11bdt Privacy Policy
At 11bdt, protecting your personal data is a core commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and used, who it may be shared with, and what rights you hold as a registered player on our Bangladesh platform.
Summary: 11bdt collects only the personal data necessary to operate a safe, fair, and compliant online gaming platform for players in Bangladesh. We do not sell your data to third parties. We use industry-standard SSL encryption to protect all information in transit and at rest. You have the right to access, correct, and request deletion of your personal data at any time by contacting our support team.
1 Introduction
11bdt ("we", "us", "our", "the Platform") operates the online casino and sports betting website at 11bdt.io, serving registered players primarily based in Bangladesh. We are committed to handling all personal data with the highest standards of care, confidentiality, and transparency.
This Privacy Policy ("Policy") describes how 11bdt collects, uses, stores, protects, and — where applicable — discloses personal information provided by or collected from users ("you", "your", "the Player") of the 11bdt platform. It applies to all information gathered through the website, mobile interface, customer support channels, payment processing flows, and any other service operated under the 11bdt brand.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or continuing to use the 11bdt platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
We may update this Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. The date of the most recent revision is displayed at the top of this page. Where a material change affects your rights, we will notify registered players by email to the address on file.
2 Data We Collect
11bdt collects personal data through three primary channels: information you provide directly when registering or using the platform, information generated automatically as you interact with our services, and information received from third-party partners such as payment processors and identity verification providers.
2.1 Information You Provide Directly
When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID number, passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including district, city — e.g., Dhaka, Chittagong, Sylhet) | Registration & account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, transaction reference IDs, deposit and withdrawal amounts in BDT | Deposits & withdrawals |
| Verification Documents | Scanned or photographed NID card, passport, driving licence, utility bill, bank statement | KYC process |
| Support Communications | Content of live chat, email, and WhatsApp messages sent to 11bdt support | Customer support interactions |
| Preferences & Settings | Responsible gaming limits, notification preferences, self-exclusion requests | Account settings |
2.2 Automatically Collected Information
When you access or use the 11bdt platform, certain technical and behavioural data is automatically collected by our servers and analytics systems:
- Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, time spent on each page, click paths, game sessions initiated, bets placed, wagers staked, and features used.
- Session Data: Login timestamps, session duration, logout time, and geographic location derived from IP address (country and city level).
- Performance Data: Page load times, error logs, and crash reports to help us identify and resolve technical issues.
2.3 Data from Third Parties
We may receive additional personal data from the following third-party sources, used solely to supplement our own records for verification, fraud prevention, and payment processing purposes:
- Payment Providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data, payment status, and account holder name matching.
- Identity Verification Services: Results of automated document and biometric checks performed during KYC.
- Fraud & Risk Intelligence Providers: Risk scores and flagging signals associated with IP addresses, device fingerprints, or payment methods identified as high-risk.
3 How We Use Your Data
11bdt uses the personal data it collects for the following specific purposes. We process data only where we have a lawful basis to do so — primarily contractual necessity (to provide you with our services), legal obligation (to comply with applicable law), or legitimate interest (to operate a safe and fair platform).
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact | Contractual necessity |
| Age & identity verification (KYC) | Identity, Verification Documents | Legal obligation |
| Processing deposits & withdrawals | Financial, Identity | Contractual necessity |
| Fraud detection & prevention | All categories, Usage, Device | Legitimate interest / Legal obligation |
| Responsible gaming monitoring | Usage, Financial, Preferences | Legal obligation / Legitimate interest |
| Customer support | Identity, Contact, Support Communications | Contractual necessity |
| Platform personalisation | Usage, Preferences | Legitimate interest |
| Marketing communications (opt-in only) | Contact, Preferences | Consent |
| Legal compliance & reporting | Identity, Financial, Usage | Legal obligation |
| Platform security & technical improvement | Device, Session, Performance | Legitimate interest |
Marketing Communications: 11bdt will only send you promotional emails, SMS messages, or WhatsApp notifications if you have explicitly opted in to receive them during registration or subsequently via your account settings. You may withdraw this consent at any time by contacting support or updating your notification preferences. Opting out of marketing communications will not affect the delivery of essential transactional and security notifications.
4 Cookies & Tracking Technologies
11bdt uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and gather usage analytics. A "cookie" is a small text file placed on your device by a web server when you visit a website.
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account region and language preference, and ensure the platform functions correctly. Cannot be disabled without breaking core functionality. | Session / up to 30 days |
| Performance & Analytics | Collect anonymised data on how pages are used, which games are most popular, and where errors occur — used to improve platform quality. | Up to 12 months |
| Functional | Remember your display preferences, responsible gaming settings, and last-visited game categories so the platform feels personalised on return visits. | Up to 6 months |
| Security | Help identify suspicious login attempts, unusual account activity, and potential fraud by associating sessions with verified device fingerprints. | Session / up to 90 days |
4.2 Managing Cookies
You may control cookie settings through your browser's built-in privacy controls. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, and block cookies at the category or individual cookie level. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.
