bdt11 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") is issued by bdt11 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register on, or otherwise interact with the bdt11 website located at https://bdt11.io and all associated mobile interfaces, APIs, and digital services.

bdt11 is committed to handling all personal data responsibly, transparently, and in accordance with recognised data protection principles. This Policy describes what personal data we collect, the purposes for which we process it, the legal grounds on which we rely, how long we retain it, with whom we share it, and the rights available to you.

By registering a bdt11 account, depositing funds, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the bdt11 platform.

2 Data Controller Information

For the purposes of this Privacy Policy, bdt11 acts as the data controller in respect of all personal data collected from players through the platform. As data controller, bdt11 determines the purposes and means of processing your personal data.

If you have any questions, concerns, or requests relating to the processing of your personal data, please contact the bdt11 Data Protection team using the details provided in Section 15 of this Policy. All privacy-related enquiries will be handled within 30 calendar days of receipt.

3 Personal Data We Collect

bdt11 collects several categories of personal data. The specific data collected depends on the nature of your interaction with the platform. The primary categories are as follows:

bdt11 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for identity document verification.

4 How We Collect Your Data

bdt11 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and analytics scripts when you navigate the bdt11 platform. See Section 10 for full details on cookies.
• Third-party identity verification providers: Where you submit identity documents for KYC, bdt11 may use a third-party verification service to validate the authenticity of the documents. The verification provider returns a pass/fail result and confirmation data to bdt11.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a supported bank, basic transaction reference data is shared with bdt11 by the payment processor to confirm the completion of the transaction.
• Fraud prevention services: bdt11 may receive device reputation signals and fraud risk scores from third-party fraud prevention partners to protect the platform and its players.

5 Legal Basis for Processing

bdt11 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering — for example, processing deposits, settling bets, and managing withdrawals.
• Legitimate interests: Processing conducted to pursue our legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and improving the platform experience, provided those interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification (KYC/AML obligations), record-keeping requirements, and responding to lawful requests from regulatory or law enforcement authorities.
• Consent: Where we rely on your consent to process data — for example, sending you promotional emails or SMS messages about bonuses and offers — you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting support.

6 How We Use Your Personal Data

bdt11 uses your personal data for the following purposes:

• Account creation and management: Setting up and maintaining your bdt11 player account, including storing your profile, preferences, and account history.
• Identity verification: Confirming your identity and age (21+ requirement) in accordance with our KYC procedures to comply with anti-money laundering and responsible gaming obligations.
• Payment processing: Processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and maintaining accurate transaction records.
• Service delivery: Providing access to cricket betting, live casino games, slot games, and all other platform features available on bdt11.
• Customer support: Responding to your enquiries, resolving disputes, processing account requests, and providing technical assistance.
• Security and fraud prevention: Monitoring account activity to detect and prevent fraud, unauthorised access, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring betting patterns to identify signs of potentially problematic gambling behaviour and, where appropriate, reaching out to offer responsible gaming tools such as deposit limits or self-exclusion.
• Marketing and promotions: Sending promotional communications about bdt11 bonuses, cricket betting offers, seasonal promotions (BPL, IPL, Eid, Pohela Boishakh), and new game launches — only to players who have opted in to receive such communications.
• Platform improvement: Analysing usage data in aggregate and anonymised form to understand how players use the platform and to improve features, performance, and user experience.
• Legal compliance: Retaining records and responding to legal obligations, court orders, and requests from regulatory or law enforcement authorities.

7 Data Sharing and Third Parties

bdt11 does not sell, rent, or trade your personal data. We share personal data only with third parties where it is necessary to deliver our services, comply with legal obligations, or protect the security of the platform. The categories of third parties with whom data may be shared are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank — solely to process your financial transactions.
• Identity verification providers: Third-party KYC and document verification services used to validate identity documents submitted during account verification.
• Fraud prevention and security services: Providers of device fingerprinting, IP reputation, and transaction fraud scoring services used to protect the platform and its players.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary to deliver their games within the bdt11 platform. These providers do not receive your identity or payment data.
• Cloud and hosting infrastructure: Providers of server infrastructure, content delivery networks, and database services on which the bdt11 platform operates. All such providers are contractually bound to process data only on bdt11's instructions and to maintain appropriate security standards.
• Legal and regulatory authorities: Where required by a valid court order, warrant, or regulatory requirement, bdt11 may disclose personal data to law enforcement or regulatory bodies. bdt11 will notify affected players of such disclosures where legally permitted to do so.

