Legal
At 18aa, your privacy matters. This Privacy Policy explains exactly what personal data we collect when you use the 18aa platform, why we collect it, how we use it, and what rights you have over your own information. We keep things straightforward — no legal jargon, no hidden practices.
Our Privacy Commitments
Data Protection
Privacy at 18aa isn't just a policy document — it's built into how the platform works. Here's what that looks like in practice.
Every connection between your device and 18aa is protected by industry-standard SSL encryption. Your login credentials, payment details, and personal information are never transmitted in plain text. What you send to 18aa stays between you and 18aa.
Personal data stored by 18aa is held on secured servers with access controls, encryption at rest, and regular security audits. Payment information is never stored in full on 18aa servers — only tokenised references used for transaction matching.
18aa does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to operate your account, process payments, and comply with legal obligations — nothing else.
18aa only collects the personal data that is genuinely necessary to operate the platform and comply with legal requirements. We don't collect data speculatively or build profiles beyond what's needed to provide you with a safe and functional gaming experience.
Where 18aa shares data with third parties — such as payment processors or identity verification providers — it is strictly limited to what those providers need to perform their specific function. All third-party providers are contractually bound to handle your data securely.
You have the right to access, correct, or delete your personal data at any time. You can also request a copy of all data 18aa holds about you. These rights are always available — no waiting periods, no complicated processes. Just contact support.
This Privacy Policy applies to the 18aa online casino platform, accessible at 18aa.top. When this policy refers to "18aa", "we", "us", or "our", it means the operator of the 18aa platform and all associated services.
18aa is an online casino and gaming platform built specifically for players in Bangladesh. We offer a range of casino games including slots, table games, and card games, with payment support for bKash, Nagad, and Rocket. This Privacy Policy governs how we handle the personal data of all registered players and visitors to the 18aa platform.
If you have any questions about this Privacy Policy or about how 18aa handles your personal data, please contact our support team at [email protected] before using the platform.
18aa collects personal data in two ways: information you provide directly when registering and using the platform, and information collected automatically through your use of the platform.
Information you provide directly:
Information collected automatically:
| Data Type | Purpose | Retention |
|---|---|---|
| Registration details | Account creation and management | Duration of account + 5 years |
| Identity documents | KYC / AML compliance | 5 years after account closure |
| Payment records | Transaction processing and fraud prevention | 5 years after transaction |
| Game history | Dispute resolution and responsible gaming | 3 years after last activity |
| Support communications | Customer service and complaint handling | 3 years after resolution |
| Device / IP data | Security and fraud detection | 12 months |
18aa uses your personal data only for the purposes described in this policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The main ways we use your personal data are:
Note: 18aa does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If you have concerns about any decision made regarding your account, you can request a manual review by contacting support.
18aa processes your personal data on the following legal grounds:
18aa does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:
All third-party service providers who receive your personal data are contractually required to handle it securely, use it only for the specified purpose, and comply with applicable data protection standards.
18aa uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. Cookies are small text files stored on your device when you visit 18aa.
The types of cookies used by 18aa include:
You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 18aa, but some features may not work as intended. Note that essential cookies cannot be disabled as they are required for the platform to operate.
Cookie Tip: Most browsers allow you to view, manage, and delete cookies through the browser's settings or privacy menu. Clearing cookies will log you out of your 18aa session, so make sure you have your login details handy before doing so.
18aa retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The specific retention periods for each data type are set out in the table in Section 2 of this policy.
When your account is closed — whether by you or by 18aa — your personal data is not immediately deleted. Certain data must be retained for a period after account closure to comply with anti-money-laundering regulations, resolve any outstanding disputes, and respond to legal requests. After the applicable retention period has expired, your data is securely deleted or anonymised.
If you request deletion of your personal data before the end of the applicable retention period, 18aa will delete all data that is not subject to a legal retention obligation and will restrict processing of any data that must be retained.
18aa takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:
While 18aa takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect that your 18aa account has been compromised, please contact support immediately and change your password.
As a player at 18aa, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting the 18aa support team.
Request a copy of all personal data 18aa holds about you. We will provide this within 30 days of your request.
Request correction of any inaccurate or incomplete personal data held by 18aa. We will update your records promptly.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that 18aa restricts the processing of your data in certain circumstances, such as while a dispute is being resolved.
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
Object to the processing of your personal data where 18aa relies on legitimate interests as the legal basis, including for analytics purposes.
How to exercise your rights: Contact the 18aa support team via live chat or email at [email protected]. We will respond to all data rights requests within 30 days. In complex cases, this may be extended by a further 30 days, and we will notify you if that is the case.
The 18aa platform is strictly for adults aged 18 and over. 18aa does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account at 18aa, please contact us immediately at [email protected].
Upon receiving a verified report of a minor's account, 18aa will close the account immediately, delete all associated personal data, and return any deposited funds to the payment method used. 18aa uses age verification checks during registration and at the withdrawal stage to minimise the risk of underage access.
18aa may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.
For significant changes that affect how we use your personal data, 18aa will notify registered players via their registered email address or through an in-platform notification before the changes take effect. Your continued use of the 18aa platform after any update to this policy constitutes your acceptance of the revised terms.
We recommend checking this page periodically to stay informed about how 18aa protects your privacy. If you disagree with any changes to this policy, you have the right to close your account and request deletion of your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or to how 18aa handles your personal data, please get in touch with our support team. We take all privacy enquiries seriously and will respond as quickly as possible.
You can reach us via live chat on the 18aa platform, available 24 hours a day, 7 days a week. Alternatively, you can email us at [email protected]. We aim to respond to all email enquiries within 24 hours.
Support is available 24/7. Whether you want to access your data, correct an error, or simply understand how your information is used — our team is here to help. You don't need to navigate this alone.