12rbajee Privacy Policy

When you interact with 12rbajee — whether by visiting the website, creating an account, making a deposit, placing a bet, or contacting our support team — we may collect various categories of personal data. This section sets out each category and the circumstances in which it is collected.

1.1 Registration and Identity Data

When you register an account, we collect your full legal name, date of birth, residential address (city and district within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address (if provided), and the mobile number linked to your bKash, Nagad, or Rocket account. This information is used to create and administer your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

1.2 Financial and Payment Data

To process deposits and withdrawals in Bangladeshi Taka (৳), we collect your mobile wallet identifiers associated with bKash, Nagad, Rocket, and Upay transactions. We also record transaction amounts, timestamps, and reference numbers for every financial transaction conducted through your account. Full card numbers and CVV codes for Visa and Mastercard transactions are processed directly by our certified payment gateway partners and are not stored on 12rbajee servers.

1.3 Technical and Device Data

When you access 12rbajee, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and pages visited during your session. This data is used for security monitoring, fraud detection, and improving platform performance.

1.4 Behavioural and Gaming Data

We record data relating to your activity on the platform, including game sessions played, bets placed, stakes wagered, outcomes, bonus activations, and session durations. This data is used to administer your account balance accurately, enforce responsible gaming tools such as deposit limits and session alerts, resolve disputes, and improve the range and quality of games and betting markets offered on the platform.

1.5 Communications Data

If you contact our support team via live chat, email, or any other channel provided on the platform, we retain a record of that communication including the content of messages, the date and time of contact, and the outcome of any support interaction. This record is maintained for quality assurance, training, and dispute resolution purposes.

1.6 KYC Verification Documents

Where identity verification is required — for example, before processing your first withdrawal or when your cumulative transaction volume exceeds defined thresholds — we may collect copies of government-issued photo identification such as your National Identity Card (NID), passport, or driving licence, and supporting address verification documents such as a utility bill or bank statement. These documents are stored securely and used only for identity and age verification purposes.

12rbajee processes your personal data only for legitimate, clearly defined purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The following describes the primary purposes for which your data is processed.

2.1 Account Administration

Your registration data is used to create and maintain your player account, authenticate your identity at login, process deposits and withdrawals in Bangladeshi Taka (৳), apply and track bonuses and promotions, and manage your account settings and preferences. Without this processing, we cannot provide the core services of the platform.

2.2 Legal and Regulatory Compliance

We are required to process and retain certain categories of data — particularly identity, financial, and transaction records — in order to comply with anti-money-laundering (AML) obligations, counter-financing-of-terrorism (CFT) requirements, and KYC standards. These obligations require us to verify the identity of players, monitor transactions for suspicious patterns, and retain records for defined statutory periods.

2.3 Responsible Gaming

Gaming behaviour data — including session durations, betting frequency, deposit patterns, and self-exclusion requests — is processed to operate our responsible gaming tools. This includes enforcing deposit limits you have set, triggering session time alerts, processing self-exclusion requests, and identifying patterns that may indicate problem gambling behaviour requiring intervention. Visit our Responsible Gaming page for full details on available tools.

2.4 Security and Fraud Prevention

Technical data including IP addresses, device fingerprints, and login timestamps is processed to detect and prevent fraudulent activity, including multi-accounting, account takeovers, bonus abuse, and money laundering. Where suspicious activity is identified, we may suspend account access and conduct an internal investigation before restoring or permanently closing the account.

2.5 Customer Support

Communications data is processed to respond to your support enquiries, investigate complaints, and resolve disputes about game outcomes, payment transactions, and bonus eligibility. Support interaction records are retained to maintain consistency across ongoing cases and for agent training purposes.

2.6 Platform Improvement

Aggregated and anonymised technical and gaming data is used to analyse platform usage patterns, identify performance bottlenecks, test new features, and improve the overall player experience. This processing does not involve identifying individual players and does not affect your rights under this Privacy Policy.

2.7 Marketing and Promotions

Where you have opted in to receive promotional communications, we may use your contact details and gaming preferences to send you information about bonuses, seasonal promotions (such as BPL or Eid offers), and platform updates. You may opt out of promotional communications at any time by contacting our support team. Opting out of marketing does not affect your ability to use the platform or your eligibility for publicly available bonuses.

12rbajee does not sell or rent your personal data to any third party. However, in order to operate the platform, process payments, and comply with legal obligations, we share specific categories of data with a limited set of trusted service partners. All such partners are contractually required to process your data only for the purposes specified by 12rbajee and to maintain appropriate technical and organisational security measures.

3.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka (৳), we share the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and international card networks (Visa, Mastercard). The data shared is limited to transaction amounts, reference numbers, and the mobile number or card token associated with your transaction. These providers operate their own privacy policies governing their use of this data.

3.2 Game Providers

To deliver casino and sports betting products, 12rbajee integrates games supplied by certified third-party studios including Evolution Gaming, Pragmatic Play, Microgaming, Spribe, Ezugi, and NetEnt. A session token and anonymised player identifier are passed to these providers to authenticate your game session. Your full name, mobile number, and financial data are not shared with game providers.

3.3 Identity Verification Partners

Where KYC verification is required, we may share your submitted identity documents with certified identity verification service providers to authenticate your NID, passport, or other government-issued documentation. These partners are bound by strict data processing agreements and are not permitted to retain your documents beyond the period required for verification.

