Your Privacy Matters at 13bet — Here Is How We Protect It
This Privacy Policy explains what personal data 13bet collects from players across Bangladesh, how that data is used, stored, and protected, and what rights you hold over your own information. We are committed to handling your data with transparency, care, and the highest standards of security.
How 13bet Safeguards Your Personal Information
At 13bet we believe that every player in Bangladesh deserves to know exactly how their personal information is being handled. The six principles below summarise our commitment to responsible data practice. Each is explained in full in the detailed sections that follow.
All data transmitted between your device and the 13bet platform — including your login credentials, payment details, and personal information — is protected by industry-standard SSL/TLS encryption. No data travels in plain text across any connection to our servers.
13bet does not sell, rent, or lease your personal data to any third-party organisation for marketing, advertising, or commercial profiling purposes. Your information is used exclusively to provide, improve, and secure the 13bet platform services you have signed up to use.
Sensitive player data — including bKash wallet numbers, Nagad account references, bank account details, and identity document scans — is stored in encrypted form within 13bet's secure database environment. Access is strictly limited to authorised personnel on a need-to-know basis.
Registered 13bet players hold meaningful rights over their personal data. You may request access to the data we hold, ask for corrections, request deletion subject to legal retention requirements, or withdraw consent for marketing communications at any time through your account settings after completing the 13bet Login process.
13bet collects only the personal data that is strictly necessary for the lawful purposes described in this policy — namely account creation, identity verification, payment processing, fraud prevention, and responsible gaming enforcement. We do not collect data beyond what is required to operate these functions safely and fairly.
We use cookies and similar technologies only for session management, platform performance, and aggregate analytics. We do not deploy third-party advertising cookies or cross-site tracking pixels. A full breakdown of the cookies used on 13bet — including their names, purpose, and retention duration — is provided in the Cookies section of this policy.
Data We Collect
When you interact with the 13bet platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. The following table provides a comprehensive overview of the data categories, specific data points within each category, and the reason for collection.
| Data Category | Specific Data Points Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, Bangladesh NID number or passport number, photograph of identity document | Account registration, KYC age and identity verification, fraud prevention |
| Contact Data | Mobile phone number (Bangladesh), email address, residential city or district within Bangladesh | Account communication, OTP security, withdrawal notifications, responsible gaming alerts |
| Financial Data | bKash wallet number, Nagad wallet number, Rocket or Upay account reference, bank name and account number (if applicable), deposit and withdrawal transaction history | Payment processing, withdrawal verification, anti-money laundering (AML) compliance |
| Account Activity Data | Login timestamps, session duration, bet history (event, stake, odds, outcome), game session records, bonus claims, win/loss records | Platform operation, responsible gaming monitoring, dispute resolution, regulatory compliance |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6) | Security, fraud detection, multi-account detection, platform optimisation |
| Communication Data | Live chat transcripts, email correspondence with support, submitted feedback forms | Support resolution, quality assurance, dispute record-keeping |
| Preference Data | Chosen deposit limits, self-exclusion status, marketing opt-in or opt-out status, notification preferences | Responsible gaming enforcement, personalisation of communications |
We do not collect special-category sensitive data such as health information, racial or ethnic origin, religious beliefs, or political opinions unless specifically required by law in connection with a responsible gaming intervention or a formal legal request. In such cases, collection is strictly limited to the minimum data needed to fulfil the legal or duty-of-care obligation.
Data collected from minors is expressly not permitted. If 13bet discovers that a player under the age of 18 has registered an account and submitted personal data, that data will be securely deleted as promptly as possible following account closure, subject only to any mandatory legal retention obligations under applicable anti-money laundering law.
You are responsible for ensuring that all personal data you provide to 13bet is accurate, current, and your own. Submitting another person's identity documents or payment details in connection with your 13bet account is a serious violation of these policies and of applicable law. 18+
How We Use Your Data
13bet processes your personal data only for lawful purposes, each of which has a clearly identified legal basis. We do not process your data in ways that are incompatible with the purposes described at the time of collection. The following list sets out each processing purpose together with its legal basis.
