bf111 Privacy Policy

This Privacy Policy is issued by bf111 (referred to throughout as "bf111", "we", "us", or "our") and applies to all personal data collected through the bf111 website at https://bf111.io, its associated mobile interfaces, and all services offered via those channels (collectively, "the Platform").

bf111 operates as an online betting and casino platform serving players in Bangladesh. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains what data we collect, why we collect it, how we use and protect it, and what choices you have regarding your own information.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform. This Privacy Policy should be read alongside bf111's Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform.

We may update this Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Policy periodically to stay informed of any changes.

bf111 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third parties where permitted by law. The categories of data we collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what may be present in identity documents submitted for KYC purposes. Where identity documents contain such information incidentally, it is stored securely and used solely for identity verification.

bf111 uses the personal data we collect for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide access to Platform services.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records for each account.
• KYC and fraud prevention: To verify that you are who you say you are, to prevent underage gambling, to detect and prevent fraud, money laundering, and other prohibited conduct, and to comply with applicable financial regulations.
• Service delivery and improvement: To provide, operate, and improve the Platform's games, betting markets, and features; to troubleshoot technical issues; and to personalise your experience where you have consented to personalisation.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, and other support channels.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, to administer self-exclusion and limit requests, and to fulfil our duty of care obligations to players.
• Marketing communications: To send promotional emails, SMS alerts, and push notifications about bonuses, tournaments, and Platform updates — but only where you have given explicit consent. You may withdraw consent at any time.
• Legal and regulatory compliance: To fulfil record-keeping obligations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.
• Analytics and reporting: To analyse aggregated, anonymised usage data to understand Platform performance, user behaviour trends, and commercial metrics. Aggregated analytics data does not identify individual players.

bf111 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (e.g., potential fraud or bonus abuse), a member of the compliance team reviews the case before any account action is taken.

bf111 processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as an account holder — including account management, payments, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) rules, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential personalisation, where you have given free, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without detriment to your account.

bf111 does not sell, rent, or trade personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the financial data necessary to process your transactions. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC service providers receive identity documents and personal data to perform automated and manual identity checks on our behalf. These providers are contractually bound to use the data only for verification purposes.
• Technology and hosting providers: Cloud infrastructure, server hosting, and software-as-a-service providers that host or process Platform data are subject to data processing agreements ensuring appropriate security standards.
• Customer support tools: Live chat and ticketing software providers may process communications data on our behalf when you contact support. These providers act as data processors under our instruction.
• Competent authorities: Where required by applicable law, court order, or regulatory demand, bf111 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or part of bf111's business, personal data held by bf111 may be transferred to the successor entity. You will be notified of any such transfer in advance where practicable.

All third-party service providers with whom bf111 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with bf111's documented instructions.

bf111 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and analyse usage patterns. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language, currency display, and notification settings to provide a more personalised experience across sessions.
• Analytics cookies: Collect anonymised data about how players use the Platform — pages visited, time spent, navigation paths — to help us understand usage patterns and improve services. Analytics data is aggregated and does not identify individual players.
• Security and fraud-prevention cookies: Help detect and prevent fraudulent activity, multi-accounting, and bot-based interactions by identifying unusual access patterns.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. bf111 does not use third-party advertising or retargeting cookies. No cross-site tracking data is shared with external advertising networks.

bf111 takes the security of your personal data seriously and has implemented a multi-layered security framework to protect it against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data exchanged between your device and bf111 servers is encrypted using 256-bit TLS (Transport Layer Security). This applies to all Platform pages, payment flows, and API calls.
• Encryption at rest: Personal data stored in bf111's databases is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the encrypted data and are subject to regular rotation.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication (MFA) and role-based access control (RBAC). Access logs are maintained and reviewed regularly.
• Infrastructure security: bf111's server infrastructure is hosted in facilities with physical security controls, redundant power, and network monitoring. Regular vulnerability assessments and penetration tests are conducted.
• Incident response: bf111 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to affected individuals, we will notify impacted players as promptly as practicable, providing details of the nature of the breach and the steps being taken to mitigate it.

While bf111 employs industry-standard security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying bf111 immediately at [email protected] if you suspect any unauthorised access to your account.

bf111 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to any longer retention periods required by applicable law. The following retention periods apply as a baseline:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to comply with AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for the duration of the account plus 5 years after closure, or longer where required by a specific regulatory obligation.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing preference records: Retained for the duration of your account, and for 1 year following account closure to evidence consent and opt-out history.
• Server logs and technical data: Retained for a maximum of 12 months unless a specific security incident requires longer retention for investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a player on the bf111 Platform, you hold the following rights with respect to your personal data. These rights are not absolute in all circumstances — some are subject to legal exceptions or bf111's own legitimate interests — but bf111 will honour them without unreasonable delay where they apply:

• Right of access: You may request a copy of the personal data bf111 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., contact details) can be made directly via your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained to satisfy legal obligations and cannot be erased on request.
• Right to restriction of processing: You may request that bf111 restrict the processing of your data in certain circumstances — for example, while an inaccuracy is being investigated, or where you have objected to processing and the outcome is pending.
• Right to object: You may object to processing carried out on the basis of legitimate interests. bf111 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request that bf111 provide your data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please submit a written request to [email protected] (plain text — not a clickable link). We may request proof of identity before fulfilling a data rights request to ensure we do not disclose personal data to an unauthorised person. We will respond to all valid requests within 30 calendar days.

bf111 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. The Platform's registration process includes an age declaration, and bf111 conducts KYC verification to confirm players meet the minimum age requirement.

If bf111 discovers that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any bets or bonuses, return any eligible deposits, and delete the personal data in question from our systems, subject to any legal obligation to retain evidence of the underage access incident.

If you are a parent or guardian and believe that a minor in your care has registered on the bf111 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take underage gambling extremely seriously and cooperate fully with any lawful investigation related to it.

The bf111 Platform does not contain links to external third-party websites as a general rule. Where any reference to a third-party service provider (such as a payment method) is made within Platform content, bf111 is not responsible for the privacy practices or data handling of those third parties. Each third-party provider operates under its own privacy policy, which we encourage you to review independently.

If you access the Platform via a link from a third-party website, bf111 is not responsible for the data collection practices of that referring website. bf111's Privacy Policy applies solely to data collected through the Platform itself.

bf111 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When we make material changes, we will notify registered players by email at the address associated with their account and/or by displaying a prominent notice on the Platform prior to the change taking effect.

Minor changes — such as clarifications or formatting corrections that do not alter the substance of the Policy — will be reflected by updating the "Last Updated" date without separate notification. We recommend that all players review this Policy periodically.

Continued use of the Platform after a revised Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should close your account prior to the effective date of the change.

If you have any questions, concerns, or complaints regarding this Privacy Policy or bf111's data practices, please contact our Data Privacy team using the details below. All privacy-related communications must be in English:

• Email (plain text — not a clickable link): [email protected]
• Subject line: Include "Privacy Request" or "Data Complaint" in your email subject to ensure prompt routing to the correct team.
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 14 calendar days. Complex data access or deletion requests may take up to 30 calendar days.
• Support hours: The bf111 support team is available 24/7 via live chat on the Platform. Email responses are processed during core hours in Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with bf111's response to a privacy complaint, you have the right to escalate the matter to your local data protection authority or consumer protection body. bf111 will cooperate with any lawful regulatory investigation into its data practices.