How kd111 Collects, Uses, and Protects Your Personal Data

1. Data We Collect

kd111 collects personal data in three primary ways: information you provide directly during registration and account use, information we collect automatically as you interact with our Platform, and information we receive from third-party partners such as mobile financial service (MFS) providers. Below is a detailed account of each category.

1.1 Information You Provide Directly

When you register a kd111 account, place a bet, make a deposit or withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and national identity card (NID) number or passport number.
• Contact data: Mobile phone number, email address, and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Financial data: bKash, Nagad, Rocket, or Upay account number linked to your kd111 account; deposit and withdrawal transaction references.
• KYC verification data: Scanned copies or photographs of your NID (front and back), passport photo page, or selfie with identity document, as required during account verification.
• Account credentials: Username and hashed password. We never store passwords in plain text.
• Support communications: The content of emails, live chat messages, or other correspondence you send to the kd111 support team.
• Responsible gaming data: Self-exclusion requests, deposit limits, and time-out settings you configure within your account.

1.2 Information Collected Automatically

When you visit kd111.app or use our Platform, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, time spent on each page, games played, betting history, session start and end times (recorded in Bangladesh Standard Time, UTC+6), and navigation paths.
• Log data: Server-side access logs recording requests made to kd111's infrastructure, including timestamps, HTTP status codes, and referrer URLs.
• Cookie and tracking data: Please see Section 4 (Cookies & Tracking) for full details on what tracking technologies we use and how to manage them.

1.3 Information from Third-Party Partners

kd111 may receive limited personal data from the following third-party sources:

• MFS payment providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data including the sender's registered mobile number, transaction amount in BDT (৳), and a unique transaction reference number. kd111 does not receive your full MFS account PIN or password.
• Game content providers: Third-party studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may share anonymised gameplay data with kd111 for the purpose of resolving disputes and monitoring game integrity. This data is pseudonymised and does not include your financial account details.
• Fraud prevention services: Where we engage third-party fraud detection tools, those tools may return risk scores or flag indicators derived from publicly available data. kd111 uses such indicators solely to protect the security of the Platform and its players.

2. How We Use Your Data

kd111 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: (a) contractual necessity — processing required to deliver the services you have requested; (b) legal obligation — processing required to comply with applicable laws; and (c) legitimate interests — processing that is proportionate and does not override your privacy rights. The table below maps each processing activity to its purpose and legal basis.

2.1 Marketing Communications

kd111 may send you promotional communications about bonuses, seasonal offers (for example, Pohela Boishakh, Eid, and BPL tournament promotions), and platform updates. You can opt out of marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team. Opting out of marketing communications will not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts, which are necessary for the operation of your account.

2.2 Automated Decision-Making

kd111 uses automated processes to screen new accounts for fraud indicators and to enforce responsible gaming limits. Where an automated decision materially affects your ability to use the Platform (for example, triggering an account review or temporarily restricting a deposit), you have the right to request a manual review of that decision by contacting our support team. We will acknowledge your request within 24 hours and complete the manual review within three business days.

3. Data Sharing & Disclosure

3.1 Service Providers

kd111 engages third-party service providers who process personal data on our behalf under written data processing agreements. These providers are permitted to use your data only as instructed by kd111 and for no other purpose. Current categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, and Upay — to process deposits and withdrawals in BDT (৳).
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and other licensed studios — to deliver casino games and live dealer streams.
• Cloud infrastructure providers: Secure hosting and data storage services that underpin the kd111 platform.
• Fraud and risk management tools: Third-party services that assist kd111 in detecting suspicious account activity and preventing financial crime.
• Customer support platforms: Live chat and ticketing software used by our 24/7 English-language support team.

3.2 Legal Disclosure

kd111 may disclose personal data to law enforcement, regulatory authorities, or other government bodies where required to do so by applicable law, a court order, or a lawful request from a competent authority. Where permitted by law, kd111 will notify the affected player of such a disclosure request before complying. However, if such notice is legally prohibited (for example, in the context of a law enforcement investigation), kd111 will comply without advance notification.

3.3 Business Transfers

In the event that kd111 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by kd111 may be transferred to the successor entity as part of that transaction. In such circumstances, kd111 will notify all affected players via their registered email addresses prior to the transfer. The successor entity will be required to honour the terms of this Privacy Policy with respect to all transferred personal data.

3.4 Aggregate and Anonymised Data

kd111 may share aggregated, anonymised, or de-identified data sets (for example, platform-wide game popularity statistics or regional deposit volume data) with analytics partners, game studios, or other business partners. Such data sets contain no personally identifiable information and cannot be used to identify any individual player.