3.4 Legal and Regulatory Authorities

12rbajee will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities when legally required to do so — for example, in response to a court order, a financial crime investigation, or a statutory reporting obligation. We will notify affected players of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of 12rbajee's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with a minimum of 30 days' notice before the transfer takes effect.

12rbajee uses cookies and similar tracking technologies to maintain the functionality of the platform, remember your session state, and gather anonymous analytics data. This section explains the types of cookies we use, their purpose, and your options for managing them.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session so that you remain authenticated as you navigate between pages, store your active game state, and remember your language and currency preferences. Without these cookies, core platform features — including account login, deposit, and wagering — cannot operate. These cookies cannot be disabled without disrupting platform functionality.

4.2 Analytics Cookies

We use anonymised analytics cookies to understand how players navigate the platform — which pages are most visited, where users spend the most time, and where technical errors occur. This data is aggregated and does not identify individual players. Analytics data is used exclusively to improve the platform experience and is not shared with advertising networks.

4.3 Security Cookies

Security cookies are used to detect and prevent fraudulent access, including login attempts from unrecognised devices, simultaneous sessions from multiple geographic locations, and automated bot activity. These cookies form part of our account security infrastructure and are active at all times while you are logged in to 12rbajee.

4.4 Preference Cookies

Preference cookies remember settings you have configured on the platform — such as your preferred deposit method, game lobby filter settings, and notification preferences — so that these do not need to be re-entered on each visit. These cookies expire at the end of a defined session period or when you clear your browser cookies.

4.5 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation. 12rbajee does not currently respond to browser Do Not Track (DNT) signals, as no universally accepted DNT standard has been established.

12rbajee implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no digital system can guarantee absolute security, we apply industry-standard protections proportionate to the sensitivity of the data we hold.

5.1 Encryption

All data transmitted between your device and 12rbajee servers is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption strength. Sensitive data fields stored in our database — including identity verification documents and financial transaction records — are encrypted at rest using AES-256 encryption. Passwords are stored only as salted cryptographic hashes; they are never stored in plain text.

5.2 Access Controls

Access to systems containing personal data is restricted on a strict need-to-know basis. Customer support agents, KYC teams, and fraud analysts are granted access only to the data categories necessary for their specific role. All internal access to player records is logged and subject to periodic audit. Administrative access to backend systems requires multi-factor authentication.

5.3 Data Storage Location

Player data is stored on servers located within secure data centre facilities. Where data is processed by third-party service partners (such as payment processors or identity verification providers), those partners are required to maintain equivalent security standards as a condition of their data processing agreement with 12rbajee.

5.4 Incident Response

In the event of a data security incident that affects your personal data, 12rbajee will take immediate steps to contain and investigate the incident. Affected players will be notified without undue delay where the incident is likely to result in a high risk to their rights or interests. Notification will be made via the contact method registered on your account and will include a description of the nature of the incident, the categories of data affected, and the steps we have taken in response.

As a registered player on 12rbajee, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our 24/7 support team via live chat. We aim to respond to all valid privacy rights requests within 30 calendar days of receipt.

6.1 Right of Access

You have the right to request a copy of all personal data that 12rbajee holds about you. Upon receiving a verified access request, we will provide a structured summary of your data, the purposes for which it is processed, the categories of recipients with whom it has been shared, and the retention period applicable to each data category.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support and provide the corrected information along with documentary evidence where applicable (for example, an updated NID or proof of address). Corrections to account registration data that affect your payment name matching will require re-verification before taking effect.

6.3 Right to Erasure

You may request deletion of personal data that is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Please note that data subject to legal retention obligations — particularly financial transaction records required for AML compliance — cannot be deleted prior to the expiry of the statutory retention period, even upon request.

6.4 Right to Restrict Processing

Where you contest the accuracy of data we hold, object to its processing, or require the data to be retained for the establishment of legal claims, you may request that we restrict processing of that data to storage only until the matter is resolved. During a processing restriction, the affected data will not be used for any purpose beyond storage.

6.5 Right to Object to Marketing

If you have previously opted in to receiving promotional communications from 12rbajee, you may withdraw that consent and object to further marketing at any time. Contact our support team to opt out. Your opt-out will be processed within 5 business days. Opting out of marketing does not affect your access to the platform or your eligibility for publicly available promotional offers.

6.6 Right to Data Portability

Where data has been provided by you directly — such as registration details and communications — and is processed on the basis of your consent or a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider of your choice.

12rbajee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following table summarises the retention periods applicable to the primary categories of data we hold.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised dataset may be retained for statistical and analytical purposes without limitation, as it no longer constitutes personal data.

If you request erasure of your data before the end of the applicable retention period and no legal basis for continued retention exists, we will delete your data as promptly as technically and legally practicable. Where legal retention obligations prevent immediate deletion, we will inform you of the reason and the earliest date on which deletion will be possible.

12rbajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Material changes — those that affect your rights or the purposes for which your data is processed — will be communicated to registered players via their registered mobile number or the contact method on file, with a minimum of 14 days' notice before the revised Policy takes effect.

The effective date of the current version of this Privacy Policy is stated at the top of this document. We encourage you to review this Policy periodically to remain informed of how 12rbajee handles your personal data. Continued use of the platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, you may contact us through the following channels. Please note that email addresses are displayed as plain text and are not clickable links.

• Live Chat: Available 24/7 directly through the 12rbajee platform — the fastest way to reach our support team.
• Email: support@12rbajee — use the subject line "Privacy Enquiry" and include your registered mobile number for faster identification.
• Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and provide a full resolution within 30 calendar days.