21taka Privacy Policy

Introduction

21taka ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at https://21taka.club. As an operator that processes personal data in connection with the provision of gaming and betting services to players in Bangladesh, we recognise and take seriously our obligations to protect the personal data of all individuals who interact with our platform.

This Privacy Policy describes in clear and precise terms the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, the security measures we apply to protect it, and the rights available to you as a data subject. We have drafted this policy in plain English so that it is readily understandable without legal expertise.

This policy applies to all personal data collected through the 21taka website, mobile-optimised interface, customer support channels, and any other touchpoint through which you interact with 21taka. It does not apply to third-party websites or services that may be accessible via links on the platform — those services operate under their own privacy policies.

Data Controller

For the purposes of applicable data protection law, 21taka is the data controller in respect of the personal data collected and processed through the platform. As data controller, 21taka determines the purposes and means of processing personal data and is responsible for ensuring that processing activities are carried out lawfully, fairly, and transparently.

All data protection enquiries, including requests to exercise your data subject rights, should be directed to the 21taka data protection contact at [email protected]. We aim to acknowledge all enquiries within two business days and to provide a substantive response within 30 calendar days of receipt.

Personal Data We Collect

21taka collects personal data through several distinct channels. The specific data collected depends on how you interact with the platform:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is necessary for responsible gaming purposes, or biometric identifiers. Where sensitive data is voluntarily disclosed by a player (for example, in a responsible gaming self-assessment), it is treated with the highest level of confidentiality and processed only for the specific welfare purpose for which it was provided.

How We Use Your Personal Data

21taka uses collected personal data for the following purposes:

• Account Management: Creating, maintaining, and managing your player account, including authentication, password recovery, and account security alerts.
• Payment Processing: Verifying deposit sources, processing withdrawals to your nominated payment method (bKash, Nagad, Rocket, Upay, or bank transfer), and maintaining accurate financial records in BDT.
• Identity Verification (KYC): Confirming your identity and age prior to processing your first withdrawal, and conducting ongoing due diligence as required by our anti-money-laundering obligations.
• Game and Betting Operations: Delivering the games, sportsbook markets, live cricket betting, and crash games you access on the platform, including recording bet history and settling wagers correctly.
• Customer Support: Responding to your enquiries, resolving disputes, investigating complaints, and maintaining records of our correspondence with you.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, money laundering, and other prohibited activities described in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problem gambling, administering player-requested deposit limits and self-exclusion arrangements, and contacting players proactively where welfare concerns arise.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform functionality, game offerings, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of such communications. You may withdraw consent at any time via your Account settings.
• Legal and Regulatory Compliance: Fulfilling obligations under applicable law, responding to lawful requests from regulatory authorities or law enforcement agencies, and maintaining records for audit purposes.

Legal Bases for Processing

Every processing activity carried out by 21taka rests on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering legislation, age verification requirements, tax reporting obligations, and lawful orders from regulatory or judicial authorities.
• Legitimate Interests: Processing carried out for 21taka's legitimate business interests, including fraud prevention, platform security, abuse detection, and aggregated analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — most notably in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third-Party Disclosure

21taka does not sell, rent, or otherwise trade your personal data. We may share personal data with third parties only in the following defined circumstances:

• Payment Processors: Financial data necessary to execute deposit and withdrawal transactions is shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). These providers receive only the minimum data required to process the specific transaction and are contractually bound to handle it securely.
• Identity Verification Partners: KYC and anti-money-laundering verification may involve sharing identity documents with third-party verification service providers who are bound by strict data processing agreements and are prohibited from using the data for any purpose other than verification.
• Game Content Providers: When you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi), limited technical data (such as a pseudonymous player identifier and session token) is shared with that provider to enable game delivery and result settlement. These providers do not receive your full identity data.
• Regulatory and Law Enforcement Authorities: Where required by applicable law or pursuant to a lawful order, 21taka will disclose personal data to competent authorities. We will notify the affected player of such disclosure where legally permissible to do so.
• Professional Advisers: In the context of legal proceedings, audits, or corporate restructuring, data may be shared with legal counsel, auditors, or financial advisers who are subject to professional confidentiality obligations.

