11gt99 Privacy Policy

1. Who We Are

This Privacy Policy is issued by 11gt99 ("we", "us", "our", "the Platform"), the operator of the online casino and sports-betting platform accessible at https://11gt99.net. 11gt99 is the data controller in respect of all personal data collected from registered players, prospective players, and visitors to the platform located in Bangladesh and elsewhere.

This policy describes how 11gt99 collects, uses, stores, shares, and protects the personal information of individuals who interact with the platform, including those who register an account, make deposits or withdrawals, contact customer support, or simply browse the site without registering. It should be read together with the Terms & Conditions and the Responsible Gaming Policy.

2. Personal Data We Collect

11gt99 collects personal data across several categories, each tied to a specific operational necessity. The table below sets out the categories of data we hold and the primary reason for holding each category.

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If such data is inadvertently disclosed to us (for example, in a support communication), it will be deleted or anonymised as soon as reasonably practicable.

3. How We Collect Your Data

11gt99 collects personal data through three primary channels: directly from you, automatically through your use of the platform, and from third-party verification and payment partners where applicable.

• Direct collection: Data you provide when creating an account, completing the KYC process, making a deposit or withdrawal, entering a promotion, or contacting customer support. This is the primary source of identity, contact, and financial data.
• Automated collection: Technical and usage data collected automatically when you visit or interact with the 11gt99 platform. This includes server logs, cookies, and similar tracking technologies described in Section 7 of this policy.
• Third-party sources: Where required for identity verification or fraud prevention, 11gt99 may receive data from third-party identity-verification service providers and payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard). Data received from these partners is used solely for the verification or payment purpose that necessitated the share.

4. Why We Use Your Personal Data

11gt99 processes personal data only for the specific purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account management: Creating, maintaining, and closing your 11gt99 player account, including authentication and access control.
• Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that the identity information on your account is accurate, as required by our KYC obligations.
• Payment processing: Facilitating deposits to and withdrawals from your 11gt99 wallet via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Fraud prevention and security: Detecting and investigating suspicious activity, unauthorised account access, bonus abuse, money laundering, and other forms of platform misuse.
• Regulatory compliance: Meeting anti-money-laundering (AML) and know-your-customer (KYC) obligations, and retaining transaction records as required by applicable law.
• Customer support: Responding to support queries, resolving disputes, and maintaining a record of communications to improve service quality.
• Responsible gaming: Monitoring player activity to identify patterns that may indicate problem gambling behaviour, and implementing player-requested limits, cooling-off periods, or self-exclusions.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, optimise user experience, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and relevant platform updates to players who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

5. Legal Basis for Processing

For each processing activity described in Section 4, 11gt99 relies on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 11gt99 — most notably, account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and the retention of financial transaction records.
• Legitimate interests: Processing carried out in pursuit of 11gt99's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, and service-quality improvement.
• Consent: Processing for which we seek your explicit consent, principally direct marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Third Parties

11gt99 does not sell your personal data to any third party. We share data with external parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the financial data required to process your deposit or withdrawal transaction. These partners operate under their own privacy policies and are subject to their own regulatory obligations.
• Game providers: Third-party game suppliers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier and session token to deliver and log gameplay. They do not receive your full identity or payment details.
• Identity verification providers: Where 11gt99 uses a third-party KYC service to verify identity documents, that provider receives only the data strictly required to perform the verification and is contractually prohibited from using it for any other purpose.
• IT and infrastructure providers: Cloud hosting, database, and security service providers who process data on our behalf under data-processing agreements that bind them to the same data-protection standards as 11gt99.
• Law enforcement and regulatory bodies: Where required by applicable law, court order, or regulatory instruction, 11gt99 may disclose personal data to law-enforcement agencies or government bodies without prior notice to the data subject.

All third-party service providers engaged by 11gt99 are assessed for data-security compliance before engagement and are required to implement appropriate technical and organisational measures to protect the data they process on our behalf.

