Privacy Policy

1. Data We Collect

When you interact with the 23taka platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. This section sets out a complete and transparent account of each category of data we may hold about you, the circumstances in which it is collected, and the lawful basis on which we process it.

1.1 Identity and Contact Data

At the point of registration, 23taka collects your full legal name, date of birth, email address, and a mobile phone number registered in Bangladesh. This information is used to create and administer your account, to verify your identity in accordance with our Know Your Customer (KYC) obligations, and to contact you when necessary about account matters. Providing accurate identity data is a contractual requirement — accounts registered with false information are subject to closure under the 23taka Terms & Conditions.

1.2 Financial and Transaction Data

When you deposit or withdraw funds, 23taka records transaction amounts, timestamps, payment method identifiers (such as your bKash or Nagad mobile number, or a masked Visa or Mastercard number), and transaction reference numbers. This data is retained for financial record-keeping, fraud prevention, and to enable our support team to assist with any transaction queries. 23taka does not store full card numbers or mobile banking PINs — all payment processing is handled by your chosen payment provider under their own security protocols.

1.3 Gameplay and Betting Data

23taka maintains a complete record of all bets placed, games played, casino rounds completed, sports events wagered on, bet amounts, odds accepted, and game outcomes associated with your account. This data is used to settle bets correctly, calculate bonuses, detect and prevent prohibited conduct such as bonus abuse or arbitrage betting, and to fulfil our responsible gaming obligations — for instance, identifying patterns of play that may indicate problematic gambling behaviour.

1.4 Technical and Device Data

When you access the 23taka platform, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and session timestamps. This data is used to maintain the security and operational integrity of the platform, to diagnose technical faults, and for aggregate statistical analysis of how players access and use the platform.

1.5 Communications Data

If you contact the 23taka support team via email or live chat, we retain a record of that correspondence, including the content of messages exchanged and any attachments provided. This enables us to resolve queries accurately, maintain quality assurance, and refer back to previous interactions if a matter is escalated or revisited.

1.6 Data Collected from Third Parties

In certain circumstances, 23taka may receive personal data about you from third parties. This includes identity verification data returned by KYC document-checking services, fraud-risk signals from payment processors, and age-verification confirmations. Data received from third parties is handled under the same standards as data collected directly from you and is used only for the purposes described in this Privacy Policy.

Data Category	Examples	Lawful Basis
Identity & Contact	Full name, date of birth, email, phone number	Contractual necessity; legal obligation (KYC)
Financial & Transaction	Deposit/withdrawal amounts, payment method identifiers, transaction history	Contractual necessity; legal obligation (AML)
Gameplay & Betting	Bets placed, game rounds, outcomes, bonus usage	Contractual necessity; legitimate interests (fraud prevention)
Technical & Device	IP address, browser type, device type, session data	Legitimate interests (security, platform integrity)
Communications	Support emails, chat transcripts	Legitimate interests (dispute resolution, quality assurance)
Third-Party Sourced	KYC verification results, fraud-risk signals	Legal obligation; legitimate interests

2. How We Use Your Data

23taka processes your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. Each processing activity is grounded in one of the lawful bases set out in the table in Section 1 above.

2.1 Account Administration

Your identity and contact data is used to create, maintain, and secure your 23taka account. This includes sending account-confirmation emails, responding to account queries, processing password resets, and communicating important service notices — such as updates to these policies or planned platform maintenance that may affect your ability to access your account or funds.

2.2 Payment Processing and Financial Compliance

Transaction data is processed to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. It is also used to comply with anti-money laundering (AML) obligations, which require 23taka to monitor transaction patterns and, where thresholds are met, conduct enhanced due diligence on the source of funds deposited to the platform.

2.3 Bet Settlement and Game Delivery

Gameplay and betting data is processed in real time to settle sports bets correctly, determine casino game outcomes (in conjunction with certified RNG software from providers such as Pragmatic Play, NetEnt, and Microgaming), and apply bonus credits or promotional adjustments to your wallet in accordance with the relevant promotion's terms.

