bd12 Privacy Policy

Introduction

This Privacy Policy (the "Policy") is issued by bd12 (the "Platform", "we", "us", or "our") and applies to all personal data collected from individuals who visit, register on, or otherwise interact with the bd12 website accessible at bd12.club, including all games, sportsbook markets, account management features, and customer support interactions.

By registering an account on bd12 or by continuing to use the platform after this Policy has been communicated to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue your use of the bd12 platform and contact our support team to request account closure.

This Policy should be read alongside the bd12 Terms & Conditions and the Responsible Gaming page, both of which form part of the overall agreement between bd12 and its registered players. Capitalised terms used in this Policy without definition have the meanings given to them in the Terms & Conditions.

1. Data We Collect

bd12 collects personal data from you in the following ways: directly from you when you register an account or contact support; automatically when you use the platform; and from third parties such as payment processors and identity verification services. The categories of personal data we collect are described in the table below.

1.1 Special Category Data

bd12 does not intentionally collect special category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless strictly required for regulatory compliance purposes — for example, where a responsible gaming assessment requires information about a player's self-reported problem gambling history. Any special category data collected in this context will be processed with additional safeguards and will not be used for any commercial purpose.

1.2 Data from Minors

bd12 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a registered account belongs to a person under 18, the account will be immediately suspended, all data associated with the account will be deleted or anonymised, and any deposits will be returned to the originating payment method. If you believe a person under 18 has registered an account on bd12, please contact us immediately at [email protected].

2. How We Use Your Data

bd12 uses personal data only for lawful, specified purposes that are communicated to players at the point of collection or in this Policy. We do not use personal data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises the primary purposes for which we process your personal data and the legal basis for each.

2.1 Marketing Communications

bd12 may send promotional emails or in-platform notifications about bonuses, seasonal offers (such as BPL cricket promotions, Eid special offers, or Pohela Boishakh campaigns), and new game launches. These communications are sent only to players who have opted in at registration or who have not subsequently opted out. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by using the preference settings within your account dashboard. Withdrawal of marketing consent does not affect any other aspect of your account.

2.2 Automated Decision-Making

bd12 may use automated processes to flag accounts for responsible gaming review, to detect potentially fraudulent transaction patterns, or to verify that a player meets eligibility requirements. Where an automated decision results in a restriction being placed on your account, you have the right to request human review of that decision by contacting our support team.

3. Data Sharing & Disclosure

bd12 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Service Providers

We engage third-party service providers who process personal data on our behalf under strict data processing agreements. These providers are permitted to use your data only for the purposes for which it was shared and are contractually required to maintain appropriate technical and organisational security measures. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals. Each payment partner operates under its own privacy policy.
• Identity verification providers: Third-party KYC services receive copies of identity documents to confirm player identity and age during the verification process.
• IT infrastructure and hosting providers: Cloud hosting and database service providers store platform data on secure servers. All data processing agreements require compliance with applicable data protection standards.
• Analytics providers: Aggregated and anonymised usage data may be processed by analytics tools to help us understand how players interact with the platform and to identify areas for improvement.

3.2 Legal and Regulatory Disclosure

bd12 may disclose personal data to law enforcement agencies, regulators, courts, or other governmental authorities where required to do so by applicable law, by a valid legal process, or where we reasonably believe disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. In such cases, bd12 will disclose only the minimum amount of data required to satisfy the legal obligation.

3.3 Business Transfers

In the event that bd12 undergoes a business restructuring, merger, acquisition, or sale of assets, personal data held by bd12 may be transferred to the acquiring or successor entity. Players will be notified of any such transfer via email or prominent platform notice, and the acquiring entity will be required to process personal data in a manner consistent with this Privacy Policy.

4. Cookies & Tracking

bd12 uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather aggregated analytics data. A cookie is a small text file placed on your device by the bd12 website. The categories of cookies we use are described below.

4.1 Third-Party Advertising Cookies

bd12 does not use third-party advertising cookies or tracking pixels from ad networks. We do not allow external advertising technology companies to place cookies on your device through the bd12 website.

