Why is your data safe with 20 Min?
We use internationally recognized security technology. Here's a quick overview of the key measures we take to protect your privacy.
SSL Encryption
Every transaction and login session is protected by 256-bit SSL encryption. No third party can read or intercept your data.
KYC Data Protection
NID or passport information submitted for identity verification is stored on fully encrypted servers. Only authorized personnel are permitted to access it.
No Data Sales
20 Min never sells your personal information to third parties. Your data will never be shared with advertisers or marketing companies.
Your Control
You can view, correct, or request deletion of your data at any time. Your data belongs to you — always.
Cookie Transparency
We are transparent about which cookies we use and why. You have full control to disable any non-essential cookies.
International Standards
Our Privacy Policy is built in compliance with GDPR and international data protection standards, and is verified through regular third-party audits.
By creating an account with 20 Min, you confirm that you have read and agreed to this Privacy Policy. We are always committed to keeping your information safe.
1 Introduction
20 Min (https://20min.app) is an internationally licensed online gaming platform. We believe protecting every user's personal data is a fundamental responsibility. This Privacy Policy explains how 20 Min collects, uses, and safeguards your information.
This Privacy Policy applies alongside our Terms & Conditions-r. Please read both documents carefully before using the platform. For any questions, contact us at support@20min.app.
20 Min's Privacy Policy is built in accordance with international data protection standards and applicable local laws. We review and update this policy regularly to ensure your protection remains at the highest level.
2 What data we collect
20 Min collects two types of data from you — information you provide directly, and information collected automatically while you use the platform.
| Data type | Details |
|---|---|
| Identity information | Full name, date of birth, national ID number |
| Contact Information | Email address, mobile number, current address |
| Financial information | BKash/Nagad/Rocket number, transaction history |
| KYC Documents | NID, passport, proof of address |
| Device Information | IP address, browser type, operating system |
| Usage Data | Login times, game history, betting activity |
| Cookie data | Session cookies, preference storage, analytics data |
We never store your password in plain text. Passwords are always kept in hashed format and are inaccessible to any member of our staff.
3 Why we collect your data
20 Min only collects your data for specific, legitimate purposes. We never ask for information we don't need. The key reasons are outlined below:
- Account management: For registration, login, and profile management.
- Identity Verification (KYC): To fulfil legal obligations and prevent fraud.
- Payment Processing: For fast and secure deposits and withdrawals.
- Customer Support: For troubleshooting and customer support purposes.
- Security Monitoring: To prevent fraud, money laundering, and misuse.
- Platform Improvement: Analytics to improve your experience.
- Legal Compliance: To meet regulatory authority requirements.
- Personalised offers: To show you promotions tailored to your preferences (you can opt out at any time).
4 Data Storage & Security
Your information is stored in secure data centers with both physical and digital security measures in place. We use the following technologies and practices:
- 256-bit TLS/SSL encryption on all data transmissions.
- Sensitive data is stored in our database using AES-256 encryption.
- Two-factor authentication (2FA) for administrative access.
- Regular security audits and penetration testing.
- 24/7 security monitoring system.
- Data backup and disaster recovery planning.
Your data is retained for as long as your account is active and for any legally required retention period. Even after account closure, certain data may be kept for up to 5 years.
In the event of a security breach, we will notify affected users within 72 hours and take immediate action.
5 Data Sharing Policy
20 Min does not sell your personal information. However, certain data may be shared in the following limited circumstances:
- Payment providers: Relevant information may be shared with bKash, Nagad, or Rocket to complete deposit and withdrawal transactions.
- Identity Verification Services: Approved third-party verification services may be used for the KYC process.
- Legal authorities: Data may be disclosed in response to a court order, government investigation, or other legal obligation.
- Anti-Fraud System: Limited data may be shared with international security networks for fraud prevention purposes.
Your data is not shared with any parties beyond those listed above. All our partners are bound by the same standard privacy agreements.
6 Cookie Policy
The 20 Min website uses cookies to help improve your browsing experience. We use the following types of cookies:
- Essential Cookies: Required for login sessions and security. These cannot be disabled.
- Functional cookies: To remember your language, preferences, and settings.
- Analytics Cookies: For platform performance analysis and improvement. These can be disabled.
- Marketing cookies: To show you relevant offers and ads. You may opt out of these at any time.
When you first visit, we ask for your consent to use cookies. You can manage your cookie preferences at any time through your browser settings.
7 Your Rights
As a 20 Min user, you have the following rights regarding your data:
- Right of Access: The right to know what information we hold about you.
- Right to Rectification: The right to correct inaccurate or incomplete information.
- Right to Erasure: The right to request deletion of your data under certain circumstances.
- Right to restrict processing: The right to request that we stop using your data for specific purposes.
- Right to object: The right to object to your data being used for marketing purposes.
- Right to Portability: The right to receive your data in a machine-readable format.
To exercise any of your rights, email us at support@20min.app. We will respond within 30 days. Please note that some data may not be deletable due to legal obligations.
Your request will be processed once your identity has been verified. This is done solely to protect the security of your information.
8 Children's Privacy
20 Min strictly does not serve anyone under the age of 18. We do not knowingly collect any information from minors. If we become aware that a minor has opened an account, that account will be immediately closed and all associated data will be deleted.
If you become aware of a minor using our platform, please notify us at support@20min.app. We will take prompt action.
9 Third-Party Services
The 20 Min platform may incorporate third-party services — such as payment gateways, game providers, or analytics tools. These services operate under their own privacy policies.
20 Min is not responsible for third-party privacy policies. However, we only work with trusted and verified partners who maintain high standards of data protection.
10 Policy Updates
20 Min may update this Privacy Policy at any time. For significant changes, we will notify you in advance via email or platform notification.
Continued use of the platform after any changes have been made will be considered your acceptance of the updated policy. The date of the latest update will always be shown at the top of this page.
11 Contact
For any questions, concerns, or requests regarding this Privacy Policy, please get in touch with us:
- Email: support@20min.app
- Live chat: Available on the platform 24/7
- Response Time: Usually within 24–48 hours
Our support team is always ready to answer any privacy-related questions in Bangla.
Frequently Asked Questions