Privacy Policy for 11hbajee

When you use 11hbajee, we collect personal data in order to verify your identity, process transactions, prevent fraud, and deliver a personalised platform experience. The categories of data we collect are described below.

1.1 Registration Data

When you create an account on 11hbajee, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address and Bangladeshi mobile phone number.
• Username and hashed password (passwords are never stored in plain text).
• Preferred currency (Bangladeshi Taka, BDT).

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals, we collect:

• A scanned or photographed copy of your Bangladesh National ID (NID) card, passport, or other government-issued photo ID.
• A selfie or live photo taken for facial comparison purposes during enhanced verification reviews.
• Proof of address documentation, such as a utility bill or bank statement dated within the last 90 days, where requested during enhanced KYC.
• Payment method confirmation screenshots from bKash, Nagad, Rocket, Upay, or other accepted providers, confirming that the account holder name matches your registered profile.

1.3 Financial Transaction Data

We record all deposit and withdrawal transactions on your account, including the transaction amount in BDT (৳), the payment method used, the transaction timestamp in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number assigned by your payment provider. We do not store full payment card numbers. For card transactions, only the last four digits of the card number and the card type (Visa or Mastercard) are retained.

1.4 Technical & Device Data

When you access 11hbajee, our servers automatically log certain technical information, including:

• Your IP address and approximate geographic location derived from it.
• Browser type, version, and language settings.
• Device type (desktop, mobile, or tablet), operating system, and screen resolution.
• Pages visited, time spent on each page, click paths, and referring URLs.
• Session duration and login timestamps.

1.5 Gaming Activity Data

We maintain a complete record of your betting and gaming activity on the platform, including game names, bet amounts, outcomes, winnings, bonus usage, and the timestamps of all game rounds. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

11hbajee uses the personal data we collect for specific, lawful purposes only. The table below summarises the primary uses of each data category.

2.1 Marketing Communications

With your explicit consent, 11hbajee may send you promotional communications about new games, bonus offers, seasonal promotions tied to cricket events such as the BPL or T20 World Cup, and other platform updates. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings, or by replying STOP to any SMS notification. Withdrawal of marketing consent does not affect transactional communications that are necessary for the operation of your account.

2.2 Responsible Gaming Monitoring

We use your gaming activity data — including session lengths, deposit frequency, bet sizes, and win/loss patterns — to identify potential signs of problem gambling. Where our monitoring systems flag an account as exhibiting behaviour consistent with problem gambling, a member of our responsible gaming team may make proactive contact with the player. This use of data is undertaken in the player's best interests and constitutes a legitimate interest that we consider proportionate and appropriate.

11hbajee does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, we share transaction data — including your registered name and mobile number — with your chosen payment provider (bKash, Nagad, Rocket, Upay, SureCash, Tap, Visa, or Mastercard, as applicable). These providers operate under their own privacy policies and are responsible for the data they receive in the context of payment processing. We recommend reviewing the privacy policy of your payment provider to understand how they handle your transaction data.

3.2 Identity Verification Providers

Where enhanced KYC verification is required, we may share your identity documents and verification selfie with a third-party identity verification service provider. These providers are bound by strict data processing agreements and are permitted to use your data solely for the purpose of performing the verification task on our behalf.

3.3 Game Software Providers

Some games on 11hbajee are powered by third-party software providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. In the context of live game sessions, technical session data (such as session tokens) may be exchanged with the game provider's servers to facilitate gameplay. Personal identification data is not passed to game providers beyond what is necessary to authenticate the game session.

3.4 Legal & Regulatory Disclosure

We may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a lawful court order, legal process, or regulatory request. In such cases, we will disclose only the minimum information required to comply with the relevant legal obligation. Where permitted by law, we will notify the affected player of any such disclosure.

11hbajee uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use the site so that we can continuously improve it.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain information about your session or preferences. Cookies cannot be used to install software on your device and cannot access other files stored on your device.

4.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies that maintain your account balance display in real time.
• Functional Cookies: These remember your preferences, such as your language setting (English) and your preferred game category, so that your next visit starts with those settings already applied.
• Analytics Cookies: We use anonymised analytics cookies to understand which pages and games are most popular, how long players spend on the platform, and which features generate the most engagement. This data is reviewed in aggregate form and is not linked back to any individual player's identity.
• Performance Cookies: These help us identify technical issues, page load problems, and error events so that our engineering team can resolve them promptly and maintain a smooth experience for all players.

