bd11 Privacy Policy — How We Protect Your Data

1. Who We Are

bd11 ("bd11", "we", "us", "our") operates an online sports betting and casino gaming platform accessible at https://bd11.top, targeting players located in Bangladesh. For the purposes of this Privacy Policy, bd11 is the data controller responsible for the personal information collected through the platform.

All privacy-related enquiries, data subject requests, and complaints should be directed to our dedicated privacy contact at [email protected]. Please include "Privacy Request" in the subject line of your email so that our compliance team can prioritise and process your request within the required timeframes.

This Privacy Policy covers all products and services offered under the bd11 brand, including sports betting (cricket, football, kabaddi), live casino games (Teen Patti, Andar Bahar, Roulette, Baccarat, Blackjack), slot games, crash games, and fishing games. It applies equally to users accessing bd11 via desktop browser, mobile browser, or any official bd11 application.

2. Personal Data We Collect

bd11 collects personal data through three primary channels: information you provide directly during registration and account use; information generated automatically by your use of the platform; and information received from trusted third-party service providers. The categories of data collected are described below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address.
• Identity verification (KYC) documents: Scanned copy or photograph of your National Identity Card (NID), passport, or driving licence; proof of address document; and confirmation of mobile financial service account ownership (bKash, Nagad, Rocket, or Upay).
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. bd11 does not store full card numbers if a card payment method is ever introduced; card data is processed exclusively by our PCI-DSS compliant payment processor.
• Support communications: The content of any emails, live chat transcripts, or support tickets you submit to bd11's customer service team, including any attachments you provide as evidence of a dispute or query.
• Self-exclusion and responsible gaming preferences: Deposit limits, session limits, loss limits, and self-exclusion elections made via your account dashboard.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type (mobile or desktop), operating system version, browser type and version, screen resolution, and mobile network operator.
• Usage and behavioural data: Pages visited, time and duration of each session, games launched, bets placed, bet amounts, game outcomes, deposit and withdrawal history, bonus claims, and in-platform navigation patterns.
• Geolocation data: Approximate geolocation derived from your IP address, used to verify that you are accessing the platform from a permitted location. bd11 does not collect precise GPS-level location data.
• Cookie and tracking data: Information collected via cookies and similar tracking technologies as described in Section 6 of this policy.

2.3 Data Received from Third Parties

• Identity verification providers: Confirmation of the authenticity of KYC documents submitted, including data from third-party document verification services.
• Payment processors: Transaction status confirmations (success, failure, reversal) and fraud risk signals from bKash, Nagad, Rocket, Upay, and Bangladeshi bank partners.
• Game providers: Game round outcomes, Return to Player (RTP) logs, and disconnection events as reported by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe.
• Fraud and AML screening services: Risk scores and sanctions screening results used to comply with anti-money laundering obligations.

3. How We Use Your Personal Data

bd11 uses the personal data described in Section 2 for the following specific purposes:

4. Legal Basis for Processing

bd11 processes personal data only where a valid legal basis exists. The four legal bases we rely upon are:

• Contract performance: Processing is necessary to provide you with the services you have agreed to receive when registering a bd11 account, including account management, payment processing, and game delivery.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements (21+), and any mandatory reporting obligations applicable to bd11's operation.
• Legitimate interests: Processing is necessary for bd11's legitimate business interests, including fraud prevention, platform security, and improving the quality of our gaming services, provided those interests are not overridden by your privacy rights. Where we rely on legitimate interests, we conduct a balancing test to ensure our interests do not unduly impact you.
• Consent: For activities where none of the above bases apply — principally direct marketing communications — bd11 relies on your explicit, freely given, informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Data

bd11 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial use. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers

bd11 engages carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers are permitted to use your data only for the specific purpose for which it was shared and are not authorised to use it for their own purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — for the purpose of processing your deposits and withdrawals in BDT.
• Identity verification providers: Third-party KYC and document authentication services used to verify the identity documents you submit as part of the account verification process.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive the minimum data necessary (typically a pseudonymous player identifier and bet/game data) to deliver their games within the bd11 platform.
• Fraud and AML screening providers: Providers of real-time transaction monitoring and sanctions screening services used to comply with anti-money laundering obligations.
• Cloud infrastructure providers: Hosting and server infrastructure providers on whose platforms bd11's data and software are operated, subject to industry-standard security agreements.

5.2 Legal and Regulatory Disclosures

bd11 may disclose your personal data to law enforcement agencies, regulatory authorities, or other official bodies where required to do so by applicable law, court order, or official government request. In such cases, bd11 will disclose only the minimum data required to comply with the legal obligation and will notify you of the disclosure where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bd11's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. bd11 will notify registered users of any such transfer via their registered email address and will ensure that the receiving entity is bound by a privacy policy that provides at least the same level of protection as this one.

