bdg11 Privacy Policy

Introduction

bdg11 is an online betting and casino platform serving English-speaking players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We offer sports betting, live casino games, slots, crash games, and fishing games, with full support for Bangladeshi Taka (৳) transactions via bKash, Nagad, Rocket, and Upay.

As part of delivering these services, bdg11 necessarily processes certain personal data about our players. We take this responsibility seriously. This Policy sets out, in plain English, exactly what data we collect, why we need it, how we protect it, and the rights you have in relation to it. If you have any questions about how your data is handled, our support team is available at [email protected] at any time.

This Policy applies to all personal data collected through the bdg11 website (bdg11.io), mobile-optimised browser sessions, support communications, and any other channel through which you interact with the Platform.

Data Controller

For the purposes of applicable data protection law, bdg11 acts as the data controller in respect of the personal data collected from Platform users. As data controller, bdg11 determines the purposes for which your personal data is collected and the means by which it is processed.

Where third-party service providers process personal data on our behalf — for example, payment processors such as bKash or Nagad, or identity verification partners — those providers act as data processors under our instruction and are bound by contractual data processing obligations consistent with this Policy.

Data We Collect

bdg11 collects personal data across several categories, depending on the nature of your interaction with the Platform. The principal categories are as follows:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification numbers (such as National ID or passport number) collected during registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address, used for account management and support communications.
• Financial Data: Mobile Financial Service (MFS) account numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, deposit and withdrawal transaction records, and account balance history. This data is required to process payments and comply with anti-money laundering (AML) obligations.
• Technical Data: IP address, browser type and version, device type and operating system, session timestamps, and login history, collected automatically when you access the Platform.
• Usage Data: Betting history, game participation records, pages visited, time spent on the Platform, and feature interactions, collected to improve platform performance and monitor responsible gaming indicators.
• Communications Data: The content of messages you send to our support team via email, live chat, or any other channel, retained for quality assurance and dispute resolution purposes.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, and records of any preferences you have expressed regarding the types of offers you wish to receive.

We do not intentionally collect sensitive personal data such as health information, biometric data, political opinions, or religious beliefs. If you voluntarily disclose such information in a support communication, we will handle it with appropriate care and will not use it for purposes beyond resolving the specific matter raised.

How We Collect Your Data

bdg11 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical and usage data collected automatically by our platform infrastructure when you browse or interact with bdg11.io, including server logs, session cookies, and analytics tools.
• Third-party sources: Identity verification data returned by our KYC partners following document checks; transaction confirmation data received from MFS providers such as bKash, Nagad, Rocket, and Upay following payment processing.
• Inferred data: Behavioural patterns and risk indicators derived from your usage data and betting history, used for responsible gaming monitoring and fraud detection.

How We Use Your Data

bdg11 uses the personal data it collects for the following specific purposes:

• Account management: To create and maintain your bdg11 account, verify your identity and age (21+ requirement), and administer your account settings and preferences.
• Transaction processing: To process deposits, withdrawals, and any internal account transfers, and to maintain accurate financial records of all transactions associated with your account.
• KYC and AML compliance: To satisfy Know Your Customer obligations, verify the source of funds where required, and comply with anti-money laundering regulations applicable to the Platform.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance in relation to your account or any Platform service.
• Security and fraud prevention: To monitor for suspicious activity, detect and prevent fraud, protect the integrity of betting markets, and identify violations of our Terms and Conditions.
• Responsible gaming: To monitor your gameplay and betting patterns for indicators of problem gambling, to apply limits or restrictions you have requested, and to contact you if we identify concerning patterns of behaviour.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the performance, design, and features of the Platform.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and information about new games or features. You may withdraw consent at any time.

bdg11 does not use personal data for automated decision-making processes that produce significant legal effects without human oversight, except where such processes are necessary for fraud prevention or AML compliance, in which case affected players will be informed and given the opportunity to request human review.

Legal Basis for Processing

Every instance of personal data processing at bdg11 is conducted on one of the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as an account holder — including account administration, transaction processing, and customer support — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML record-keeping, and age verification, is conducted on the basis of legal obligation.
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement is conducted on the basis of our legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications is conducted solely on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

bdg11 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process your transactions. These providers operate under their own data protection policies and applicable regulations.
• Identity verification providers: KYC and AML compliance partners receive identity documents and personal details solely for the purpose of conducting verification checks on behalf of bdg11.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymous session data (such as stake amounts and game outcomes) necessary to operate their game engines within the Platform. These providers do not receive personally identifiable information beyond what is technically required.
• Legal authorities: bdg11 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdg11's business, personal data held by the Platform may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party data processors engaged by bdg11 are required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

Cookies and Tracking Technologies

bdg11 uses cookies and similar tracking technologies to operate core platform functions, maintain your session state, and gather analytics data. The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, login state persistence, and security tokens. These cookies cannot be disabled without affecting platform functionality.
• Analytical cookies: Used to collect aggregated data about how players use the Platform — such as pages visited, features used, and session durations — to help us improve performance and user experience. This data is anonymised wherever possible.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and unusual access patterns.

Most browsers allow you to control cookie settings through their privacy or settings menus. Disabling strictly necessary cookies may prevent you from using certain Platform features, including account login. Disabling analytical cookies will not affect your ability to use the Platform but will limit our ability to improve it based on usage data.

Data Security

bdg11 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage for sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific function;
• Multi-factor authentication options available to all account holders;
• Regular security audits and penetration testing of Platform infrastructure;
• Automated monitoring systems that detect and alert on suspicious access patterns or data anomalies.

While bdg11 takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

In the event of a data breach that is likely to result in a high risk to your rights or interests, bdg11 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Data Retention

bdg11 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Identity and contact data: Retained for the duration of your account plus five (5) years following account closure, to satisfy KYC and regulatory record-keeping obligations.
• Financial transaction data: Retained for seven (7) years from the date of the transaction, in accordance with standard AML compliance requirements.
• Technical and usage data: Retained for a maximum of twenty-four (24) months from collection, after which it is anonymised or deleted.
• Support communications: Retained for three (3) years from the date of last interaction, for quality assurance and dispute resolution purposes.
• Marketing preference records: Retained for the duration of your account, or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or permanently anonymised such that it can no longer be attributed to any identifiable individual.

Your Rights

As a bdg11 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account details and a description of your request. We will respond within a reasonable period and in any event within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data bdg11 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or a contractual obligation, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests, including profiling for responsible gaming purposes.

Children and Minors

bdg11 employs age verification procedures during the KYC process to confirm that account holders meet the minimum age requirement of 21 years. If you are a parent or guardian and believe that a minor in your care has created a bdg11 account, please contact our support team at [email protected] immediately so that we can take appropriate action.

Third-Party Links

The bdg11 platform may contain references to third-party services, including game providers and payment partners. While we take care to work only with reputable third parties, bdg11 is not responsible for the privacy practices of external organisations. This Privacy Policy applies solely to data processed by bdg11 in connection with the operation of bdg11.io.

When you interact with a third-party service — for example, when completing a bKash or Nagad payment — you are subject to that provider's own terms and privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with your bdg11 account.

Updates to This Privacy Policy

bdg11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, the updated Policy will be published on this page with a revised effective date. Where practicable, registered Players will be notified of significant changes via their registered contact details.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and request account closure by contacting [email protected].

We recommend that you review this Policy periodically to remain informed about how bdg11 protects and uses your personal data. The current effective date is always displayed at the top of the Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bdg11 handles your personal data, please contact our support team using the details below. We are available around the clock and aim to respond to all data-related enquiries within 48 hours (BST).

When contacting us regarding a data rights request, please include your registered account email address and a clear description of your request so we can locate your records and respond efficiently.