11kkk Privacy
Policy

01 Introduction

This Privacy Policy applies to all services provided by 11kkk through the website located at https://11kkk.io and any associated mobile web application, support channels, and communication tools operated under the 11kkk brand ("the Platform"). It describes how 11kkk ("we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to registered players and visitors ("you", "your") in Bangladesh and wherever the Platform is accessed.

11kkk is committed to handling personal data responsibly and in a manner consistent with recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We do not treat privacy compliance as a formality — it is a fundamental part of how we operate the 11kkk platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between those documents and this Privacy Policy with respect to data-handling matters, this Privacy Policy shall prevail.

02 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 11kkk, operating the Platform at https://11kkk.io. All questions, requests, and complaints regarding the handling of your personal data should be directed to the 11kkk Data Protection contact at [email protected] with the subject line "Data Protection Enquiry".

11kkk determines the purposes and means of processing personal data collected through the Platform. Where 11kkk engages third-party processors (for example, payment service providers or identity verification providers), those processors act strictly on 11kkk's documented instructions and are not permitted to use your data for their own independent purposes.

03 Data We Collect

11kkk collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration Data. When you create a 11kkk account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to open and maintain your account and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data. To comply with our Know Your Customer obligations and to protect against fraud and money laundering, we may collect copies of government-issued identity documents (such as a National Identity Card or passport), proof of address documents, and in some cases a selfie or video verification. KYC data is processed by 11kkk and, where applicable, by our approved identity verification partner.

3.3 Financial Data. When you make a deposit or withdrawal, we collect transaction amounts, transaction timestamps, and the identifier associated with your payment method (for example, your registered bKash or Nagad mobile number, or the last four digits of your card). 11kkk does not store full card numbers or payment credentials directly — these are handled by PCI-DSS compliant payment processors.

3.4 Gaming & Betting Activity Data. We maintain records of all bets placed, games played, bet amounts, outcomes, bonus usage, and session timestamps associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical & Device Data. When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited. This data is used for security, fraud detection, and to optimise Platform performance.

3.6 Communications Data. If you contact 11kkk support by email or any other channel, we retain records of that communication, including your name, contact details, and the content of the exchange. These records are kept for quality assurance, training, and dispute resolution purposes.

3.7 Preference & Consent Data. We record your marketing communication preferences, cookie consent choices, responsible gaming settings (such as deposit limits and session limits), and any self-exclusion requests you have submitted.

04 How We Use Your Data

11kkk uses the personal data described in Section 3 for the following purposes:

• Account creation and management: To open your 11kkk account, authenticate your identity at login, maintain accurate account records, and process account closure requests.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and to process withdrawal requests to your registered payment method.
• Age and identity verification: To confirm that you are at least 21 years of age and that the identity you have provided is genuine, in order to comply with our obligations and protect against underage gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and abuse of bonuses or promotions.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to enforce the deposit, loss, and session limits you have set, and to administer self-exclusion requests promptly.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of our communications for quality assurance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and design of the 11kkk Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and news about 11kkk — only where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal and regulatory compliance: To fulfil our obligations under applicable laws, respond to lawful requests from authorities, and maintain records as required by applicable regulations.

05 Legal Basis for Processing

11kkk processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and KYC verification.
• Legitimate interests: Processing carried out in pursuit of 11kkk's legitimate business interests — including fraud prevention, security monitoring, and Platform analytics — where those interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering obligations and record-keeping requirements.
• Consent: Processing based on your freely given, specific, informed consent — in particular, the sending of marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Cookies & Tracking Technologies

11kkk uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. Cookies are small text files placed on your device that allow us to recognise your browser and remember certain information about your session and preferences.

6.1 Essential Cookies. These cookies are strictly necessary for the Platform to function correctly. They enable core features such as user authentication, session management, and security controls. Essential cookies cannot be disabled without breaking core Platform functionality.

6.2 Analytics Cookies. We use analytics cookies to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. Analytics data is aggregated and anonymised where possible. These cookies are placed only where you have provided consent.

