Privacy Policy — How bs111 Handles Your Data

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by bs111, the operator of the online casino and sports betting platform accessible at bs111.io ("the Platform", "we", "us", "our"). This Policy applies to all individuals who visit, register on, or otherwise interact with the bs111 platform, including through any mobile-optimised interface or application ("you", "your").

This Policy describes in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases that authorise such processing, the conditions under which data may be disclosed to third parties, the security measures we apply to protect your data, and the rights available to you in relation to your personal information.

This Policy should be read alongside the bs111 Terms & Conditions and our Responsible Gaming Policy, all of which together form the complete agreement governing your relationship with bs111. In the event of any conflict between this Policy and the Terms & Conditions on matters relating specifically to data privacy, this Policy shall prevail.

2. Data Controller

For the purposes of this Privacy Policy, bs111 acts as the data controller in respect of personal data collected directly from platform users. As the data controller, bs111 determines the purposes and means of processing personal data obtained through the platform.

Where bs111 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification services, or analytics providers — those providers act as data processors under written agreements that require them to process data only in accordance with bs111's instructions and this Policy.

For all data-related enquiries, including requests to exercise your data rights, please contact us using the details provided in Section 13 of this Policy.

3. Personal Data We Collect

bs111 collects the following categories of personal data in connection with the operation of the platform. Data collection is limited to what is necessary and proportionate to the stated purposes described in Section 5.

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (required for age verification — 21+ only)
• Residential address, including city, district, and postcode
• Email address used for account registration and communications
• Mobile phone number registered to your bs111 account
• Nationality and country of residence

3.2 Verification Documents

• Copies of government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or other official document dated within three months)
• Proof of payment method ownership (photograph or screenshot of payment method in your name)
• Source-of-funds documentation where required by internal compliance review

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and references
• Payment method identifiers (bKash account number, Nagad number, Rocket number, bank account details, card number last four digits)
• Account balance history and wagering activity records
• Bonus and promotional activity associated with your account

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page navigation paths, and time spent on specific platform areas
• Login history including date, time, and originating IP address
• Game history including games played, bet amounts, outcomes, and session durations

3.5 Communications Data

• Records of support interactions via live chat, email, or any other communication channel
• Feedback, complaints, and dispute correspondence
• Responses to surveys or promotional campaigns where you have voluntarily participated

4. How We Collect Your Data

bs111 collects personal data through the following means:

4.1 Direct Collection

The majority of your personal data is collected directly from you when you register an account on the bs111 platform, complete identity verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or voluntarily provide information through any other platform interaction.

4.2 Automated Collection

When you access and use the bs111 platform, certain technical data is collected automatically by our systems. This includes your IP address, device information, session data, and behavioural data such as which pages you visit, which games you play, and how long you spend on the platform. This data is collected through server logs, cookies, and similar tracking technologies (see Section 7 for full details on cookies).

4.3 Third-Party Sources

In specific circumstances, bs111 may receive personal data about you from third-party sources. These include identity verification service providers who conduct document and database checks as part of our Know Your Customer (KYC) process, fraud prevention databases used to screen for known fraudulent actors, and payment processors who provide transaction confirmation data. In all cases, we verify that such third parties are authorised to share data with us before using it.

5. Purposes and Legal Basis for Processing

The table below sets out the primary purposes for which bs111 processes your personal data, together with the corresponding legal basis that authorises each category of processing activity.

6. Sharing of Personal Data

bs111 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers and Data Processors

bs111 engages third-party service providers to support the operation of the platform. These providers act as data processors and may process your personal data only in accordance with our written instructions. Categories of service providers include:

• Payment processing providers (including bKash, Nagad, Rocket, Upay, and card scheme operators such as Visa and Mastercard)
• Identity verification and KYC service providers
• Fraud prevention and anti-money laundering screening databases
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) — limited to the technical data necessary to deliver game services
• Email and SMS communication service providers
• Analytics platform providers (using anonymised or pseudonymised data wherever possible)

6.2 Legal and Regulatory Disclosure

bs111 may disclose personal data to law enforcement authorities, regulatory bodies, financial intelligence units, or other government agencies where we are required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the data specifically required and will notify you of any disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bs111's business, personal data held by bs111 may be transferred to the relevant successor entity. In such circumstances, we will take reasonable steps to ensure that your privacy rights continue to be protected following the transfer, and we will notify affected players of any material changes to data processing arrangements.

7. Cookies and Tracking Technologies

The bs111 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a web server when you visit a website. The following categories of cookies are used on the bs111 platform:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They enable core features such as session management, account authentication, and secure page transitions. Without these cookies, the platform cannot operate correctly. These cookies do not require your consent as they are strictly necessary to provide a service you have requested.