4.2 Managing Cookies

You may control cookie placement through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the bd12 platform from functioning correctly — you will not be able to log in or maintain a session if session cookies are blocked. Disabling functional or analytics cookies will not prevent you from using the platform but may affect certain preference-based features.

Instructions for managing cookies in common browsers are available from the browser's official help documentation. bd12 does not provide browser-specific instructions as these change with software updates.

5. Data Retention

bd12 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and reporting obligations. The retention periods applicable to different categories of personal data are set out below.

• Account and identity data: Retained for a minimum of five years from the date of account closure or last login, whichever is later. This period is required to satisfy anti-money-laundering obligations and to respond to regulatory enquiries.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of account closure. Copies are stored securely and are not accessible by unauthorised personnel.
• Customer support communications: Retained for three years from the date of the interaction, to support dispute resolution and service quality monitoring.
• Analytics and technical data: Anonymised analytics data may be retained indefinitely in aggregate form. Non-anonymised technical logs are retained for a maximum of twelve months.
• Marketing preferences: Records of marketing consent and opt-out requests are retained for the duration of the account relationship plus two years following account closure.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Deletion requests submitted by players under their data rights (see Section 7) are processed within the constraints of the retention obligations described above — data that is subject to a legal retention requirement cannot be deleted until that requirement expires.

6. Data Security

bd12 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following measures:

• Transport encryption: All data transmitted between your browser or device and the bd12 platform is encrypted using 256-bit SSL/TLS technology. The bd12 website operates exclusively over HTTPS.
• At-rest encryption: Sensitive personal data stored in bd12's databases is encrypted at rest. KYC documents and financial data are subject to enhanced encryption standards.
• Access controls: Access to personal data within bd12's systems is restricted to personnel who have a legitimate need to access that data as part of their role. Access permissions are reviewed periodically and revoked promptly when no longer required.
• Intrusion detection: bd12 operates continuous monitoring systems to detect and respond to attempted unauthorised access to its infrastructure.
• Penetration testing: bd12's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to registered players, bd12 will notify affected players and relevant authorities as required by applicable law, within the legally prescribed timeframes.

7. Your Privacy Rights

As a registered player on bd12, you hold the following rights in relation to your personal data. These rights are subject to the legal retention obligations described in Section 5 and to verification of your identity before the request is processed.

• Right of access: You have the right to request a copy of the personal data that bd12 holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right of rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update some personal details directly through your account settings.
• Right of erasure: You may request that bd12 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — data that must be retained for regulatory compliance cannot be deleted until the retention period expires.
• Right to restriction: You may request that bd12 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Rights relating to automated decision-making: Where bd12 makes automated decisions that significantly affect you, you have the right to request human review of that decision and to challenge its outcome.

7.1 How to Exercise Your Rights

To exercise any of the rights described above, contact bd12's support team via live chat inside your account dashboard or by email at [email protected]. Include your registered email address and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and will complete the request within 30 calendar days. If we require additional time, we will notify you before the initial 30-day period expires.

We may ask you to verify your identity before processing a data rights request to ensure that we do not disclose or modify your data in response to a fraudulent request.

8. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bd12 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including all Bangladesh public holidays.

• Live Chat: Available inside your account dashboard. Average response time: 2–5 minutes.
• Email: [email protected] — responses within 4–12 hours.

8.1 Complaints Process

If you are not satisfied with bd12's response to a privacy-related complaint, you may escalate the matter by requesting that your case be reviewed by a senior member of our compliance team. Please state clearly in your escalation request that you have already raised the matter with the initial support team and that you remain dissatisfied with the outcome. We will acknowledge escalated complaints within 2 business days and aim to resolve them within 15 calendar days.

8.2 Updates to This Policy

bd12 reserves the right to update this Privacy Policy at any time. Material changes — defined as changes that significantly affect how we collect or use your personal data — will be communicated to registered players via the email address associated with their account or via a prominent notice on the bd12 platform. The effective date displayed at the top of this page reflects the date the current version came into force. We encourage you to review this Policy periodically to stay informed about how bd12 protects your privacy.