kd1111 Privacy Policy

kd1111 collects personal data in three principal ways: information you provide directly during registration and ongoing platform use, information generated automatically through your interaction with the Platform, and information received from trusted third-party partners where this is necessary to operate and secure your account.

The following table summarises the categories of personal data kd1111 collects and the context in which each category arises:

kd1111 does not knowingly collect personal data from individuals under the age of 18. If the Company becomes aware that data has been collected from a minor, the associated account will be suspended immediately and the data will be deleted in accordance with our data retention schedule.

kd1111 uses the personal data it collects for the following clearly defined purposes. We do not use personal data for any purpose that is incompatible with the reason it was originally collected, unless we obtain your explicit consent or are required to do so by applicable law.

• Account creation and management: Your identity and contact data are used to create, verify, and maintain your kd1111 player account, including issuing your unique player ID, managing your balance, and processing your login and authentication.
• Transaction processing: Financial data is used to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and card payment networks. Transaction records are also maintained for reconciliation and dispute resolution purposes.
• Identity and age verification: We use identity documents and personal data to confirm that you meet the 18+ age requirement, that your identity matches the payment methods linked to your account, and to comply with our Know Your Customer (KYC) obligations under our gaming licence.
• Fraud prevention and anti-money laundering: Technical and financial data are used to detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other forms of abuse on the Platform. This includes automated pattern-detection systems and manual review by our compliance team.
• Platform personalisation: Gaming activity data and technical data are used to personalise your experience on kd1111, including surfacing relevant game recommendations, tailoring promotional offers to your preferences, and displaying content in your preferred language and format.
• Customer support: Communications data is used to handle your support enquiries, resolve disputes, and maintain a record of interactions between you and kd1111 staff for quality assurance purposes.
• Responsible gaming monitoring: Gaming activity data is used by kd1111's responsible gaming systems to identify potentially problematic gambling patterns and, where appropriate, to trigger player protection interventions such as cooling-off notifications or account reviews. See the Responsible Gaming page for details.
• Marketing communications: Where you have provided explicit consent, kd1111 may use your contact data to send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (for example, BPL season offers or Eid special campaigns), and other relevant Platform updates. You may withdraw this consent at any time.
• Legal and regulatory compliance: kd1111 is required by its international offshore gaming licence to retain certain categories of player data for prescribed periods and to disclose data to regulatory authorities or law enforcement agencies on lawful request.

kd1111 processes personal data only where a valid legal basis exists for doing so. The legal bases on which kd1111 relies are as follows:

• Contractual necessity: The majority of data processing carried out by kd1111 is necessary to perform the contract between kd1111 and you as a registered player — namely, the provision of online gaming services in accordance with the Terms & Conditions. This includes account creation, transaction processing, and KYC verification.
• Legal obligation: kd1111 is required by law and by the conditions of its gaming licence to perform identity verification, maintain transaction records, conduct anti-money laundering checks, and cooperate with regulatory and law enforcement enquiries. Processing for these purposes is carried out on the basis of legal obligation.
• Legitimate interests: kd1111 processes certain categories of data — including technical data for fraud detection, gaming activity data for responsible gaming monitoring, and anonymised analytics data for platform improvement — on the basis of its legitimate interests as an online gaming operator. In each case, kd1111 has assessed that these interests are not overridden by the interests, rights, or freedoms of the individuals concerned.
• Consent: Where kd1111 processes personal data for marketing communications or for non-essential cookies, it does so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kd1111 does not sell or rent your personal data to any third party. However, kd1111 shares personal data with carefully selected third-party service providers where this is strictly necessary to operate the Platform and deliver services to you. All third-party recipients of personal data are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to kd1111.

The categories of third parties with whom kd1111 may share your personal data are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and regulatory obligations.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data to enable game delivery and to maintain their own game-integrity and RNG certification records. These providers do not receive your full identity data.
• Identity verification partners: kd1111 may use regulated third-party identity verification services to assist with KYC document checks. These partners process identity documents under strict confidentiality obligations and do not retain data beyond the period required to complete the verification process.
• Fraud prevention and security services: kd1111 uses specialised third-party services for IP reputation analysis, device fingerprinting, and real-time fraud scoring. These services receive technical data (IP address, device identifiers) but do not receive your full identity or financial data.
• Cloud infrastructure providers: kd1111's Platform is hosted on secure cloud infrastructure. Server-side data, including player account data, is stored on infrastructure provided by kd1111's hosting partners, who are contractually bound to process data only on kd1111's instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: kd1111 is legally obligated to disclose personal data to gaming regulators, financial intelligence units, and law enforcement agencies on receipt of a lawful request. kd1111 will only make such disclosures to the extent required by applicable law and will notify affected players where permitted to do so.

