18coi Privacy Policy
— Your Data, Handled With Care

1. Information We Collect

18coi collects personal data from you through several distinct channels: information you provide directly during registration and account management, information generated automatically by your use of the platform, and information supplied by third-party partners where applicable. The categories of data we collect are described below.

Data You Provide Directly

When you create and manage your 18coi account, you provide us with information that we need to deliver our services to you. This includes:

• Registration details: Full legal name, date of birth, email address, mobile number, and residential address.
• Identity verification documents: Copies of your National ID Card (NID), passport, driving licence, or other government-issued photo identification submitted during KYC verification.
• Proof of address documents: Utility bills, bank statements, or official correspondence used to confirm your residential address.
• Payment information: Details of the payment methods you use, including registered bKash, Nagad, Rocket, or Upay mobile wallet numbers, or bank account details used for deposits and withdrawals. We do not store full card numbers — these are handled by our payment processing partners.
• Support communications: Records of any correspondence you initiate with our customer support team, including live chat transcripts, emails sent to [email protected], and any feedback or complaint submissions.
• Responsible Gaming preferences: Self-exclusion requests, deposit limits, session time limits, and cooling-off periods you set through our Responsible Gaming tools.

Data Collected Automatically

When you access and use the 18coi platform, certain technical and behavioural data is collected automatically by our systems. This data is primarily used for security, fraud prevention, and service optimisation:

• Device and browser information: Device type, operating system version, browser type and version, screen resolution, and language settings.
• IP address and geolocation: Your IP address and the approximate geographic region from which you are accessing the platform, used to verify eligibility and detect suspicious access patterns.
• Session and activity logs: Pages visited, games played, bets placed, deposit and withdrawal events, login timestamps, and session durations.
• Cookie and tracking data: As described in Section 4 of this Policy, we use cookies and similar technologies to manage your session and analyse platform usage.

Data from Third Parties

In some circumstances we may receive data about you from third-party sources, including payment processors confirming transaction status, identity verification service providers validating your submitted documents, and fraud prevention partners flagging suspicious activity patterns. All such data is handled under the same standards as data collected directly from you.

2. How We Use Your Data

18coi uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes are as follows:

Marketing Communications

18coi will only send you promotional emails, SMS messages, or in-platform notifications about offers and bonuses if you have explicitly opted in to receive such communications. You may withdraw this consent at any time by contacting our support team or by using the unsubscribe option included in every marketing message. Withdrawing marketing consent does not affect your ability to use the platform or receive transactional messages related to your account activity.

Automated Decision-Making

Certain processes on the 18coi platform involve automated analysis, including fraud risk scoring and bonus eligibility checks. Where an automated process produces a decision that significantly affects your account — such as a withdrawal hold or account flag — you have the right to request a manual review by a member of our compliance team. Contact [email protected] to exercise this right.

3. Data Sharing and Disclosure

18coi does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Operational Partners

We engage carefully selected third-party service providers to help us deliver our platform. These include payment processors (such as the operators of bKash, Nagad, Rocket, and Upay integrations), KYC and identity verification vendors, fraud detection service providers, cloud hosting and server infrastructure partners, and customer support platform providers. Each service provider is contractually bound to process your data only on our instructions, to maintain appropriate security standards, and not to use your data for their own independent purposes.

Game Software Providers

The games available on 18coi are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you play a game, your gameplay session data (such as bet amounts, game round IDs, and outcomes) is transmitted to the relevant game provider's systems to facilitate real-time gameplay. Game providers do not receive your name, contact details, or payment information. Their access is limited to anonymised session identifiers and gameplay events necessary to run the game.

Legal and Regulatory Disclosure

We may be required by applicable law, court order, or regulatory authority to disclose certain account or transaction data. In such cases, 18coi will comply with the legal obligation while endeavouring to notify the affected player where permitted. We will not disclose more information than is legally required.

Business Transfers

In the event that 18coi undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer that materially affects how your data is handled, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

4. Cookies and Tracking Technologies

18coi uses cookies and similar client-side technologies (such as local storage and session storage) to operate the platform effectively and to understand how players interact with it. This section explains what types of cookies we use and why.

What Are Cookies?

