gb111 Privacy Policy — How We Handle Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how gb111 ("gb111", "we", "us", "our") collects, uses, stores, and shares personal information relating to individuals ("you", "Player", "User") who access or use the gb111 online gaming platform at https://gb111.io and any associated subdomains or services.

gb111 operates as an online casino and sports betting platform serving the Bangladesh market. The platform provides casino games, live dealer tables, crash games, and cricket and sports betting markets to registered players who are resident in Bangladesh and aged 21 or above.

This Policy should be read alongside the gb111 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

gb111 takes data protection seriously. We are committed to handling your personal information with integrity, transparency, and respect. This Policy sets out clearly what data we hold, why we hold it, and what you can do about it.

Data We Collect

gb111 collects the following categories of personal data from players:

2.1 Registration Data. When you create a gb111 account, we collect: full legal name; date of birth; email address; mobile phone number (required for OTP verification); and chosen username.

2.2 Identity Verification Data. To comply with Know Your Customer (KYC) obligations, gb111 may collect copies of: government-issued national identity card (NID) or passport; proof of address (e.g., a recent utility bill or bank statement); and proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account registered to your name).

2.3 Financial Data. gb111 collects transaction records including deposit amounts, withdrawal amounts, payment method identifiers (e.g., your bKash mobile number or the last four digits of a card), transaction timestamps, and balance history. gb111 does not store full card numbers or full mobile banking PINs.

2.4 Gaming Activity Data. gb111 records details of all games played and bets placed on the platform, including: game titles, stake amounts, outcomes, session timestamps, and responsible gaming tool usage (e.g., deposit limit activations, self-exclusion requests).

2.5 Technical Data. When you access the gb111 platform, our servers automatically record certain technical information including: IP address; device type and operating system; browser type and version; referring URL; session duration; and pages visited within the platform.

2.6 Communications Data. If you contact gb111 support via email or live chat, we retain records of those communications including the content of messages, timestamps, and any attachments provided, for the purposes of resolving your query and maintaining a support history.

2.7 Marketing Preferences. Where you have separately opted in to marketing communications, gb111 records your consent and preference settings relating to promotional emails, SMS notifications, and in-platform offers.

How We Collect Data

gb111 collects personal data through the following means:

• Directly from you: when you complete the registration form, submit identity documents, make a deposit or withdrawal request, contact support, or respond to a survey or promotion;
• Automatically via the platform: through server logs, session tracking, and cookies placed on your device when you browse or interact with the gb111 website (see Section 7 on Cookies);
• From payment providers: transaction confirmation data shared by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard when you make deposits or request withdrawals;
• From identity verification services: third-party KYC service providers may return verification status and risk scoring information based on the identity documents you submit;
• From fraud prevention partners: aggregated risk indicators shared by fraud detection services that help gb111 identify potentially fraudulent account activity.

How We Use Your Data

gb111 uses your personal data for the following purposes:

gb111 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for doing so.

Legal Basis for Processing

gb111 processes personal data on the following legal grounds:

• Contract performance: Processing is necessary to enter into and perform the contract with you (i.e., to provide the gb111 gaming services you have registered for, including account management, payment processing, and game delivery);
• Legal obligation: Processing is required by applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification requirements;
• Legitimate interest: Processing is necessary for gb111's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the user experience — provided those interests are not overridden by your privacy rights;
• Consent: Where gb111 relies on consent as the legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

6.1 No Sale of Data. gb111 does not sell, rent, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Your personal data will never be shared with advertisers, data brokers, or unaffiliated third parties for their own use.

6.2 Service Providers. gb111 shares personal data with carefully selected third-party service providers who process data on gb111's behalf and under binding data processing agreements. These service providers include:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa and Mastercard acquiring banks) — for the purpose of processing deposit and withdrawal transactions;
• Identity verification and KYC service providers — for the purpose of verifying player age and identity;
• Fraud detection and risk management platforms — for the purpose of identifying and preventing fraudulent account activity;
• Game content providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Play'n GO, Hacksaw Gaming, Spribe) — limited technical session data is shared to facilitate game delivery and to record game outcomes;
• Customer support platform providers — to facilitate the delivery of 24/7 English-language support to gb111 players;
• Cloud hosting and infrastructure providers — on whose secured servers gb111 platform data is stored.

6.3 Legal Disclosure. gb111 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in response to a lawful request from a competent authority. gb111 will, where legally permitted, notify the affected player of any such disclosure request before responding to it.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of gb111's business assets, personal data held by gb111 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller before the transfer takes effect.

