Data Protection Policy

18aa's Privacy Policy

Your personal information is completely safe with us — this policy clearly explains how it is collected, used, and kept secure.

Last updated: January 2026 — This privacy policy may be revised from time to time.

This privacy policy ("Policy") is issued on behalf of the 18aa platform ("we", "us", or "18aa"). It describes how personal information of players in Bangladesh ("you" or "user") is collected, stored, processed, and kept secure. By using our platform, you are considered to have given your consent to the terms of this policy.

18aa believes that your privacy is a fundamental right. We never sell your information to third parties and use it only for necessary purposes.

1. What types of information are collected

When you create an account on 18aa, make a transaction, or use our services, we may collect the following types of information:

1.1 Identity information

  • Full name and date of birth
  • National ID or passport number (for identity verification)
  • Current address
  • Email address and mobile number

1.2 Financial information

  • bKash, Nagad, Rocket, or Upay account numbers (for processing transactions)
  • Deposit and withdrawal history
  • Balance and bonus information

1.3 Technical information

  • IP address and browser type
  • Device information (model, operating system)
  • Cookies and session data
  • Login time and location information

1.4 Activity and behavioral information

  • Gaming history and preference information
  • Betting patterns and session duration
  • Records of communication with customer support

2. Purpose of data collection

We use your information only for specific and legitimate purposes. Those purposes are set out in detail below:

2.1 Account management

Information is used to create, verify, and manage your account. This includes login security, identity verification, and account recovery.

2.2 Processing financial transactions

Financial information is used to complete deposits and withdrawals through bKash, Nagad, Rocket, and Upay. As the minimum deposit and withdrawal amount is ৳500, every transaction is properly recorded.

2.3 Security and fraud prevention

Technical information is analysed to keep your account secure and to detect suspicious activity. All data transmissions are secured using SSL encryption.

2.4 Customer service

Information is used to resolve your issues through 24/7 live chat and email support. Communication history is retained to provide accurate solutions to your problems.

2.5 Ensuring responsible gaming

Information is used to monitor your gaming behaviour to ensure responsible gaming and, where necessary, to set limits or offer assistance.

2.6 Service improvement

User behavioural data is analysed to continuously improve 18aa's services. However, this analysis is always conducted with personal identity kept anonymous.


3. Data sharing and third parties

18aa never sells your personal information to third parties. However, in certain circumstances a limited amount of information may be shared:

3.1 Payment service providers

Information required to complete transactions through bKash, Nagad, Rocket, and Upay is shared with those providers solely for the purpose of that transaction. They use this information in accordance with their own privacy policies.

3.2 Technology service partners

We have various technology partners for operating games (such as Pragmatic Play, Evolution Gaming, JILI, Spribe, and others). Only the minimum information necessary to provide the service is shared with these partners.

3.3 Legal obligations

Information may be provided in response to a lawful order from a competent authority under applicable law in Bangladesh. In such cases we always endeavour to protect the user's interests within the limits of the law.

3.4 Business succession

In the event of a company merger, acquisition, or asset transfer, your information may be transferred to the new owner. We will notify you before any such change.


4. Cookies and tracking technologies

The 18aa website uses cookies and similar technologies to improve your browsing experience.

4.1 Essential cookies

These cookies are essential for maintaining login sessions and ensuring the basic functionality of the platform. They cannot be disabled.

4.2 Functionality cookies

These cookies are used to remember your language preferences, game settings, and other personalised preferences.

4.3 Analytics cookies

These cookies are used to collect statistical data in order to understand which parts of the platform are used most. This data is always analysed in aggregate and is not personally identifiable.

You can control cookies by changing your browser settings, though this may limit some features of the platform.


Data 5. Security measures

18aa applies the highest standard of security measures to protect your information. Our security framework consists of the following elements:

  • SSL encryption: All data transfers are secured by the highest standard SSL encryption technology.
  • Data encryption: Stored information is kept in encrypted form, protected from unauthorised access.
  • Access control: Only authorised staff can view your information, and only to the extent necessary.
  • Regular security audits: Our systems undergo regular security testing.
  • Two-factor authentication: An option is provided to add an extra layer of security to your account.
  • Suspicious activity monitoring: Unusual activity is detected and prevented through automated systems.

Although we strive to ensure the highest level of security, no method of transmission over the internet is 100% secure. We therefore recommend that you keep your password confidential and change it regularly.


6. Data retention period

18aa retains your information only for as long as necessary:

  • All information is retained while the account is active.
  • Even after an account is closed, certain information may be retained for a defined period to meet legal obligations.
  • Records of financial transactions are retained for the period required under applicable law in Bangladesh.
  • After the defined period has elapsed, information is securely deleted or anonymised.

Your 7. Rights

You have the following rights in your relationship with 18aa:

7.1 Right to information

You have the right to know what information we collect about you and how we use it. Contact us to request a copy of your information.

7.2 Right to rectification

If there is any inaccuracy in your information, you have the right to request a correction. This can generally be done through your account settings or via customer support.

7.3 Right to erasure

In certain circumstances you have the right to request that your information be deleted. However, due to legal obligations, some information may need to be retained for a specified period.

7.4 Right to object to processing

You have the right to object to marketing communications or certain types of data processing. To unsubscribe from marketing emails or messages, follow the instructions provided in each message.

7.5 Right to portability

You have the right to receive your information in a structured, common format so that you can transfer it to another service.

To exercise these rights, contact our support team. We will respond to your request as quickly as possible within the limits of applicable law.


8. Privacy of minors

18aa is a platform for users aged 21 and above only. We do not knowingly collect information from any minor. If we believe a user is under 21, we will immediately suspend their account and begin the process of deleting the associated information.

If parents believe their child has created an account by providing false information, please contact us immediately.


9. Policy changes and updates

18aa may revise this privacy policy from time to time. In the event of any significant change:

  • The "Last updated" date at the top of the page will be changed.
  • For important changes, a notification will be sent to your registered email address.
  • Continuing to use the platform after an update constitutes your consent to the new policy.

We recommend that you review this policy regularly.


10. International data transfers

Our servers and those of our technology partners may be located in various countries. Even when data is transferred internationally, we ensure that it is processed in accordance with the protection standards described in this policy.

All international data transfers are carried out under SSL encryption and the necessary contractual protections.

Privacy Contact

If you have any questions about this privacy policy, any requests regarding your information, or any concerns, our support team is always ready to help you.

Contact us by email:

24/7 Bengali & English support available.