bf11 Privacy Policy

1. Who We Are

1.1 bf11 is an internationally licensed online casino and sports betting platform operating at https://bf11.io. The platform is designed for the Bangladesh market and accepts deposits exclusively in Bangladeshi Taka (BDT).

1.2 In this Privacy Policy, references to "bf11", "we", "us", or "our" refer to the operator of the bf11 platform. References to "you", "your", or "player" refer to any registered user of, or visitor to, the bf11 platform.

1.3 bf11 acts as the data controller in respect of the personal data collected through the platform. If you have any questions about how we handle your data, please contact us at the details provided in Section 16 of this policy.

2. Scope of This Policy

2.1 This Privacy Policy applies to all personal data collected by bf11 through:

• The bf11 website at https://bf11.io and all sub-pages thereof.
• The bf11 mobile-optimised web interface.
• Email, live chat, and other communications you send to bf11 support.
• Payment processing integrations with third-party providers such as bKash, Nagad, and Rocket.

2.2 This policy does not govern the data practices of third-party websites that may be linked from the bf11 platform. bf11 is not responsible for the privacy practices of external services.

2.3 This policy should be read alongside our Terms & Conditions, which are available at https://bf11.io/terms-conditions.

3. Data We Collect

3.1 bf11 collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, NID / passport / driver's licence number	Age verification, KYC compliance, account authentication
Contact Data	Email address, mobile phone number, residential address	Account communications, transaction confirmations, support responses
Financial Data	bKash / Nagad / Rocket account numbers, transaction reference numbers, deposit and withdrawal amounts in BDT	Payment processing, fraud prevention, withdrawal verification
Technical Data	IP address, browser type and version, device model, operating system, session timestamps	Platform security, fraud detection, user experience optimisation
Usage Data	Pages visited, games played, bets placed, session duration, feature interactions	Responsible gaming monitoring, product improvement, personalisation
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer service quality, dispute resolution, compliance records

3.2 bf11 does not intentionally collect any special categories of sensitive personal data (such as health information, religious beliefs, or biometric data) unless specifically required as part of a responsible gaming self-exclusion or enhanced due diligence process, in which case explicit consent will be obtained.

4. How We Collect Data

4.1 Directly from you. The majority of personal data bf11 holds is provided directly by you when you register an account, complete the identity verification process, make a deposit or withdrawal, contact support, or participate in promotions.

4.2 Automatically. When you access the bf11 platform, certain technical data is collected automatically via server logs, session cookies, and analytics tools. This includes your IP address, browser fingerprint, and navigation behaviour within the platform.

4.3 From payment providers. When you complete a deposit or withdrawal using bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, City Bank, or BRAC Bank, bf11 receives transaction confirmation data from those providers including the transaction reference number, amount, and associated wallet or account identifier. bf11 does not receive your full payment credentials from these providers.

4.4 From identity verification services. Where bf11 uses a third-party identity verification provider to validate documents submitted during KYC, that provider may return a verification result (pass / fail / manual review) along with basic identity match data. Full document images are not retained indefinitely beyond the period required for verification.

5. Legal Basis for Processing

5.1 bf11 processes personal data under one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the services set out in the bf11 Terms & Conditions — including account management, deposits, withdrawals, and game play.
• Legal obligation: Processing is required by applicable law, including identity verification obligations and anti-money laundering requirements.
• Legitimate interests: Processing is necessary for bf11's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent: Where bf11 relies on consent — for example, for optional marketing communications — processing is carried out only with your explicit agreement, which you may withdraw at any time.

6. How We Use Your Data

6.1 bf11 uses the personal data it collects for the following purposes:

• To create, manage, and authenticate your bf11 account.
• To process deposits and withdrawals in BDT via your chosen payment method.
• To verify your identity and age in compliance with our eligibility requirements (21+ only).
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities described in the Terms & Conditions.
• To monitor gameplay patterns for responsible gaming purposes and to intervene where problem gambling behaviour is identified.
• To respond to support enquiries, complaints, and dispute resolution requests.
• To send transactional communications including deposit confirmations, withdrawal updates, and security alerts.
• To send marketing communications about bf11 promotions, bonuses, and new features — only where you have given consent or where permitted under applicable law.
• To improve the bf11 platform through analysis of aggregated, anonymised usage data.
• To comply with any legal, regulatory, or judicial obligation to which bf11 is subject.

6.2 bf11 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is required for fraud prevention or regulatory compliance, in which case you have the right to request human review of the decision.

