gd111 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") governs the manner in which gd111 ("gd111", "we", "us", or "our"), the operator of the online betting and casino platform accessible at gd111.io, collects, stores, uses, discloses, and otherwise processes the personal data of individuals ("you", "the Player", or "the User") who access or register on the platform.

gd111 is committed to handling all personal data with integrity, transparency, and in accordance with accepted data protection principles. We recognise that the players who trust gd111 with their personal information deserve clear, honest communication about how that information is used. This Policy is intended to provide that clarity in full.

By accessing the gd111 platform, creating an account, or placing a wager, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data in the manner described herein. If you do not agree with any aspect of this Policy, you should cease using the platform and, if applicable, request closure of your account by contacting [email protected].

This Privacy Policy should be read together with gd111's Terms and Conditions, which also form part of the overall agreement governing your relationship with the platform.

gd111 collects the following categories of personal data in connection with the operation of the platform and the provision of its services:

• Identity Data: Full legal name, date of birth, nationality, national identity card (NID) number, passport number, or other government-issued identification details provided during registration or identity verification.
• Contact Data: Mobile phone number, email address, and residential address provided during registration or subsequently updated via account settings.
• Financial Data: Mobile financial service account details (bKash, Nagad, Rocket, Upay) and bank account identifiers provided for the purposes of processing deposits and withdrawals. gd111 does not store full payment credentials; transaction references and account identifiers are retained for reconciliation and AML compliance purposes.
• Transaction Data: Records of all deposits, withdrawals, wagers, bonus credits, and adjustments made on your gd111 account, including timestamps, amounts in BDT, and game or market identifiers.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and session duration collected automatically when you access the platform.
• Usage Data: Information about how you navigate and interact with the platform, including pages visited, games played, betting markets accessed, session frequency, and feature usage patterns.
• Communications Data: The content and metadata of any communications you send to gd111 through support channels, including live chat transcripts, support emails, and feedback submissions.
• Verification Data: Copies of identity documents, selfie photographs, and source-of-funds documentation submitted in connection with KYC (Know Your Customer) or AML compliance requirements.

gd111 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when completing the registration form, updating account settings, submitting verification documents, contacting customer support, or participating in any survey or promotional activity on the platform.
• Automated Technologies: Technical and usage data collected automatically through server logs, session tracking, cookies, pixel tags, and similar technologies whenever you access or interact with the gd111 platform. Please refer to Section 7 (Cookies and Tracking) for further detail.
• Third-Party Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment service providers when you initiate a deposit or withdrawal through their respective platforms.
• Identity Verification Partners: Data returned by third-party KYC and identity verification service providers when gd111 submits your identity documents for verification as part of its compliance programme.
• Fraud Prevention Services: Risk signals and device fingerprint data received from third-party fraud prevention and anti-money-laundering screening services that gd111 uses to protect the integrity of the platform.

gd111 processes personal data for the following specific and declared purposes:

• Account Creation and Administration: To register your account, verify your identity, manage your account settings, and maintain accurate records of your relationship with gd111.
• Service Delivery: To enable you to access betting markets, casino games, and all other features of the gd111 platform, and to process your wagers and financial transactions in real time.
• Financial Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other available payment methods, and to maintain complete transaction records for reconciliation and audit purposes.
• Regulatory Compliance: To fulfil gd111's obligations under applicable anti-money-laundering (AML) requirements, including customer due diligence (CDD), enhanced due diligence (EDD), and transaction monitoring programmes.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, account compromise, bonus abuse, collusion, and any other conduct that threatens the integrity or security of the platform.
• Responsible Gaming: To monitor betting patterns and account activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide access to responsible gaming tools.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via email and live chat support channels.
• Promotional Communications: Where you have opted in, to send you personalised promotional offers, bonus notifications, and platform updates via your registered email address or mobile number.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the functionality, performance, and content of the gd111 platform.

gd111 relies on the following legal grounds when processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and gd111 — including account registration, game delivery, and financial transaction processing — is carried out on the basis that it is necessary for the performance of that contract.
• Legitimate Interests: Processing carried out to protect the security of the platform, prevent fraud, detect bonus abuse, and improve the gd111 service is conducted on the basis of gd111's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable legal obligations — including AML compliance, identity verification, and the retention of financial records — is carried out on the basis that it is legally required.
• Consent: Processing for the purpose of sending direct marketing communications, personalised promotional offers, or non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected] or updating your marketing preferences within your account settings.

gd111 does not sell your personal data to any third party. Personal data may be disclosed to the following categories of recipients only to the extent strictly necessary for the declared purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and any other payment processing partner required to execute your deposit or withdrawal transactions. These providers receive only the minimum data necessary to process the relevant transaction.
• Identity Verification and KYC Partners: Third-party providers engaged by gd111 to perform identity document verification and KYC screening as required by our compliance programme. These providers are bound by strict confidentiality obligations and data processing agreements.
• Fraud Prevention and AML Service Providers: Third-party platforms used by gd111 to screen transactions, assess account risk, and identify patterns consistent with money laundering or other financial crimes.
• IT Infrastructure and Hosting Providers: Cloud hosting and infrastructure service providers on whose platforms the gd111 system operates. Access to personal data by these providers is limited to what is technically necessary for service delivery and is governed by appropriate contractual protections.
• Legal and Regulatory Authorities: Government bodies, law enforcement agencies, and regulatory authorities to whom gd111 is required by law to disclose personal data, including in response to lawful orders, court orders, or statutory reporting obligations.
• Professional Advisers: Lawyers, auditors, and accountants engaged by gd111 on a confidential basis in connection with legal proceedings, compliance reviews, or financial audits.