4. Cookies & Tracking Technologies

kd111 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, remember your preferences, and analyse how our service is used. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device (phone, tablet, or computer) when you visit a website. Cookies are widely used to make websites work more efficiently, to remember user preferences between sessions, and to provide analytical information to website owners. Cookies themselves cannot harm your device and do not contain executable code.

4.2 Categories of Cookies We Use

4.3 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Samsung Internet, Opera Mini) allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary or fraud-prevention cookies may impair your ability to log in or make deposits on kd111. Instructions for managing cookies in the most commonly used browsers in Bangladesh are available through each browser's official help documentation.

4.4 Session Duration

kd111 session cookies expire at the end of each browser session. Persistent cookies (used for preference retention and fraud prevention) are stored for a maximum of 12 months. All cookie expiry dates are reviewed annually in line with updates to this Privacy Policy.

5. Data Security

kd111 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, and destruction.

5.1 Technical Security Measures

• TLS/SSL encryption: All data in transit between your device and kd111's servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Password hashing: Account passwords are stored using a strong one-way cryptographic hash function. kd111 staff cannot retrieve your plain-text password — only you know it.
• Two-factor authentication (2FA): OTP-based 2FA is available to all registered players from the account security dashboard and is strongly recommended, particularly for accounts with large balances.
• Data-at-rest encryption: Personal data stored in kd111's databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within kd111's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.

5.2 Organisational Security Measures

• Regular internal security audits and vulnerability assessments of the kd111 platform
• Mandatory data protection training for all staff who handle personal data
• Documented data breach response procedures with defined escalation paths
• Third-party service provider due diligence, including contractual security requirements

5.3 Your Responsibilities

While kd111 takes all reasonable steps to protect your data, the security of online accounts also depends on the actions of individual players. You are responsible for keeping your kd111 username and password confidential, not sharing your login credentials with anyone, and logging out of your account when using a shared or public device. If you believe your account has been accessed without your authorisation, please contact our support team immediately at [email protected] so that we can take protective action.

5.4 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, kd111 will notify affected players via their registered email addresses within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures kd111 is taking in response.

6. Data Retention

kd111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply to the primary categories of data we hold:

After the applicable retention period has expired, kd111 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Anonymised data (which cannot be used to identify you) may be retained beyond these periods for statistical and analytical purposes.

7. Your Privacy Rights

kd111 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our support team in writing at [email protected]. We will acknowledge receipt of your request within 24 hours and aim to fulfil it within five business days (Bangladesh Standard Time, UTC+6).

7.1 Right of Access

You have the right to request a copy of the personal data kd111 holds about you. Upon receipt of a verified access request, kd111 will provide a summary of your data in a clear, structured format. This includes your registration data, KYC status, transaction history, and current marketing preferences. Identity verification may be required before personal data is disclosed.

7.2 Right to Rectification

If any personal data kd111 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or contact number) directly from your account dashboard. For changes to identity data that affects your KYC record, please contact the support team and provide updated documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other lawful basis for processing; or (c) the data has been processed unlawfully. Please note that kd111 may be required to retain certain data beyond your erasure request to comply with legal obligations (for example, retaining financial transaction records for seven years under AML rules). In such cases, kd111 will delete all data that is not subject to a legal retention requirement and inform you of what data must be retained and for how long.

7.4 Right to Restrict Processing

You may request that kd111 restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of data kd111 holds about you, or while an erasure request is under review. During a restriction period, kd111 will continue to store your data but will not use it for any processing activity beyond storage and legal compliance.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can exercise this right by updating your communication preferences in your kd111 account settings or by contacting our support team. kd111 will action all marketing opt-out requests within two business days. Opting out of marketing does not affect your ability to use the kd111 platform or to receive transactional notifications.

7.6 Right to Data Portability

Where kd111 processes your personal data on the basis of contractual necessity or your consent, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON). You may also request that kd111 transmit your data directly to another service provider where this is technically feasible.

8. Policy Updates & Contact

8.1 Updates to This Policy

kd111 reviews this Privacy Policy at least once per calendar year and whenever there is a material change to how we collect or process personal data. When we make material changes, we will update the "Last Updated" date at the top of this page and notify all registered players via email at least seven days before the change takes effect. Minor amendments (such as typographical corrections or clarifications that do not change our data practices) may be made without prior notice. We encourage you to review this Policy periodically to stay informed about how kd111 protects your data.

8.2 Previous Versions

Archived versions of previous Privacy Policies are available upon request by contacting our support team. This ensures that players who wish to understand how our practices have evolved over time can access that information transparently.

8.3 Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or believe that kd111 has not handled your personal data in accordance with this Policy, please contact us:

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24/7 in English via the kd111 platform
• Email Response Time: Within 2 hours for urgent matters (08:00–24:00 BST, UTC+6); within 24 hours for all other queries