gb11 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how gb11 ("the Platform", "we", "us", "our"), operating the online betting and casino services available at gb11.io, collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "your") who access or use the gb11 platform. This Policy applies to all players registered on gb11 and to all visitors who interact with gb11.io, regardless of the device or method used to access the platform.

gb11 is committed to maintaining the trust and confidence of all players in Bangladesh by handling personal data responsibly, transparently, and in accordance with reasonable privacy standards. We collect only the data that is necessary to provide our services, protect the integrity of the platform, and fulfil our obligations related to safe and responsible gaming.

This Privacy Policy should be read alongside the gb11 Terms & Conditions and our Responsible Gaming Policy, both of which are published on this platform. By registering an account on gb11 or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein.

02 Data We Collect

gb11 collects several categories of personal data in the course of operating player accounts and delivering gaming services. The following table sets out the main categories of data we collect and the specific types of information within each category.

gb11 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming self-declarations made by the player), or criminal records, except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion request or a support communication.

03 How We Collect Your Data

gb11 collects personal data through several channels, depending on how you interact with the platform:

• Direct registration: When you create a gb11 account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• Account use and gameplay: As you use gb11, we automatically record transactional and usage data, including bets placed, games played, deposits, and withdrawals.
• Identity verification: When we require identity verification, you may submit documents such as your NID or a photograph. These are collected via our secure verification process.
• Payment processing: When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or bank transfer, we receive a transaction reference and the mobile wallet number or bank account details associated with the transaction.
• Automated technical collection: Our servers automatically log technical data including IP addresses, device identifiers, and session information when you visit gb11.io or use the platform.
• Cookies and tracking technologies: We use cookies and similar technologies to collect usage data and maintain your session. See Section 7 for full details.
• Support communications: When you contact our support team via email or WhatsApp, we collect and retain the content of those communications for quality assurance and dispute resolution purposes.
• Third-party verification services: In some cases, we may use third-party identity verification or fraud-prevention services that provide us with supplementary data to confirm your identity or assess the risk profile of a transaction.

04 How We Use Your Data

gb11 uses the personal data we collect for the following purposes. Each purpose is linked to a specific legal basis for processing, which is described in Section 5.

• Account creation and management: To register your account, maintain your account profile, and allow you to log in securely to the gb11 platform.
• Service delivery: To process your bets, record your game sessions, calculate and credit your winnings, and provide access to all product verticals available on gb11 including cricket betting, slots, live casino, Teen Patti Joker, and Bingo.
• Payment processing: To process BDT deposits via bKash, Nagad, Rocket, and Upay, and to execute withdrawal requests to your nominated mobile banking or bank account.
• Identity and age verification: To verify that you are at least 21 years of age and to confirm that the personal information you provided during registration is accurate. This is essential to comply with responsible gaming obligations.
• Fraud and security: To detect and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other forms of platform misuse. This includes automated monitoring of transaction patterns and login behaviour.
• Responsible gaming: To administer deposit limits, session time reminders, cooling-off periods, and self-exclusion requests that you activate. We use transactional and usage data to identify patterns that may indicate problematic gambling and, where appropriate, to proactively reach out to affected players.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance across all support channels.
• Platform improvement: To analyse aggregate usage data and understand how players interact with gb11.io, so that we can improve game selection, user experience, and platform performance.
• Promotional communications: Where you have opted in, to send you information about promotions, bonuses, seasonal offers (such as those tied to BPL, Eid, or T20 World Cup events), and platform updates. You may opt out at any time by contacting support.
• Legal and regulatory compliance: To fulfil any obligations arising from applicable laws or from instructions by authorised bodies, including providing information in response to legitimate legal requests.