4.3 Managing Cookies

You may configure your browser to reject all cookies, accept only certain types of cookies, or notify you each time a cookie is set. Please be aware that disabling strictly necessary cookies will impair your ability to use 11hbajee — in particular, you will not be able to remain logged in or make deposits and withdrawals if session cookies are blocked. Instructions for managing cookie settings are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Opera).

11hbajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a period of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC identity documents: Retained for five years following the date of the most recent verification check conducted on the account, or for five years following account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction in accordance with standard financial record-keeping obligations.
• Gaming activity logs: Retained for three years from the date of each game session, unless the records are subject to an active dispute, in which case retention is extended until the dispute is fully resolved.
• Marketing consent records: Retained until you withdraw your consent, plus a further 12 months to demonstrate the validity of the consent given.
• Technical / server logs: Retained for 90 days on a rolling basis, after which they are permanently deleted unless a security incident requires extended retention for investigation purposes.

Data that has reached the end of its retention period is securely deleted or anonymised so that it can no longer be linked back to any individual. Anonymised and aggregated data (containing no personal identifiers) may be retained indefinitely for statistical and business analysis purposes.

5.1 Cross-Border Data Storage

11hbajee stores player data on servers that may be located in data centres outside of Bangladesh. Where data is transferred outside Bangladesh, we ensure that appropriate safeguards are in place — including contractual data processing agreements — to ensure that your personal data receives a level of protection that is at minimum equivalent to the standards described in this Privacy Policy.

As a player on 11hbajee, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at support@11hbajee with a clear description of your request. We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, including account registration details, KYC records, transaction history, and gaming activity logs.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as a misspelled name — can often be made directly via your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires us to retain it. Please note that where we are legally required to retain financial or identity records — as described in Section 5 — a full erasure may not be possible during the mandatory retention period.
• Right to Restrict Processing: In certain circumstances — for example, where you dispute the accuracy of data we hold — you may request that we pause processing of your data while the dispute is under review.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose.
• Right to Withdraw Consent: Where our processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Object: You may object to processing of your personal data where that processing is based on our legitimate interests, on grounds relating to your particular situation. We will assess the objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

11hbajee takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

7.1 Technical Safeguards

• All data in transit is protected by TLS 1.2 or higher encryption, ensuring that information exchanged between your browser or mobile device and our servers cannot be intercepted in readable form.
• Sensitive data records — including identity documents and financial records — are encrypted at rest using AES-256 encryption within our storage environments.
• Passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. Plain-text passwords are never stored or logged at any point in the system.
• Access to production databases and systems is restricted to a small number of authorised personnel and is controlled via multi-factor authentication (MFA) and role-based access controls (RBAC).
• Our platform undergoes regular automated vulnerability scanning and periodic independent security assessments to identify and remediate potential weaknesses before they can be exploited.

7.2 Organisational Safeguards

• All staff members who handle personal data receive data protection training and are bound by confidentiality obligations as part of their employment or contractor agreements.
• Access to personal data is granted on a strict need-to-know basis. Support agents, for example, can access account details necessary to assist with your query but do not have access to hashed passwords or full payment card information.
• We maintain an incident response plan that governs how we detect, contain, and report data security incidents. In the event of a breach affecting your personal data, we will notify you promptly and clearly describe the nature of the breach and the steps we have taken to address it.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 11hbajee holds about you, please contact our support team using the details below. All privacy-related communications should clearly state "Privacy Enquiry" in the subject line or opening message to ensure your request is routed to the appropriate team promptly.

• Email: support@11hbajee (plain text — not a clickable link)
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy enquiries within two business days and to provide a substantive response within 30 calendar days of receipt.
• Business Hours: Monday to Saturday, 9:00 AM – 10:00 PM Bangladesh Standard Time (BST, UTC+6).

8.1 Updates to This Privacy Policy

11hbajee reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes to the services we offer, or changes in applicable laws and regulations. When a material update is made, we will notify registered players by email or via an in-platform notification displayed at next login. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

Your continued use of 11hbajee following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact us to request closure of your account.