bd12 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bd12 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data belonging to individuals ("you", "the Player", "the Account Holder") who access or use the bd12 website at bd12.io and all associated services, including sports betting, live casino, slot games, and payment facilities.

bd12 is committed to handling your personal data responsibly and transparently. We recognise that privacy is a fundamental right, and we have designed our data practices to collect only what is necessary, retain it only for as long as required, and protect it at every stage of its lifecycle. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and bd12.

This Policy applies to all personal data processed in connection with the bd12 platform, regardless of whether you are a registered account holder, a visitor browsing the platform without an account, or a person whose data has been provided to us by a third party (for example, through a payment processor) in connection with a transaction.

2. Who We Are

bd12 is an online sports betting and casino gaming platform operating at bd12.io, serving players in Bangladesh. For the purposes of data protection, bd12 acts as the data controller in respect of personal data collected directly from players via the platform. Where bd12 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to process data only in accordance with bd12's instructions.

Our primary contact for privacy-related matters is our support team, reachable at [email protected] or via live chat on the platform 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

3. Personal Data We Collect

bd12 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth
• Residential address (street, city, district, postcode)
• Mobile phone number
• Email address
• Username selected at registration
• Government-issued ID number (National Identity Card / NID, passport, or driving licence number) — collected during KYC verification only

3.2 Financial & Transaction Data

• Payment method identifiers (bKash mobile number, Nagad account, Rocket account, Upay account, bank account reference, USDT wallet address)
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Account balance history
• Bonus credit allocations and wagering records

3.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type/version
• Session timestamps (login time, logout time, session duration)
• Pages visited, games played, betting markets accessed, and in-platform navigation paths
• Crash and error logs generated during platform use

3.4 Communications Data

• Content of messages exchanged with bd12 support via live chat, email, or any other communication channel we operate
• Records of promotional communications sent to you and your opt-in/opt-out preferences
• Complaint and dispute correspondence

3.5 KYC & Compliance Data

• Copies of identity documents submitted for KYC verification (NID, passport, driving licence)
• Proof-of-address documents (utility bills, bank statements)
• Source-of-funds declarations where requested for enhanced due diligence
• Outcomes of identity verification checks, including third-party verification results

4. How We Collect Your Data

bd12 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication.
• Automatically — when you browse or interact with the bd12 platform, our servers and analytics tools automatically collect technical and usage data as described in Section 3.3.
• From third-party payment processors — when you initiate a transaction via bKash, Nagad, Rocket, Upay, or a linked bank account, the relevant payment service provider shares transaction-level data with bd12 to enable processing and reconciliation.
• From identity verification providers — where bd12 uses a third-party service to assist with KYC document verification, that provider may return data to bd12 confirming the outcome of the verification check.
• From game providers — licensed game suppliers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others) may share session-level game data with bd12 for the purposes of account crediting, dispute resolution, and responsible gaming monitoring.

5. Legal Basis for Processing

bd12 processes your personal data under the following legal bases:

6. How We Use Your Personal Data

bd12 uses the personal data we collect for the following specific purposes:

• Account creation and authentication — to register your account, verify your identity at login, and maintain the security of your session.
• KYC compliance — to verify that you meet bd12's eligibility requirements, including the minimum age of 21 years, and to comply with applicable anti-money laundering obligations.
• Payment processing — to facilitate deposits and withdrawals through your chosen payment method and to reconcile transaction records.
• Customer support — to respond to your enquiries, resolve disputes, and process complaints in a timely and effective manner.
• Responsible gaming — to monitor your gambling patterns, apply self-imposed limits you have set, detect signs of problem gambling behaviour, and take protective action where appropriate.
• Fraud prevention and security — to detect, investigate, and prevent unauthorised account access, money laundering, bonus abuse, and other prohibited conduct.
• Platform improvement — to analyse usage patterns, identify technical issues, and optimise the performance, design, and content of the bd12 platform.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences. You may opt out of marketing communications at any time by contacting our support team.
• Legal and regulatory compliance — to comply with applicable laws, respond to regulatory enquiries, and fulfil record-keeping obligations.

7. Data Sharing & Third Parties

bd12 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following limited circumstances:

7.1 Payment Service Providers

To process your deposits and withdrawals, bd12 shares the minimum data necessary with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or USDT network infrastructure). Each payment provider operates under its own privacy policy and data protection obligations.

