gbd11 Privacy Policy

1 Introduction

gbd11 ("the Platform", "we", "us", "our") operates the online betting and gaming services available at https://gbd11.io. As part of delivering these services to players in Bangladesh and beyond, gbd11 collects and processes certain categories of personal data. This Privacy Policy sets out, in clear and accessible language, exactly how that data is handled throughout its entire lifecycle — from collection at registration through to deletion upon account closure.

This Policy applies to all individuals who visit, register on, or interact with the gbd11 Platform, including registered players, prospective players who browse without registering, and individuals who contact our support team. By accessing the gbd11 Platform or creating an Account, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy.

This Privacy Policy should be read alongside gbd11's Terms & Conditions and Responsible Gaming Policy, both of which contain additional obligations and rights that interact with your data and account status.

2 Personal Data We Collect

gbd11 collects personal data through several channels, including the registration process, account management, payment transactions, customer support interactions, and automated platform activity. The categories of data we collect are described below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are 21 years of age or older)
• Email address (used as your primary contact and login identifier)
• Mobile phone number (used for account security and support communications)
• Residential address, including city and postcode (e.g., Dhaka, Chittagong, Sylhet)
• Username chosen during registration
• Account password (stored in irreversibly hashed form — never in plain text)

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of a government-issued photo ID (National ID card, passport, or driving licence)
• Proof of current residential address (utility bill, bank statement, or similar document dated within the last three months)
• Source-of-funds documentation where required by anti-money laundering procedures
• Selfie or live photograph for liveness verification purposes

2.3 Financial Data

• Mobile banking account identifiers for bKash, Nagad, Rocket, and Upay (mobile number associated with the account — no full account credentials are stored)
• Transaction history: deposit amounts, withdrawal requests, timestamps, and payment method used
• Currency denomination (Bangladeshi Taka, ৳ / BDT)

2.4 Behavioural & Usage Data

• Games played, bet amounts, bet outcomes, and session duration
• Sports markets accessed and betting patterns
• Responsible gaming settings and tool activations (deposit limits, self-exclusion, cool-off periods)
• Login timestamps, session lengths, and device type

2.5 Technical Data

• IP address at the time of registration and each subsequent login
• Device identifiers (browser type and version, operating system, screen resolution)
• Geolocation data (country and city level, derived from IP address)
• Cookies and similar tracking technologies (see Section 6)

2.6 Communications Data

• Records of support chat conversations, emails, and WhatsApp messages exchanged with gbd11 staff
• Feedback, complaints, and dispute correspondence
• Survey responses and promotional opt-in preferences

3 How We Use Your Personal Data

gbd11 uses the personal data described in Section 2 for the following purposes. We only process data where we have a lawful basis for doing so (see Section 4).

gbd11 does not use personal data for automated profiling that produces legal or similarly significant effects on players without human oversight. Responsible gaming monitoring is used to protect players, not to make binding decisions without review.

4 Legal Basis for Processing

Every processing activity carried out by gbd11 rests on one of the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, KYC requirements, and record-keeping duties.
• Legitimate interests: Processing carried out in pursuit of gbd11's legitimate business interests — including fraud prevention, security monitoring, platform analytics, and responsible gaming oversight — where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for direct marketing communications and optional personalisation features. You may withdraw consent at any time by contacting [email protected] or adjusting your account preferences.

5 Data Sharing & Third Parties

gbd11 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Game Providers

To deliver casino and slot games, certain technical session data (such as a pseudonymous player token and bet amounts) is transmitted to our Game Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own data protection frameworks and are contractually prohibited from using player data for any purpose other than game delivery and fair-play audit.

5.2 Payment Processors

Payment transaction data is shared with the relevant payment gateway or mobile financial service provider (bKash, Nagad, Rocket, Upay, and others) solely to facilitate deposit and withdrawal processing. gbd11 does not store full payment credentials.

