11ok Privacy Policy

1.1 Who We Are. 11ok operates the online betting and casino platform accessible at https://11ok.io (the "Platform"). We provide cricket sportsbook, live dealer casino, slots, fishing games, and other gaming entertainment to players located in Bangladesh. References to "11ok", "we", "us", or "our" in this Privacy Policy refer to the operator of the 11ok Platform.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected by 11ok in connection with your use of the Platform, including data collected when you register an Account, make deposits or withdrawals, place bets, contact support, or simply browse the Platform. It covers data collected via the website, any mobile-optimised version of the Platform, and any direct communications between you and 11ok.

1.3 Our Commitment. 11ok is committed to handling your personal data with integrity, transparency, and care. We collect only what is necessary, use it only for stated purposes, protect it with appropriate technical and organisational measures, and do not sell it to third parties for marketing. This Policy is written in plain English so that every player in Bangladesh can understand exactly how their data is handled.

1.4 Defined Terms. Terms used in this Privacy Policy that are defined in the 11ok Terms & Conditions — such as "Account", "Player", "Platform", "Bonus Funds", and "BST" — carry the same meanings here unless the context indicates otherwise.

11ok collects several categories of personal data in the ordinary course of operating the Platform. The table below summarises the main categories and specific data points within each.

2.1 Sensitive Data. 11ok does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for age and identity verification. Where verification documents incidentally contain such information (for example, a national ID card that states religion), that information is not recorded, processed, or used for any purpose beyond confirming the identity of the document holder.

2.2 Voluntarily Provided Data. Some data — such as your full residential address or a selfie for liveness verification — is collected only when you voluntarily submit it, typically during an enhanced verification request. You are not required to complete enhanced verification unless triggered by our anti-money-laundering procedures or a large withdrawal request.

11ok collects personal data through the following channels:

• Direct Submission: When you register an Account, complete your profile, submit a withdrawal request, fill in a support form, or respond to a survey, you directly provide us with Identity Data, Contact Data, and Financial Data.
• Automated Technical Collection: When you browse or use the Platform, our servers and analytics tools automatically collect Technical Data including your IP address, device identifiers, session timestamps, and navigation patterns. This collection occurs regardless of whether you are logged into an Account.
• Transactional Systems: When you make a deposit or withdrawal, our payment gateway integrations with bKash, Nagad, Rocket, Upay, Visa, and Mastercard pass transaction confirmation data — including masked payment identifiers and transaction reference numbers — back to the Platform for reconciliation purposes.
• Game Provider Feeds: When you play a game hosted by a third-party Game Provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the result and wager data for that game session are transmitted to the 11ok platform in real time and stored as Gaming Data linked to your Account.
• Identity Verification Partners: Where 11ok uses a third-party KYC verification service to process identity documents, that service returns a verification status and a confidence score to 11ok. The underlying document image is stored securely and access is restricted to compliance personnel only.
• Cookies and Tracking Technologies: We use cookies and similar technologies to collect session data and preference data. Full details are provided in Section 9 (Cookies & Tracking) of this Policy.

11ok processes your personal data only for specific, defined purposes. We do not process your data in ways that are incompatible with the purposes described below:

• Account Registration and Management: To create, maintain, secure, and administer your 11ok Account, including processing your login credentials, managing your session, and sending transactional notifications such as deposit confirmations and withdrawal updates.
• Identity and Age Verification: To confirm that you are who you say you are and that you are at least 21 years of age. 11ok is strictly committed to preventing underage gambling and takes its age verification obligations seriously.
• Payment Processing: To process your deposits and withdrawal requests through your chosen Payment Method, to reconcile transactions, and to investigate and resolve payment disputes.
• Anti-Money Laundering (AML) Compliance: To detect, investigate, and report suspicious financial activity as required under applicable AML obligations. This includes monitoring deposit and withdrawal patterns, flagging large or unusual transactions, and retaining transaction records for the legally required retention period.
• Fraud Prevention and Platform Security: To identify and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and other forms of prohibited conduct. This includes device fingerprinting, IP monitoring, and behavioural analysis.
• Game Integrity and Dispute Resolution: To maintain accurate gaming and betting records that can be used to verify game outcomes, resolve disputes, and respond to player queries about historical transactions.
• Customer Support: To respond to your queries, complaints, and requests submitted via email or live chat. Support communications are logged and retained to maintain a complete service history for your Account.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to facilitate the operation of Responsible Gaming Tools including deposit limits, cooling-off periods, and self-exclusion. We may use your gaming data to proactively reach out if we identify concerning patterns, as part of our duty of care to players.
• Platform Improvement and Analytics: To understand how players use the Platform — which games are most popular, which pages have high drop-off rates, where navigation improvements could be made — and to continuously improve the product. Analytics data is processed in aggregated or pseudonymised form where possible.
• Marketing Communications (Opt-In Only): If you have consented to receive promotional communications, to send you information about new games, promotions, bonuses, and seasonal offers relevant to your preferences. You may withdraw this consent at any time through your Account notification settings.

