gd11 Privacy Policy — How We Handle Your Personal Data

gd11 ("gd11", "we", "us", or "our") operates the online betting and casino platform available at gd11.io. We are committed to safeguarding the privacy and personal data of every individual who interacts with our platform, whether as a registered account holder, a visitor to our website, or a user of our mobile interface.

This Privacy Policy sets out in clear terms the categories of personal data we collect, the purposes for which that data is processed, the legal basis on which processing occurs, how long data is retained, and the rights available to you in connection with your personal data. This policy applies to all personal data collected through gd11.io and any associated subdomains, applications, or communication channels operated by gd11.

By registering a gd11 account or by continuing to use the gd11 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must cease using the platform and may request account closure by contacting our support team at [email protected].

gd11 collects personal data through multiple touchpoints across the account lifecycle. The categories of personal data we collect include, but are not limited to, the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required for legally mandated identity verification procedures.

gd11 processes personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to fulfil the contract between gd11 and the account holder — including account creation, deposits, withdrawals, bet settlement, and bonus management.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and fraud prevention duties.
• Legitimate interests: Processing carried out for gd11's legitimate business interests, including platform security, fraud detection, product improvement, and responsible gaming monitoring — provided those interests are not overridden by the individual's privacy rights.
• Consent: Where gd11 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by contacting support or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

gd11 uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining, and administering your gd11 account, verifying your identity, and processing your login credentials.
• Service delivery: Enabling you to place bets on cricket markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures), access live casino games, play slot titles, and participate in crash game rounds.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported Bangladeshi payment channels.
• Bonus and promotions administration: Verifying eligibility for promotional offers, crediting bonus funds, monitoring wagering requirement progress, and enforcing bonus terms.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other prohibited conduct as defined in the gd11 Terms & Conditions.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour, enforcing self-exclusion periods and deposit limits, and providing responsible gaming support where appropriate.
• Customer support: Responding to support enquiries, resolving complaints, and communicating account-related updates via email or in-platform notification.
• Legal compliance: Meeting reporting obligations under applicable anti-money laundering legislation, retaining transaction records as required by law, and responding to lawful requests from relevant authorities.
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, user experience, and promotional effectiveness. Such analysis is conducted on anonymised or pseudonymised datasets wherever possible.
• Marketing communications (consent-based): Sending promotional emails, SMS notifications, or in-platform messages regarding new games, seasonal promotions (e.g., Eid, BPL season offers), and platform updates — only where you have provided consent or where applicable law permits such communications.

gd11 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, and Ezugi may receive technical session data (such as player session tokens) necessary to authenticate your access to their games. These providers do not receive your full identity or financial records.
• Payment service providers: Your payment method details are shared with the relevant payment processor (bKash, Nagad, Rocket, Upay, or partner banks) only to the extent necessary to process the specific transaction you have initiated.
• Identity verification services: Where gd11 uses a third-party KYC provider to verify identity documents, the relevant identity and verification data is shared with that provider under strict data processing terms.
• Fraud detection and security providers: gd11 may share technical and usage data with fraud prevention and cybersecurity service providers to identify and mitigate security threats to the platform.
• Legal and regulatory authorities: gd11 will disclose personal data to law enforcement, financial intelligence units, or other regulatory authorities where required to do so by applicable law, by court order, or in connection with a lawful investigation.
• Professional advisers: Legal, accounting, and compliance advisers engaged by gd11 may have access to personal data on a confidential, need-to-know basis in connection with their professional services.

gd11 does not transfer personal data to countries outside the applicable data protection framework without ensuring that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection law.

