Privacy Policy —
How 12 Baje Protects Your Data

01 Introduction

This Privacy Policy describes how 12 Baje ("we", "us", "our") collects, uses, stores and protects the personal information of players and visitors who use the 12 Baje website at https://12-baje.vip and the 12 Baje mobile application (together, "the Platform").

12 Baje is an online gaming platform built specifically for players in Bangladesh. We understand that trust is the foundation of everything we do — and that trust starts with being completely transparent about how we handle your data. This policy is written in plain language so you know exactly where you stand.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy. Together, these three documents form the complete agreement between you and 12 Baje.

02 Data We Collect

12 Baje collects personal data in two ways: information you provide directly when you register and use the platform, and information collected automatically as you interact with the platform.

Information you provide directly:

• Full name and date of birth (for account registration and age verification).
• Mobile phone number (used as your primary account identifier and for OTP verification).
• Email address (for account communications and password recovery).
• Payment information — specifically your bKash, Nagad or Rocket mobile wallet number used for deposits and withdrawals.
• Identity documents submitted during KYC (Know Your Customer) verification, such as a national ID card or passport.
• Any information you provide when contacting our support team via live chat or email.

Information collected automatically:

• Device information — device type, operating system, browser type and version.
• IP address and approximate geographic location.
• Session data — pages visited, time spent, clicks and navigation patterns.
• Game activity — bets placed, games played, session duration and outcomes.
• Cookie and tracking data (see Section 6 for full details).

03 How We Use Your Data

Every piece of data 12 Baje collects is used for a specific, legitimate purpose. We do not collect data speculatively or hold information we have no use for. Here is how your data is used on the 12 Baje platform:

• Account management: To create, maintain and secure your 12 Baje account.
• Payment processing: To verify, process and reconcile your deposits and withdrawals via bKash, Nagad and Rocket.
• Identity verification: To confirm your age and identity as required by our operating standards.
• Customer support: To respond to your queries, resolve disputes and improve our service.
• Fraud prevention and security: To detect and prevent unauthorised access, bonus abuse, money laundering and other prohibited activities.
• Responsible gaming: To monitor gaming patterns and apply responsible gaming tools where necessary to protect players at risk.
• Platform improvement: To analyse how players use 12 Baje and improve the experience for everyone.
• Marketing communications: To send promotional offers and updates — only to players who have opted in to receive them.
• Legal compliance: To meet our obligations under applicable laws and regulations.

04 Legal Basis for Processing

12 Baje processes your personal data on the following legal grounds:

• Contractual necessity: Processing your name, phone number and payment details is necessary to fulfil our contract with you — i.e., to operate your account and process your transactions.
• Legal obligation: We are required to collect and retain certain data (such as identity verification records) to comply with anti-money laundering and responsible gaming regulations.
• Legitimate interests: We process device data, IP addresses and game activity to protect the security and integrity of the 12 Baje platform and to prevent fraud.
• Consent: We send marketing communications only where you have given explicit consent. You can withdraw this consent at any time.

05 Data Sharing and Third Parties

12 Baje does not sell, rent or trade your personal data to third parties for commercial purposes. Full stop. However, there are limited circumstances in which we share data with trusted third parties in order to operate the platform:

• Payment processors: Your mobile wallet number and transaction reference data are shared with bKash, Nagad and Rocket solely to process your deposits and withdrawals.
• Game providers: Game providers whose titles appear on 12 Baje may receive anonymised session data for the purpose of game performance monitoring. They do not receive your personal identity information.
• Technology providers: We use trusted third-party services for hosting, analytics and customer support infrastructure. These providers are contractually bound to handle your data securely and only for the purposes we specify.
• Legal authorities: We may disclose your data to law enforcement or regulatory bodies where required by law, or where we believe disclosure is necessary to prevent fraud or protect the safety of our players.

All third parties who handle 12 Baje player data are required to maintain appropriate security standards and are prohibited from using your data for their own purposes.

06 Cookies and Tracking

12 Baje uses cookies and similar tracking technologies to improve your experience on the platform, keep you logged in securely and understand how players use the site so we can make it better.

Types of cookies we use:

• Essential cookies: Required for the platform to function. These handle your login session, security tokens and basic site functionality. You cannot opt out of these without stopping use of the platform.
• Analytics cookies: Help us understand how players navigate 12 Baje — which pages are visited most, where players drop off and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences, such as language and display options, so you don't have to reset them every visit.
• Marketing cookies: Used only if you have opted in to receive personalised promotions. These help us show you offers that are relevant to your gaming activity on 12 Baje.

You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the 12 Baje platform normally.

07 Data Retention

12 Baje retains your personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. Specifically:

• Account data (name, phone number, email) is retained for the lifetime of your account plus a minimum of 5 years after closure.
• Transaction records are retained for a minimum of 5 years to comply with financial record-keeping requirements.
• KYC documents are retained for the period required by applicable anti-money laundering regulations.
• Game activity logs are retained for 2 years for responsible gaming monitoring and dispute resolution purposes.
• Support communications are retained for 2 years after the conversation is closed.

When data is no longer required, 12 Baje securely deletes or anonymises it so it can no longer be linked to you as an individual.

08 Your Privacy Rights

As a 12 Baje player, you have the following rights over your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected].

We will respond to all data rights requests within 30 days. In complex cases, we may extend this by a further 30 days — we will notify you if this is the case. There is no charge for exercising your rights.

09 Children's Privacy

The 12 Baje platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has registered on 12 Baje, please contact us immediately at [email protected]. We will investigate and, if confirmed, close the account and delete all associated data without delay.

12 Baje uses age verification measures during registration to prevent underage access. However, if any underage user circumvents these measures, we rely on parents and guardians to alert us so we can act quickly.

10 Security Measures

Protecting your personal data is a core responsibility at 12 Baje. We implement a range of technical and organisational security measures to keep your information safe:

• 256-bit SSL encryption on all data transmitted between your device and our servers.
• Encrypted storage for all sensitive personal and financial data at rest.
• Two-factor authentication (2FA) available for all player accounts.
• Regular security audits and penetration testing of our platform infrastructure.
• Access controls — only authorised 12 Baje staff with a legitimate need can access player data.
• Fraud detection systems that monitor for unusual account activity in real time.

Despite these measures, no online platform can guarantee 100% security. If you suspect your 12 Baje account has been compromised, contact our support team immediately and change your password. We will investigate and take appropriate action without delay.

11 Changes to This Privacy Policy

12 Baje may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will notify registered players via their registered phone number or email address, and we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the 12 Baje platform after changes have been published constitutes your acceptance of the updated policy. If you disagree with any changes, you should stop using the platform and contact support to close your account and request data deletion.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 12 Baje handles your personal information, please get in touch. Our support team is available 24/7.

• Live chat: Available in the 12 Baje app and on the website — fastest response time.
• Email: [email protected] — we respond to every message, typically within 24 hours.