5.3 Identity Verification Services

KYC document data may be processed by third-party identity verification specialists engaged by gbd11 to conduct document authentication and liveness checks. These providers are bound by strict data processing agreements.

5.4 Legal and Regulatory Authorities

gbd11 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the prevention, detection, or prosecution of fraud and financial crime.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gbd11's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and their rights under the new data controller.

6 Cookies & Tracking Technologies

The gbd11 Platform uses cookies and similar technologies to ensure the site functions correctly, to remember your preferences, and to understand how players interact with our services. The following categories of cookies may be set when you visit gbd11:

• Strictly necessary cookies: Essential to the operation of the Platform — including session management, login authentication, and security tokens. These cookies cannot be disabled without affecting core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming display settings. These persist between sessions to improve your experience.
• Analytics cookies: Collect anonymised and aggregated data about how pages are used — such as page view counts, navigation paths, and feature engagement. This data is used internally to improve the Platform and is never linked to your individual identity.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious navigation patterns.

gbd11 does not use third-party behavioural advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

7 Data Retention

gbd11 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applicable to each data category are as follows:

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

8 Data Security

gbd11 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security practices include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the gbd11 Platform is encrypted using industry-standard TLS 1.2 or higher protocols, ensuring that data in transit cannot be intercepted.
• Password hashing: User passwords are never stored in plain text. We apply a strong, salted cryptographic hashing algorithm so that even internal staff cannot read account passwords.
• Access controls: Personal data is accessible only to gbd11 staff members who have a legitimate operational need. Access is governed by role-based permissions and is subject to audit logging.
• Two-factor authentication: Players are encouraged to enable two-factor authentication on their accounts for an additional layer of login security.
• Infrastructure security: The Platform is hosted on hardened server infrastructure with regular vulnerability assessments, intrusion detection systems, and automated threat monitoring.
• Staff training: All gbd11 personnel with access to personal data receive data protection and security awareness training on a regular basis.

Despite these measures, no online system can guarantee absolute security. Players are encouraged to use a strong, unique password for their gbd11 Account and to notify [email protected] immediately if they suspect any unauthorised access to their account.

9 Your Rights Over Your Data

As a player on the gbd11 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Right]". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days.

• Right of Access: You have the right to request a copy of all personal data that gbd11 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account information (name, email, address) can also be updated directly in your Account Settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the processing was unlawful. This right is subject to overriding legal obligations — for example, financial records that must be retained for regulatory purposes cannot be deleted early.
• Right to Restriction: You may request that gbd11 temporarily restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to Object: Where processing is based on legitimate interests, you have the right to object. gbd11 will honour your objection unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

gbd11 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will always inform you in advance if this is the case.

10 Third-Party Links

The gbd11 Platform may contain links to or integrations with third-party services — including Game Provider platforms, payment gateways, and promotional partner pages. These third-party services operate under their own privacy policies, which gbd11 does not control and is not responsible for.

We encourage players to review the privacy practices of any third-party service before providing personal information. The inclusion of a link or integration on the gbd11 Platform does not constitute an endorsement of the third party's data practices.

11 Children's Privacy

The gbd11 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that a person under 21 has provided us with personal data, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor in their care has registered on the gbd11 Platform are urged to contact us immediately at [email protected]. We will investigate and act without delay.

12 Updates to This Privacy Policy

gbd11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will notify registered players by email or via an on-site notice, providing at least 7 days' advance notice before the revised policy takes effect.

The version date displayed at the top of this document indicates when the current version came into force. We encourage players to review this Policy periodically. Continued use of the Platform after any revised Policy takes effect constitutes acceptance of the updated terms.

Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gbd11 handles your personal data, please reach out to us through any of the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in the subject line
• Live Chat: Available 24/7 directly on the gbd11 Platform
• WhatsApp: +880 1700 000 000 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

All privacy-related requests will be handled by a designated member of our data team. We aim to acknowledge all enquiries within 2 business days and to provide a full response within 30 days. For complex requests involving large volumes of data, we will notify you if additional time is required.