8 International Data Transfers

bdt11 is a platform serving players in Bangladesh. In the course of providing our services, some personal data may be processed by servers or service providers located outside of Bangladesh. Where such international transfers occur, bdt11 takes reasonable steps to ensure that your data receives an equivalent level of protection to that described in this Policy.

Specifically, bdt11 addresses international transfer risks by:

• Using contractual data processing agreements with all international service providers that include data protection obligations.
• Preferring service providers that operate data centres in regions with recognised data protection standards.
• Applying end-to-end encryption for all data in transit, regardless of the geographic path of transmission.

9 Data Retention

bdt11 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your registered account relationship with bdt11, plus a minimum of 5 years following account closure, to satisfy record-keeping and AML compliance requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction in the relevant support case.
• Marketing data (where consent was given): Retained until you withdraw consent or for 2 years from your last engagement with a marketing communication, whichever comes first.
• Technical and usage logs: Typically retained for 12 months in identifiable form, after which they may be aggregated and anonymised for analytical purposes without further time limit.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from bdt11 systems or anonymised in a manner that makes re-identification impossible.

10 Cookies and Tracking Technologies

bdt11 uses cookies and similar technologies (including web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit the bdt11 website. They serve the following functions:

• Strictly necessary cookies: Required for core platform functions such as maintaining your login session, remembering your language preference, and enabling secure payment flows. These cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the platform — such as which pages are most visited and where errors occur — to help bdt11 improve the platform experience.
• Functional cookies: Used to remember your preferences, such as preferred game category, display settings, and responsible gaming limits you have configured.
• Security cookies: Used to detect fraud signals, prevent cross-site request forgery (CSRF), and protect your account from unauthorised access attempts.

bdt11 does not use third-party advertising or retargeting cookies. You will not see bdt11 advertisements following you across other websites as a result of cookies set by our platform.

11 Security Measures

bdt11 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bdt11 servers.
• Cryptographic password hashing — your account password is never stored in plain text. bdt11 staff cannot read your password.
• Access controls — personal data is accessible only to bdt11 staff and systems with a legitimate operational need. All staff access is logged and audited.
• Firewall and intrusion detection systems monitoring platform infrastructure for unusual access patterns or attack attempts.
• Regular security assessments including vulnerability scanning of platform infrastructure and application code.
• Incident response procedures — in the event of a confirmed data breach that poses a risk to affected players, bdt11 will notify affected individuals promptly and take immediate remediation steps.

12 Your Data Rights

As a player whose personal data is processed by bdt11, you have the following rights in relation to that data. To exercise any of these rights, please contact our support team at the details provided in Section 15. bdt11 will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data bdt11 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data bdt11 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that bdt11 delete your personal data where there is no longer a legitimate legal or contractual basis for its retention. Note that some data may need to be retained for a defined period to meet legal obligations, as described in Section 9.
• Right to Restriction: You may request that bdt11 restrict the processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we investigate.
• Right to Data Portability: You may request a copy of the personal data you have provided to bdt11 in a structured, machine-readable format, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your data based on legitimate interests, including profiling for responsible gaming monitoring. bdt11 will assess your objection and cease processing unless there are compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

13 Children and Minors

The bdt11 platform is strictly restricted to individuals aged 21 and above. bdt11 does not knowingly collect personal data from anyone under the age of 21. If bdt11 discovers that a registered account belongs to an individual under 21, the account will be immediately suspended, all data will be reviewed, and the account will be closed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered on bdt11, please contact us immediately at [email protected]. We will investigate and take appropriate action as a priority.

14 Changes to This Policy

bdt11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When material changes are made to this Policy, bdt11 will notify registered players by email and/or by displaying a prominent notice within the platform at least 7 days before the revised Policy takes effect.

For non-material changes — such as typographical corrections or clarifications that do not alter the substance of any provision — bdt11 may update the Policy without providing individual notice. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the bdt11 platform after the effective date of a revised Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please stop using the platform and contact our support team to close your account and arrange return of any eligible balance.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the bdt11 Data Protection team using the details below. All privacy enquiries are treated with strict confidentiality.

For general account support, live chat within your bdt11 account is the fastest channel. For formal data rights requests or privacy complaints, please use the email address above so that we can create a documented record of your request and our response.