1111der Privacy Policy — How We Protect Your Personal Data

Data We Collect

When you register, verify your identity, deposit funds, place bets, or contact our support team, 1111der collects personal data that is necessary to deliver those services. The categories of personal data we collect, and the context in which each is gathered, are set out below.

How We Use Your Data

1111der processes your personal data only where a lawful basis exists for doing so. The primary lawful bases we rely on are: contractual necessity (processing required to deliver your account and gaming services), legal obligation (regulatory compliance), legitimate interests (fraud prevention and platform security), and in limited cases, consent (optional marketing communications). Each use of your personal data is mapped to one of these bases below.

Account & Service Delivery

• Account Creation & Management: We use your identity and contact data to create and maintain your 1111der account, authenticate your logins, and manage your account preferences and responsible gaming settings.
• Payment Processing: We use your financial data and transaction records to process deposits via bKash, Nagad, Rocket, and Upay, execute withdrawal requests, detect payment fraud, and maintain accurate financial records for each player account.
• Customer Support: We use your identity, contact, and communications data to respond to your support queries, resolve disputes, and provide account assistance. Support interactions may be recorded and stored for quality assurance purposes.
• Bonus & Promotion Administration: We use your transaction and account data to determine eligibility for promotions, credit bonuses, calculate wagering progress, and enforce bonus terms consistently and fairly across all eligible players.

Legal & Regulatory Compliance

• Age & Identity Verification (KYC): We are obligated to verify that all players are aged 18 or above before allowing withdrawals. NID data and associated verification documents are processed solely to fulfil this obligation.
• Anti-Money-Laundering (AML): We monitor transaction patterns and may request source-of-funds documentation from players whose deposit or withdrawal activity triggers AML review thresholds. This is a legal obligation and is not at 1111der's discretion.
• Fraud Prevention: We analyse technical data, IP addresses, device fingerprints, and betting patterns to detect and investigate suspected fraudulent activity, including multi-accounting, payment fraud, and bonus abuse.
• Regulatory Reporting: Where required by applicable law or in response to a lawful request from a regulatory authority, we may be required to disclose player data. We will notify you of such disclosure where legally permitted to do so.

Platform Improvement & Communications

• Product Analytics: Aggregated and anonymised usage data is used to understand player behaviour, identify popular features, improve game recommendations, and optimise the performance and design of the 1111der platform.
• Responsible Gaming Monitoring: We use your transaction and usage data to monitor for behavioural indicators of problem gambling, such as rapid repeated deposits, large loss accumulation, or significantly increased session frequency. This processing is in our players' legitimate interests and in compliance with responsible gaming best practices.
• Promotional Communications: With your consent, we may use your email address and mobile number to send you information about relevant bonuses, seasonal promotions (BPL season, Eid offers, Pohela Boishakh specials), and platform updates. You may withdraw consent at any time by contacting [email protected].

Data Sharing & Third Parties

1111der does not sell, rent, or license your personal data to third parties for their own commercial purposes. Data is shared with third parties only in the specific circumstances described below, and always subject to appropriate data processing agreements or equivalent contractual protections.

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum personal and financial data necessary to process your specific deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Partners: Third-party KYC and identity verification service providers may process your NID data and supporting documents on our behalf in order to complete age and identity verification. These partners are contractually prohibited from using your data for any purpose other than completing the verification service for 1111der.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical session data (such as player session tokens and stake amounts) necessary to operate the games you play. These providers do not receive your full personal profile.
• Fraud Detection Services: Specialist fraud and AML detection platforms may process your IP address, device data, and transaction patterns on 1111der's behalf to identify and prevent fraudulent activity. All such partners operate under strict data processing agreements.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of 1111der, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 1111der's business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and the privacy terms applicable to their data following the transaction.

Cookies & Tracking Technologies

1111der uses cookies and similar technologies (such as web beacons and local storage) to make the platform function correctly, keep your session secure, and improve your overall experience. A cookie is a small text file stored on your device when you visit a website. The types of cookies 1111der uses are described below.

1111der does not use third-party advertising cookies or cross-site tracking pixels. You will not be tracked across unrelated websites for the purpose of serving you gambling advertisements elsewhere on the internet based on your 1111der activity.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair the functionality of the 1111der platform, including your ability to maintain a logged-in session. Disabling functional cookies will mean that your preferences are not saved between visits.

Data Security Measures

Protecting the personal data of 1111der players is a core operational priority. We implement layered security controls at the technical, organisational, and procedural levels to safeguard your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• SSL/TLS Encryption: All data in transit between your browser or mobile device and 1111der servers is encrypted using 256-bit SSL/TLS. This ensures that your login credentials, payment details, and personal information cannot be intercepted by third parties during transmission.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents, NID data, and financial records — is stored in encrypted form on secure servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to player personal data within 1111der's systems is restricted to authorised personnel who require it to perform their job functions (customer support, compliance, fraud prevention). Access is controlled via role-based permissions and logged for audit purposes.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. 1111der's internal systems also enforce multi-factor authentication for all staff accessing player data and production systems.
• Regular Security Audits: 1111der conducts regular internal security reviews and engages third-party security professionals to perform penetration testing and vulnerability assessments of the platform and its data infrastructure.
• Incident Response: In the event of a data security incident affecting player personal data, 1111der has a documented incident response procedure. Affected players will be notified promptly where the incident poses a material risk to their privacy or financial security.

Data Retention & Deletion

1111der retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The retention periods below represent our standard data lifecycle practices. Specific circumstances — such as an ongoing dispute, regulatory investigation, or legal proceeding — may require us to retain certain data beyond these standard periods.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. If you request deletion of your account before the natural expiry of a retention period, we will delete all data that we are not legally required to retain and will inform you of what categories of data must be retained and for how long.

Your Privacy Rights

As a 1111der player, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our data support team at [email protected] with the subject line "Data Request — [Right Type]". We aim to respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data 1111der holds about you, along with information about how it is being processed, who it has been shared with, and for how long it will be retained. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most contact details directly within your account dashboard; for identity and KYC data amendments, please contact our support team.
• Right to Erasure: You have the right to request that 1111der delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where no other lawful basis applies. This right is subject to our legal obligation to retain certain data (see Section 6). We will inform you clearly of what can and cannot be deleted.
• Right to Restrict Processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that we restrict the processing of your personal data to storage only, without further active use.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider if you wish.
• Right to Object: You have the right to object to processing of your personal data where 1111der relies on legitimate interests as its lawful basis. You may also object at any time to the processing of your data for direct marketing purposes; we will act on any such objection immediately.
• Rights Related to Automated Decision-Making: If 1111der makes any fully automated decisions about you that produce significant legal or similarly significant effects (for example, automated account suspension triggered by fraud detection systems), you have the right to request human review of that decision and to challenge its outcome.

Contact & Data Queries

If you have any questions about this Privacy Policy, wish to exercise a data rights request, want to withdraw consent to marketing communications, or have a concern about how 1111der processes your personal data, please contact our data support team using the details below.

• Email (Data Queries): [email protected] — use the subject line "Privacy Query" or "Data Request" so your message is routed to the correct team member promptly.
• Response Time: 1111der aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days. Complex data rights requests involving large volumes of data may take up to 60 days, in which case we will notify you of the extended timeline.
• Policy Updates: 1111der reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable law. The "Last Updated" date at the top of this page will be revised whenever a material change is made. Where changes are significant, we will notify registered players via email before the updated Policy takes effect.
• Governing Law: This Privacy Policy is written in English and is intended to reflect internationally recognised data protection principles. Where conflicts arise between this Policy and specific local law requirements applicable to Bangladesh players, the more protective standard shall apply.