gd111 uses cookies and similar tracking technologies to support the operation and performance of the platform. Cookies are small text files placed on your device when you access a website. The following categories of cookies are used on the gd111 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that maintain your logged-in state, security tokens, and load-balancing cookies. No consent is required for these cookies as they are technically necessary for service delivery.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the gd111 platform — such as which pages are visited most frequently and how long sessions last — to help gd111 improve platform performance and user experience. These cookies are set only where you have consented.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, last-visited game category, and notification preferences — to provide a more personalised experience on return visits.
• Fraud Prevention and Security Cookies: Technical identifiers used by gd111 and its fraud prevention partners to detect and prevent automated attacks, bot access, and account takeover attempts.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent some or all features of the gd111 platform from functioning correctly. To withdraw consent for non-essential cookies, please contact [email protected] or adjust your browser settings to reject third-party cookies.

gd111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active gd111 account — including identity data, contact data, and transaction records — is retained for the duration of the account's active status.
• Closed Account Data: Following the closure of a player's account, gd111 will retain identity data, KYC documentation, and financial transaction records for a minimum period of five (5) years to comply with AML and record-keeping obligations. After this retention period, data is securely deleted or anonymised.
• Communications and Support Records: Records of support interactions, including email correspondence and live chat transcripts, are retained for a period of three (3) years following the close of the relevant support case.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained indefinitely to enable gd111 to demonstrate compliance with consent requirements and to honour your preferences.
• Technical and Usage Data: Aggregated and anonymised usage analytics data, from which individual players cannot reasonably be re-identified, may be retained indefinitely for platform improvement purposes.

As a player on the gd111 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected], clearly identifying the right you wish to exercise and the specific data to which your request relates. gd111 will respond to all such requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data that gd111 holds about you, together with information about the purposes for which it is processed and the parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Where a correction is made to identity data, gd111 may require re-submission of verification documents to confirm the updated information.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is found to be unlawful. This right is subject to gd111's overriding legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restriction of Processing: You have the right to request that gd111 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or pending the outcome of an objection to processing.
• Right to Object: You have the right to object to the processing of your personal data where that processing is carried out on the basis of legitimate interests. gd111 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

gd111 is an entertainment platform intended exclusively for adults. Access to and registration on the gd111 platform is strictly prohibited for any individual under the age of 21. gd111 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age. gd111 implements identity verification procedures to confirm the age of players where reasonable grounds exist to question an applicant's stated age. Any account found to have been registered by a person under 21 will be closed immediately, and any balance in the account will be handled in accordance with gd111's Terms and Conditions.

Parents and guardians are strongly encouraged to install appropriate parental control software on any device that may be accessible to minors, in order to prevent inadvertent access to the gd111 platform or similar services. If you are the parent or guardian of a minor and you believe that the minor has accessed the gd111 platform or submitted personal data to it, please contact [email protected] immediately so that appropriate action can be taken without delay.

gd111 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your browser or mobile device and the gd111 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception by unauthorised parties during transmission.
• Encryption at Rest: Sensitive personal data and financial records stored on gd111's servers are encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of unauthorised physical access to storage infrastructure.
• Access Controls: Access to systems and databases containing personal data is restricted to authorised gd111 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Intrusion Detection and Monitoring: gd111's infrastructure is monitored continuously for signs of unauthorised access, unusual activity, or security incidents. Automated alerting systems are in place to detect and respond to potential threats in real time.
• Vulnerability Management: gd111 conducts regular security assessments of its platform infrastructure and rectifies identified vulnerabilities in accordance with a risk-based prioritisation framework.
• Incident Response: In the event of a personal data breach that poses a risk to affected individuals, gd111 will notify affected players and take all reasonable steps to contain, investigate, and remediate the breach without undue delay.

Notwithstanding these measures, no internet-based system can guarantee absolute security. Players are encouraged to take personal responsibility for the security of their own gd111 credentials — including choosing a strong, unique password and not sharing login details with any third party.

The gd111 platform may, from time to time, display content or functionality sourced from third-party providers — including game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — that operate under their own separate privacy policies and data processing terms.

When you access game content delivered by a third-party provider through the gd111 platform, that provider's systems may independently collect technical data — including IP address and device identifiers — as part of the game's normal operation. gd111 is not responsible for the data practices of third-party game providers and encourages players to review the privacy policies of those providers where available.

This Privacy Policy applies solely to data processed directly by gd111 in its capacity as the operator of the gd111 platform. gd111 does not accept responsibility for the data practices of any third party, whether or not that third party's content is accessible through the gd111 platform.

gd111 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made, gd111 will post a notice on the platform and, where practicable, send a notification to your registered email address or mobile number, prior to the amended Policy taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page and in the "Last Updated" indicator in the table of contents sidebar. Continued use of the gd111 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with any amendment to this Privacy Policy, you should cease using the platform and request account closure by contacting [email protected] before the effective date of the change. Previous versions of this Privacy Policy are available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights, please contact the gd111 data protection team using the details below. All communications are handled in English.

• Privacy Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please mark privacy-related emails with the subject line "Privacy Request" to ensure prompt routing to the appropriate team.
• Response Target: gd111 targets a response to all privacy-related requests within 72 hours during Bangladesh Standard Time (BST, UTC+6) business hours.
• Support Availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays.

For requests relating to self-exclusion, responsible gaming tools, or account closure, please mark your email with the subject line "Responsible Gaming Request" to ensure your message is directed to the appropriate team member without delay.