11ok processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: The majority of data processing by 11ok is necessary to perform the contract between 11ok and you — specifically, the Terms & Conditions that govern your Account. Without processing your Identity Data, Contact Data, Financial Data, and Gaming Data, 11ok cannot operate your Account, accept deposits, process withdrawals, or settle bets.
• Legal Obligation: Certain processing activities — particularly those related to AML compliance, transaction record-keeping, and identity verification — are required by applicable law. 11ok is obligated to retain certain categories of data for defined periods regardless of your preferences.
• Legitimate Interests: 11ok processes Technical Data and Gaming Data for fraud prevention, platform security, and product analytics on the basis of its legitimate interests in operating a safe, fair, and commercially viable platform. We balance these interests against your privacy rights and apply data minimisation principles wherever possible.
• Consent: Where 11ok processes your data for optional purposes — specifically, sending promotional marketing communications — we rely on your freely given, informed consent. You may withdraw consent for marketing communications at any time without affecting your Account.

6.1 Internal Access. Access to your personal data within 11ok is restricted to personnel who have a legitimate need to access it for the purpose of performing their role — such as the compliance team, the support team, the payments team, and the fraud prevention team. All staff with access to personal data are bound by confidentiality obligations.

6.2 Service Providers. 11ok shares personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment gateway and mobile financial service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — for transaction processing only.
• Identity verification and KYC service providers — for document validation and age verification.
• Game Providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — for game delivery and result verification. Note that Game Providers receive only the minimum data necessary to operate the game session (typically a session token and bet amount) and are bound by contractual data processing obligations.
• Hosting and cloud infrastructure providers — for secure data storage and platform operations.
• Analytics and anti-fraud technology providers — for platform security and product improvement.

6.3 Legal Disclosure. 11ok may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required or permitted by applicable law — for example, in response to a court order, a formal regulatory inquiry, or a verified law enforcement request related to suspected criminal activity.

6.4 Business Transfers. In the event that 11ok undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance where required by law.

6.5 No Third-Party Marketing. 11ok does not share, sell, or license your personal data to third-party advertisers, data brokers, or marketing agencies. Any promotional communications you receive from 11ok are sent by 11ok directly and only if you have opted in.

7.1 General Principle. 11ok retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. When data is no longer needed, it is securely deleted or irreversibly anonymised.

7.2 Retention Periods. The following retention periods apply to the main categories of data:

7.3 Self-Exclusion Records. Where a player has requested self-exclusion, a record of that exclusion is retained for a minimum of six years after the exclusion period ends to prevent inadvertent re-registration and to maintain an audit trail.

8.1 Technical Measures. 11ok employs a comprehensive set of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 11ok Platform is encrypted in transit using TLS 1.2 or higher.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong, industry-standard cryptographic algorithm. Even 11ok staff cannot view your password.
• OTP Authentication: Sensitive actions — including withdrawal requests, password resets, and device changes — require one-time password (OTP) confirmation via your registered mobile number.
• Automatic Session Timeouts: Inactive sessions are automatically terminated after a defined period to reduce the risk of unauthorised access on shared or unattended devices.
• Database Encryption at Rest: Personally identifiable fields within our database — including identity document references, payment method identifiers, and contact details — are encrypted at rest.
• Access Control: Role-based access control (RBAC) ensures that internal staff can access only the data required for their specific function. Access logs are maintained and reviewed regularly.
• Penetration Testing: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

8.2 Organisational Measures. In addition to technical controls, 11ok maintains internal data handling policies, staff training on data protection obligations, and a defined process for identifying and responding to data security incidents.

8.3 Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights or interests, 11ok will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to remember your preferences, and to provide website operators with analytical data about how the site is used.

9.2 Types of Cookies Used by 11ok. The 11ok Platform uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language preference. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: These remember choices you make — such as your preferred payment method or recently viewed game categories — to provide a more personalised experience. They are not essential but improve usability.
• Analytical Cookies: These help us understand how players interact with the Platform — which pages are visited most, where players leave the site, and how long sessions last. This data is aggregated and used to improve the Platform. We use pseudonymised identifiers where possible.
• Anti-Fraud and Security Cookies: These are used by our fraud prevention systems to identify unusual activity patterns — for example, to detect whether a device has previously been associated with a suspended Account. These cookies serve a security function and contribute to protecting all players on the Platform.

