis, you are always free to withdraw it. Withdrawing consent will not affect your ability to use the 12xbajee platform — it only affects the specific processing activity for which consent was given.

5

Data Sharing

12xbajee does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

  • Payment processors: bKash, Nagad, and other payment providers receive the transaction data necessary to process your deposits and withdrawals. They operate under their own privacy policies and are bound by financial data protection regulations.
  • Identity verification providers: Third-party KYC services receive identity documents you submit during verification. These providers are contractually bound to use your data only for verification purposes.
  • Regulatory authorities: We may be required by law to share data with financial intelligence units, law enforcement agencies, or other regulatory bodies. We will always seek to limit such disclosures to what is legally required.
  • Technology service providers: Hosting, security, and analytics providers who process data on our behalf under strict data processing agreements. These providers cannot use your data for their own purposes.

No third-party marketing: 12xbajee never shares your contact details or personal profile with advertisers, data brokers, or marketing agencies. If you receive unsolicited marketing claiming to be from 12xbajee via a third party, please report it to support immediately.

6

Cookies and Tracking

12xbajee uses cookies and similar tracking technologies to make the platform work correctly and to understand how members use it. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without disabling the platform entirely.
  • Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
  • Analytics cookies: Help us understand how members navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is aggregated and anonymised. You can opt out via your browser settings.
  • Security cookies: Used to detect and prevent fraudulent login attempts and suspicious activity patterns.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 12xbajee platform. We do not use third-party advertising cookies or tracking pixels that report your behaviour to external ad networks.

7

Data Retention

12xbajee retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

  • Account data: Retained for the duration of your account and for a period of up to five years after account closure, as required by AML regulations.
  • Transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
  • Identity verification documents: Retained for the duration of your account and for five years after closure. Copies are securely deleted once the retention period expires.
  • Support communications: Retained for up to two years from the date of the last interaction, to allow for dispute resolution and quality review.
  • Marketing consent records: Retained for as long as you remain opted in, plus a reasonable period after opt-out to demonstrate compliance.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8

Your Rights

You have the following rights in relation to the personal data 12xbajee holds about you. To exercise any of these rights, contact support via live chat or email at [email protected]. We will respond within 30 days.

Right of Access

Request a copy of all personal data 12xbajee holds about you, along with information about how it is used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Request deletion of your personal data where there is no longer a lawful reason for us to hold it.

Right to Restriction

Request that we limit how we use your data while a dispute or review is in progress.

Right to Portability

Request your personal data in a structured, machine-readable format so you can transfer it elsewhere.

Right to Object

Object to processing based on legitimate interests, including direct marketing communications.

Legal retention limits: Some rights — particularly erasure — may be limited where 12xbajee is required by law to retain your data, such as for AML compliance. We will always explain clearly if a legal obligation prevents us from fulfilling a request in full.

9

Children's Privacy

The 12xbajee platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on 12xbajee or provided us with personal data, please contact support immediately at [email protected].

Upon receiving a verified report of underage registration, 12xbajee will close the account, delete the associated personal data, and return any deposited funds to the original payment method. We take underage gambling extremely seriously and cooperate fully with any investigation into such cases.

We use age verification checks during registration and reserve the right to request additional proof of age at any time. Accounts that cannot be verified as belonging to an adult will be suspended pending verification.

10

Security Measures

12xbajee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • TLS encryption for all data in transit between your device and our servers.
  • Encrypted storage for sensitive data including identity documents and financial records.
  • Access controls that limit data access to authorised personnel with a legitimate operational need.
  • Regular security audits and penetration testing to identify and address vulnerabilities.
  • Two-factor authentication options for member accounts to prevent unauthorised login.
  • Incident response procedures to contain and investigate any security events promptly.

While 12xbajee takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.

Report a security concern: If you discover a potential security vulnerability on the 12xbajee platform, please report it to [email protected] immediately. We take all security reports seriously and will investigate promptly.

11

Changes to This Policy

12xbajee may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how we use your personal data, we will notify registered members via email or an in-platform notification before the changes take effect. Minor clarifications or formatting updates may be made without direct notification.

Your continued use of the 12xbajee platform after any changes to this Privacy Policy constitutes your acknowledgement of the updated policy. If you disagree with any changes, you should stop using the platform and contact support to close your account and request data deletion.

12

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how 12xbajee handles your personal data, please get in touch. Our support team is available 24 hours a day, seven days a week.

  • Live Chat: Available directly from the 12xbajee platform — typical response time under 2 minutes.
  • Email: [email protected] — we respond to privacy requests within 48 hours.
  • FAQ: Visit our FAQ page for answers to common questions about accounts and data.

For information about your rights as a player, see our Terms and Conditions. For responsible gaming tools and self-exclusion options, visit our Responsible Gaming page.

Safe & Secure

Your Privacy Is Protected at 12xbajee

Register with confidence. Your personal data is encrypted, never sold, and handled with full transparency. Join over 500,000 Bangladesh players who trust 12xbajee with their gaming experience.

18+ only. Play responsibly.   Responsible Gaming  |  Terms & Conditions