12q Privacy Policy — Your Data, Your Rights

12q takes your privacy seriously. This Privacy Policy explains what information we collect when you use the 12q website, mobile app, or any of our services — and how we use it, who we share it with, and how we keep it secure.

By using 12q's services, you agree to this Privacy Policy. We may update this policy at any time, and you will be notified by email of any significant changes. This policy has been prepared in compliance with applicable laws in Bangladesh and international data protection standards.

Certain information is collected when you register and use the 12q platform. This collection is fully transparent and is carried out solely to improve the quality of your experience.

Information you provide directly:

• Name, date of birth, and national ID number (for KYC verification)
• Email address & mobile number
• Current address (for address verification)
• Payment method details (Mobile Banking/Nagad account number)
• Security Questions & Answers

Automatically Collected Data:

• IP address & device type
• Browser type and operating system
• Gaming activity and history on the platform
• Transaction history & amounts
• Login time, session duration & page visits

Collected data is used solely for specified purposes. 12q never uses your information for unrelated or unauthorized activities. Below is a detailed breakdown of how your data is used:

12q never sells your data to third parties for commercial purposes. However, certain information may be shared in the following limited circumstances:

• Payment Processor: Necessary information is shared with payment services such as Mobile Banking and Nagad to process transactions
• Game Software Provider: Limited data may be shared with licensed game providers for operational purposes
• Legal Authorities: Data may be disclosed in response to lawful requests from government or regulatory authorities under applicable laws of Bangladesh
• Audit & Security Partners: Limited data may be shared with independent third-party auditors to verify platform security and fairness

12q uses industry-leading technology to protect your data. We hold ourselves to a zero-tolerance standard for vulnerabilities, which is why we conduct regular security audits and updates.

• All data transmissions are secured with 256-bit SSL/TLS encryption
• Stored data is encrypted using AES-256 encryption
• Option to enable two-factor authentication (2FA)
• Automatic alerts triggered when unusual account activity is detected
• Regular third-party security audits and penetration testing
• Strict data access controls and training in place for all staff
• 24/7 physical and cyber security monitoring at our data centers

12q does not retain your information indefinitely. Specific retention periods are defined for each type of data, based on legal obligations and operational requirements:

• Account information: Up to 5 years after account closure (legal requirement)
• Transaction records: 7 years (in compliance with financial regulations)
• KYC documents: 5 years after account closure
• Gaming History: 3 years or until account closure
• Cookie & Session Data: Up to 1 year or until the session ends
• Marketing Preferences: Updated immediately after opt-out

Once the retention period expires, data is securely and permanently deleted or anonymized.

12q believes every user should have full control over their own data. Your key rights are outlined below:

12q uses several types of cookies on its website. Cookies are small text files stored in your browser that help enhance your experience. 12q uses the following types of cookies:

• Essential Cookies: Login sessions, security tokens, and core functionality — the platform cannot operate properly without these
• Preference Cookies: To remember your language, theme, and other personal preferences
• Analytics Cookies: To understand website traffic and usage patterns (anonymized)
• Security Cookies: Device fingerprinting to detect and prevent fraud

You can manage cookies through your browser settings. Note that disabling essential cookies may prevent certain features of the platform from working correctly.

12q's services are intended solely for individuals aged 18 and above. We do not collect or process data from minors under any circumstances. If we become aware that a minor has created an account on 12q, that account will be closed immediately and all associated data will be deleted.

If a parent or guardian believes their child has registered on 12q, please contact us immediately at [email protected].

12q may update this Privacy Policy from time to time. Changes may be driven by new services, legal developments, or security improvements. For any significant changes:

• A summary of changes will be sent to your registered email
• The update date will be clearly stated at the top of this page
• Re-consent may be required at login when significant changes are made
• We will endeavor to provide at least 30 days' notice before any changes take effect

For any privacy-related questions, complaints, or requests, please reach out to our dedicated Privacy Team. We are committed to responding transparently and promptly.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant regulatory authority.