cd11 Privacy Policy

cd11 ("we", "us", "our") operates the online betting and gaming platform accessible at cd11.io, serving players primarily located in Bangladesh. We are committed to handling your personal information with transparency, integrity, and care. This Privacy Policy sets out in plain terms how we collect, process, store, and protect your personal data when you use the cd11 platform.

This Privacy Policy applies to all users of the cd11 platform, including registered account holders, visitors who browse without registering, and individuals who contact us through our support channels. By accessing or using cd11, you acknowledge that you have read and understood this Privacy Policy.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. Your data is used solely to operate, improve, and protect the cd11 platform and to fulfil our obligations to you as a player.

We collect personal information through several channels — directly from you when you register or interact with cd11, automatically through your device and browsing behaviour, and in limited cases from trusted third-party verification partners. The categories of information we collect include:

Account Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for mandatory 21+ age verification).
• Email address and contact phone number.
• Residential address, including city and postal code (Bangladesh-based).
• Username and encrypted password hash.

Identity Verification Data (KYC)

• Scanned copies or photographs of government-issued identity documents (National ID card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or mobile operator statements not older than 90 days).
• Selfie or facial verification image where required by our compliance team.

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and statuses.
• Payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket account reference, masked card numbers for Visa and Mastercard). We do not store full card numbers.
• Transaction reference numbers issued by payment processors.

Betting and Gaming Activity Data

• Game sessions, bet history, wager amounts, outcomes, and running account balance.
• Bonus participation history and wagering requirement completion records.
• Live casino table participation records and slot game session logs.

Technical and Device Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type, and version.
• Session timestamps, page visit logs, and clickstream data.
• Cookie identifiers and local storage data (see Section 5).

Communications Data

• Support chat transcripts, email correspondence, and any attachments you send us.
• Survey responses and feedback submissions.

cd11 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with what is described below without first obtaining your explicit consent.

We may also use aggregated, anonymised, and non-identifiable statistical data derived from player activity for business intelligence, product development, and reporting purposes. Such aggregated data cannot be used to identify you as an individual and is not subject to this Privacy Policy.

cd11 processes your personal data on the following legal grounds, depending on the nature and context of the processing activity:

• Contractual necessity: Processing is required to perform our obligations under the Terms & Conditions you accepted at registration — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and record-keeping duties under financial regulations.
• Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and improving our products — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities such as sending promotional emails, push notifications, or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where we rely on legitimate interests, we conduct an internal balancing test to ensure that our interests do not unduly override your right to privacy. If you have questions about a specific balancing test, please contact us at [email protected].

cd11 uses cookies and similar technologies (local storage, session storage, pixel tags) to operate the platform efficiently, understand how users interact with our pages, and deliver a personalised experience. Below is a summary of the cookie categories we use:

• Strictly Necessary Cookies: Essential to core platform functionality — login session management, security tokens, and fraud prevention signals. These cannot be disabled without breaking the platform.
• Performance and Analytics Cookies: Collect anonymised data about page visits, session durations, and error events. Used to identify and resolve technical issues and improve site performance. No personally identifiable information is collected through these cookies.
• Functional Cookies: Remember your preferences such as language selection and display settings to provide a consistent experience across sessions.
• Marketing and Retargeting Cookies: Used (only with your prior consent) to deliver relevant promotional information about cd11 based on your browsing behaviour. You may opt out of these at any time via your account privacy settings.