9.3 Managing Cookies. You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear cookies when the browser is closed. Please note that disabling strictly necessary cookies will prevent you from logging in to your Account. Disabling analytical cookies will not affect your ability to use the Platform but will reduce our ability to improve it based on usage patterns.

9.4 No Third-Party Advertising Cookies. 11ok does not use third-party advertising networks or behavioural targeting cookies on the Platform. We do not track your browsing activity across other websites for advertising retargeting purposes.

11ok respects your rights over your personal data. You may exercise any of the following rights by contacting the support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data we hold about you, including a summary of how it is being processed. We will respond to access requests within 30 days (BST). There is no charge for a reasonable access request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it. Some data — such as your registered name and date of birth — can only be corrected following re-verification of your identity.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. We will comply where we have no legal obligation to retain the data. Where a legal retention obligation applies — for example, transaction records required under AML obligations — we will inform you of the applicable retention period and delete the data as soon as that period expires.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is under investigation. Restricted data is retained but not actively processed beyond what is legally required.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), where technically feasible. This right applies to data processed on the basis of your consent or contractual necessity.
• Right to Object to Processing: You may object to processing of your data that is based on legitimate interests — in particular, processing for direct marketing or analytics. Where you object to direct marketing, we will stop that processing immediately. Where you object to analytics processing, we will assess your objection against our legitimate interests and inform you of the outcome.
• Right to Withdraw Consent: Where processing is based on consent — specifically, marketing communications — you may withdraw that consent at any time through your Account notification settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

10.1 Identity Verification for Rights Requests. To protect your data, 11ok will verify your identity before responding to any data rights request. This typically involves confirming your registered email address, Account username, and a secondary identifier. We will not disclose personal data in response to an unverified request.

10.2 Response Timeframe. 11ok will acknowledge all data rights requests within five business days (BST) and aim to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 30 days — in which case we will notify you of the extension and the reason.

11.1 Strict Age Policy. The 11ok Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the Account registration process, and 11ok reserves the right to request documentary proof of age at any time.

11.2 Discovery of Underage Data. If 11ok discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account, delete the data as promptly as legally possible, and — where required — notify the relevant authorities. If you are a parent or guardian and believe your child has registered an Account on the 11ok Platform, please contact us at [email protected] immediately.

11.3 Parental Controls. If you share a device with a minor, we strongly recommend using your device's parental control tools to prevent access to gambling websites. You should also ensure that your 11ok Account credentials are stored securely and are not accessible to any minor in your household.

12.1 External Sites. The 11ok Platform may, on occasion, contain references to third-party services such as payment providers or game studios. If you navigate to any external website or service, that website's own privacy policy governs the collection and use of your data — not this Policy. 11ok is not responsible for the privacy practices of any third-party website or service.

12.2 Game Provider Environments. When you play a game provided by a third-party Game Provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the game may be delivered within a sandboxed iFrame or a dedicated game client environment operated by the Game Provider. The Game Provider's own data processing activities within that environment are governed by their respective privacy terms. 11ok ensures, through contractual data processing agreements, that Game Providers process only the minimum necessary data on 11ok's behalf.

13.1 Right to Update. 11ok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. The effective date displayed at the top of this page will be updated whenever a new version is published.

13.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — 11ok will notify registered players via email to their registered email address and/or via a prominent notice on the Platform at least seven (7) days before the changes take effect. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.

13.3 Archived Versions. Previous versions of this Privacy Policy are available upon request by contacting [email protected]. We maintain an internal archive of all prior Policy versions and their effective dates for accountability purposes.

14.1 Privacy Enquiries. If you have any questions, concerns, or requests relating to this Privacy Policy or the way 11ok handles your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within five business days (Bangladesh Standard Time, UTC+6).

14.2 Complaints. If you are not satisfied with how 11ok has handled your personal data or responded to a data rights request, you have the right to raise a formal complaint. Please contact us first so that we have the opportunity to address your concern directly. We take all privacy complaints seriously and will investigate them thoroughly.

14.3 Responsible Gaming and Data. If your privacy enquiry relates to the deletion or restriction of gaming data in connection with a self-exclusion or responsible gaming request, please also review our Responsible Gaming page for details of the tools and processes available to you.