05 Legal Basis for Processing

gb11 processes your personal data on the basis of one or more of the following grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and gb11 — that is, to provide the betting and gaming services you have registered to use. This covers account management, payment processing, game delivery, and withdrawal execution.
• Legitimate interests: Processing is necessary for gb11's legitimate interests in operating a secure, fair, and commercially viable gaming platform. This covers fraud prevention, security monitoring, platform analytics, and certain responsible gaming monitoring activities, provided those interests are not overridden by your rights and interests.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including anti-money-laundering requirements, age verification obligations, and responses to lawful information requests.
• Consent: Where we rely on your consent — for example, to send you promotional emails or push notifications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact our support team.
• Vital interests: In exceptional circumstances involving a serious risk to the life or safety of a player (for example, a player who discloses a gambling-related mental health crisis), gb11 may process data to protect that player's vital interests.

06 Data Sharing & Disclosure

gb11 does not sell your personal data to third parties. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: We share transaction data with mobile banking providers (bKash, Nagad, Rocket, Upay) and banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) and card networks (Visa, Mastercard) as necessary to process your deposits and withdrawals.
• Identity verification providers: We may share identity documents and data with third-party verification services to confirm your age, identity, and the accuracy of the information you provided during registration.
• Fraud prevention services: We may share technical data (such as IP addresses, device fingerprints, and transaction patterns) with fraud-prevention tools and databases to detect and prevent misuse of the gb11 platform.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver and record the results of their games. These providers operate under data-processing agreements that restrict their use of such data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or other authorised bodies where required by applicable law or in response to a lawful request, including in connection with anti-money-laundering investigations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of gb11's business assets, personal data held by gb11 may be transferred to the relevant successor entity. In such cases, players will be notified prior to the transfer and the successor entity will be bound by the terms of this Privacy Policy.

All third-party service providers who receive personal data from gb11 are required to handle that data in accordance with applicable privacy standards and are prohibited from using it for their own marketing or commercial purposes without your explicit consent.

07 Cookies & Tracking Technologies

gb11 uses cookies, web beacons, pixel tags, and similar tracking technologies on gb11.io. These technologies help us deliver a functional, personalised, and secure gaming experience. The following table describes the types of cookies we use:

You can manage or delete cookies through your browser's settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive notifications when new cookies are set. Please note that disabling non-essential cookies will not affect your ability to use the core features of gb11, but may limit personalisation features. gb11 does not use third-party advertising or retargeting cookies.

08 Data Retention

gb11 retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with the following general principles:

• Active accounts: Personal data is retained for the full duration of your active account relationship with gb11, including all transactional and identity data.
• Closed accounts: Following account closure — whether initiated by you or by gb11 — we retain your core identity data, transaction history, and communications records for a minimum period of five years. This retention period supports our ability to respond to disputes, comply with anti-money-laundering record-keeping requirements, and handle any post-closure enquiries.
• Self-excluded accounts: Where an account is closed as part of a self-exclusion request, we retain sufficient data to ensure that the self-exclusion remains in force for the full exclusion period and to prevent re-registration during that period.
• Technical and usage data: Aggregate and anonymised usage data may be retained indefinitely for platform analytics purposes. Identifiable technical data (such as IP address logs) is retained for a shorter period of up to 12 months unless required for an ongoing fraud or security investigation.
• Support communications: Records of support communications are retained for a minimum of 24 months following the last interaction, to support dispute resolution and quality assurance.

When personal data is no longer required for any of the purposes described in this Policy and the applicable retention period has expired, gb11 will securely delete or anonymise that data in a manner that prevents its reconstruction or re-identification.

09 Data Security

gb11 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data in transit between your device and gb11.io is encrypted using Transport Layer Security (TLS) with strong cipher suites. The padlock icon in your browser confirms that this encryption is active.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. gb11 never stores passwords in plain text, and our support staff cannot retrieve your password — only reset it through a verified process.
• Access controls: Access to personal data within gb11's internal systems is restricted on a need-to-know basis. Support agents, finance staff, and technical personnel have access only to the data categories required for their specific role.
• Fraud monitoring: Automated monitoring systems operate continuously to detect unusual account activity, suspicious login patterns, and anomalous transaction behaviour. Alerts are reviewed by trained security personnel.
• Secure infrastructure: gb11's platform infrastructure is hosted on servers that employ firewalls, intrusion detection systems, and regular security patching schedules.
• Incident response: gb11 maintains an internal data breach response procedure. In the event of a data breach that is likely to result in a risk to the rights of affected players, we will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the breach.