Third-party service providers engaged by cd11 (such as analytics providers and payment gateway partners) may set their own cookies subject to their own privacy policies. cd11 does not control third-party cookies and is not responsible for them.

cd11 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: We share transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, and card network processors) strictly to process your deposits and withdrawals. These providers operate under their own data protection obligations and are contractually required to safeguard the data shared with them.
• Identity Verification Partners: We may share KYC documents and identity data with certified third-party verification service providers for the purpose of fulfilling age and identity checks. These partners process data under strict confidentiality obligations.
• Game Content Providers: Certain game session data (such as player ID and bet amounts) is shared with our licensed game content providers (e.g., Pragmatic Play, Evolution Gaming, Ezugi, Spribe) solely to enable delivery of their games within the cd11 platform.
• Legal and Regulatory Authorities: We may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally compelled to do so, or where disclosure is necessary to protect the rights, safety, or property of cd11, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cd11's business, player data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any material change to the Privacy Policy that results from it.
• Professional Advisors: We may share data with our legal counsel, auditors, and compliance advisors under strict professional confidentiality obligations where necessary to obtain professional advice.

cd11 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes. Our general retention schedule is as follows:

When data is no longer required, it is securely deleted or irreversibly anonymised. Backup copies are purged on a rolling schedule consistent with the above retention periods.

As a cd11 player, you hold a number of rights in relation to your personal data. cd11 is committed to honouring these rights promptly and without unnecessary friction. You may exercise any of the following rights by contacting us at [email protected]:

• Right of Access: You may request a copy of all personal data cd11 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to our legal obligations to retain certain data (see Section 7).
• Right to Restriction: You may request that we restrict processing of your data while a rectification or objection request is being assessed, or where you contest the accuracy of the data held.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that your data be transferred to you or to another service in a structured electronic format.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

cd11 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your device and the cd11 platform is protected using industry-standard Transport Layer Security (TLS) encryption. Look for the padlock icon in your browser address bar when visiting cd11.io.
• Password Hashing: User passwords are never stored in plain text. We use a strong, salted cryptographic hashing algorithm to store password data such that even cd11 staff cannot view your password.
• Access Controls: Access to personal data within cd11's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role.
• Two-Factor Authentication: cd11 offers two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an additional layer of protection beyond your password.
• Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and other fraud signals. Suspicious activity triggers an immediate review and, where appropriate, a temporary account hold.
• Infrastructure Security: Our platform infrastructure is hosted in secure data centre environments with physical access controls, network intrusion detection, and regular independent security assessments.

The cd11 platform does not contain links to third-party websites as a general rule. However, in the event that any such link appears — for example, within game information panels sourced from content providers — please be aware that cd11 has no control over the privacy practices or content of those external sites.

Clicking a link that takes you away from cd11.io means you are leaving the cd11 platform and entering a site that operates under its own separate privacy policy. cd11 accepts no responsibility or liability for the data handling practices of any third-party website, regardless of how you arrived there.

We recommend reviewing the privacy policy of any website you visit before providing any personal information. If you discover a link on the cd11 platform that you believe leads to an inappropriate or insecure destination, please report it to us at [email protected].

The cd11 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to any person under the age of 21. Age verification is a mandatory step during the account registration process, and any account identified as belonging to an underage individual will be immediately closed and all associated data reviewed in accordance with our legal obligations.

cd11 does not direct any marketing content, communications, or platform features toward individuals under the age of 21. Our promotional materials are designed exclusively for adult audiences.

cd11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players by email to the address on file and by displaying a prominent notice on the cd11 platform prior to the changes taking effect.

The "Last Updated" date shown at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this page periodically to remain informed about how we handle your data. Your continued use of the cd11 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If you disagree with any change to this Privacy Policy, you should stop using the platform and contact [email protected] to request account closure before the revised policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how cd11 has handled your personal information, please contact our support team using the details below. All privacy-related correspondence should be submitted in English to ensure it is processed by the appropriate team member without delay.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the cd11 platform.
• Response Time: Privacy requests are acknowledged within 4 hours and fully actioned within 30 calendar days, Bangladesh Standard Time (BST, UTC+6). Complex requests may take longer; we will notify you if an extension is required.

When contacting us about a privacy matter, please include your registered account username, a clear description of your request or concern, and any relevant reference numbers. This helps our team locate your records efficiently and respond accurately.