12bank Privacy Policy

12bank collects personal data in the following categories, depending on how you interact with the platform:

• Registration Data: When you create a 12bank account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to verify your identity and ensure you meet the minimum age requirement of 21 years.
• Identity Verification Documents: To comply with anti-money laundering best practices and to process withdrawal requests above specified thresholds, we may request a copy of a government-issued photo ID (national ID card, passport, or driving licence) and proof of address (a recent utility bill or bank statement).
• Payment Data: When you make a deposit or withdrawal, we collect your payment method details, including your bKash, Nagad, Rocket, or Upay wallet number, or your Visa/Mastercard card details. Full card numbers are not stored on our servers; card data is processed via our certified payment partners.
• Transaction Records: We retain a full record of all deposits, withdrawals, bonus activations, and wagering activity associated with your account. These records are maintained for a minimum of five years in accordance with financial record-keeping obligations.
• Device and Technical Data: When you access the 12bank platform, our servers automatically collect your IP address, browser type and version, device type, operating system, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.
• Behavioural Data: We collect information about how you navigate the platform, including which games you play, how long your sessions last, and which promotional offers you view or activate. This data helps us tailor the experience to your preferences and improve the platform.
• Communications Data: If you contact our support team by email or live chat, we retain a record of that correspondence, including the nature of your query and our response, in order to maintain service quality and resolve any follow-up issues.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, and we do not request such data at any point during registration or account use.

12bank uses the personal data we collect for the following specific purposes:

We do not use your personal data for automated decision-making processes that produce legally significant effects without human oversight. Any significant account action — such as account suspension or withdrawal hold — involves a review by our operations team.

12bank processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your registration data, payment details, and transaction records is necessary to fulfil the contract between you and 12bank — namely, to provide you with a functional gaming account and process your financial transactions.
• Legitimate Interests: We process device and behavioural data on the basis of our legitimate interest in securing the platform against fraud, optimising performance, and understanding how players use the service so we can improve it.
• Legal Obligation: Retention of transaction records, identity verification documents, and certain communications data is required to comply with applicable financial record-keeping and anti-money laundering obligations.
• Consent: Where we send marketing communications by email or SMS, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

12bank does not sell your personal data. We share your data only in the following limited circumstances:

• Payment Service Providers: We share the minimum necessary payment data with our certified payment partners (including processors operating bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway services) solely to process your deposits and withdrawals. These providers are contractually required to handle your data securely and to use it for no purpose other than payment processing.
• Identity Verification Services: Where enhanced identity checks are required, we may engage a third-party identity verification provider to cross-check the documents you submit. These providers are bound by strict data processing agreements and are prohibited from retaining or using your data independently.
• Game Technology Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the game content on the 12bank platform. These providers collect limited session data (such as stake amounts and game outcomes) within their game environments to operate the games and settle results. Their handling of that data is governed by their own data processing agreements with 12bank.
• Legal and Regulatory Authorities: We may disclose your data to law enforcement agencies, regulatory authorities, or courts if we are legally required to do so, or if disclosure is necessary to protect the rights, property, or safety of 12bank, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving 12bank, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your data will continue to be governed by a policy no less protective than this one.

All third parties with whom we share data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond what is described above.

12bank retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of your account and for a minimum of five years following account closure.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping best practices.
• Identity verification documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the last interaction.
• Device and session logs: Retained for up to 12 months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus three years following withdrawal of consent.

When data is no longer required and its retention period has expired, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

12bank uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies we use are as follows:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Store your preferences — such as your preferred language or last-visited game category — so the platform remembers your settings between sessions.
• Analytical Cookies: Collect anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used to improve platform performance and does not identify you personally.
• Marketing Cookies: Where you have consented, these cookies allow us to display relevant promotional content during your session. They do not track your activity outside of the 12bank platform.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect the functionality of the 12bank platform and may prevent you from logging in or using core features. Disabling non-essential cookies will not prevent you from accessing the platform.

As a 12bank account holder, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data 12bank holds about you. We will provide this within 10 business days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly from your account profile page.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations we must comply with.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the ways in which we use your data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact our support team at [email protected] with a clear description of your request and proof of your identity. We aim to respond to all data rights requests within 10 business days.

12bank implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit is encrypted using TLS 1.2 or higher. All stored personal data is encrypted at rest using AES-256 encryption.
• Access to personal data within 12bank's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Our platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and address potential weaknesses before they can be exploited.
• Payment data is handled in accordance with the technical requirements of our certified payment partners. Full card numbers are never stored on 12bank servers.
• In the event of a data security incident that affects your personal data, 12bank will notify affected account holders promptly and take immediate corrective action to contain and remediate the incident.

While we take every reasonable precaution to protect your data, no system can guarantee absolute security. You are responsible for keeping your 12bank login credentials confidential and for ensuring that you log out of your account when using a shared or public device.

The 12bank platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for or use a 12bank account.

If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately suspend the account, delete all associated personal data, and reverse any deposits made during the period of underage use. Parents or guardians who believe a minor may have accessed the 12bank platform are encouraged to contact us immediately at [email protected].

12bank reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered account holders by email.

Your continued use of the 12bank platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically — at least once every three months — to stay informed of any changes.

If you have any questions about how a specific change affects you, please contact our support team before continuing to use the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 12bank handles your personal data, please get in touch with our support team using the contact details below:

• Email: [email protected]
• Response Time: Within 10 business days for data rights requests; within 1 business day for general queries.
• Platform: 12bank.asia

Please include your registered account username or email address in all privacy-related correspondence so we can locate your account and respond accurately to your request.