bo11 Privacy Policy

1 Overview

This Privacy Policy ("Policy") describes how bo11 ("we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "the User") who access or use the bo11.io website and any associated services, features, or products offered through the platform.

bo11 operates as an online entertainment and betting platform serving the Bangladesh market. We recognise that privacy is a fundamental right and we take our responsibilities seriously. This Policy is designed to be transparent and easy to understand, so you know exactly what information we hold about you and how we use it.

This Policy applies to all personal data collected through bo11.io, including data collected during account registration, payment processing, platform usage, customer support interactions, and marketing communications. It covers data collected via desktop browsers, mobile browsers, and any bo11 application.

By continuing to use the bo11 platform after the effective date of this Policy — or any subsequent updated version — you confirm your acceptance of its terms. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to close your account.

2 Data We Collect

bo11 collects several categories of personal data depending on how you interact with our platform. The main categories are described below:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than what may be included in identity documents submitted for KYC), or health data — unless you voluntarily disclose such information in the context of a responsible gaming self-referral.

3 How We Collect Your Data

bo11 collects personal data through several means during the normal course of platform operation:

• Direct interactions: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to a survey.
• Automated technologies: Technical and usage data collected automatically as you navigate bo11.io, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for full details.
• Payment providers: Financial data passed to us by bKash, Nagad, Rocket, Upay, Visa, Mastercard, or your bank when you initiate a transaction. We receive confirmation and reference data necessary to credit your bo11 wallet.
• Identity verification partners: Where we engage a third-party KYC provider to verify your identity documents, that provider may share the outcome and associated verification data with us.
• Third-party game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session and game-round data with us in order to settle bets and handle disputes.
• Marketing channels: If you discover bo11 through an affiliate partner or a referral link, the affiliate may pass limited tracking data (such as a click ID) to us to facilitate correct bonus attribution.

4 How We Use Your Data

bo11 uses your personal data only for specified, explicit, and legitimate purposes. The primary ways in which we use your data include:

• Account management: Creating, maintaining, and administering your registered bo11 account, including verifying your identity and eligibility to use the platform.
• Service delivery: Processing bets, settling winnings, handling deposits and withdrawals, and providing access to all sportsbook, casino, and gaming features.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, money laundering, collusion, and other prohibited activities outlined in our Terms & Conditions.
• Responsible gaming: Monitoring usage patterns to identify potential signs of problem gambling and to administer deposit limits, session reminders, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy.
• Legal and compliance obligations: Fulfilling our obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.
• Customer support: Responding to your queries, complaints, and requests in a timely and effective manner.
• Marketing communications: Sending you information about promotions, bonuses, new games, and platform updates — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of bo11.io.

5 Legal Basis for Processing

bo11 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account registration, bet settlement, and payment processing — is carried out on the basis that it is necessary to fulfil that contract.
• Legal obligation: Where we are required by law to collect, retain, or disclose data (for example, KYC/AML obligations), we process data on the basis of legal compliance.
• Legitimate interests: Where processing is necessary for our legitimate business interests — such as fraud detection, platform security, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: Where you have given explicit consent for a specific processing purpose, such as receiving marketing emails. You may withdraw your consent at any time by contacting support or adjusting your account preferences.

6 Data Sharing & Disclosure

bo11 does not sell your personal data to third parties. We share data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners solely to process deposits and withdrawals on your behalf.
• KYC and identity verification providers: Identity documents you submit are processed by our verification partner(s) to confirm your eligibility. These partners are contractually bound to use your data for verification purposes only.
• Game studios and platform providers: Technical session data is shared with Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios to facilitate game delivery, round settlement, and dispute resolution.
• Regulatory and law enforcement authorities: We may disclose your data to regulatory bodies, law enforcement agencies, or courts where required by law or where we have a good-faith belief that such disclosure is necessary to prevent criminal activity or protect the rights and safety of users.
• Fraud prevention agencies: Where we have reasonable grounds to suspect fraud or money laundering, we may share relevant data with specialist fraud prevention services or financial intelligence units.
• Professional advisers: Our legal, financial, and audit advisers may access personal data where strictly necessary for the provision of professional services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change and your continued use of the platform will constitute acceptance of the new operator's privacy terms.

