f1111 Privacy Policy

f1111 is an online betting and casino platform operating at f1111.io, designed and built specifically for players in Bangladesh. References to "f1111", "we", "us", and "our" throughout this Privacy Policy refer to the f1111 platform and its affiliated operating entity responsible for the processing of personal data collected through f1111.io.

f1111 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, f1111 determines the purposes for which and the manner in which personal data is processed, and is responsible for ensuring that processing activities comply with applicable data protection principles.

This Privacy Policy applies to all personal data collected through the f1111 website, mobile-optimised interface, customer support channels, and any related platform features. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

f1111 collects personal data through several channels: directly from you when you register an account or interact with the Platform, automatically when you browse or use the Platform, and occasionally from third-party sources for identity verification purposes. The categories of personal data we collect are described below.

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (collected to verify you are aged 21 or above);
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code;
• Email address and mobile phone number;
• Username and hashed password credentials;
• Identity verification documents where requested (e.g., National Identity Card, passport).

2.2 Financial & Transaction Data

• Payment method identifiers (e.g., bKash account number, Nagad number, Rocket number, Upay ID, masked Visa/Mastercard number);
• Deposit and withdrawal amounts denominated in BDT;
• Transaction timestamps, reference numbers, and status records;
• Account balance history and wagering activity records.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Pages visited, time spent on each page, and clickstream data;
• Session identifiers, referral URLs, and search terms used within the Platform.

2.4 Communications Data

• Content of messages sent to f1111 customer support via email or live chat;
• Records of any complaints, disputes, or responsible gaming requests you have raised;
• Preferences you have indicated regarding marketing communications.

f1111 processes personal data only for clearly defined and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The principal purposes for which f1111 processes personal data are as follows:

• Account management: To create, maintain, and administer your f1111 account, verify your identity and age, and provide you with access to the Platform's Services.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, reconcile account balances, and maintain accurate financial records.
• Legal & regulatory compliance: To fulfil anti-money-laundering (AML) and know-your-customer (KYC) obligations, respond to lawful requests from competent authorities, and maintain records as required by applicable law.
• Responsible gaming: To monitor betting patterns and account activity for indicators of problem gambling behaviour, to apply deposit limits, cooling-off periods, or self-exclusion measures at your request, and to fulfil our duty-of-care obligations.
• Fraud prevention & security: To detect and investigate suspicious transactions, account takeover attempts, bonus abuse, and other fraudulent or prohibited conduct as described in our Terms & Conditions.
• Platform improvement: To analyse aggregated and anonymised usage data to understand player behaviour, improve the user experience, optimise game offerings, and develop new features.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest, subject always to your right to opt out.

f1111 relies on one or more of the following legal bases when processing your personal data. The applicable legal basis depends on the specific purpose for which the data is processed:

• Contractual necessity: Processing is necessary to perform the contract between you and f1111 — specifically, to provide you with access to the Platform and its Services, including account management, game access, and payment processing.
• Legal obligation: Processing is required to comply with legal obligations applicable to f1111, including AML and KYC requirements, record-keeping mandates, and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for f1111's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where f1111 relies on your consent as the legal basis for processing (e.g., for direct marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

f1111 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary financial data with payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators) to process your deposits and withdrawals. These partners are bound by their own strict data protection obligations and are permitted to use shared data only for transaction processing purposes.
• Identity verification providers: Where required for KYC compliance, we may share identity document data with accredited third-party verification services. These providers operate under data processing agreements with f1111 and are prohibited from using your data for any purpose other than verification.
• Game software providers: Technical session data (such as game round identifiers and stake amounts) may be shared with our game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purposes of game integrity verification and dispute resolution. These providers do not receive your name, contact details, or payment information.
• Regulatory and law enforcement authorities: f1111 will disclose personal data to competent authorities where required by law, court order, or regulatory directive. We will not notify you of such disclosures where doing so would be unlawful or would obstruct a legitimate investigation.
• Corporate successors: In the event of a merger, acquisition, or sale of substantially all of f1111's assets, your personal data may be transferred to the successor entity, subject to the same protections described in this Privacy Policy. We will notify you of any such transfer before your data is subjected to a materially different privacy policy.

f1111 uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and gather analytical data. A cookie is a small text file placed on your device when you visit the f1111 website. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage or disable functional and analytical cookies through your browser settings. Note that disabling certain cookies may impair the functionality of the f1111 Platform. f1111 does not use third-party advertising or retargeting cookies.