2.4 Responsible Gaming Monitoring

23taka uses gameplay and financial data to monitor for indicators of problematic gambling behaviour, in fulfilment of our responsible gaming commitments. If our systems or support team identify patterns that suggest a player may be experiencing difficulties — such as rapid escalation of deposit frequency or bet sizes, or extended uninterrupted play sessions — we may reach out proactively to offer responsible gaming resources. This processing is in the legitimate interests of player welfare and is a core part of our operating model.

2.5 Fraud and Security

Technical, identity, and financial data is used to detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multi-accounting, and other prohibited conduct as defined in the 23taka Terms & Conditions. This includes automated monitoring systems and manual review by our compliance team.

2.6 Platform Improvement and Analytics

Aggregated and anonymised technical and gameplay data may be used for internal analytics purposes — for example, to understand which game categories are most popular among players in Dhaka, Chittagong, Sylhet, and other regions of Bangladesh, to identify and resolve performance bottlenecks, and to inform decisions about new features or game content additions. At the point of use for analytics, data is anonymised such that individual players cannot be re-identified.

2.7 Marketing Communications

If you have opted in to receive promotional communications from 23taka at the time of registration or through your account settings, we may use your email address or phone number to notify you of relevant offers, seasonal promotions (such as those tied to BPL season, Eid, or Pohela Boishakh), and new game releases. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

3. Cookies & Tracking

The 23taka platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to gather aggregate usage statistics that help us improve the player experience. This section explains the types of cookies we use and how you can manage your cookie preferences.

3.1 What Are Cookies

Cookies are small text files that are placed on your device by the websites you visit. They are widely used to make websites work efficiently and to provide information to the site's operators. Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them manually.

3.2 Categories of Cookies Used by 23taka

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log in to your account, maintain your session while you navigate between pages, and complete financial transactions securely. Without these cookies, the platform cannot operate. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether players encounter error messages. This data is used exclusively to improve platform performance and is not linked to individual player identities.
• Functional Cookies: These cookies remember preferences you have set — such as your preferred language or display settings — so that the platform can deliver a more personalised experience during your visit.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, multi-accounting, and bot traffic. They form part of the platform's fraud-prevention infrastructure and contribute to the safety of all players on the 23taka platform.

3.3 Managing Your Cookie Preferences

You can control or delete cookies through your browser settings. Instructions for the most common browsers are available in the help documentation of each browser provider. Please note that disabling strictly necessary cookies will prevent the 23taka platform from functioning correctly and will prevent you from accessing your account or completing transactions. Disabling performance or functional cookies will not affect your ability to use the platform but may result in a less personalised experience.

4. Data Sharing & Disclosure

23taka does not sell your personal data to third parties. We do not share your personal data with advertising networks or data brokers. The only circumstances in which your personal data may be disclosed to a third party are those set out below, each of which is grounded in a lawful basis.

4.1 Service Providers and Data Processors

23taka engages a limited number of carefully selected third-party service providers who process personal data on our behalf as data processors. These include KYC identity verification services, payment gateway operators (who facilitate transactions via bKash, Nagad, Rocket, and card networks), IT infrastructure and cloud hosting providers, and customer support platform providers. All data processors engaged by 23taka are contractually bound to process personal data only on 23taka's instructions, to implement appropriate technical and organisational security measures, and not to use the data for their own purposes.

4.2 Game Providers

To deliver casino games and live dealer tables to your account, 23taka shares limited session-level data with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data typically consists of a session token or anonymised player identifier and is the minimum necessary for the game to function. Game providers are contractually prohibited from using this data for any purpose other than delivering the game session.

4.3 Legal and Regulatory Disclosure

23taka may disclose personal data where required to do so by applicable law, regulation, or a valid order from a competent authority. This includes disclosures required under anti-money laundering legislation, disclosures to law enforcement agencies investigating fraud or financial crime, and disclosures required in connection with legal proceedings. In all such cases, 23taka discloses only the minimum data required to comply with the relevant legal obligation.

4.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 23taka's business, personal data held by 23taka may be transferred to the acquiring entity as part of the transaction. In such circumstances, 23taka will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy, and will notify affected players of any material change to how their data is processed as a result of the transaction.

5. Data Retention

23taka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention principles apply to different categories of data held by 23taka.