7 Data Retention

bo11 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or compliance obligations.

• Active account data: Retained for the duration of your account relationship with bo11, plus a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records, bet history, and associated financial data are retained for a minimum of five years from the date of each transaction.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Live chat transcripts and support emails are retained for up to three years for quality assurance and dispute resolution purposes.
• Marketing data: Marketing preferences and consent records are retained for the duration of your account relationship and for up to two years following opt-out, to demonstrate compliance with consent requirements.
• Technical/usage data: Server logs and anonymised usage analytics may be retained indefinitely in aggregated, non-personally-identifiable form for platform improvement purposes.

When data is no longer required for any of the above purposes, bo11 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

8 Data Security

bo11 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• SSL/TLS encryption: All data transmitted between your device and bo11.io is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive data — including financial details and identity documents — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within bo11's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: bo11 supports and encourages two-factor authentication (2FA) for all registered accounts to reduce the risk of unauthorised access.
• Regular security audits: Our systems undergo periodic security assessments and penetration testing to identify and address potential vulnerabilities.
• Incident response: bo11 maintains an incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable requirements.

9 Cookies & Tracking Technologies

bo11.io uses cookies and similar tracking technologies to improve your experience on the platform, maintain your session, and gather analytics data. A cookie is a small text file placed on your device by the website. The categories of cookies we use are as follows:

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the bo11 platform, including your ability to remain logged in during a betting session. bo11 does not use third-party advertising cookies or cross-site tracking networks for the purpose of selling advertising space.

10 Your Data Rights

As a user of the bo11 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]:

• Right of access: You have the right to request a copy of the personal data bo11 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to restriction of processing: You may ask us to restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your data to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bo11 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case we will inform you of the extension and the reasons for it.

11 Third-Party Services

The bo11 platform integrates with a number of third-party service providers in order to deliver a complete betting and gaming experience. Each third-party provider operates under its own privacy policy and data handling practices. bo11 is not responsible for the privacy practices of third-party services accessed through our platform.

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver their games directly within the bo11 interface. Game session data is shared with these studios as necessary for game delivery and bet settlement.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks process payment transactions. bo11 does not store full card numbers or full mobile banking PINs.
• Analytics services: bo11 uses privacy-conscious analytics tools to measure platform performance. Where possible, data shared with analytics providers is anonymised or pseudonymised before transmission.
• Affiliate networks: If you joined bo11 via an affiliate referral, limited tracking data (click ID, referral source) is shared with the affiliate network solely for the purpose of commission tracking and bonus attribution.

bo11 conducts due diligence on all third-party providers before engaging them and requires that they maintain adequate data protection standards as a condition of partnership.

12 Minors & Age Restriction

bo11 strictly prohibits use of its platform by individuals under the age of 21. We do not knowingly collect personal data from persons below this minimum age. Our registration process includes a mandatory date-of-birth declaration, and accounts are subject to age verification as part of the KYC process.

If you are a parent or guardian and you believe that a minor in your care has registered or is using a bo11 account, please contact us immediately at [email protected] so that we can take prompt action. We take underage gambling prevention extremely seriously and cooperate fully with all requests of this nature.

13 Changes to This Policy

bo11 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the services we offer. When material changes are made, we will notify registered users via email or via a prominent notice within the bo11 platform, and we will update the "Effective Date" shown at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. The most current version of this Privacy Policy will always be accessible at bo11.io/privacy-policy. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bo11 holds about you, please contact our support team using the details below. We are committed to handling all privacy-related enquiries with care and in a timely manner.

For data rights requests — including access, rectification, erasure, or portability — please include your registered email address and a description of your request. We may ask you to verify your identity before processing the request. All valid requests will be acknowledged within 5 business days and resolved within 30 days.