Your Privacy Matters at 11baji

11baji collects personal data from users through several channels: directly via the account registration form and KYC verification process, automatically through your interactions with the platform, and occasionally from trusted third-party sources such as payment processors and identity verification services. We collect only the data that is necessary for the purposes described in this Policy.

Registration and Identity Data: When you create a 11baji account, we collect your full legal name, date of birth, email address, mobile phone number, and a username of your choosing. For identity verification (KYC) purposes, we also collect a copy of your government-issued photo identification — typically a Bangladesh National ID card, passport, or driving licence — and in some cases a proof of current address.

Financial and Payment Data: To process deposits and withdrawals, we collect information about the payment method you use, including your bKash, Nagad, Rocket, or Upay mobile wallet number, or your Visa/Mastercard card details where applicable. We do not store full card numbers on our servers — card data is processed and tokenised by our PCI-DSS compliant payment partners. We also retain a record of your transaction history on the platform (deposit amounts, withdrawal requests, balances, and dates).

Usage and Behavioural Data: As you use the platform, we automatically collect data about your interactions, including:

• Games played, bets placed, outcomes, and wager amounts.
• Pages visited, features accessed, and session duration.
• Promotional offers viewed, claimed, or declined.
• Customer support chat transcripts and email correspondence.
• Login timestamps, login frequency, and device fingerprint data.

Technical and Device Data: We collect technical information about the device and connection you use to access 11baji, including your IP address, browser type and version, operating system, device model, screen resolution, time zone setting, and language preference. This data is used for security monitoring, fraud prevention, and platform optimisation.

11baji processes personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. Below are the primary purposes for which we process your personal data, together with the legal basis for each processing activity.

• Account Creation and Management: Your registration data is used to create and maintain your 11baji account, verify your identity, authenticate your login, and enable you to access the platform's full range of features. Legal basis: performance of a contract.
• Payment Processing: Your financial data is used to execute deposits and withdrawals accurately and securely, to reconcile transaction records, and to investigate payment discrepancies. Legal basis: performance of a contract.
• Age and Identity Verification (KYC): Identity documents are processed to confirm that you meet the minimum age requirement of 18 years and that your account details are genuine. This is a mandatory compliance obligation. Legal basis: legal obligation.
• Fraud Prevention and Security: Technical and usage data is analysed continuously to detect suspicious activity, prevent unauthorised account access, identify multi-account abuse, and protect the integrity of the platform. Legal basis: legitimate interests.
• Anti-Money Laundering (AML) Compliance: Transaction data and identity information are monitored in accordance with applicable AML obligations. Unusual or high-value activity may be reported to relevant authorities as required by law. Legal basis: legal obligation.
• Customer Support: Support data — including chat logs and emails — is used to respond to your enquiries, resolve disputes, and improve the quality of our support service. Legal basis: performance of a contract and legitimate interests.
• Responsible Gaming: Usage and behavioural data is used to monitor for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit limits and session time-outs that you have set. Legal basis: legal obligation and legitimate interests.
• Platform Improvement: Aggregated and anonymised usage data is used to analyse platform performance, identify popular games and features, and make improvements to the user experience. Legal basis: legitimate interests.
• Marketing Communications: If you have opted in to receive promotional communications, we will use your email address and/or mobile number to send you information about bonuses, new games, seasonal offers, and platform news. You may withdraw your consent at any time by contacting support or updating your account preferences. Legal basis: consent.

11baji does not share your personal data with third parties except in the limited circumstances described in this section. Where data sharing does occur, it is governed by data processing agreements that require the recipient to maintain the same standard of data protection that 11baji applies internally.

Payment Processors: To facilitate your deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks. These partners are independently certified to industry security standards and are contractually prohibited from using your data for any purpose other than processing your transaction.

Identity Verification Providers: To complete the KYC process, we may share your identity documents with a certified identity verification service provider. This provider processes your documents solely for the purpose of confirming your identity and age on behalf of 11baji and does not retain your documents beyond what is required for the verification process.

Game Software Providers: Certain usage data — specifically game session identifiers and bet amounts — is transmitted to third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others in order to serve and record game rounds correctly. These providers do not receive your name, contact details, or payment information.

Legal and Regulatory Authorities: 11baji may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime. Such disclosures are made only to the extent strictly required.

Business Continuity: In the event of a merger, acquisition, or sale of all or part of 11baji's business assets, user data may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

11baji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the site is used. A cookie is a small text file stored on your device by your browser at the instruction of our website. Cookies do not contain executable code and cannot damage your device.