10 Your Rights

As a player on gb11, you have a number of rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting our support team via the details provided in Section 14 of this Policy.

• Right of access: You have the right to request a copy of the personal data that gb11 holds about you. We will provide this information in a clear, readable format within 5 business days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For example, if your name or date of birth was recorded incorrectly during registration, you may request an update.
• Right to erasure: In certain circumstances, you may request that gb11 delete the personal data we hold about you. This right is subject to our legal obligation to retain certain data for a minimum period (see Section 8) and may not apply where data retention is required by law.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, contact our support team at [email protected]. We may need to verify your identity before processing a data rights request to ensure that we do not disclose personal data to unauthorised individuals. We will respond to all verified requests within 5 business days.

11 Children & Minors

gb11 is strictly an adult platform. Access to the gb11 platform and all of its services — including cricket betting, slots, live casino, Teen Patti Joker, Bingo, and crash games — is permitted only to individuals who are 21 years of age or older. gb11 does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm their date of birth. Where gb11 has reasonable grounds to believe that a player is under the age of 21, we will suspend that player's account and initiate an age verification check. If the verification check confirms that the player is under 21, the account will be permanently closed and any funds held in the account will be returned to the payment method used for the original deposit, subject to our verification of that payment method.

If you are the parent or guardian of a minor and you believe that your child has registered an account on gb11 or has accessed the platform, please contact our support team immediately at [email protected]. We will investigate promptly, close the account if confirmed, and delete any personal data collected in connection with that account, except where retention is required for legal reasons.

12 International Data Transfers

gb11 operates its primary services for players in Bangladesh. In the course of operating the platform, some of your personal data may be processed or stored on servers or by service providers located outside Bangladesh — for example, where gb11 uses internationally hosted infrastructure or where game content providers such as Pragmatic Play, Evolution Gaming, or Spribe process session data on their own servers.

Where personal data is transferred to service providers outside Bangladesh, gb11 takes steps to ensure that appropriate safeguards are in place to protect your data. These safeguards may include contractual data processing agreements that impose obligations on the recipient to handle data securely and in accordance with the standards described in this Privacy Policy.

By registering an account on gb11, you acknowledge that your personal data may be processed in countries outside Bangladesh in connection with the delivery of gb11 services. gb11 will not transfer your data to a third party in another country for that party's own independent marketing purposes.

13 Changes to This Policy

gb11 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, the purposes for which we use your data, or the third parties with whom we share it — we will notify registered players via email or via an on-platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised "Last Updated" date at the top.

Minor amendments — such as corrections of typographical errors, clarifications that do not alter the substance of any clause, or updates to reflect changes in the names of payment providers — may be made without advance notice. However, the "Last Updated" date on this page will always reflect the date of the most recent revision, however minor.

Your continued use of the gb11 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must stop using gb11 and may request closure of your account by contacting our support team. Closing your account does not affect gb11's right to retain data that we are required to retain by law or for legitimate operational purposes as described in Section 8.

We encourage all players to review this Privacy Policy periodically to stay informed about how gb11 protects their personal data. If you have any questions about a change to this Policy, please contact our support team using the details provided in Section 14.

14 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or to the way gb11 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, every day of the year including public holidays observed in Bangladesh such as Eid, Durga Puja, Victory Day (16 December), Independence Day (26 March), and Pohela Boishakh.

All support and data-related communications are handled in English by trained human agents. Contact details are as follows:

• Email: [email protected] — for all data rights requests, privacy complaints, and general privacy enquiries. We aim to acknowledge all emails within 2 hours and to provide a substantive response to data rights requests within 5 business days.
• WhatsApp: +880 1700 000000 — for urgent account queries and real-time support. Please note that formal data rights requests submitted via WhatsApp may require follow-up by email for verification purposes.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST, UTC+6).