7.2 Analytical and Performance Cookies

These cookies collect information about how you use the bs111 platform — for example, which pages you visit most frequently and whether you encounter any errors. This data is used in aggregated, anonymised form to help us improve the platform's performance and user experience. These cookies may be set by bs111 directly or by third-party analytics providers operating under data processor agreements with bs111.

7.3 Functional Cookies

These cookies remember your preferences and settings — such as your preferred language, display settings, and recently viewed game categories — to provide a more personalised experience each time you return to the platform. Disabling functional cookies may result in some personalisation features being unavailable.

7.4 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please be aware that disabling strictly necessary cookies may prevent you from accessing certain parts of the bs111 platform or may impair the functionality of your account. Detailed instructions for managing cookies in your browser are available in your browser's help documentation.

8. Data Security

bs111 implements a multi-layered approach to the security of personal data. The following technical and organisational measures are in place to protect your data against unauthorised access, loss, destruction, alteration, or disclosure:

• All data transmitted between your device and the bs111 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon and "https://" in your browser address bar when visiting bs111.io.
• Sensitive account and payment data stored within bs111's systems is encrypted at rest using strong encryption algorithms.
• Internal access to personal data is controlled on a strict role-based access basis. Only personnel with a genuine operational need to access specific categories of data are permitted to do so.
• All personnel with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Our systems and infrastructure undergo regular vulnerability assessments and security reviews.
• Audit logs are maintained for all significant data access and processing activities, enabling investigation of any suspected breach.

While bs111 takes all reasonable and commercially practical steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be one hundred percent secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bs111 will notify affected players and relevant authorities in accordance with our obligations under applicable data protection standards.

9. Data Retention

bs111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:

• Account and identity data is retained for the duration of your active account relationship with bs111, and for a further period of at least five years following account closure, in accordance with standard anti-money laundering and financial record-keeping requirements.
• Transaction and financial records are retained for a minimum of five years from the date of the relevant transaction, in line with applicable financial compliance obligations.
• Identity verification documents are retained for the period required to satisfy our Know Your Customer obligations, typically five years from the date of verification or account closure, whichever is later.
• Customer support communications and dispute correspondence are retained for a minimum of three years from the date of resolution, to support any future re-escalation or legal proceedings.
• Technical and usage data collected for analytics purposes is retained in anonymised or aggregated form and is not subject to a fixed deletion schedule once de-identified.
• Marketing consent records are retained for as long as consent is active, and for a reasonable period after consent withdrawal as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual.

10. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data that bs111 processes about you. These rights may be exercised by contacting us using the details in Section 13.

10.1 Right of Access

You have the right to request a copy of the personal data that bs111 holds about you, together with information about how it is being used. We will provide this information in a structured, commonly used format within a reasonable timeframe following verification of your identity.

10.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Please contact our support team with the specific details you wish to amend.

10.3 Right to Erasure

In certain circumstances, you have the right to request that bs111 delete the personal data we hold about you. This right applies where the data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal obligations to retain certain categories of data for specified minimum periods, as described in Section 9.

10.4 Right to Restriction of Processing

You may request that bs111 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while a legitimate interest objection is being assessed. During a processing restriction, we may continue to store your data but will not actively use it for processing purposes.

10.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format so that you may transfer it to another service provider of your choice.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on bs111's legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time, without providing any justification for your objection.

11. Children and Minors

The bs111 platform is strictly intended for use by adults aged 21 years and above. bs111 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, make a deposit, or use any feature of the bs111 platform.

If bs111 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the bs111 platform without your knowledge, please contact our support team immediately so that we can investigate and take appropriate action.

12. Changes to This Policy

bs111 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When material changes are made, the updated Policy will be published on this page with a revised effective date. For significant changes that affect how we use your personal data, we will also notify active account holders by email or through an in-platform notification.

We encourage you to review this Policy periodically to remain informed about how bs111 protects your personal data. Continued use of the bs111 platform following the publication of an updated Policy constitutes your acceptance of the revised terms, except where applicable law requires that we obtain fresh consent for a specific new processing activity.

13. Contact and Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how bs111 handles your personal data, please contact us using the following details:

• Email: support@bs111 .io (plain text — not a clickable link)
• Subject Line: Use "Privacy Request" or "Data Rights Request" so our team can route your message correctly
• Live Chat: Available 24/7 from within your account dashboard after login
• Response Time: We acknowledge all privacy enquiries within five business days and aim to provide a full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered email address, your bs111 username, and a clear description of the right you wish to exercise or the concern you wish to raise. Providing this information upfront will help us verify your identity and respond to your request as efficiently as possible.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. bs111 will cooperate fully with any such authority in the handling of complaints relating to our data processing activities.