7.2 Game Suppliers

Licensed game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) receive a session token and account identifier to deliver their games within the bd12 platform. These providers are contractually prohibited from using this data for any purpose other than game delivery and technical support.

7.3 Identity Verification Providers

bd12 may use third-party KYC technology providers to assist with document verification. These providers process the identity document images you submit solely for the purpose of confirming your identity and return a verification outcome to bd12. They do not retain your documents beyond the period required to complete verification.

7.4 Legal and Regulatory Disclosure

bd12 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory direction, or where bd12 reasonably believes disclosure is necessary to prevent fraud, money laundering, or serious harm.

7.5 Business Transfers

In the event that bd12's business or any part of it is acquired, merged, or transferred to another entity, your personal data may be transferred as part of that transaction. You will be notified of any such transfer via the contact details registered on your account prior to your data being subject to a different privacy policy.

8. Cookies & Tracking Technologies

bd12 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

bd12 does not use third-party advertising cookies or behavioural targeting cookies. You can manage cookie preferences through your browser settings at any time. Note that disabling essential or security cookies will impair your ability to use the platform.

9. Data Security

bd12 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in transit: All data transmitted between your device and bd12's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data fields (including identity document copies, financial records, and KYC data) are encrypted within bd12's database infrastructure.
• Access controls: Access to personal data within bd12's internal systems is restricted to authorised personnel on a strictly need-to-know basis, enforced through role-based access controls and audit logging.
• Two-factor authentication: bd12 offers two-factor authentication (2FA) for player accounts and mandates 2FA for all internal staff accessing production systems.
• Vulnerability management: bd12 conducts regular security assessments and applies security patches to platform infrastructure promptly upon release.
• Incident response: bd12 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, bd12 will notify affected players within a reasonable timeframe via their registered contact details.

While bd12 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for reporting any suspected unauthorised access to your account immediately.

10. Data Retention

bd12 retains personal data for the following periods, unless a longer retention period is required by applicable law:

Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to any individual.

11. Your Privacy Rights

As a bd12 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected]. bd12 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data bd12 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data bd12 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that bd12 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to bd12's legal retention obligations (particularly KYC and anti-money laundering record-keeping requirements, which may prevent immediate deletion).
• Right to Restrict Processing: You have the right to request that bd12 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: Where bd12 processes your data on the basis of your consent or a contract with you, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where bd12 relies on legitimate interests as the legal basis for processing. bd12 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

12. Children's Privacy

The bd12 platform is strictly for individuals aged 21 years and above. bd12 does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has created a bd12 account or submitted personal data to the platform, please contact us immediately at [email protected]. Upon verification, bd12 will promptly close the account and delete all associated personal data.

bd12 employs age verification procedures at registration and KYC stages specifically to prevent underage access. Any account found to be held by a person under 21 will be immediately suspended and referred to our compliance team for investigation.

13. Third-Party Links

The bd12 platform does not contain outbound links to third-party websites. However, if you navigate away from bd12.io via a link in a communication from us (for example, an email notification), please be aware that those third-party websites operate under their own privacy policies, and bd12 is not responsible for the data practices of any third-party site.

Payment provider interfaces (bKash, Nagad, Rocket, Upay) that you access during a deposit or withdrawal transaction are operated by those respective companies and are governed by their own privacy policies. bd12 recommends that you review the privacy policies of any third-party service provider before submitting personal data.

14. Amendments to This Policy

bd12 reserves the right to amend this Privacy Policy at any time. All updates will be published on this page with a revised effective date. Where an amendment materially affects the way bd12 processes your personal data, we will notify you via the email address or mobile number registered on your account prior to the change taking effect, and we will provide a reasonable period for you to review the updated Policy before continued use of the platform constitutes acceptance.

We encourage you to review this Policy periodically to stay informed about how bd12 protects your information. If you have any concerns about a change to this Policy, please contact our support team before the effective date of the amendment.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bd12's data practices, please contact us using the details below. All privacy-related enquiries will be handled by a member of bd12's compliance team and acknowledged within 48 hours.

Email: [email protected]

Live chat: Available 24/7 via the bd12 platform (Bangladesh Standard Time, UTC+6).

Postal correspondence is not accepted. All formal data rights requests must be submitted in writing via email or live chat to ensure a documented audit trail.