11bdt does not use cookies to track your activity across third-party websites unrelated to our platform. Our cookies are scoped exclusively to the 11bdt.io domain.
5 Data Sharing & Disclosure
11bdt does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
5.1 Service Providers
We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:
- Payment Processors: bKash, Nagad, Rocket, and Upay receive the financial data necessary to execute deposit and withdrawal transactions. Each provider operates under its own privacy and security framework and is responsible for the data it processes on its own infrastructure.
- Identity Verification Providers: KYC and document verification platforms receive identity and document data solely to conduct verification checks on our behalf.
- Game Studios: Certified third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi receive a session token and anonymised player identifier to load and operate game content. These studios do not receive your full name, contact details, or payment information.
- Cloud & Hosting Infrastructure: Our platform infrastructure providers process server-side data including logs and session data under data processing agreements that prohibit unauthorised use.
- Customer Support Tools: Live chat and communication platform providers process the content of your support interactions in order to deliver responses to you.
5.2 Legal & Regulatory Disclosure
11bdt may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or governmental directive. We will only disclose the minimum data necessary to satisfy the specific legal requirement and will, where legally permitted, notify you of such a disclosure.
5.3 Business Transfers
In the event that 11bdt undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via email and via a prominent notice on the platform at least 30 days before any transfer takes effect, and you will have the opportunity to close your account if you do not wish your data to be transferred.
No Data Sales — Ever: 11bdt has never sold player personal data to a third party and will never do so. Your data exists on our platform to provide you with a secure, functional gaming experience — not as a commercial asset to be monetised.
6 Data Retention
11bdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation, fraud prevention, dispute resolution |
| Financial Transaction Records | 7 years from transaction date | Anti-money laundering legal requirements |
| KYC Verification Documents | Duration of account + 5 years after closure | Regulatory compliance |
| Gameplay & Betting History | Duration of account + 3 years after closure | Dispute resolution, responsible gaming analysis |
| Support Communications | 3 years from date of interaction | Quality assurance, dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Evidence of consent basis |
| Server & Access Logs | 12 months | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to any individual player. Anonymised, aggregated data (such as platform-wide betting statistics with no individual identifiers) may be retained indefinitely for business intelligence and platform improvement purposes.
7 Security Measures
11bdt implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.
7.1 Technical Controls
- SSL/TLS Encryption: All data transmitted between your browser or device and the 11bdt servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The presence of HTTPS in your browser's address bar confirms this encryption is active.
- Data Encryption at Rest: Sensitive personal data — including identity documents, financial records, and KYC materials — is encrypted at rest using AES-256 encryption on our storage infrastructure.
- Access Controls: Access to production databases containing player data is restricted to a minimal set of authorised personnel. Access is governed by role-based permissions, multi-factor authentication, and audit logging of all access events.
- Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems that monitor for anomalous traffic patterns and attempted breaches.
- Payment Data Tokenisation: Payment account details (such as bKash or Nagad numbers) are stored in tokenised form. Raw payment credentials are never stored on 11bdt's own servers after a transaction is completed.
7.2 Organisational Controls
- All 11bdt staff and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training.
- Third-party service providers are subject to due diligence assessments and are required to maintain security standards equivalent to or exceeding our own.
- 11bdt maintains an incident response plan that governs how we detect, contain, assess, and report data security incidents. In the event of a breach affecting your personal data, we will notify you promptly in accordance with our legal obligations.
Your Role in Security: While 11bdt takes extensive measures to protect your data on our end, the security of your account also depends on you protecting your login credentials. Choose a strong, unique password for your 11bdt account, enable any two-factor authentication options available to you, and never share your password with anyone — including individuals claiming to be 11bdt support staff.
8 Your Data Rights
As a player on the 11bdt platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 12. We will respond to all verified requests within 30 days and will not charge a fee for reasonable requests.
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of the personal data 11bdt holds about you, including what categories of data are held, the purposes for which it is used, and with whom it has been shared. |
| Right to Rectification | If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update many details directly within your account settings. |
| Right to Erasure | You may request that 11bdt delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where we have processed it unlawfully. This right is subject to overriding legal obligations that may require us to retain certain data. |
| Right to Restrict Processing | You may request that we limit how we use your data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed. |
| Right to Data Portability | Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you provided to us. |
| Right to Object | You may object to processing based on legitimate interest grounds, including profiling for direct marketing purposes. Where you object to marketing communications, we will cease such communications immediately. |
| Right to Withdraw Consent | Where processing is based solely on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. |
Please note that some rights are subject to limitations where 11bdt is required to retain data to comply with legal obligations, prevent fraud, or resolve disputes. In such cases, we will explain the applicable limitation when responding to your request.