f1111 retains personal data for the period necessary to fulfil the purposes for which it was collected, or for such longer period as may be required by applicable law or legitimate operational necessity. The principal retention periods applied by f1111 are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to support compliance with AML record-keeping obligations and to resolve any post-closure disputes.
• Financial and transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Responsible gaming records: Self-exclusion requests, deposit limit settings, and related responsible gaming records are retained for the full duration of any active restriction plus 5 years thereafter, to prevent accidental re-registration during an exclusion period.
• Customer support communications: Retained for 3 years from the date of the most recent interaction, unless the matter relates to an unresolved dispute or legal claim, in which case records are retained until final resolution.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which data is aggregated and anonymised for long-term analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted using methods designed to prevent reconstruction or recovery. Where deletion of specific data is not technically feasible in the short term (e.g., backup media), the data is isolated from active processing until deletion becomes practicable.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by f1111. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within a reasonable timeframe, and in any event within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data f1111 holds about you, along with information about the purposes of processing, the categories of data held, and the recipients to whom data has been disclosed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by f1111 be corrected or completed without undue delay.
• Right to erasure: You have the right to request that f1111 delete your personal data where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. This right is subject to f1111's legal retention obligations described in Section 7.
• Right to restriction of processing: You have the right to request that f1111 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and verification of legitimate grounds is pending.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data where f1111 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where f1111 relies on your consent as the basis for processing, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

f1111 is strictly an adults-only platform. Access to and use of the Platform is prohibited for any individual under the age of 21. f1111 does not knowingly collect, store, or process personal data relating to individuals under the age of 21.

If f1111 discovers or has reasonable grounds to suspect that personal data has been collected from a person under the age of 21, the associated account will be suspended immediately, all personal data relating to that individual will be deleted without delay, and any deposits made will be returned through the original payment channel while all associated winnings will be forfeited.

Parents and guardians who believe that a minor in their care may have registered an account on f1111 are encouraged to contact us immediately at [email protected]. We take such reports very seriously and will investigate and act on all verified reports with urgency.

f1111 implements a layered, defence-in-depth approach to data security. The technical and organisational measures we have implemented include, but are not limited to, the following:

• Encryption in transit: All data exchanged between your browser or device and f1111 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption strength.
• Encryption at rest: Sensitive personal and financial data stored in f1111 databases is encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of physical media compromise.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. f1111 employees and contractors are granted only the minimum access permissions necessary for their specific role, and all access is logged and audited.
• Two-factor authentication: Administrative and privileged system access requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication on their own accounts.
• Intrusion detection: f1111 operates continuous network monitoring and automated intrusion detection systems designed to identify and respond to anomalous access patterns in real time.
• Regular audits: f1111's security posture is subject to periodic internal review and third-party assessment to identify vulnerabilities and verify the effectiveness of existing controls.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability affecting f1111, please report it responsibly to [email protected] rather than disclosing it publicly.

The f1111 Platform may occasionally contain informational references to third-party services such as payment providers. f1111 has no control over the privacy practices, data handling policies, or security measures of third-party platforms and is not responsible for the content or privacy practices of any external website or service.

This Privacy Policy applies solely to personal data collected and processed by f1111 through the f1111.io Platform. If you interact with a third-party service referenced on or accessed via f1111, you do so subject to that third party's own privacy policy and terms of service. f1111 encourages you to read the privacy policies of any third-party services you use.

f1111 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or platform features. Where changes are material — meaning they affect the nature of the personal data we collect, the purposes for which it is used, or the rights available to you — f1111 will provide advance notice to registered players by email prior to the new policy taking effect.

The current version of the Privacy Policy is always published at f1111.io/privacy-policy and is identified by its Effective Date at the top of this document. Minor clarifications and non-material formatting updates may be made without prior notice. We encourage you to review this page periodically to remain informed about how f1111 protects your personal data.

Your continued use of the f1111 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any amendment to this Privacy Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to f1111's handling of your personal data, please contact us using the details below. Our Data Protection team is available 24 hours a day, seven days a week, to assist you.

To allow us to handle your request efficiently, please include your registered username, account email address, and a clear description of your query or request in all correspondence. We aim to acknowledge all privacy-related requests within 2 business days and to provide a substantive response within 30 days.