18aa Privacy Policy

18aa is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy explains what information we collect when you register, deposit, or play games at 18aa, how that information is used, and the rights you hold over your own data. By accessing or using the 18aa platform, you acknowledge that you have read and understood this policy in full.

This policy applies to all users of the 18aa website and associated services, including players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. We handle your data with the utmost care and do not sell or rent your personal information to any third party for marketing purposes.

1. Information We Collect

When you create an account and use the 18aa platform, we collect certain categories of personal information necessary to provide our services. The types of data we may collect include, but are not limited to:

• Identity information: full name, date of birth, and a government-issued identification document number for KYC (Know Your Customer) verification.
• Contact details: email address, mobile phone number, and residential address (city, district, or division within Bangladesh).
• Financial information: payment method details including mobile banking identifiers (bKash, Nagad, Rocket, Upay), transaction histories, deposit amounts, and withdrawal records in BDT.
• Technical data: IP address, device type, browser type, operating system, session duration, pages visited, and other usage analytics collected automatically via cookies and server logs.
• Communications: records of messages sent to our customer support team, live chat transcripts, and email correspondence relating to your account or disputes.

We collect only the minimum data required to deliver a safe, fair, and compliant gaming experience. We do not collect data about your religion, ethnicity, or political views.

2. How We Use Your Information

The personal data we collect is used exclusively to operate, improve, and secure the 18aa platform. Specific purposes include:

• Account management: creating and maintaining your 18aa player account, verifying your identity under KYC requirements, and processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment partners.
• Service delivery: providing access to cricket betting, live casino, slots, crash games, and all other gaming products available on 18aa; personalising your experience based on your activity history.
• Fraud prevention and security: monitoring transactions and account activity for signs of fraud, money laundering, underage gambling, or other prohibited behaviours; taking action where violations are detected.
• Customer support: responding to your enquiries, resolving disputes, and sending important transactional notifications (such as deposit confirmations and security alerts).
• Platform improvement: analysing aggregated, anonymised usage data to improve game performance, website speed, and overall user experience for players across Bangladesh.

3. Payment Data and Bangladesh Payment Methods

18aa supports deposits and withdrawals in Bangladeshi Taka (BDT) through major mobile financial services including bKash, Nagad, Rocket, and Upay, as well as select bank transfer options. When you conduct a financial transaction, we collect and process the relevant payment identifiers (such as your registered mobile number for bKash or Nagad) to complete the transaction and maintain accurate financial records.

We do not store your full mobile banking PIN, password, or Visa/Mastercard CVV number on our servers. Payment transactions are routed through secure payment gateways. All financial data at rest is encrypted using industry-accepted standards. In the event of a suspected fraudulent transaction, we may temporarily restrict account activity and request additional verification to protect your funds.

4. Cookies and Tracking Technologies

18aa uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files placed on your device that help us remember your preferences, maintain your session after login, and understand how different areas of the website are used. We use both session cookies (deleted when you close your browser) and persistent cookies (retained for a set period to remember preferences).

You may configure your browser settings to refuse all or some cookies, or to alert you when cookies are being set. However, if you disable essential cookies, certain features of the 18aa platform — including account login and payment processing — may not function correctly. We do not use cookies to build advertising profiles for third-party marketers.

5. Sharing of Information with Third Parties

18aa does not sell, trade, or rent your personal data to outside parties. We may share limited data with trusted service providers who assist us in operating the platform, provided those parties agree to keep the information confidential. Circumstances under which limited sharing may occur include:

• Payment processors: to execute your deposits and withdrawals securely, relevant transaction data is passed to our payment gateway partners.
• Identity verification and fraud prevention providers: to confirm your age (21+ requirement) and identity for KYC compliance, your identity documents may be reviewed by a licensed verification partner.
• Legal and regulatory authorities: if required by applicable law, court order, or regulatory directive, we may disclose personal data to competent authorities. We will notify you of such a request to the extent permitted by law.

All third-party service providers who handle your data on our behalf are contractually obligated to implement appropriate technical and organisational security measures and to process your data only for the purposes specified by 18aa.

6. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter, to comply with our legal obligations, resolve disputes, and enforce our agreements. Inactive accounts may have their data archived after a period of inactivity, following a notification to the registered email or phone number on file.

Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of five years from the date of the transaction, in accordance with standard financial record-keeping requirements. Once the retention period has elapsed and there is no legal reason to retain the data further, it is securely deleted or anonymised.

7. Your Rights Over Your Personal Data

As a user of the 18aa platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at the email address listed at the bottom of this page.

• Right of access: you may request a copy of all personal data we hold on your account, free of charge, within a reasonable time frame.
• Right of rectification: if any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or supplement it promptly.
• Right of erasure: in certain circumstances, you may request that we delete your personal data. Note that we may be required to retain some data to comply with legal obligations.
• Right to object: you have the right to object to the processing of your personal data for direct marketing, profiling, or other non-essential purposes.
• Right to data portability: you may request that we provide your personal data in a commonly used, machine-readable format so that it can be transferred to another service provider.

We will respond to all valid data rights requests within 30 days of receipt. If we are unable to fulfil your request in full, we will explain the reasons in writing.

8. Security of Your Data

18aa takes the security of your personal data seriously. We implement a combination of technical and administrative safeguards designed to prevent unauthorised access, disclosure, alteration, or destruction of personal data. Our security measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive account and financial data, role-based access controls limiting staff access to only the data necessary for their duties, and regular internal security reviews.

While we employ robust security practices, no system is completely immune to security threats. In the unlikely event of a data breach that affects your personal data, we will notify affected users and take prompt remedial action. You can also help protect your account by choosing a strong, unique password and never sharing your login credentials with others.

9. Minors and Age Restriction

The 18aa platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification checks, and accounts found to belong to underage individuals will be immediately suspended and any funds held in such accounts returned in accordance with our policies. If you believe a minor has created an account on 18aa, please contact our support team immediately at [email protected].

10. Changes to This Privacy Policy

18aa reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or via an in-platform notification. Your continued use of the 18aa platform after any such changes constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you disagree with any changes to this policy, you should discontinue use of the 18aa platform and contact our support team to close your account.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 18aa handles your personal data, please do not hesitate to reach out to our dedicated privacy support team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them fully within 30 days.

You can reach us by email at: [email protected]