1111tk Privacy Policy

• Full legal name as it appears on your official identity document.
• Date of birth (required to verify the 21+ age restriction).
• Mobile phone number registered in Bangladesh.
• Email address used for account communications.
• Username and encrypted password.
• Residential address (city/district, Bangladesh).
• Preferred payment method and associated account identifiers (e.g., bKash mobile number, Nagad number).

• Copy of National Identity Card (NID), valid passport, or driver's licence.
• Proof of address document where required (e.g., utility bill, bank statement).
• Proof of payment method ownership where applicable.
• Selfie or liveness check image where required by our KYC process.

• Deposit amounts, timestamps, and payment method references.
• Withdrawal requests, amounts, and processing status.
• Bonus credits, wagering activity, and balance history.
• Transaction identifiers issued by bKash, Nagad, Rocket, Upay, Visa, or Mastercard.

• IP address and approximate geographic location (city/district level).
• Device type, operating system, and browser or app version.
• Pages visited, features accessed, session duration, and click paths.
• Game session data including games played, bet amounts, and outcomes.
• Login timestamps and login attempt history.

We share your payment details and transaction identifiers with our payment partners — including bKash, Nagad, Rocket, Upay, and card processors for Visa and Mastercard — solely to process your deposits and withdrawals. These partners operate under their own privacy policies and are contractually bound to protect your data.

Your identity documents may be shared with third-party KYC verification service providers who assist us in confirming your identity and age. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for any other purpose.

When you play games provided by Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming, your session data (username, bet amounts, game outcomes) is processed by those studios' game servers. This is necessary to run the games and settle results. These studios are certified providers and operate under independent security and privacy standards.

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, valid legal process, or to protect against fraud, money laundering, or other criminal activity. We will notify you of such disclosures where legally permitted to do so.

In the event that 1111tk undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to how your data is handled as a result.

• Strictly Necessary: Session cookies required for login authentication, security token management, and core platform functionality. These cannot be disabled.
• Functional: Cookies that remember your preferences such as language settings and display options to improve your experience.
• Analytics: Anonymised data on how players use the platform — pages visited, session duration, feature engagement — used to improve the platform. No personally identifiable information is included in analytics data.
• Fraud Prevention: Device fingerprinting tokens used to identify and block suspicious login attempts and protect your account.

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored as one-way cryptographic hashes — your actual password is never stored in readable form.
• Access Controls: Strict role-based access controls ensure that only authorised personnel can access sensitive data categories, including KYC documents and financial records.
• Audit Logging: All access to personal data by internal systems and staff is logged and subject to regular audit review.
• Server Security: Our servers are hosted in secure data centre environments with physical access controls, firewalls, intrusion detection systems, and regular security patching.
• Two-Factor Authentication: We encourage all players to use OTP-based login verification to add an additional layer of protection to their accounts.

• Active accounts: All categories of account data are retained for the full duration of your account's active status.
• Closed accounts: Following voluntary account closure, we retain core identification and transaction records for a minimum of five (5) years to comply with anti-money laundering and financial record-keeping obligations.
• KYC documents: Identity documents are retained for the duration required by applicable law, typically five (5) years from the date of verification or account closure, whichever is later.
• Game and betting records: Individual game session and bet records are retained for a minimum of three (3) years for dispute resolution and audit purposes.
• Marketing data: Where you have opted in to marketing communications, your contact preferences are retained until you withdraw consent. Upon opt-out, marketing data is removed within 30 days.
• Anonymised analytics data: Aggregated, anonymised usage data that cannot be linked back to any individual may be retained indefinitely for platform improvement purposes.

You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly.

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations — we may be required to retain certain records even after an erasure request.

You have the right to ask us to pause processing of your data in certain circumstances, for example while a dispute about its accuracy is resolved.

Where technically feasible and where processing is based on consent or contract performance, you may request a copy of your data in a structured, machine-readable format.

You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring or analytics. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds.