11bat Privacy Policy — How We Collect, Use, and Protect Your Personal Data
Your privacy is a fundamental commitment at 11bat, not a compliance checkbox. This Privacy Policy explains in plain English exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a registered player on the 11bat platform.
Our Privacy Commitments
Six principles that define how 11bat approaches the handling of every player's personal information — from the moment you register to the moment you request account closure.
We Never Sell Your Data
11bat does not sell, rent, or commercially transfer any player's personal data to third parties for their own marketing or commercial purposes. Your information belongs to you, not to advertisers or data brokers.
256-bit SSL Encryption
All data transmitted between your device and 11bat's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Bangladeshi banks including BRAC Bank and Dutch-Bangla Bank. Data at rest is encrypted using AES-256.
Purpose-Limited Collection
11bat collects only the personal data that is strictly necessary for the stated purpose. We do not collect data speculatively or build marketing profiles beyond what is required to deliver and improve the platform services you have signed up for.
Full Player Control
You have the right to access, correct, export, and request deletion of your personal data at any time. These rights can be exercised by contacting the 11bat support team. Requests are acknowledged within 24 hours and resolved within 30 days.
Defined Retention Periods
Personal data is retained only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal obligations. Account data is retained for a minimum of five years following closure to satisfy anti-money laundering compliance requirements.
Transparent Third-Party Sharing
Where personal data must be shared with third-party service providers — such as payment processors (bKash, Nagad, Rocket), game providers (Evolution Gaming, Pragmatic Play), or identity verification partners — we disclose this clearly in this policy and limit sharing to the minimum data required.
01 Introduction
This Privacy Policy ("Policy") is published by 11bat ("we", "us", "our", or the "Platform"), the operator of the online betting and gaming platform accessible at https://11bat.io. This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to all registered players, prospective players, and visitors to the 11bat platform ("you", "your", or "Data Subject").
By registering an account on 11bat, accessing the platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 11bat.
11bat is committed to handling your personal data with the highest standards of confidentiality, security, and transparency. If at any time you have questions about this Policy or wish to exercise your data rights, please contact the 11bat Data Support team as described in Section 14.
Scope: This Policy applies to all personal data collected through the 11bat website, mobile browser interface, customer support channels, payment processing flows, and any other service operated by 11bat under the https://11bat.io domain.
02 Personal Data We Collect
11bat collects personal data through several channels — at account registration, during account verification, through your ongoing use of the platform, via payment transactions, and through your interactions with the 11bat customer support team. The categories of personal data we collect are as follows:
| Category | Data Elements | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID or passport number | Registration & KYC verification |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details (for transfers), transaction history | Deposit & withdrawal flows |
| Technical Data | IP address, device type, operating system, browser type and version, session duration, referral URL | Automatic — platform access |
| Usage Data | Games played, bet history, wagering amounts, login timestamps, responsible gaming tool interactions | Ongoing platform use |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support interactions |
| Verification Documents | Photographs of national ID (NID card), passport, or driving licence submitted for identity verification | KYC / enhanced due diligence |
We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in a standard government-issued identity document submitted for verification purposes.
03 How We Use Your Personal Data
11bat uses the personal data collected from players for the following specific purposes. We do not use personal data for any purpose incompatible with those listed below without first obtaining your explicit consent:
- Account Creation and Management: To register your account, verify your identity, manage your wallet, and provide access to all 11bat services including cricket betting, slots, live casino, and Rummy.
- Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records of all account transactions.
- Identity Verification and Anti-Fraud: To verify that you meet the 21+ age requirement, to confirm your identity in accordance with our Know Your Customer (KYC) obligations, and to detect and prevent fraudulent activity, money laundering, and account abuse.
- Platform Improvement: To analyse usage patterns, identify technical issues, optimise game loading performance, and improve the overall player experience on 11bat.io.
- Responsible Gaming: To monitor betting behaviour for indicators of problem gambling, to administer self-exclusion requests, and to enforce deposit limits and time-out periods set by the player.
- Customer Support: To respond to support enquiries, resolve disputes, and communicate account-related information to you through live chat or email.
- Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering laws, to respond to lawful requests from regulatory or law enforcement authorities, and to enforce our Terms & Conditions.
- Marketing Communications (with consent): To send promotional offers, bonus notifications, and seasonal promotions — such as Eid specials, BPL season offers, and Pohela Boishakh bonuses — where you have opted in to receive such communications. You may withdraw this consent at any time.
04 Legal Basis for Processing
11bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual Necessity: Processing required to perform the contract between you and 11bat — including account registration, payment processing, and game access — is carried out on the basis that it is necessary for the performance of that contract.
- Legal Obligation: Processing carried out to comply with applicable legal requirements — including anti-money laundering checks, age verification, record-keeping obligations, and responses to lawful authority requests — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing carried out to prevent fraud, maintain platform security, improve our services, and enforce our terms is carried out on the basis of 11bat's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing carried out for the purpose of sending direct marketing communications — including promotional emails and bonus notifications — is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
05 Third-Party Data Sharing
11bat does not sell, rent, or commercially disclose your personal data to any third party for their own independent marketing purposes. Personal data may, however, be shared with the following categories of trusted third-party service providers and partners where strictly necessary to deliver the 11bat platform services:
- Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — solely for the purpose of processing deposits and withdrawals. These partners are subject to their own privacy and security standards.
- Game Content Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Red Tiger, Spribe, and other certified game studios — limited technical identifiers may be shared for session initialisation and game integrity monitoring.
- Identity Verification Providers: Third-party KYC service providers used to verify the authenticity of identity documents submitted by players as part of the account verification process.
- Cloud Infrastructure Providers: Secure cloud hosting and content delivery network providers used to operate the 11bat platform infrastructure. All data processed by these providers is governed by data processing agreements that require them to handle 11bat player data in accordance with this Policy.
- Analytics Providers: Aggregated and anonymised usage data may be shared with analytics service providers to help 11bat understand platform performance and user behaviour at a population level. This data does not identify individual players.
- Legal and Regulatory Authorities: Where required by law, court order, or formal regulatory request, 11bat may disclose personal data to government bodies, law enforcement agencies, or other competent authorities. 11bat will inform you of any such disclosure to the extent permitted by law.
Data Processing Agreements: All third-party service providers that process personal data on behalf of 11bat are required to enter into a data processing agreement that obligates them to process that data only for the specified purpose, to maintain appropriate security measures, and to delete the data once the processing purpose has been fulfilled.
06 Payment Data & Financial Security
11bat handles all financial data with the highest level of care. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the respective payment provider's secure gateway. 11bat does not store your full mobile banking PIN, one-time passwords (OTPs), or card CVV numbers on its servers at any point.
Transaction records — including amounts, timestamps, wallet reference numbers, and account identifiers — are retained by 11bat for a minimum period of five years in accordance with financial record-keeping requirements applicable to the operation of the platform. These records are used exclusively for the purposes of account management, withdrawal verification, fraud investigation, and regulatory compliance.
If you believe that an unauthorised transaction has occurred on your 11bat account, you must notify the 11bat support team immediately via live chat at [email protected]. 11bat will suspend the affected account pending investigation and cooperate with your payment provider to resolve the matter as quickly as possible.
07 Cookies & Tracking Technologies
11bat uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. A cookie is a small text file placed on your device by a web server that allows the platform to recognise your browser across sessions and to store certain preferences and session state information.
The following categories of cookies are used on 11bat.io:
- Strictly Necessary Cookies: These cookies are essential to the operation of the platform. They enable core functions such as user authentication, session management, and security token handling. The platform cannot function correctly without these cookies and they cannot be disabled.
- Functional Cookies: These cookies remember your preferences — such as your preferred language setting, your display preferences, and whether you have acknowledged a particular notice — to provide a more personalised experience.
- Performance and Analytics Cookies: These cookies collect anonymised information about how visitors interact with the 11bat platform — such as which pages are visited most frequently and how long users spend in each game lobby — to help us identify areas for improvement.
- Marketing Cookies: Where you have consented to receive personalised promotional content, these cookies help us deliver relevant bonus offers and promotions based on your activity on 11bat.io. You may withdraw this consent at any time by updating your communication preferences in the account settings panel.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 11bat platform and may prevent you from accessing your account or completing transactions.
08 Data Security
11bat maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and 11bat's servers.
- AES-256 encryption for sensitive personal data and financial records stored at rest in 11bat's databases.
- Role-based access controls that restrict access to personal data to authorised 11bat personnel on a strict need-to-know basis.
- Regular automated and manual security audits of the platform infrastructure and application code.
- Multi-factor authentication requirements for all 11bat administrative systems that have access to player data.
- Intrusion detection and prevention systems that monitor the platform environment for unauthorised access attempts in real time.
- Secure disposal procedures for hardware and digital media containing personal data at end of life.
While 11bat takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 11bat will notify affected individuals promptly and take all necessary steps to contain the breach and minimise its impact.
09 Data Retention
11bat retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply to the principal categories of personal data held by 11bat:
- Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in compliance with applicable anti-money laundering and financial record-keeping requirements.
- Transaction Records: Retained for a minimum of five years from the date of the transaction.
- KYC and Verification Documents: Retained for a minimum of five years following the completion of the verification process or the closure of the account, whichever is later.
- Customer Support Communications: Retained for a period of two years from the date of the last support interaction, unless the communication is relevant to an ongoing dispute or legal proceeding, in which case it is retained until the matter is resolved.
- Marketing Preferences and Consent Records: Retained for the duration of the account relationship and for one year following account closure or withdrawal of marketing consent.
- Technical and Usage Data (Logs): Retained for a maximum of twelve months from the date of collection, after which log data is either deleted or anonymised for aggregate analytics purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.
10 Your Data Rights
As a data subject, you hold the following rights in respect of the personal data that 11bat holds about you. All rights requests should be submitted to the 11bat support team as described in Section 14. We will acknowledge your request within 24 hours and provide a substantive response within 30 calendar days.
Right of Access
You have the right to request a copy of all personal data that 11bat holds about you, together with information about how that data is being used, who it has been shared with, and how long it will be retained.
Right to Rectification
You have the right to request the correction of any inaccurate personal data that 11bat holds about you. You may update certain account details directly through the account settings panel; for other corrections, please contact support.
Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal retention obligation applies. Note that financial transaction records are subject to mandatory minimum retention periods.
Right to Restrict Processing
You have the right to request that 11bat restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interests.
Right to Data Portability
You have the right to receive a copy of the personal data you have provided to 11bat in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on 11bat's legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, 11bat will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Marketing Consent
Where processing is based on your consent — in particular, the sending of promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal. To unsubscribe from marketing communications, update your preferences in the account settings panel or contact support.
11 Children's Privacy
The 11bat platform is strictly intended for adults aged 21 years and above. 11bat does not knowingly collect personal data from individuals under the age of 21. Age verification checks are carried out as part of the account registration and KYC process to enforce this requirement.
If 11bat becomes aware that personal data has been collected from a person under the minimum age — whether through a misrepresentation at registration or any other means — the relevant account will be immediately closed, all deposits returned to the originating payment method, all wagers voided, and all collected data securely deleted without undue delay.
If you believe that a minor has registered an account on 11bat, please notify the support team immediately at [email protected]. 11bat takes underage gambling prevention seriously and will act on all credible reports without delay.
12 Marketing Communications
Where you have given your consent at the time of registration or subsequently through your account settings, 11bat may send you promotional communications including welcome bonus information, reload offers, free bet notifications, seasonal promotions (such as Eid special offers, BPL season bonuses, and Pohela Boishakh promotions), and platform news.
Marketing communications are sent exclusively via the mobile number or email address registered to your account. 11bat does not use third-party advertising networks to serve targeted advertisements to 11bat players on external websites or social media platforms based on your 11bat account activity.
You may opt out of marketing communications at any time by:
- Updating your communication preferences in the account settings panel on 11bat.io.
- Contacting the 11bat support team via live chat and requesting removal from all marketing lists.
- Sending a written request to [email protected] with the subject line "Marketing Opt-Out".
Opt-out requests are processed within two business days. Please note that opting out of marketing communications does not affect the sending of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as a necessary part of managing your account.
13 Changes to This Privacy Policy
11bat reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The date of the most recent revision is displayed at the top of this page.
Where changes to this Policy are material — meaning they significantly affect the way in which 11bat collects, uses, or shares your personal data — 11bat will make reasonable efforts to notify registered players via the mobile number or email address associated with their account before the changes take effect.
Your continued use of the 11bat platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you must cease using the platform and contact support to arrange account closure.
14 Contact & Data Rights Requests
All privacy-related enquiries, data rights requests, and complaints regarding 11bat's handling of personal data should be directed to the 11bat Data Support team using the contact details below. All communications must be made in English.
- Live Chat: Available 24 hours a day, 7 days a week via the support widget on 11bat.io. For data rights requests, please state "Data Rights Request" at the start of the conversation.
- Email: [email protected] — for data rights requests, use the subject line "Privacy / Data Rights Request".
- Response Times: Acknowledgement within 24 hours; substantive response within 30 calendar days of receipt of a valid, complete request.
Identity Verification for Data Requests: To protect your personal data, all data rights requests must be accompanied by sufficient information to verify your identity before the request can be processed. 11bat will request confirmation of your registered mobile number and, in certain cases, a copy of your identity document.
Ready to Explore 11bat?
Your data is protected. Your account is secure. Browse our cricket betting markets, dive into the casino, or check the FAQ for quick answers. 21+ only. Please play responsibly.
Responsible Gaming Notice: 11bat is an entertainment platform for adults aged 21 and above. Gambling involves financial risk — only wager amounts you are prepared to lose. For self-exclusion tools, deposit limits, and problem gambling support, visit our Responsible Gaming page. For the full legal terms governing your use of 11bat, read our Terms & Conditions.