- Account Creation and Management: We use your identity and contact data to create and maintain your 13bet player account, verify your mobile number via OTP, and ensure your account settings reflect your stated preferences. Legal basis: performance of a contract.
- Payment Processing: We use your financial data to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. This includes sharing the minimum necessary payment reference data with your chosen payment provider to complete the transaction. Legal basis: performance of a contract.
- Identity Verification (KYC): We use your identity data and document scans to confirm that you are who you claim to be, that you are at least 18 years of age, and that your payment methods are registered in your own name. Legal basis: legal obligation (anti-money laundering and age verification requirements).
- Fraud Prevention and Security: We use technical data (IP address, device fingerprint) and account activity data to detect and prevent unauthorised access, multi-account creation, bonus abuse, and financial fraud. Legal basis: legitimate interests of 13bet and protection of other players.
- Responsible Gaming: We monitor your betting patterns, session duration, and account activity to identify signs of problem gambling. Where indicators suggest a player may be at risk, 13bet may reach out via SMS or email to offer support resources. Legal basis: legal obligation and legitimate interests (duty of care).
- Platform Improvement: We use aggregated, anonymised technical and activity data to analyse how players use the 13bet platform, identify areas for improvement, and test new features. No individual player is identified in this analysis. Legal basis: legitimate interests.
- Marketing Communications: With your explicit consent (opt-in), we may send you promotional messages about 13bet bonuses, seasonal offers such as BPL cricket promotions, Eid reload bonuses, and T20 World Cup free bet events. You may withdraw consent at any time via your account notification settings. Legal basis: consent.
- Legal and Regulatory Compliance: We may process and retain your data to comply with applicable financial reporting obligations, respond to lawful requests from competent authorities, and defend 13bet's legal rights in the event of a dispute. Legal basis: legal obligation.
13bet does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review. Where automated systems flag an account for investigation (e.g., fraud detection or multi-account detection), a trained member of the 13bet compliance team reviews the flag before any account action is taken.
Data Sharing & Third Parties
13bet does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. However, to operate the platform effectively and comply with legal obligations, we do share limited categories of personal data with the carefully selected partners and authorities described below.
Payment Processors: To complete deposit and withdrawal transactions, 13bet shares the minimum necessary payment reference data — such as your mobile wallet number, transaction amount in BDT, and transaction reference — with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). These providers process your data under their own privacy policies, which govern their data handling practices. 13bet does not share your NID number, date of birth, or identity document with payment processors unless specifically required to resolve a disputed transaction.
Game Technology Providers: The casino games, slots, and live casino products available on 13bet are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate the game servers and may receive your session ID and game activity data for the purpose of game delivery, RNG certification, and technical support. They do not receive your full identity data or financial information.
Anti-Fraud and Security Services: 13bet uses industry-standard fraud detection and device fingerprinting technology provided by trusted security partners. These services receive anonymised or pseudonymised technical data (IP addresses, device identifiers, behavioural metadata) to identify suspicious activity. They do not receive your name, NID, or financial account details.
Legal and Regulatory Authorities: 13bet will disclose personal data to competent authorities — including law enforcement agencies, financial regulators, and courts — where required to do so by a lawful order, warrant, or statutory duty. This includes cooperation with anti-money laundering investigations and reports of suspected criminal activity. 13bet will notify the affected player of such a disclosure only where legally permitted to do so.
Business Transfers: In the event that 13bet undergoes a merger, acquisition, or transfer of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address, and the acquiring entity will be required to honour this Privacy Policy or to obtain your fresh consent for any new data processing activities.
All third parties with whom 13bet shares personal data are required, by contract, to maintain appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared. 13bet does not transfer personal data outside of secure, contractually governed arrangements.