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on return visits, maintain your session state, and remember certain preferences. They do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your authenticated state as you navigate between pages, and prevent cross-site request forgery. Without these cookies, you cannot remain logged in or use the platform's core features. These cookies cannot be disabled.
• Functional Cookies: These remember preferences you have set, such as your chosen language, notification settings, and Responsible Gaming preferences. They improve your experience by reducing the need to re-enter information on each visit.
• Analytical Cookies: We use privacy-respecting analytics tools to understand aggregate platform usage — which pages are most visited, where players encounter difficulty, and how the platform performs across different devices. This data is collected in anonymised or pseudonymised form and is used only to improve 18coi's services.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that disabling functional or analytical cookies may affect the quality of your experience on 18coi. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Instructions for managing cookies are available in your browser's help documentation.

5. Data Security Measures

Protecting your personal data is a core operational priority at 18coi. We maintain a layered security architecture designed to prevent unauthorised access, accidental loss, and unlawful processing of player data.

Technical Safeguards

• Transport Layer Security (TLS): All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher, providing 256-bit encryption in transit.
• Encrypted data storage: Sensitive fields — including identity document references, payment method identifiers, and authentication credentials — are stored in encrypted form within our database infrastructure.
• Access controls: Our internal systems enforce role-based access controls, ensuring that employees and contractors can only access the data required for their specific function. Privileged access to production systems requires multi-factor authentication.
• Intrusion detection and monitoring: Our network is monitored continuously for anomalous activity, attempted intrusions, and data exfiltration patterns. Security events are logged and reviewed by our operations team.
• Regular security assessments: We commission periodic security audits and penetration tests of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

Beyond technical controls, 18coi maintains internal data handling policies and provides data security training to all personnel who handle player information. Access to player data is granted on a need-to-know basis and is subject to strict confidentiality obligations. Data handling procedures are reviewed regularly and updated to reflect current best practices.

Data Breach Response

In the event of a personal data breach that poses a risk to affected players, 18coi will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as circumstances allow. Notifications will be sent to the email address registered on your account and will describe the nature of the breach, the data involved, and the steps we are taking in response.

6. Data Retention and Deletion

18coi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: While your account remains open, we retain all registration, KYC, transaction, and gaming history data necessary to operate your account and comply with our legal obligations.
• Closed account data: Following account closure — whether at your request or initiated by 18coi — we retain core account and transaction records for a minimum of five years. This retention period reflects standard financial record-keeping requirements and enables us to respond to any subsequent dispute or regulatory inquiry.
• KYC documents: Identity verification documents are retained for the duration of the account relationship and for five years following account closure, after which they are securely deleted or destroyed.
• Support communications: Records of customer support interactions are retained for three years from the date of the last communication in a given case.
• Marketing consent records: Records of your opt-in and opt-out decisions are retained for as long as they remain relevant to our marketing communications and for three years thereafter.
• Analytical and cookie data: Anonymised or aggregated analytical data may be retained indefinitely as it cannot be attributed to any individual. Pseudonymised session data is retained for up to 24 months.

Requesting Data Deletion

You may request deletion of your personal data by contacting us at [email protected]. We will assess your request and, where we are not legally required to retain the data in question, will complete the deletion within 30 days. Where a retention obligation prevents full deletion, we will inform you of the specific data categories we are required to keep and the applicable retention period. Data that cannot be deleted immediately will be restricted so that it is not used for any operational purpose beyond the retention obligation.

7. Your Privacy Rights

As a player on the 18coi platform, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within five business days.

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how and why it is being processed. We will provide this in a clear, portable format at no charge.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that corrections to certain identity-verified fields may require re-submission of supporting documentation.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis exists for processing), or where the data has been processed unlawfully. This right is subject to applicable retention obligations as described in Section 6.

Right to Restriction of Processing

In certain circumstances — such as while a dispute about the accuracy of your data is being resolved — you may request that we restrict processing of your data to storage only, pending the resolution of the relevant issue.

Right to Object

Where we process your data on the basis of legitimate interest (for example, for analytical purposes or fraud prevention), you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8. Policy Updates and Contact

18coi reviews this Privacy Policy periodically and updates it whenever our data practices change or when required by applicable law. Material changes — meaning changes that significantly affect how we collect, use, or share your personal data — will be communicated to you by a notice posted on the platform and, where the change is sufficiently significant, by direct notification to the email address registered on your account.

The version date shown at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically so that you remain informed about how 18coi protects your privacy. Continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Contact Our Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 18coi holds about you, please reach out to our support team directly. We are available 24 hours a day, seven days a week:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available through your logged-in account dashboard
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within five business days.

This Privacy Policy was last reviewed and updated in January 2026. The current version is always available at https://18coi.net/privacy-policy.