6.3 Functional Cookies. Functional cookies remember your preferences — such as your language or display settings — to provide a more personalised experience. They do not track your activity across third-party websites.

6.4 Managing Cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 11kkk Platform. Instructions for managing cookies in major browsers are available through each browser's help documentation.

11kkk does not use cross-site tracking cookies to build advertising profiles, and we do not share cookie data with advertising networks for the purpose of targeting you with third-party advertisements.

07 Third-Party Sharing

11kkk does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the following circumstances and only to the extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data required to process your deposit or withdrawal transaction. These providers are independently regulated and maintain their own data protection standards.
• Identity verification providers: Where KYC verification is required, we engage approved identity verification partners who process your identity documents on our behalf under a data processing agreement that restricts their use of your data to the verification purpose only.
• Fraud prevention and security services: We may share technical data (such as IP addresses and device fingerprints) with specialist fraud prevention services to detect and prevent fraudulent activity on the Platform.
• Game content providers: Live casino and slot game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) receive session tokens and anonymised player identifiers to deliver game content. These providers do not receive your full name, address, or payment data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of 11kkk, its players, or third parties.
• Business successors: In the event of a merger, acquisition, or sale of all or part of 11kkk's business, player data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy. Affected players will be notified of any such transfer.

08 Data Security

11kkk implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

8.1 Encryption. All data transmitted between your device and the 11kkk Platform is encrypted using TLS 1.3. Sensitive data stored on 11kkk servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.

8.2 Access Controls. Access to personal data is restricted on a strict need-to-know basis. 11kkk personnel are granted access only to the data categories required for their specific role. All access is authenticated, logged, and subject to periodic review.

8.3 Infrastructure Security. The 11kkk Platform operates on hardened server infrastructure with firewalls, intrusion detection systems, and regular vulnerability scanning. Penetration testing is conducted periodically by independent security professionals.

8.4 Incident Response. In the event of a personal data breach that poses a risk to player rights and freedoms, 11kkk will notify affected players without undue delay and will take all reasonable steps to contain the breach, remediate the cause, and prevent recurrence.

8.5 Player Responsibility. While 11kkk takes extensive measures to protect your data, you also play an important role. You are responsible for keeping your login credentials confidential and for logging out of your account when using a shared or public device. Please contact [email protected] immediately if you suspect your account has been compromised.

09 Data Retention

11kkk retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Once a retention period has elapsed, 11kkk will securely delete or irreversibly anonymise the relevant data. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

10 Your Data Rights

As a data subject, you hold the following rights with respect to the personal data 11kkk holds about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". 11kkk will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 11kkk holds about you, along with information about how it is processed and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations — 11kkk cannot delete data it is required by law to retain.
• Right to Restriction of Processing: You may request that 11kkk restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is contested or while an objection is being considered.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive the personal data you provided to 11kkk in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. 11kkk will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The 11kkk Platform is strictly intended for adults aged 21 years and above. 11kkk does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account without refunding any deposited funds.

If you are a parent or guardian and believe that a minor under your care has created a 11kkk account or provided personal data to the Platform, please contact us immediately at [email protected] so that we can take swift action. We take our obligations with respect to underage gambling and data protection of minors very seriously.

12 Policy Updates

11kkk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes to this Policy will be communicated to registered players via email to the address on file, at least 7 calendar days before the updated Policy takes effect.

The effective date displayed at the top of this document reflects the date on which the current version came into force. We encourage you to review this Policy periodically. Your continued use of the 11kkk Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

The current and all prior versions of this Privacy Policy are maintained in our records. If you wish to review a prior version, please contact [email protected].

13 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how 11kkk handles your personal data, please contact our support team using the details below. All data-related enquiries are treated as priority communications and will receive a response within 30 calendar days.

• Email: [email protected] — subject line: "Data Protection Enquiry"
• Response Time: Within 30 calendar days for data rights requests; within 24 hours for urgent security concerns
• Hours: 24 hours a day, 7 days a week
• Language: English

If you are not satisfied with the way 11kkk has handled a data protection concern after raising it with us directly, you have the right to escalate the matter through the appropriate legal channels available in your jurisdiction.