When in doubt about which third parties may have received your data in connection with a specific transaction or event, contact the 13bet support team at [email protected] with your account reference number and the relevant date range. We will provide a clear written response within five business days (Bangladesh Standard Time, UTC+6).
Data Security
Protecting your personal data from unauthorised access, disclosure, alteration, and destruction is a core operational responsibility at 13bet. We have implemented a layered set of technical and organisational security measures that apply across all systems, personnel, and processes that handle player data.
Encryption in Transit: All communications between your device and 13bet's servers use TLS 1.2 or TLS 1.3 encryption. Any attempt to intercept data in transit will encounter encrypted content that is computationally infeasible to decode without the server's private key. The 13bet domain operates over HTTPS only — plain HTTP access is automatically redirected.
Encryption at Rest: Personal data stored in 13bet's databases — including identity documents, bKash and Nagad wallet references, and financial transaction records — is encrypted at rest using AES-256 encryption. Database access is protected by multi-factor authentication and strict role-based access controls. Only authorised compliance and payments personnel can access player financial records, and all access events are logged for audit purposes.
OTP-Based Login Security: The 13bet Login process includes a one-time password (OTP) verification step sent to your registered Bangladesh mobile number. This two-step verification significantly reduces the risk of unauthorised account access even if your password is compromised. Players are strongly advised never to share OTP codes with anyone, including individuals claiming to be 13bet support agents.
Internal Access Controls: 13bet employees and contractors are granted access to player data strictly on a need-to-know basis, determined by their specific job function. All personnel with access to personal data are bound by confidentiality obligations and receive regular data security training. Access privileges are reviewed quarterly and revoked immediately upon departure from the organisation.
Incident Response: In the event of a data security incident that affects your personal data, 13bet will assess the severity of the breach and, where the incident poses a risk to your rights and freedoms, notify you via your registered mobile number or email address as promptly as possible. The notification will describe the nature of the incident, the data affected, and the steps 13bet has taken in response.
Despite these measures, no online platform can guarantee absolute security against all possible threats. You play an important role in protecting your own data by keeping your 13bet password strong and unique, not sharing your OTP codes, and logging out of your 13bet account when using a shared or public device.
Warning: If you receive a message, call, or email from someone claiming to be 13bet support and requesting your password, OTP, or payment credentials, do not comply. This is a phishing attempt. Genuine 13bet support agents will never ask for your password or OTP codes. Report such incidents to [email protected] immediately.
Data Retention
13bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the applicable retention period has expired and there is no overriding legal requirement to retain the data further, it is securely deleted or irreversibly anonymised.
The following retention periods apply to the main categories of player data held by 13bet:
- Account and Identity Data: Retained for the duration of your active account relationship with 13bet, plus five years following account closure. This extended period is required for anti-money laundering compliance and to support dispute resolution after account closure.
- Financial Transaction Records: Retained for seven years from the date of each transaction. This period is consistent with standard financial record-keeping obligations applicable to payment platforms operating in Bangladesh and internationally.
- KYC Verification Documents: Retained for five years from the date of the most recent verification event. Document images are stored in encrypted form and are not accessible outside the compliance team.
- Betting and Game Activity History: Retained for five years from the date of each activity record. This data supports responsible gaming monitoring, regulatory compliance reporting, and dispute resolution.
- Support Communication Records: Live chat transcripts and email correspondence are retained for two years from the date of the interaction. These records may be accessed by the support team to provide context in follow-up enquiries and to resolve escalated disputes.
- Technical and Security Logs: IP address logs, device fingerprint records, and login event logs are retained for 12 months. These logs are used for fraud detection and security auditing purposes.
- Marketing Consent Records: Retained for the duration of your account relationship plus three years following closure, to demonstrate that consent was validly obtained and that any withdrawal of consent was correctly actioned.
Players who request account closure may also request deletion of their personal data. 13bet will honour such requests to the fullest extent permitted by law. Where legal retention obligations prevent full deletion, we will inform you of the specific categories of data that must be retained, the legal basis for retention, and the date on which those records will be eligible for deletion.