5.1 Active Account Data

While your 23taka account remains active, we retain all identity, contact, financial, and gameplay data associated with your account. This data is necessary to administer your account, process transactions, settle bets, apply bonuses, and provide customer support.

5.2 Data Following Account Closure

Following closure of a 23taka account — whether at your request or by 23taka — we retain identity and financial transaction records for a minimum period of five years from the date of closure. This retention period reflects our obligations under applicable anti-money laundering and financial record-keeping frameworks. After this period, data is securely deleted or anonymised unless a longer retention period is required by law or is necessary to defend a pending legal claim.

5.3 Communications Data

Support communications, including email correspondence and chat transcripts, are retained for a period of two years from the date of the last interaction in the relevant support thread, unless the thread relates to a matter that remains unresolved or under investigation, in which case it is retained until the matter is fully resolved.

5.4 Technical and Log Data

Server logs and technical access data are retained for a period of up to 12 months from the date of creation, after which they are automatically purged or anonymised. Anonymised aggregate data derived from technical logs may be retained indefinitely for statistical purposes.

6. Your Privacy Rights

As a 23taka player, you have a number of rights in relation to the personal data we hold about you. 23taka is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data 23taka holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared. 23taka will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any personal data held by 23taka about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may update certain data directly through your account settings; other corrections should be submitted to the support team.
• Right to Erasure: You may request that 23taka delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other lawful basis for continued processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to our legal obligations to retain certain data under applicable financial and AML regulations, which take precedence over erasure requests to the extent required by law.
• Right to Restrict Processing: You have the right to request that 23taka restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or while an objection to processing is being assessed.
• Right to Object: Where 23taka processes your personal data on the basis of legitimate interests, you have the right to object to that processing. 23taka will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that 23taka provide your personal data in a structured, commonly used, machine-readable format, or transfer it directly to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based solely on your consent — such as the receipt of marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

7. Data Security Measures

23taka takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

7.1 Encryption

All data transmitted between your device and the 23taka platform is protected by Transport Layer Security (TLS) encryption, commonly indicated by the HTTPS prefix in your browser's address bar. Data stored on 23taka's servers is encrypted at rest using industry-standard encryption protocols. Payment data in transit between 23taka and payment processors such as bKash, Nagad, and Visa is encrypted end-to-end.

7.2 Access Controls

Access to personal data held by 23taka is restricted on a strict need-to-know basis. Employees and contractors who require access to personal data to perform their role are granted the minimum level of access necessary. All staff with access to personal data undergo privacy and security training as part of their onboarding and on a regular ongoing basis. Access rights are reviewed and revoked promptly when an employee or contractor leaves the organisation or changes role.

7.3 Monitoring and Incident Response

23taka operates continuous monitoring of its platform infrastructure for security anomalies, intrusion attempts, and suspicious activity patterns. In the event of a data security incident that affects your personal data, 23taka will take prompt steps to contain the incident, assess the scope of any exposure, and notify affected players and relevant authorities as required by applicable law.

7.4 Your Role in Security

The security of your 23taka account also depends on the steps you take to protect your own credentials. You should use a strong, unique password for your 23taka account, never share your login details with any third party, and contact [email protected] immediately if you believe your account has been accessed without your authorisation. 23taka will never ask you for your password via email, SMS, or live chat.

8. Policy Updates & Contact

23taka reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our operational practices, or the services we offer. When material changes are made, we will notify registered players by email to the address registered to their account and by displaying a prominent notice on the platform for a reasonable period following the update. The effective date at the top of this Privacy Policy will be updated to reflect the date on which the most recent revision came into force.

Your continued use of the 23taka platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this Privacy Policy, you should cease using the platform and contact [email protected] to request account closure. Any data collected prior to the effective date of the revised policy will continue to be handled under the terms that applied at the time of collection, except to the extent that the revised terms impose a higher standard of protection.

8.1 How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how 23taka handles your personal data, please contact the 23taka support team using the details below. All privacy-related enquiries are handled with strict confidentiality and will receive a substantive response within 30 days of receipt.

This Privacy Policy is written in English. In the event of any ambiguity arising from a translation into any other language, the English version shall prevail. This policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the contractual framework between you and 23taka.