6.5 Aggregated Data. gb111 may share anonymised, aggregated statistical data (from which no individual player can be identified) with third parties for research, analytical, or marketing purposes. This does not constitute a sharing of personal data.

Cookies and Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device by the gb111 website when you visit. They allow the platform to recognise your browser, maintain your session, remember your preferences, and gather analytical information about how the platform is used.

7.2 Types of Cookies Used by gb111.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate the gb111 platform. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your language preference, display settings, and responsible gaming tool configurations between sessions.
• Analytical cookies: Collect anonymised data about how players use the gb111 platform — which pages are visited most frequently, where users encounter errors, and how navigation flows are used — to help gb111 improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and credential stuffing attacks on player accounts.

7.3 Managing Cookies. You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the gb111 platform. Disabling analytical or functional cookies will not prevent you from accessing the platform but may affect the quality of your experience.

7.4 No Third-Party Advertising Cookies. gb111 does not use third-party advertising network cookies or cross-site tracking technologies that build behavioural profiles for advertising targeting purposes.

Data Retention

gb111 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account data: Retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations;
• Identity verification documents: Retained for a minimum of five years from the date of verification, in line with KYC record-keeping requirements;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of three years from the date of each session or bet;
• Support communications: Retained for two years from the date of last contact, to maintain a service history;
• Marketing consent records: Retained for the duration of your marketing consent and for one year following withdrawal of consent, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where retention beyond the standard periods is required by law or legal proceedings, data will be held for the necessary extended period and then deleted promptly.

Your Rights

As a gb111 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data gb111 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. You may update certain registration details directly within your account settings.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose it was collected — you may request the deletion of your personal data. This right is subject to gb111's legal obligations to retain certain records (see Section 8).
• Right to restriction of processing: You may request that gb111 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that gb111 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where gb111 processes your data based on consent (primarily marketing communications), you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting [email protected].
• Right to object: You may object to processing that is based on gb111's legitimate interests. gb111 will assess such objections and cease processing unless compelling legitimate grounds exist that override your interests.

To exercise any of the above rights, please contact the gb111 data team at [email protected] with the subject line "Data Rights Request" and a description of your request. gb111 may need to verify your identity before processing any data rights request.

Data Security

gb111 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and the gb111 platform is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data stored on gb111 servers is encrypted at rest using industry-standard encryption protocols;
• Access controls: Access to personal data is restricted to authorised gb111 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems;
• Intrusion detection: gb111 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time;
• Regular security assessments: gb111 conducts periodic security reviews and vulnerability assessments of its platform infrastructure;
• Incident response: gb111 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to players' rights and freedoms, affected players will be notified without undue delay.

While gb111 takes all reasonable precautions to protect your data, no platform can guarantee absolute security. You are responsible for maintaining the security of your own gb111 account credentials and for logging out of the platform on shared or public devices.

Children and Minors

The gb111 platform is strictly intended for adults aged 21 and above. gb111 does not knowingly collect personal data from individuals under the age of 21. If gb111 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and the associated data will be deleted from gb111's systems, subject only to any retention obligations required by law.

Parents and guardians are responsible for ensuring that minors do not access the gb111 platform through a registered adult's account or device. If you believe that a minor has registered an account or provided personal data to gb111, please contact [email protected] immediately so that we can take appropriate action.

Third-Party Links

The gb111 platform may contain references to third-party payment providers (such as bKash, Nagad, and Rocket) and game studios. If you navigate to any third-party website or service — for example, by accessing your bKash account through the bKash app to complete a deposit — that third party's own privacy policy will govern the collection and use of your data on their platform. gb111 is not responsible for the privacy practices of any third-party service provider beyond the data processing obligations set out in our contractual agreements with them.

Changes to This Privacy Policy

gb111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, platform functionality, or our data processing practices. When material changes are made, gb111 will notify registered players by email to the address on file at least 14 days before the changes take effect, where practicable.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically to remain informed about how gb111 is protecting your personal data. Continued use of the gb111 platform after a revised Policy has taken effect constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to gb111's handling of your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line for data rights requests: Data Rights Request
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time: Data rights requests will be acknowledged within 3 business days and resolved within 30 days
• Language: English

For questions about responsible gaming, self-exclusion, or deposit limits, please visit the gb111 Responsible Gaming page or contact the support team directly. For questions about the general rules governing your account, please review the gb111 Terms & Conditions.