Privacy Policy — How bd11 c Collects, Uses, and Protects Your Data

bd11 c collects personal data through several channels: directly from you when you register an account or interact with our platform, automatically through your use of our website and services, and from third-party identity verification and payment processing partners. The categories of personal data we collect are set out below.

1.1 Registration and Identity Data

When you create a bd11 c account, we collect your full legal name as it appears on your Bangladesh National Identity Card (NID), your date of birth, your residential address in Bangladesh, a valid email address, and a mobile phone number registered in Bangladesh. This information is required to create your account, to verify your identity as part of our KYC process, and to communicate with you regarding your account.

1.2 Identity Verification Documents

To comply with our know-your-customer obligations and to process withdrawals, bd11 c collects copies of government-issued identity documents. The primary accepted document is the Bangladesh National Identity Card (NID). In certain circumstances, we may also request a passport, driving licence, or utility bill as supplementary proof of address. Document images are processed securely and retained only for the period required by our data retention policy.

1.3 Financial and Payment Data

bd11 c collects information about the payment methods you use to deposit and withdraw funds, including your bKash account number, Nagad account number, Rocket number, or bank account details where applicable. We do not store full payment credential data on our own servers — payment processing is handled by our licensed payment gateway partners, who receive tokenised representations of your payment details. We retain records of all transactions (amounts, dates, payment method type, transaction reference numbers) for accounting and regulatory purposes.

1.4 Gameplay and Betting Activity Data

bd11 c collects detailed records of your gameplay and betting activity on the platform. This includes the games you play, the bets you place, the outcomes of those bets, the amounts wagered and won or lost, the timestamps of all activity, and any bonus offers you claim and progress toward wagering requirements. This data is used for account management, dispute resolution, regulatory reporting, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access bd11 c, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud detection, platform compatibility optimisation, and aggregated analytics. We do not use IP addresses to personally identify users beyond what is required for security purposes.

1.6 Communications Data

When you contact bd11 c via live chat, email, or any other support channel, we retain records of those communications including the content of messages, the date and time of contact, and the resolution of any support enquiry. This data is used to provide customer support, to train our support team, and to maintain records of any disputes or complaints.

bd11 c uses the personal data it collects for the following specific and lawful purposes. We do not use your data in ways that are incompatible with the purposes stated below without first notifying you and, where required, obtaining your consent.

2.1 Account Creation and Management

Your registration data is used to create and maintain your bd11 c account, to authenticate your identity when you log in, to apply your chosen account settings and responsible gaming limits, and to associate your gameplay history and balance with your profile. Without this data, we cannot provide you with a personalised account experience.

2.2 Identity Verification and KYC Compliance

bd11 c is required to verify the identity and age of all players who request withdrawals or who meet certain deposit thresholds. Your identity documents and registration data are used to confirm that you are who you say you are, that you are at least 18 years of age, and that you are not a politically exposed person (PEP) or subject to financial sanctions. KYC verification is a regulatory obligation and is not optional for players who wish to withdraw funds.

2.3 Payment Processing

Your payment method details are used solely to process deposit and withdrawal transactions on your behalf. bd11 c shares the minimum necessary payment data with our licensed payment processing partners (bKash, Nagad, Rocket, and banking partners) to facilitate these transactions. Payment data is never used for any purpose beyond transaction processing and fraud prevention.

2.4 Fraud Detection and Security

bd11 c uses technical data, gameplay data, and payment data to detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. Automated systems monitor account behaviour patterns and flag anomalies for manual review by our security team. This processing is necessary for the protection of bd11 c and its player community.

2.5 Responsible Gaming Monitoring

bd11 c uses gameplay and financial data to monitor for signs of problematic gambling behaviour. Where our systems identify patterns consistent with problem gambling — such as escalating deposit frequency, chasing losses, or self-exclusion circumvention — our responsible gaming team may proactively contact the player or apply precautionary account restrictions. This processing is carried out in the player's interest and is a core component of our responsible gaming commitment.

2.6 Legal and Regulatory Compliance

bd11 c retains and uses personal data to comply with its legal obligations under applicable offshore gaming regulations, anti-money-laundering requirements, and financial reporting standards. This includes providing data to regulatory authorities, law enforcement agencies, and financial intelligence units when required by law or court order.

