11bad Privacy Policy – How We Handle Your Data

1. Data Controller

The data controller responsible for your personal data is the operator of the 11bad platform ("11bad", "We", "Us"). 11bad operates the online casino and sports betting platform accessible at https://11bad.ws and is responsible for determining the purposes and means by which your personal data is processed. If you have any questions about how 11bad handles your personal data, or if you wish to exercise any of your data rights, please contact us at [email protected].

This Policy applies to all personal data collected through the 11bad website, mobile web interface, customer support communications, and any other channel through which you interact with 11bad. It does not apply to third-party websites or services that may be linked to or from the 11bad platform — those services operate under their own privacy policies.

2. Personal Data We Collect

11bad collects personal data in two ways: data you provide directly when registering and using the platform, and data collected automatically as you use the platform. The categories of personal data 11bad may collect include:

• Registration and identity data: your full name, date of birth, mobile phone number, and any government-issued identity documentation you submit for KYC (Know Your Customer) verification purposes.
• Financial transaction data: deposit amounts, withdrawal requests, payment method identifiers (such as bKash or Nagad mobile wallet numbers), transaction timestamps, and transaction reference numbers. 11bad does not store full bKash or Nagad PIN numbers — only the mobile number and transaction reference needed to process and reconcile payments.
• Gaming activity data: game history, betting history, session duration, wager amounts, winnings, and bonus usage. This data is used to manage your account balance, calculate bonuses, enforce responsible gaming limits, and detect unusual activity.
• Device and technical data: IP address, device type, operating system, browser type, screen resolution, session start and end times, and pages visited within the 11bad platform. This data is collected automatically via server logs and is used for security monitoring, fraud detection, and platform performance optimisation.
• Customer support communications: the content of any messages, emails, or support tickets you submit to 11bad, including any attachments or screenshots. These are retained to maintain a record of support interactions and to improve service quality.

3. How We Use Your Personal Data

11bad uses your personal data for the following purposes, each of which is grounded in a legitimate legal basis — either your consent, the performance of the contract between you and 11bad, compliance with legal obligations, or 11bad's legitimate interest in operating a safe and fair platform:

• Account management: to create, maintain, and administer your 11bad player account, including processing deposits and withdrawals, calculating account balances, and applying bonus credits correctly.
• Identity verification and fraud prevention: to verify that you meet the eligibility requirements for using 11bad (including age verification), to prevent the creation of duplicate accounts, to detect and investigate suspicious activity, and to protect the platform from fraud, money laundering, and other financial crimes.
• Responsible gaming compliance: to monitor betting patterns and flag accounts that may exhibit signs of problem gambling, and to enforce any deposit limits, time-out periods, or self-exclusion requests that you have set on your 11bad account.
• Legal and regulatory compliance: to maintain financial records as required by applicable law, to respond to lawful requests from government or regulatory authorities, and to enforce 11bad's Terms and Conditions.

4. Data Storage and Security

11bad stores personal data on secure servers protected by industry-standard security measures. All data in transit between your device and our servers is encrypted using SSL (Secure Sockets Layer) technology. Access to personal data within 11bad is restricted to personnel who require it to perform their specific job functions, and all such personnel are subject to confidentiality obligations.

11bad retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Financial transaction records are typically retained for a minimum of five years following account closure to meet standard record-keeping obligations. Account and gaming history data is retained for the duration of the account relationship and for a period of up to three years following permanent account closure. When data is no longer required, 11bad will securely delete or anonymise it.

5. Sharing of Personal Data

11bad does not sell, rent, or trade your personal data to third parties for marketing or commercial exploitation. 11bad may share personal data with third parties only in the following limited circumstances:

• Payment processors: 11bad shares the minimum necessary transactional data with bKash, Nagad, Rocket, Upay, and other payment providers to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and is independently responsible for the data it receives.
• Fraud prevention and security services: 11bad may share device and behavioural data with fraud prevention service providers to detect and prevent fraudulent activity, account takeovers, and money laundering on the platform.
• Legal authorities: 11bad will disclose personal data to government agencies, regulators, law enforcement bodies, or courts where required to do so by applicable law, court order, or regulatory directive. 11bad will not disclose more data than is required to satisfy the relevant legal obligation.

6. Cookies and Tracking Technologies

11bad uses cookies and similar technologies to maintain your login session, remember your platform preferences, and gather anonymised usage statistics that help us improve the platform. A "cookie" is a small text file placed on your device by your browser when you access a website. 11bad uses the following categories of cookies: essential session cookies (required for the platform to function — these cannot be disabled without breaking the platform), preference cookies (which remember your settings between sessions), and analytics cookies (which collect anonymised data about how users navigate the platform).

11bad does not use third-party advertising cookies and does not permit advertising networks to place tracking cookies on the 11bad platform. Analytics data collected through cookies is aggregated and anonymised before use — it is not linked back to individual player accounts. You can manage cookie preferences through your browser settings, but please note that disabling essential cookies will prevent you from logging into your 11bad account.

7. Your Data Rights

As a user of the 11bad platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact 11bad at [email protected]. 11bad will respond to data rights requests within 30 days of receipt. Some rights are subject to legal limitations — for example, 11bad cannot delete financial transaction records that it is legally required to retain. Where a legal limitation applies, 11bad will explain this clearly in its response.

• Right of access: you may request a copy of all personal data that 11bad holds about you. 11bad will provide this in a structured, commonly used, and machine-readable format within 30 days.
• Right of rectification: if any personal data held about you is inaccurate or incomplete, you may request that it be corrected. Where 11bad shares your data with third parties, it will notify those third parties of the correction where practicable.
• Right of erasure: you may request deletion of your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, you withdraw consent (where consent was the processing basis), or the processing is unlawful. This right does not apply where retention is required by law.
• Right to restrict processing: in certain circumstances you may request that 11bad restricts its processing of your personal data — for example, while a rectification request is being investigated, or where you dispute the lawfulness of processing.
• Right to object: you may object to the processing of your personal data where that processing is based on 11bad's legitimate interests. 11bad will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

8. Children and Minors

The 11bad platform is strictly intended for adults aged 21 and above. 11bad does not knowingly collect personal data from persons under the age of 21. If 11bad becomes aware that personal data has been collected from a person under 21 years of age, it will delete that data promptly and close the associated account. If you are a parent or guardian and believe that your child has registered on 11bad, please contact [email protected] immediately.

Parents and guardians who share a device with their children are encouraged to use device-level parental controls to prevent underage access to online gambling platforms, including 11bad. Information about parental control tools for Android and iOS devices is widely available from device manufacturers and mobile network providers.

9. International Data Transfers

11bad's primary servers are located in secure data centres serving the Bangladesh and South Asia region. In some cases, data may be processed by third-party service providers (such as fraud prevention or technical infrastructure providers) whose servers may be located outside Bangladesh. Where such transfers occur, 11bad takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those required under applicable data protection law.

11bad will not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without implementing appropriate safeguards. If you would like more information about the safeguards 11bad applies to international data transfers, please contact [email protected].

10. Changes to This Privacy Policy

11bad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, 11bad will notify registered users by posting a prominent notice on the platform or by sending a notification to the mobile number associated with your account. The date at the top of this Policy indicates when it was last updated.

Your continued use of the 11bad platform following notification of any change to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the 11bad platform and may request account closure by contacting [email protected]. 11bad encourages you to review this Policy periodically so that you remain informed about how your personal data is being handled.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 11bad handles your personal data, please contact us at: [email protected]. Our support team is available to handle privacy-related queries and will aim to respond within 48 hours of receipt. For data rights requests (access, rectification, erasure, restriction, or objection), please include your registered mobile number and a brief description of your request so that we can locate your account and process your request efficiently.

12. Governing Law

This Privacy Policy is governed by applicable law. By using the 11bad platform, you acknowledge that any dispute arising out of or relating to this Policy or to 11bad's processing of your personal data shall be subject to the dispute resolution process described in 11bad's Terms and Conditions. Nothing in this Policy limits any rights you may have under applicable data protection or consumer protection legislation.

This Privacy Policy, together with 11bad's Terms and Conditions, constitutes the complete agreement between you and 11bad with respect to the collection, use, and protection of your personal data. If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.