Your Data Rights
As a 13bet player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the 13bet support team at [email protected] from your registered email address, clearly stating the right you wish to exercise and providing your account reference number. 13bet will respond to all data rights requests within 30 calendar days.
You have the right to request a copy of all personal data that 13bet holds about you. We will provide this in a clear, readable format, together with information about the purposes for which each data category is processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For example, if you have changed your registered mobile number or relocated to a different city within Bangladesh, you may request that your contact data be updated accordingly.
You may request that 13bet delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to legal retention obligations described in Section 6.
You may request that 13bet restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you object to processing based on legitimate interests pending 13bet's review of that objection.
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose.
You may object at any time to the processing of your personal data where that processing is based on 13bet's legitimate interests, including profiling for responsible gaming monitoring purposes. 13bet will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where processing is based solely on your consent — such as receiving marketing SMS messages about BPL cricket promotions or Eid bonus offers — you may withdraw that consent at any time via your account notification settings after completing the 13bet Login process. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you believe that 13bet has processed your personal data unlawfully or has failed to respect your data rights, you have the right to raise a formal complaint. Please contact [email protected] in the first instance — the majority of data concerns can be resolved directly and promptly by our team.
13bet will not charge a fee for handling data rights requests submitted in good faith. However, where requests are manifestly unfounded or excessive — for example, repetitive requests for the same data within a short period — 13bet reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided to the requester.
To verify your identity before processing a data rights request, 13bet may ask you to confirm your registered mobile number, provide the last four digits of your most recent deposit transaction, or supply another low-friction identity verification step. This is to protect your data from being disclosed to an unauthorised third party claiming to act on your behalf.
All data rights requests should be sent from your registered 13bet email address to [email protected] with the subject line "Data Rights Request — [Your Account Username]". Including your account reference in the subject line helps our team locate your records quickly and ensures a faster response.
Amendments to This Policy
13bet reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable law, the introduction of new platform features, or feedback received from players. The "Last Updated" date shown at the top of this page and in the header bar below the hero section will be revised each time a change is made.
Material Changes: Where a proposed amendment materially affects the way 13bet collects, uses, or shares your personal data — or where it introduces a new purpose for processing that was not described in the previous version — 13bet will notify registered players via SMS to their registered Bangladesh mobile number and via email to their registered address at least 14 days before the change takes effect. The notification will describe the nature of the change and provide a link to the updated policy page.
Minor Changes: Amendments that clarify existing language, correct typographical errors, update contact information, or reflect minor operational adjustments that do not materially affect your rights or the purposes of data processing will be applied immediately without advance player notification. The "Last Updated" date will be revised accordingly.
Continued Use as Acceptance: Your continued use of the 13bet platform following the effective date of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change to this policy, you should stop using the platform and contact 13bet support to request account closure and, where applicable, deletion of your personal data in accordance with Section 7 (Your Data Rights) and Section 6 (Data Retention).
Previous Versions: Archived versions of this Privacy Policy are available on request by emailing [email protected]. If you have a complaint or dispute that relates to data processing that occurred under a previous version of this policy, the version in effect at the time of the relevant processing activity will govern that specific matter.
Questions about this Privacy Policy, the data 13bet holds about you, or any aspect of 13bet's data practices may be directed to the support team at [email protected]. We are committed to responding to all privacy-related enquiries within five business days (Bangladesh Standard Time, UTC+6).
13bet's Privacy Policy is written in plain English so that every player — whether based in Dhaka, Chittagong, Sylhet, Khulna, or anywhere else across Bangladesh — can understand exactly how their information is handled. If any section of this policy is unclear, please contact [email protected] and we will be happy to explain it in more detail.
Ready to Play on 13bet?
Now that you understand how 13bet protects your privacy and personal data, you can enjoy a safe and transparent betting experience. Explore cricket markets, browse the casino lobby, or check the slots library — all secured by SSL encryption and industry-standard data protection. For adults aged 18 and above only.