6. Cookies & Tracking Technologies

bd11 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. Below is a description of the types of cookies we use and their purposes.

bd11 does not use third-party advertising cookies or social media tracking pixels. You can manage cookie preferences via your browser settings; however, disabling strictly necessary cookies may prevent you from logging in or using core platform features.

7. Data Retention

bd11 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

• Active account data: Retained for the full duration of your account's active status, and for a minimum of 5 years following permanent account closure, to meet anti-money laundering and fraud investigation obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of the last transaction on your account, in compliance with applicable financial regulations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last interaction in each support case, or longer if the communication is relevant to an ongoing legal or compliance matter.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.
• Cookie data: Retained for the durations specified in the cookie table in Section 6, subject to your browser settings.
• Self-exclusion records: Records of self-exclusion elections are retained for the duration of the exclusion period plus 5 years thereafter, to prevent the inadvertent re-registration of an excluded player.

Once data is no longer required and the applicable retention period has expired, bd11 will securely delete or permanently anonymise the data so that it can no longer be attributed to you as an individual.

8. Data Security

bd11 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport encryption: All data in transit between your device and bd11's servers is protected using TLS 1.2 or higher. This applies to all platform interactions including login, game play, deposits, and withdrawals.
• Data-at-rest encryption: Sensitive personal data stored on bd11's servers is encrypted using AES-256, the same standard used by leading financial institutions globally.
• Access controls: Access to personal data within bd11 is restricted on a need-to-know basis. Staff members who require access to user data in order to perform their roles are subject to confidentiality obligations and undergo regular data protection training.
• Two-factor authentication: bd11 offers 2FA for all registered accounts and strongly recommends its use, particularly for users who access the platform on shared mobile devices — a common scenario among players in Dhaka, Chittagong, Sylhet, and other urban centres in Bangladesh.
• Penetration testing: bd11's platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: bd11 maintains a documented data breach response plan. In the event of a confirmed breach affecting user data, affected users will be notified within 72 hours as described in our core privacy commitments.

9. Your Data Rights

As a user of the bd11 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days.

10. Children and Minors

The bd11 platform is strictly intended for adults aged 21 years and above. bd11 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age declaration, and all withdrawal requests are subject to document-based age verification as part of the KYC process described in Section 2.

bd11 strongly encourages parents and guardians to use parental control software to prevent minors from accessing online gaming platforms. Free parental control tools are widely available for Android and iOS devices — both of which are the primary device types used by internet users in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, and other cities across Bangladesh.

11. International Data Transfers

bd11's primary server infrastructure is designed to service the Bangladesh market and store user data securely. However, some of our third-party service providers — including certain game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) and cloud infrastructure partners — may process or store data outside of Bangladesh.

Where such international transfers occur, bd11 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual clauses in our agreements with all third-party service providers that require them to handle your data securely and in accordance with applicable data protection principles.

By registering an account with bd11 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to these third-party service providers where necessary to deliver the bd11 service to you.

12. Third-Party Links

The bd11 platform may occasionally reference third-party services — for example, the payment portals of bKash, Nagad, Rocket, or Upay that you are redirected to when completing a deposit or withdrawal. Once you leave the bd11 platform and interact with a third-party website or application, this Privacy Policy no longer applies.

bd11 is not responsible for the privacy practices of third-party websites, payment processors' own customer-facing portals, or game studio landing pages. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of bd11. Links to third-party payment portals are provided solely for your convenience in completing transactions and do not constitute an endorsement of those parties' privacy practices.

13. Amendments to This Privacy Policy

bd11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or improvements to the platform. When we make material changes to this policy, we will:

• Update the "Effective date" displayed at the top of this page;
• Send a notification to your registered email address summarising the key changes made;
• Display a prominent in-platform notification for a minimum of 14 days following the update.

Your continued use of the bd11 platform after receiving notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the platform and may request deletion of your account by contacting [email protected].

14. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd11 handles your personal data, please contact our privacy team using the details below. All privacy communications are handled in English and are managed by our compliance team operating on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Subject line for breach reports: "Security Concern"
• Response time: Within 30 calendar days for data subject requests; within 5 business days for general privacy enquiries
• Operating hours: 24/7, Bangladesh Standard Time (UTC+6)

bd11 takes all privacy complaints seriously. Upon receiving a complaint, our compliance team will acknowledge receipt within 2 business days, conduct a thorough internal investigation, and provide you with a written response within 30 calendar days. If you are not satisfied with our response, you retain the right to escalate your complaint to the appropriate data protection authority.