7. Cookies & Tracking Technologies

11gt99 uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players interact with the site. A "cookie" is a small text file placed on your device when you visit a website. 11gt99 uses the following categories of cookies:

• Strictly necessary cookies: Required for core platform functionality including session authentication, maintaining your logged-in state, and remembering your currency preference. These cookies cannot be disabled without preventing access to the platform.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most often, where users encounter errors, and how long sessions typically last. This data informs platform-improvement decisions.
• Functional cookies: Allow the platform to remember your preferences (such as interface language or game-lobby display settings) to provide a more personalised experience on return visits.
• Security cookies: Support fraud detection and account-security mechanisms, including identifying unusual login locations or device changes that may indicate unauthorised account access.

11gt99 does not use third-party advertising cookies or serve retargeted advertisements through the platform. The tracking technologies deployed by 11gt99 are used exclusively for operational, security, and analytics purposes internal to the platform.

8. Data Retention

11gt99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy AML record-keeping obligations.
• Transaction records: Financial transaction logs are retained for a minimum of five years from the date of the transaction in accordance with anti-money-laundering regulations.
• KYC documents: Identity and age-verification documents are retained for a minimum of five years following account closure or the completion of the last transaction, whichever is later.
• Support communications: Customer support chat transcripts and email correspondence are retained for up to three years from the date of the communication for dispute-resolution and quality-assurance purposes.
• Marketing data: Data used solely for marketing purposes is deleted or anonymised promptly upon receipt of an opt-out request.
• Technical and usage data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data. Raw, identifiable technical logs are typically retained for 12 months before being anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 11gt99's internal data-disposal procedures.

9. Your Data Rights

As a data subject whose personal information is processed by 11gt99, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of the right you wish to exercise. 11gt99 will acknowledge your request within five business days and respond fully within 30 calendar days.

• Right of access: You may request a copy of all personal data that 11gt99 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Where data accuracy affects regulatory compliance (e.g., KYC), we may request supporting documentation before making the correction.
• Right to erasure: In certain circumstances you may request that 11gt99 delete the personal data it holds about you. This right is subject to limitations where retention is required by law (e.g., AML obligations) or where the data is necessary to defend a legal claim.
• Right to restriction: You may request that 11gt99 restrict the processing of your personal data where you contest its accuracy, where processing is unlawful but you prefer restriction to deletion, or where we no longer need the data but you require it for a legal claim.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that 11gt99 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.

10. Children's Privacy

The 11gt99 platform is strictly for adults aged 18 and above. 11gt99 does not knowingly collect personal data from individuals under the age of 18. The registration process includes an age declaration and, where warranted, an age-verification step using official identity documents.

If 11gt99 discovers that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated account will be permanently closed. All deposits made to the account during that period will be refunded to the original payment source after deducting any bonuses applied, which will be voided in their entirety.

Parents and guardians concerned that a minor in their household may have accessed the 11gt99 platform should contact [email protected] immediately. 11gt99 recommends the use of parental-control software on shared or family devices to prevent minors from accessing online gambling services.

11. Security Measures

11gt99 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:

• Encryption in transit: All data transmitted between your browser or device and the 11gt99 platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive stored data, including identity documents and financial records, is encrypted at the storage layer using industry-standard symmetric encryption.
• Access control: Access to systems that hold personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Intrusion detection: 11gt99 employs automated monitoring and intrusion-detection systems to identify and respond to anomalous access patterns and potential security threats in real time.
• Penetration testing: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All team members with access to personal data receive data-protection and information-security training as part of their onboarding and on an ongoing basis.

12. Amendments to This Policy

11gt99 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data-handling practices, operational requirements, or applicable regulatory obligations. When material changes are made, the revised policy will be published on this page with an updated effective date, and registered players will be notified via the contact details associated with their account where the changes are likely to have a significant impact on their rights or the way their data is used.

We encourage you to review this policy periodically. Your continued use of the 11gt99 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised policy, you must cease using the Services and may request account closure by contacting [email protected].

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 11gt99 is handling your personal data, please get in touch with us using the contact details below. Our privacy team operates on Bangladesh Standard Time (BST, UTC+6) and aims to respond to all enquiries within two business days.

If you are not satisfied with the way 11gt99 has handled a privacy complaint after raising it directly with us, you may escalate the matter to the relevant data-protection authority or regulatory body in your jurisdiction. 11gt99 will cooperate fully with any such regulatory enquiry.

For responsible gaming concerns, self-exclusion requests, or questions about gambling-related account limits, please visit our dedicated Responsible Gaming page or reach out to [email protected] with the subject line "Responsible Gaming".