9 Minors & Age Verification
21+ Only: The 11bdt platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If we discover that a player has provided false information about their age during registration, the account will be immediately suspended, all data will be handled in accordance with our legal obligations, and we will take steps to return any real-money funds to the verified payment method of the account holder.
11bdt uses a combination of automated date-of-birth checks at registration and manual KYC document review to verify player age. Where our systems identify a potential age discrepancy, account access may be restricted pending the submission and review of a government-issued identity document confirming the player's date of birth.
Parents and guardians who believe their child may have registered an account on the 11bdt platform are encouraged to contact our support team immediately at [email protected]. We will investigate and action all such reports as a matter of highest priority.
We also recommend that parents and guardians make use of widely available parental control software and internet filtering tools to prevent minors from accessing online gambling websites. Organisations such as GamCare and Gamble Aware publish guidance on effective parental controls for this purpose.
10 Third-Party Services & Links
The 11bdt platform integrates with third-party services — including game studios, payment providers, and customer support tools — that operate under their own privacy policies. While 11bdt carefully vets all third-party partners and requires them to meet data protection standards consistent with our own, we cannot be responsible for the privacy practices of external services once data leaves our infrastructure.
The following third-party categories have a data interface with the 11bdt platform:
- Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Hacksaw Gaming, Play'n GO, Spribe, and Ezugi. These studios receive a session token to authenticate game sessions. No personally identifiable information beyond an anonymised player ID is shared.
- Mobile Payment Platforms: bKash, Nagad, Rocket, and Upay. These providers process payment data in accordance with their own privacy policies and are regulated by Bangladesh Bank's guidelines on mobile financial services.
- Analytics Services: We use privacy-respecting analytics tools to measure platform performance. Analytics data is aggregated and anonymised before analysis and is never used to identify individual players.
The 11bdt website does not contain links to third-party websites outside of the service integrations described above. You will not encounter outbound links to external sites through normal use of the platform.
11 Changes to This Policy
11bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page and in the Table of Contents will be revised each time a change is made.
For minor changes — such as clarifications, corrections to typographical errors, or adjustments to reflect routine operational changes — we will update the date and publish the revised Policy without separate notification.
For material changes — such as new categories of data being collected, new purposes for using existing data, or significant changes to your rights — we will notify all registered players by email to the address on file at least 14 days before the change takes effect. Continued use of the platform after the effective date of a material change constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically so that you remain informed about how 11bdt is handling your data. Archived versions of previous Policy iterations are available from the support team upon request.
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or 11bdt's data handling practices, please reach out to the support team using the contact details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days.
- Email: [email protected] — use the subject line "Privacy Request" for data access, rectification, or erasure requests
- WhatsApp: +880 1700 000000 (available 08:00–24:00 Bangladesh Standard Time)
- Live Chat: Available 24/7 via the platform after logging in to your registered account
When submitting a data rights request, please include your registered email address and a brief description of your request so that we can verify your identity and locate your account records promptly. We may ask you to provide a copy of a government -issued ID to confirm your identity before processing a data access or deletion request — this is a standard security measure to protect your account from unauthorised requests.
Why Your Privacy Is Safe With 11bdt
Six core principles that govern how we handle every piece of personal data on our Bangladesh platform.
SSL Encryption on Every Request
Every page load, login event, and transaction is protected by TLS 1.2+ encryption. Your data travels between your device and our servers in a fully encrypted tunnel — invisible to any third party attempting to intercept it.
Zero Data Selling — Ever
11bdt has never sold player data and will never do so. Your personal information — including your name, mobile number, and bKash or Nagad details — is strictly used to operate your account and deliver our services to you.
Full Access & Control Over Your Data
You can request a complete export of all personal data we hold about you at any time. You also have the right to correct inaccurate data, restrict certain processing, and request permanent deletion — all at no cost to you.
Clear Retention Schedules
We hold your data only for as long as legally required or operationally necessary. Financial records are retained for seven years per AML requirements. When retention periods expire, data is securely deleted or irreversibly anonymised.
21+ Age Gate & KYC Protection
Every 11bdt account undergoes date-of-birth verification at registration and document-based KYC for withdrawals. This protects minors from accessing the platform and ensures that your verified identity is never misused by another party.
Opt-In Marketing Only
Promotional emails, SMS alerts, and WhatsApp messages are sent only to players who have explicitly opted in. You can withdraw marketing consent at any time from your account settings or by messaging our support team — with no impact on your account standing.
Ready to Play on a Platform You Can Trust?
11bdt is built on a foundation of security, fairness, and transparency. Explore our game categories, review our policies, or log in to your account and start playing today.