kd1111 does not transfer personal data to countries or international organisations that do not provide an adequate level of data protection without first implementing appropriate safeguards, such as standard contractual clauses or equivalent contractual protections.

kd1111 uses cookies and similar browser-based tracking technologies to operate the Platform effectively, analyse usage patterns, and — where you have provided consent — to personalise your experience. Cookies are small text files placed on your device by your browser when you visit the kd1111 website. They are not harmful and cannot execute code or transmit viruses.

kd1111 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be switched off without disrupting your ability to use the site. They include session authentication tokens that keep you logged in during your visit, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure your requests are directed to the correct server. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the kd1111 Platform — for example, which pages are visited most frequently and whether users encounter error pages. kd1111 uses this data solely to improve the performance and usability of the Platform. These cookies are activated only with your consent.
• Functional cookies: These cookies remember your preferences — such as your chosen language, preferred currency display (BDT), and game lobby layout settings — so that you do not need to re-enter them on each visit. These cookies are activated only with your consent.
• No advertising or cross-site tracking cookies: kd1111 does not use advertising cookies, retargeting cookies, or any cookie technology that tracks your browsing behaviour on third-party websites outside of kd1111.org. kd1111 does not participate in real-time bidding (RTB) advertising networks.

You may manage or withdraw your consent to non-essential cookies at any time by adjusting your browser settings. Most browsers allow you to block or delete cookies through the settings menu. Please note that disabling certain functional cookies may affect your experience on the Platform.

kd1111 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active account data: Personal data associated with an active kd1111 account is retained for the duration of the account relationship and for a period of five years following the date of account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history in BDT, are retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping obligations under kd1111's gaming licence.
• KYC documentation: Identity verification documents are retained for five years from the date they are received, or for five years from the date of account closure, whichever is later.
• Support communications: Customer support correspondence is retained for three years from the date of the most recent interaction in a support thread.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your active consent plus three years, to demonstrate compliance if required.
• Anonymised analytics data: Aggregated, anonymised usage analytics that cannot reasonably be linked to any individual player are not subject to deletion timelines and may be retained indefinitely for product development purposes.

kd1111 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and kd1111's servers.
• AES-256 encryption for sensitive data stored at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised kd1111 staff with a legitimate business need can access specific categories of player data.
• Regular independent security audits and penetration testing of the kd1111 Platform and infrastructure.
• Two-factor authentication requirements for all kd1111 administrative system access.
• Documented incident response procedures, including player notification protocols in the event of a data breach that poses a risk to affected individuals.

As a kd1111 player, you hold the following rights with respect to your personal data. kd1111 will respond to all verified data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case kd1111 will notify you of the extension and the reason for it.

• Right of access: You have the right to request a copy of the personal data kd1111 holds about you, together with information about how that data is being used. kd1111 will provide this in a structured, commonly used, machine-readable format upon verified request.
• Right to rectification: If any personal data kd1111 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating a phone number or email address — can be made directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis exists), or where the data has been processed unlawfully. Please note that kd1111 may be legally required to retain certain categories of data — particularly transaction records and KYC documents — for prescribed minimum periods even after an erasure request. kd1111 will explain any such limitations clearly at the time of your request.
• Right to restriction of processing: In certain circumstances — for example, while the accuracy of personal data is being contested, or where you have objected to processing and a determination is pending — you may request that kd1111 restrict its processing of your data to storage only.
• Right to data portability: Where kd1111 processes your data by automated means on the basis of your consent or contractual necessity, you have the right to receive that data in a portable format and to transmit it to another data controller.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, kd1111 will cease processing your data for marketing purposes immediately. You may also object to processing carried out on the basis of kd1111's legitimate interests, in which case kd1111 will review the objection and cease processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where kd1111 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the kd1111 data privacy team by sending a written request to [email protected] with the subject line "Data Privacy Request". To protect your privacy, kd1111 will ask you to verify your identity before acting on any data request.

kd1111 reviews and updates this Privacy Policy periodically to reflect changes in the Platform's data practices, changes in applicable law, or guidance issued by relevant regulatory authorities. The date displayed at the top of this page indicates when the Policy was most recently revised.

Where changes to this Privacy Policy are material — meaning they significantly affect how kd1111 uses your personal data or the rights available to you — kd1111 will notify registered players by email to their registered address at least 14 days before the revised policy takes effect. For non-material changes (for example, clarifications of existing language or corrections of typographical errors), kd1111 may update the Policy without advance notification.

Your continued use of the kd1111 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised Policy, you must contact kd1111 support to close your account before the effective date of the changes.

This Privacy Policy applies solely to data processed in connection with the kd1111 Platform at https://kd1111.org. It does not apply to third-party websites or services that may be referenced on the Platform, including the websites of game providers or payment partners. kd1111 encourages you to review the privacy policies of any third-party services you use in connection with your kd1111 account.