7. Cookies & Tracking Technologies

7.1 bf11 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language or notification settings.
• Analytics cookies: Used to collect aggregated information about how players use the platform, helping bf11 improve its services. Analytics data is anonymised before processing.
• Security cookies: Used to detect suspicious login attempts, device fingerprinting anomalies, and other security threats.

7.2 bf11 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the platform.

7.3 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the bf11 platform.

8. Data Sharing & Disclosure

8.1 bf11 shares personal data only in the limited circumstances described below:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, City Bank, and BRAC Bank solely to the extent necessary to process your deposit or withdrawal.
• Identity verification providers: Where required for KYC compliance, document data may be shared with a contracted identity verification service acting as a data processor on bf11's behalf.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and game activity data to deliver and log gameplay. They do not receive your full identity or financial data.
• Legal and regulatory authorities: bf11 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a lawful request or court order.
• Business transfer: In the event of a merger, acquisition, or sale of the bf11 business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of such a transfer in advance where practicable.

8.2 bf11 does not sell personal data. bf11 does not share personal data with third parties for their own independent marketing purposes.

8.3 All third parties with whom bf11 shares data are required to handle that data in accordance with applicable privacy law and are prohibited from using it for any purpose beyond the specific service they provide to bf11.

9. International Data Transfers

9.1 bf11 is operated for the Bangladesh market. Some of the third-party service providers used by bf11 — including identity verification providers and game studios — may be based outside Bangladesh and may process data in jurisdictions with different data protection frameworks.

9.2 Where personal data is transferred internationally, bf11 ensures that appropriate safeguards are in place, including contractual data processing agreements that require recipients to maintain data security standards equivalent to those described in this policy.

9.3 By registering a bf11 account, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as described in this section.

10. Data Retention

10.1 bf11 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by bf11 are as follows:

• Active account data: Retained for the duration of your account and for five years following account closure.
• Transaction records: Retained for seven years following the transaction date to comply with anti-money laundering and financial record-keeping obligations.
• Identity verification documents: Retained for five years following account closure or the conclusion of any related investigation.
• Support communications: Retained for three years following the resolution of the relevant enquiry or dispute.
• Technical and usage logs: Retained for thirteen months on a rolling basis, after which they are deleted or anonymised.

10.2 Where data is retained beyond the periods above due to an active legal dispute or regulatory investigation, it will be deleted promptly once that matter is resolved.

11. Your Data Rights

11.1 As a bf11 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. bf11 will respond to all valid requests within 30 calendar days.

11.2 Where bf11 processes data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11.3 If you are not satisfied with how bf11 has handled a data request or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

12. Children & Minors

12.1 The bf11 platform is strictly for adults aged 21 and above. bf11 does not knowingly collect personal data from any person under the age of 21.

12.2 If bf11 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any balance held will be assessed in accordance with our Terms & Conditions.

12.3 If you believe that a minor has registered a bf11 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. Security Measures

13.1 bf11 applies industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bf11 platform.
• AES-256 encryption for personal data stored at rest on bf11 servers.
• Role-based access controls limiting employee access to personal data to those with a verified business need.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff accounts.
• Regular penetration testing and security audits carried out by independent security specialists.
• Automated anomaly detection systems that flag unusual login patterns, transaction behaviour, or data access events for manual review.

13.2 Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights or freedoms, bf11 will notify affected players and the relevant authorities within 72 hours of becoming aware of the breach.

13.3 You are responsible for maintaining the security of your own account credentials. bf11 recommends using a strong, unique password and enabling two-factor authentication on your account.

14. Third-Party Links

14.1 The bf11 platform may contain links to third-party websites or services — for example, links to payment provider portals. This Privacy Policy does not apply to those third-party services, and bf11 is not responsible for the data practices of any external website.

14.2 We encourage you to review the privacy policy of any third-party service before submitting personal data to it.

15. Changes to This Policy

15.1 bf11 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The updated policy will be posted at https://bf11.io/privacy-policy with a revised effective date.

15.2 Where changes are material, bf11 will endeavour to notify registered players via their registered email address or via an in-platform notification prior to the changes taking effect.

15.3 Continued use of the bf11 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how your data is handled.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how bf11 has handled your personal data, please contact our Data Protection team. We aim to respond to all data-related enquiries within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 / 7 — Bangladesh Standard Time (UTC+6)
• Response Target: Within 30 calendar days for data rights requests
• Languages: English and Bengali

16.2 If you are not satisfied with bf11's response to your complaint, you may escalate the matter to your local data protection authority or seek independent legal advice.