Cookies & Tracking Technologies

21taka uses cookies and similar tracking technologies on the platform to ensure correct functionality, to maintain your login session, and to gather aggregated analytics that help us improve the user experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function correctly and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing identifiers. No consent is required for these cookies.
• Functional Cookies: These remember your preferences, such as your preferred language, last-visited game category, and responsible gaming settings, so that you do not need to re-enter them on each visit.
• Analytics Cookies: These collect aggregated, anonymised information about how players navigate the platform — for example, which game categories are most visited or where users drop off during registration. This data is used solely to improve platform design and performance.
• Marketing Cookies: These may be used to deliver relevant promotional content to players who have consented to receiving marketing communications. Marketing cookies are not placed without your prior consent.

You may control non-essential cookies through your browser settings. Please note that disabling functional cookies may affect certain platform features. Your cookie preferences can also be updated at any time via the platform's cookie settings panel.

Data Security

21taka implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest, including passwords (hashed with a strong cryptographic algorithm) and financial identifiers.
• Role-based access controls ensuring that personal data is accessible only to those staff members who require it to perform their specific job functions.
• Regular security testing, including vulnerability assessments and penetration testing of platform infrastructure.
• Intrusion detection systems and real-time monitoring for suspicious activity patterns.
• Secure, geographically redundant data storage with regular encrypted backups.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 21taka will notify affected players without undue delay and will take immediate steps to contain the breach, assess its impact, and implement remediation measures.

Data Retention

21taka retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The principal retention periods applicable to the data categories described in Section 3 are as follows:

• Account and Identity Data: Retained for the duration of the active account relationship plus a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of seven years following each transaction, in accordance with standard financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Correspondence: Retained for three years from the date of the final communication in each support thread.
• Technical and Usage Data: Retained in identified form for up to 24 months, after which it is anonymised and may be retained indefinitely in aggregated form for analytics purposes.
• Marketing Consent Records: Retained until you withdraw consent, and for a further 12 months thereafter as evidence of the consent transaction.

Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 21taka. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of the right you wish to exercise. We will respond within 30 calendar days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Minor details such as contact information can be updated directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your data while the accuracy of the data is being verified or a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Upon receipt of an objection, 21taka will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Children's Privacy

The 21taka platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under 18. If we become aware — through our age verification processes or any other means — that personal data has been collected from an individual who is under 18, we will take immediate steps to delete that data and to close the associated account.

Parents and guardians who believe that a minor may have registered on the 21taka platform are urged to contact us immediately at [email protected]. We will treat all such reports as a matter of urgency and will investigate and resolve them as swiftly as possible. We also recommend the use of parental control software to prevent minors from accessing online gambling platforms.

Third-Party Links

The 21taka platform may contain references or informational links to third-party websites or services (for example, payment provider information pages). This Privacy Policy applies exclusively to the 21taka platform and does not extend to any third-party websites. If you navigate to a third-party website from a reference on our platform, that website's own privacy policy will govern the collection and use of your data.

21taka exercises no control over, and accepts no responsibility for, the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party service you access.

Updates to This Privacy Policy

21taka reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The revised policy will be published on this page with an updated effective date. Where an update is material — meaning it significantly changes how we collect or use your personal data — we will provide advance notice via the email address registered to your Account at least 14 days prior to the change taking effect.

Your continued use of the 21taka platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We recommend reviewing this page periodically to stay informed of how your personal data is being handled.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 21taka handles your personal data, please contact our data protection team using the details below. We are committed to addressing all enquiries transparently and promptly.

For additional legal information governing your use of the platform, please also review our Terms & Conditions and our Responsible Gaming policy.