2.7 Platform Improvement and Analytics

Aggregated, anonymised or pseudonymised data derived from player activity and technical logs is used to improve the bd11 c platform — including game library curation, user interface design, payment method availability, and customer support workflows. This analytics processing does not involve personally identifiable information and does not affect individual player accounts.

2.8 Service Communications

bd11 c uses your email address and mobile number to send account-related communications including deposit confirmations, withdrawal processing updates, KYC verification status, security alerts, and changes to our Terms & Conditions or this Privacy Policy. These communications are not marketing in nature and cannot be opted out of while you hold an active account, as they are operationally necessary.

bd11 c does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals in Bangladeshi Taka (৳), bd11 c shares the minimum required payment information with licensed payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these partners is bound by its own regulatory obligations and data protection policies. bd11 c shares only what is necessary for transaction execution and does not share browsing history, gameplay records, or full identity documents with payment partners.

3.2 Identity Verification Services

bd11 c may use third-party KYC verification platforms to cross-reference player-submitted identity documents against official databases. These service providers act as data processors under written agreements that restrict them from using your data for any purpose other than fulfilling the verification request on bd11 c's behalf.

3.3 Game Software Providers

The games available on bd11 c are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive technical session data (a pseudonymised player session token, currency, and bet/win data) to power game functionality. They do not receive your full name, NID details, or payment information, and they are contractually prohibited from using session data for any purpose beyond game delivery.

3.4 Legal and Regulatory Disclosure

bd11 c may be required by law, court order, or regulatory direction to disclose personal data to government authorities, law enforcement agencies, or financial intelligence units. In such cases, bd11 c will disclose only the minimum data required to comply with the legal obligation and, where permitted by law, will notify the affected player of the disclosure request.

3.5 Business Transfers

In the event that bd11 c undergoes a merger, acquisition, or sale of all or substantially all of its assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, bd11 c will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations at least as protective as those set out in this policy, and will notify affected players prior to any such transfer.

bd11 c uses cookies and similar browser-based storage technologies to operate the platform effectively and to provide you with a personalised, secure experience. This section explains what types of cookies we use, what each category does, and how you can manage your cookie preferences.

4.1 Strictly Necessary Cookies

These cookies are essential for the bd11 c platform to function. They maintain your login session, remember your language and currency preferences, enable secure account authentication, and prevent cross-site request forgery. Without these cookies, the platform cannot operate correctly. They cannot be disabled while you are using the site.

4.2 Functional Cookies

Functional cookies remember your in-platform preferences — such as your last-visited game category, display settings, and notification preferences — so that these are applied consistently across sessions. Disabling functional cookies will not prevent you from using the platform but may result in a less personalised experience.

4.3 Analytics Cookies

bd11 c uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data helps our development team identify pages with high exit rates, slow load times, or navigation confusion, enabling targeted improvements. Analytics data is not linked to individual player identities and is not shared with third-party analytics platforms.

4.4 Security and Fraud Prevention Cookies

Certain cookies are used by bd11 c's security systems to assign a risk score to login attempts and to detect device fingerprints associated with previously flagged fraudulent accounts. These cookies are part of our fraud prevention infrastructure and operate transparently in the background without affecting normal gameplay.

4.5 Managing Your Cookie Preferences

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block, delete, or selectively permit cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from accessing your bd11 c account. Clearing cookies will log you out of any active session. For detailed browser-specific instructions on managing cookies, refer to your browser's help documentation.

bd11 c retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention guidelines apply to the main categories of player data:

• Account and Identity Data: Retained for the duration of the account's active status plus a minimum of 5 years following permanent account closure. This period satisfies anti-money-laundering record-keeping requirements under offshore gaming regulation.
• KYC Documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later. Document images are stored in encrypted form in access-controlled storage systems.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 7 years in line with standard financial record-keeping practice.
• Gameplay Records: Detailed bet-by-bet gameplay logs are retained for 3 years from the date of activity. Aggregated gameplay statistics may be retained indefinitely in anonymised form for platform analytics.
• Communications Records: Support chat transcripts and email correspondence are retained for 2 years from the date of the interaction, except where a communication relates to a dispute, in which case it is retained until the dispute is fully resolved plus 1 year.
• Technical Logs: Server access logs and security event logs are retained for 12 months from the date of generation. Fraud flags associated with specific device identifiers or IP addresses may be retained for up to 3 years.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. Secure deletion means that the data is overwritten in a manner that renders recovery technically infeasible using available tools.

bd11 c stores personal data on servers located in secure data centres. Data may be processed and stored outside Bangladesh as part of our offshore operational infrastructure. All data processing arrangements with offshore service providers include contractual data protection requirements.

bd11 c applies a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure.

