Privacy Policy

01 Data We Collect

When you interact with gbd11 — whether by browsing gbd11.app, creating an account, funding your wallet, or placing bets — we may collect and process the following categories of personal data:

Identity & Contact Data:

• Full legal name, date of birth, and gender
• Email address and mobile phone number
• Residential address (district, city, and division within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Government-issued identification details (National Identity Card number, passport number) collected during KYC verification

Account & Transaction Data:

• Account username, hashed password, and account creation date
• Deposit and withdrawal history, transaction amounts in BDT (৳), and associated payment method identifiers (e.g., registered bKash or Nagad mobile number)
• Bonus and promotion activity, wagering history, and game session records
• Responsible gaming settings including deposit limits, session limits, and self-exclusion status

Technical & Usage Data:

• IP address, device type, operating system, and browser type at the time of each session
• Pages visited on gbd11.app, time spent on each page, navigation paths, and features used
• Geolocation data (country and city level only, derived from IP address — we do not collect GPS coordinates)
• Session duration, login timestamps, and logout events

Communications Data:

• The content of messages you send to our support team via email at [email protected]
• Feedback, complaints, and dispute records submitted through any channel

02 How We Use Your Data

gbd11 processes your personal data only for lawful, specified, and legitimate purposes. The following table sets out the primary purposes for which your data is used and the legal basis on which we rely for each:

gbd11 will never use your personal data for purposes materially different from those described above without first notifying you and, where required, obtaining your explicit consent. You may withdraw consent to promotional communications at any time by contacting our support team.

03 Data Sharing & Third Parties

gbd11 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We may share your data with the following categories of carefully vetted third parties, and only to the extent necessary for the specific purpose described:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum transaction data required to process your deposit or withdrawal. These partners operate under their own privacy policies and are bound by the data protection requirements of their respective banking and financial services regulations.
• KYC and Identity Verification Providers: Where third-party identity verification services are engaged, your identity documents and related data are shared solely for the purpose of verifying your identity. These providers are contractually prohibited from using your data for any other purpose.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session identifiers necessary for game delivery and integrity verification. They do not receive your full personal profile.
• Platform Infrastructure and Security Providers: Cloud hosting, content delivery, cybersecurity, and fraud detection partners who process data only on our behalf and under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or the instruction of a competent regulatory authority, gbd11 may disclose personal data without prior notice to you. In all such cases, only the minimum data necessary to satisfy the legal requirement will be disclosed.

04 Cookies & Tracking Technologies

gbd11 uses cookies, web beacons, and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit gbd11.app. Cookies allow the platform to recognise your device across sessions and provide a consistent, personalised experience.

Types of cookies used by gbd11:

gbd11 does not place any third-party advertising or social media tracking cookies on gbd11.app. You will not be tracked across other websites for commercial retargeting purposes based on your activity on gbd11.

You may manage or disable cookies at any time through your browser's privacy or settings menu. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from logging in or completing transactions. Disabling analytical cookies will not affect your ability to use any platform feature.

05 Data Retention & Storage

gbd11 retains your personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. The following retention schedule applies to the primary categories of data we hold:

• Active Account Data: Retained for the full duration of your active relationship with gbd11, plus a minimum of five years following account closure. This retention period is required to satisfy our anti-money laundering (AML) and financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five years in compliance with financial regulation applicable to payment processing and gaming operations.
• Support Communications: Retained for three years from the date of the most recent communication in a support thread, or for the duration of any active dispute, whichever is longer.
• Technical and Usage Data (Logs): Retained for up to 13 months for security and performance analysis purposes, after which logs are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for up to three years thereafter, as evidence of consent in the event of a regulatory inquiry.

When the applicable retention period expires and there is no other legal basis for continued retention, your personal data is securely deleted or irreversibly anonymised in accordance with recognised data destruction standards.

06 Your Privacy Rights

As a player registered on gbd11, you hold a number of rights in relation to your personal data. gbd11 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. The following rights apply to your personal data held by us:

• Right of Access: You may request a copy of all personal data that gbd11 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as email address and phone number) directly via your account settings panel.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing was unlawful. Note that this right may be limited where we are legally required to retain data (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we transfer your personal data to you or to another service provider in a structured electronic format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Once an objection is received and verified, we will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our support team by email at [email protected]. Please include your full name, registered email address, and a clear description of the right you wish to exercise. We may ask for additional verification before processing your request to protect against fraudulent access to another person's data.

07 Data Security Measures

gbd11 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following controls:

• Transport Layer Security (TLS): All data exchanged between your browser or app and the gbd11 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed without interruption.
• At-Rest Encryption: Personal data stored in gbd11's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed and rotated according to a defined key management policy.
• Access Controls: Access to systems containing personal data is restricted to authorised gbd11 personnel and contractors on a strict need-to-know basis. Multi-factor authentication (MFA) is enforced for all administrative access.
• Intrusion Detection and Monitoring: gbd11's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and security events. Automated alerts are reviewed by our security team around the clock.
• Vulnerability Management: gbd11 conducts regular security assessments, including internal vulnerability scans and periodic third-party penetration tests, to identify and remediate security weaknesses before they can be exploited.
• Staff Training: All gbd11 personnel with access to personal data receive mandatory data protection and security awareness training upon joining and on an annual basis thereafter.
• Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, gbd11 will take immediate containment action and notify affected players without undue delay.

08 Policy Updates & Contact

gbd11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. When material changes are made to this Policy, we will notify registered players by email to the address associated with their gbd11 account at least 14 days prior to the changes taking effect.

The date at the top of this page ("Effective Date") indicates when the current version of the Privacy Policy was last updated. We encourage you to review this page periodically to remain informed of how gbd11 handles your personal data. Your continued use of the gbd11 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

Privacy Enquiries and Data Rights Requests:

For all privacy-related questions, concerns, or formal data rights requests, please contact the gbd11 data team using the details below. All enquiries are handled in English and will receive a response within the timeframes described in Section 06.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: Available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within 30 calendar days for formal data rights requests; within 48 hours for general privacy enquiries

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. The governing language of this document is English. If you require clarification on any point in this Privacy Policy, please contact [email protected] before using the platform.