The gd11 platform uses cookies and similar tracking technologies to provide core platform functionality, improve the user experience, and support security and fraud prevention measures. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the platform to function correctly, including session authentication, load balancing, and security token management. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, recently played games, and display options, so that these do not need to be re-entered on each visit.
• Analytics cookies: Used to collect aggregated information about how users navigate and interact with the gd11 platform, enabling us to identify areas for improvement. Analytics data is processed in pseudonymised form where possible.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and account takeover risks. These cookies store technical identifiers that assist in distinguishing legitimate users from automated threats.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the gd11 platform and may prevent login. gd11 does not use third-party advertising cookies or cross-site behavioural tracking for advertising purposes.

gd11 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account data: Retained for the duration of the active account relationship and for a period of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC verification documents: Identity documents submitted during the KYC process are retained for a period of 5 years following account closure or the date of submission, whichever is later.
• Customer support records: Support correspondence and complaint records are retained for 3 years from the date of the final communication, to support dispute resolution and service quality monitoring.
• Marketing consent records: Records of consent provided for marketing communications are retained for the duration of the active marketing relationship and for 2 years after consent is withdrawn.
• Technical and usage data: Log files and session data are retained for up to 12 months for security and fraud investigation purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gd11's internal data disposal procedures. Anonymised data that can no longer be attributed to an identifiable individual may be retained indefinitely for aggregated analytical purposes.

gd11 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following:

• SSL/TLS encryption: All data transmitted between your device and the gd11 platform is encrypted using industry-standard 128-bit SSL/TLS protocols. This ensures that your login credentials, personal data, and financial information cannot be intercepted in transit.
• Access controls: Access to personal data stored on gd11 systems is restricted on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Database security: Player data is stored in encrypted databases with access logging enabled. Database access is restricted to authorised personnel and is subject to regular security audits.
• Fraud detection systems: Automated monitoring systems analyse account activity in real time to detect anomalous patterns consistent with account takeover, fraudulent transactions, or policy violations. Flagged accounts are reviewed by a dedicated security team.
• Penetration testing: gd11 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate weaknesses in the platform infrastructure.
• Incident response: gd11 maintains a documented data breach response procedure. In the event of a data security incident that is likely to result in risk to affected individuals, gd11 will notify the relevant parties in accordance with applicable legal obligations.

As a gd11 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the gd11 support team at [email protected]. gd11 will respond to all rights requests within 30 calendar days of receipt.

Please note that certain rights are subject to limitations. For example, gd11 cannot erase personal data that must be retained to comply with anti-money laundering legislation, to resolve a pending dispute, or to enforce existing agreements. Where a request cannot be fulfilled in full, gd11 will explain the reason in writing.

The gd11 platform may contain references to third-party game providers, payment processors, and other service partners. While gd11 works only with established and reputable providers — including Pragmatic Play, Evolution Gaming, PG Soft, JILI, bKash, Nagad, and Rocket — gd11 does not control the privacy practices of these third parties and is not responsible for the content or privacy policies of any third-party services.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the gd11 platform. gd11's Privacy Policy applies exclusively to data collected and processed by gd11 in connection with gd11.io and associated platform services.

The gd11 platform is strictly intended for adults aged 21 years and above. gd11 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Registration on the gd11 platform by any person under 21 is prohibited and constitutes a violation of the gd11 Terms & Conditions.

If gd11 becomes aware that personal data has been submitted by a person under the minimum age, that account will be suspended immediately, all associated data will be reviewed, and the data will be deleted in accordance with gd11's data disposal procedures. Any balances or winnings associated with an underage account will be handled in accordance with the gd11 Terms & Conditions.

gd11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, gd11 will update the effective date at the top of this document and, where practicable, notify registered account holders via the email address on record.

Your continued use of the gd11 platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to remain informed of how gd11 handles your personal data. If you disagree with any update to this policy, you may contact gd11 support to discuss account closure.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how gd11 handles your personal data, please contact our support team. All privacy-related enquiries are handled by the gd11 data protection team.

Support email: [email protected] (plain text — not a clickable link).

gd11 will acknowledge privacy-related requests within 5 business days of receipt and will aim to provide a substantive response within 30 calendar days. Where a request is complex or where a high volume of requests is being processed simultaneously, the response period may be extended by a further 30 days, in which case gd11 will notify you of the extension and the reasons for it.