6.1 Transport Layer Security

All data transmitted between your browser or mobile device and bd11 c servers is encrypted using Transport Layer Security (TLS) version 1.2 or higher. Our web domain enforces HTTPS exclusively — plain HTTP connections are automatically redirected to HTTPS. This ensures that data exchanged during login, gameplay, and payment transactions cannot be intercepted in transit.

6.2 Password and Credential Storage

Account passwords are never stored in plaintext. bd11 c uses a strong one-way cryptographic hashing algorithm with a unique per-account salt to store password credentials. Even in the unlikely event of a database compromise, stored password hashes cannot be reversed to obtain the original password. Players are encouraged to use a password manager and to enable two-factor authentication (2FA) for additional account security.

6.3 Access Controls

Access to systems that process player personal data is restricted to bd11 c staff whose role requires it. Access rights are provisioned on a least-privilege basis and are reviewed regularly. All privileged access to production systems is logged and subject to audit. Former employees have their access revoked immediately upon termination of employment.

6.4 Payment Security

bd11 c does not store full payment credentials (bKash PINs, bank account passwords, card numbers) on its own infrastructure. Payment processing is handled exclusively through tokenised integrations with our licensed payment partners. This architecture ensures that even a full compromise of bd11 c's own systems would not expose complete payment credential data.

6.5 Incident Response

bd11 c maintains a documented security incident response plan. In the event of a data breach that poses a risk to player personal data, bd11 c will assess the nature and scope of the incident, take immediate steps to contain it, and notify affected players via their registered email addresses within a reasonable timeframe. Players are advised to change their passwords immediately if they receive a breach notification from bd11 c.

As a registered player on bd11 c, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to valid requests within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data bd11 c holds about you. Upon receiving a valid access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, the retention periods that apply, and details of any third parties with whom the data has been shared. The first access request per calendar year is provided free of charge.

7.2 Right to Rectification

If you believe that any personal data bd11 c holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For name, date of birth, and address data, corrections will require submission of supporting documentation (such as a new NID scan) to verify the accurate information before the record is updated.

7.3 Right to Erasure

You may request deletion of your personal data where: you have closed your account and the applicable retention periods have expired; the data is no longer necessary for the purpose for which it was collected; or you withdraw consent for processing that was based solely on consent. Please note that bd11 c is legally required to retain certain data (transaction records, KYC documents) for defined periods regardless of erasure requests, and cannot delete such data before the end of the legally mandated retention period.

7.4 Right to Restriction of Processing

You may request that bd11 c restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you dispute the lawfulness of our processing. During a restriction period, we will continue to store your data but will not process it for operational purposes beyond storage.

7.5 Right to Data Portability

Where your data was provided by you directly (registration data, contact data) and is processed on the basis of your consent or contractual necessity, you have the right to receive a copy of that data in a structured, machine-readable format. This right does not extend to data generated by our systems (such as server logs or internally generated risk scores).

7.6 Right to Withdraw Consent

Where bd11 c processes your data on the basis of your consent (for example, for optional promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. To opt out of promotional email communications, use the unsubscribe link in any marketing email or contact [email protected].

bd11 c reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable legal requirements, the introduction of new platform features, or the addition of new payment or service partners.

When material changes are made to this Privacy Policy — meaning changes that affect how we collect, use, or share your personal data in ways that may have a significant impact on you — bd11 c will notify registered players by email to the address associated with their account. The notification will summarise the key changes and provide the effective date of the revised policy. We recommend reviewing this page periodically even in the absence of a formal notification.

Minor changes (such as corrections to typographical errors, clarifications of existing practice without substantive change, or updates to contact details) may be made without individual notification. The "Last Updated" date at the top of this page will always reflect when the most recent change was made.

Your continued use of the bd11 c platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact [email protected] to request account closure and data handling in accordance with the rights described in Section 7 above.

For questions about this Privacy Policy, data protection matters, or to exercise any of your privacy rights, contact the bd11 c support team at any time via live chat on the platform or by email at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.