bod111 Privacy Policy

When you interact with the bod111 platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing the site — certain categories of personal and technical information are collected. This section details each category, the specific data points within it, and the basis on which collection occurs.

1.1 Registration and Account Data

When you create a bod111 account, you are asked to provide information that allows us to establish your identity, verify your age, and set up your account. This includes:

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used to confirm you are 18 years of age or older).
• Bangladeshi mobile phone number — your primary account identifier and contact point.
• A password of your own choosing (stored in hashed, non-reversible form — bod111 staff cannot view your raw password).
• Preferred currency, which defaults to Bangladeshi Taka (BDT / ৳).

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process — which may be triggered at registration, before your first withdrawal, or at any point our compliance team deems necessary — bod111 may request and temporarily retain copies of identity documents, including:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport biographical data page.
• Driving licence (where accepted as a valid form of ID).
• Proof of address documents such as a utility bill or bank statement issued within the past 90 days.
• Selfie photograph alongside the identity document, used to confirm document ownership.

KYC documents are handled with elevated care, stored in encrypted form, and access is restricted to authorised compliance personnel only.

1.3 Financial Transaction Data

Every deposit, withdrawal, bonus credit, and adjustment made to your bod111 account is logged as part of your transaction history. This record includes:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank).
• Transaction amount in BDT (৳).
• Date, time (Bangladesh Standard Time, UTC+6), and reference number for each transaction.
• Payment method identifiers such as the last four digits of a card or a masked mobile wallet number — full card numbers and PINs are never stored by bod111.

1.4 Gameplay and Betting Activity

bod111 records your activity on the platform to maintain accurate account balances, resolve disputes, and support responsible gaming monitoring. Game-level data collected includes:

• Games played, bet amounts, outcomes, and winnings/losses for each session.
• Session start and end times, session duration, and frequency of play.
• Game categories accessed (live casino, slots, table games, cricket betting, etc.).
• Responsible gaming limit settings applied to your account.

1.5 Technical and Device Data

When you access bod111 via any device or browser, our servers automatically collect certain technical information necessary for the platform to function correctly and securely:

• IP address (used for geolocation, fraud detection, and access control).
• Device type (mobile, tablet, desktop), operating system, and browser version.
• Referring URL — the webpage from which you arrived at bod111.net.
• Pages visited on bod111.net, time on page, and navigation path through the site.
• Crash reports and error logs generated during a session.

1.6 Communications Data

If you contact bod111's customer support team — via live chat, email, or any other channel — the content of those communications is retained for quality assurance, dispute resolution, and training purposes. This includes your name, contact details, account reference, and the full content of correspondence.

bod111 does not sell, rent, or trade your personal data to any third party. Sharing of personal data occurs only in the specific, limited circumstances described below, and only with parties that have agreed to handle your data in accordance with appropriate data protection standards.

Payment Processing Partners

To facilitate deposits and withdrawals, bod111 shares the minimum necessary financial and identity data with its payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These partners process your transaction data under their own published privacy policies and are bound by their own regulatory obligations as licensed financial service providers in Bangladesh.

Game Content Providers

Live casino games, slots, and table games on the bod111 platform are delivered through licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, these providers receive a session token and anonymised player identifier. Full personal details such as your name, NID number, or phone number are not shared with game studios.

Identity Verification Providers

bod111 may utilise third-party KYC and identity verification technology providers to assist with document authentication. These providers receive KYC documents and biometric data submitted during the verification process and are contractually obligated to process this data solely for the purpose of identity verification on behalf of bod111.

Analytics and Platform Technology Providers

bod111 works with technology partners who provide server infrastructure, platform analytics, fraud detection tools, and customer support software. These providers may process technical and behavioural data as data processors acting on bod111's instructions. They are not permitted to use this data for their own purposes.

Legal and Regulatory Disclosure

bod111 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities in response to a lawful request, court order, or legal obligation — including obligations arising under anti-money-laundering and counter-terrorism financing frameworks. Such disclosures are made only to the extent required by applicable law and are not voluntary data-sharing arrangements.

Business Transfers

In the event that bod111 undergoes a merger, acquisition, or sale of substantially all of its assets, player data held at the time of the transaction may form part of the transferred assets. Players would be notified via email or an in-platform notice prior to any such transfer, and the privacy commitments in this policy would continue to apply to transferred data.

Protecting your personal data is a technical and organisational priority at bod111. We maintain a layered security approach that covers data in transit, data at rest, access controls, and incident response procedures.

Encryption

All data transmitted between your browser or app and bod111's servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases — including passwords, KYC document copies, and financial records — is encrypted at rest using AES-256 encryption. Password hashes are generated using a one-way cryptographic function; raw passwords are never stored.

Access Controls

Access to personal data is restricted on a strict need-to-know basis. bod111 employees and contractors are granted access only to the data categories required to perform their specific role. All staff with access to personal data undergo data protection training as part of their onboarding and on an ongoing basis. Access to KYC documents is limited to a small, dedicated compliance team.

Infrastructure Security

bod111's platform infrastructure is hosted on secure servers with active intrusion detection, DDoS protection, and regular third-party security audits. Servers are maintained in facilities with physical access controls, environmental protection, and redundant power and network connectivity to ensure platform availability and data integrity.

Incident Response

In the unlikely event of a personal data breach that poses a risk to affected players, bod111 commits to notifying impacted players as promptly as is operationally possible following discovery of the breach, and to taking immediate steps to contain, assess, and remediate the incident. Notification will be provided via the email address registered to the affected account.

Your Own Security Responsibilities

While bod111 maintains robust security controls on its side, you also play an important role in protecting your account. You are responsible for choosing a strong, unique password for your bod111 account, keeping that password confidential, logging out from shared or public devices after each session, and contacting [email protected] immediately if you suspect that your account credentials have been compromised.

bod111 respects your rights over your own personal data. The rights described in this section may be exercised by contacting [email protected] with a clear description of the request. bod111 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, subject to identity verification and any applicable legal limitations.

Right of Access

You have the right to request a copy of the personal data that bod111 holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon receipt of a verified request, bod111 will provide a structured summary of the data categories held, the purposes for which each category is processed, and the retention period applied.

Right to Rectification

If any personal data held by bod111 is inaccurate or incomplete, you have the right to request that it be corrected. For account-level details such as your registered mobile number, you may update these directly through your account settings. For KYC-related corrections, please contact [email protected].

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you believe the data has been processed unlawfully. Please note that the right to erasure is not absolute — where bod111 has legal obligations to retain data (such as AML and financial record-keeping requirements), those obligations take precedence over an erasure request for the applicable retention period.

Right to Restrict Processing

In certain circumstances — such as where you contest the accuracy of data or have objected to processing — you may request that bod111 restrict processing of your personal data while the matter is under review. Restricted data will be stored but not actively processed until the restriction is lifted.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on bod111's legitimate interests. If you object, bod111 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Marketing Consent

Where you have consented to receive promotional communications from bod111, you may withdraw that consent at any time. Withdrawal of marketing consent does not affect any other processing of your data that is based on a different legal basis (such as contract performance or legal obligation). To withdraw marketing consent, update your preferences in your account settings or email [email protected].