Types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for the platform to function correctly. They maintain your authenticated session, remember your language preference, and ensure the security of your account. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users interact with the platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is used solely to improve the platform. No personally identifiable information is included in performance cookies.
• Functional Cookies: These cookies remember your personalisation choices — such as your preferred currency display format or your last-used game category — to provide a more convenient experience on return visits.
• Marketing and Tracking Cookies: If you have consented to marketing communications, these cookies help us understand which promotions you have interacted with and tailor future communications to your interests. You may withdraw consent for marketing cookies at any time through your account preferences.

Most browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies or to notify you when a cookie is set. However, disabling strictly necessary cookies will prevent you from accessing your 11baji account. Instructions for managing cookies in common browsers are available in your browser's help documentation.

11baji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below reflect our standard practice, though regulatory obligations may require retention beyond these standard periods in specific cases.

• Active Account Data: All personal data associated with an active 11baji account is retained for the full duration of the account's activity plus a minimum post-closure period to satisfy legal obligations.
• Post-Closure Retention: Following the closure of a player account — whether voluntary or due to a breach of our Terms & Conditions — we retain identity and financial records for a minimum of five (5) years. This period is required by anti-money laundering regulations and allows us to respond to any post-closure legal or regulatory enquiries.
• Transaction Records: Individual transaction records (deposits, withdrawals, bonus redemptions) are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Copies of identity documents submitted for KYC verification are retained for the duration of account activity plus five (5) years post-closure, in line with financial services regulatory requirements.
• Support Communications: Customer support chat logs and email correspondence are retained for two (2) years from the date of the last communication, after which they are securely deleted or anonymised.
• Marketing Data: Where consent for marketing communications is withdrawn, your contact details are removed from active marketing lists within 30 days. Suppression records (confirming your opt-out) are retained indefinitely to prevent accidental re-contact.
• Analytics Data: Anonymised and aggregated analytics data that cannot be linked back to any individual user may be retained indefinitely for platform improvement purposes.

When personal data is no longer required and its retention period has expired, 11baji securely destroys or permanently anonymises the data using industry-standard methods. Physical documents, if any, are shredded. Digital data is overwritten or cryptographically erased.

As a user of 11baji, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days. In some cases — particularly for complex requests — we may require up to 60 days, in which case we will notify you of the extension.

The security of your personal data is a top priority at 11baji. We implement a multi-layered security framework that combines technical controls, organisational policies, and staff training to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

Encryption in Transit: All data transmitted between your device and the 11baji platform is encrypted using TLS 1.2 or higher. This applies to every page of the platform — including login, registration, deposit, and withdrawal flows — ensuring that your personal and financial data cannot be intercepted in transit.

Encryption at Rest: Sensitive personal data stored on 11baji's servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are hashed and salted using a secure one-way algorithm.

Access Controls: Access to personal data within 11baji's internal systems is restricted on a strict need-to-know basis. Staff members can only access the categories of data necessary for their specific role. All internal access is logged and subject to regular audit. Administrative access to production systems requires multi-factor authentication.

Fraud and Intrusion Detection: 11baji operates 24/7 automated monitoring systems that scan for unusual access patterns, login anomalies, and potential data breach indicators. Any suspicious event triggers an immediate security alert and response protocol.

Payment Security: 11baji does not store full payment card details on its own servers. All card transactions are processed by PCI-DSS Level 1 compliant payment partners. Mobile wallet transactions (bKash, Nagad, Rocket) are processed via secure API integrations with the respective wallet providers.

Your Responsibility: While 11baji takes every reasonable measure to protect your data, the security of your account also depends on your own actions. You should choose a strong, unique password for your 11baji account, enable any available two-factor authentication features, and never share your login credentials with anyone. If you suspect that your account has been accessed without your authorisation, contact support immediately.

11baji reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our services, changes in applicable law, or improvements to our data protection practices. When a material change is made to this Policy, we will notify registered users via email to their registered address and/or via a prominent notice on the platform, at least 14 days before the change takes effect.

The effective date at the top of this Policy will be updated whenever changes are made. We encourage you to review this page periodically to stay informed about how 11baji protects your personal data. Your continued use of the platform after the effective date of any update constitutes your acceptance of the revised Policy.

Previous versions of this Privacy Policy are archived and available upon request by contacting our support team. If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which 11baji handles your personal data, please contact us using the details below. We take all privacy concerns seriously and will respond to your enquiry within 5 business days.

Last updated: January 2026. This Privacy Policy is effective as of the date stated above and applies to all users of the 11baji platform. For questions about our Terms & Conditions, please visit the Terms & Conditions page. For information on responsible gaming tools, visit the Responsible Gaming page.