got11 Privacy
Policy

For the purposes of this Privacy Policy, got11 ("got11", "we", "us", "our") acts as the data controller in respect of all personal data collected from players and visitors through the got11 platform at https://got11.net and any associated mobile applications. As data controller, got11 determines the purposes for which, and the manner in which, personal data is processed.

This Privacy Policy applies to all individuals who interact with the got11 platform, including registered players located in Bangladesh, visitors browsing the site without a registered account, and individuals who contact got11 via our 24/7 live chat support channel.

If you have any questions about how got11 handles your personal data, or if you wish to exercise any of your data rights described in this policy, please contact us using the details set out in Section 12 of this document.

got11 collects personal data from you in three principal ways: information you provide directly when registering or interacting with the platform; information generated automatically when you access the platform; and information received from third-party partners in the course of payment processing and fraud prevention.

Information you provide directly:

• Full name and date of birth (used for identity verification and age confirmation).
• Mobile phone number registered in Bangladesh (used for account authentication, OTP delivery, and support communications).
• Email address, where provided voluntarily for account recovery or promotional communications.
• National Identity Card (NID) number or passport details, submitted during Know Your Customer (KYC) verification.
• bKash, Nagad, Rocket, or Upay mobile wallet number; or Visa/Mastercard card details (card numbers are tokenised and never stored directly on got11 servers).
• Username and encrypted password created at registration.
• Any information you choose to submit when contacting got11 support via live chat.

Information collected automatically:

• IP address and approximate geographic location (city/region level) at the time of each session.
• Device type, operating system, browser version, and screen resolution.
• Session duration, pages visited, games launched, betting market interactions, and in-app navigation patterns.
• Login timestamps and session event logs.
• Cookie identifiers and similar tracking technologies (see Section 6 for full cookie details).

Information received from third parties:

• Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card payment processors — limited to transaction reference numbers, amounts, and success/failure status.
• Identity verification results from third-party KYC screening services, which may flag politically exposed persons (PEP) status or sanctions-list matches in accordance with anti-money-laundering obligations.
• Device risk and fraud signals from anti-fraud service providers, used to detect bot activity and account takeover attempts.

got11 uses the personal data it collects for clearly defined purposes only. The following table sets out each processing purpose alongside the category of data used and the legal basis on which that processing relies.

got11 does not use personal data for automated individual decision-making that produces significant legal or similarly serious effects on players, without providing a meaningful human review mechanism. If you have concerns about how a specific decision affecting your account was made, contact got11 support via 24/7 live chat to request a human review.

got11 processes personal data only where a valid legal basis exists. The four legal bases we rely on are:

• Contract performance: Processing is necessary to fulfil the agreement between you and got11 — for example, processing your bKash deposit or settling a cricket bet you placed.
• Legal obligation: Processing is required by applicable law — for example, conducting KYC verification, retaining transaction records for financial compliance, or responding to a valid law-enforcement request.
• Legitimate interest: Processing is necessary for got11's legitimate business interests, provided those interests are not overridden by your fundamental rights. This covers activities such as fraud detection, platform security, responsible gaming monitoring, and anonymised analytics. got11 has conducted legitimate-interest assessments for each use case in this category.
• Consent: Where processing relies on your freely given, specific, informed, and unambiguous consent — primarily for receiving marketing communications from got11 by SMS or email. You may withdraw consent at any time by contacting got11 support or using the opt-out mechanism in any marketing message sent to you. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

got11 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared externally only in the following clearly defined circumstances:

Service providers and data processors: got11 engages a limited number of carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay — solely for the purpose of executing deposits and withdrawals. These operators are bound by their own regulatory obligations in Bangladesh and process transaction data under their own privacy frameworks as payment intermediaries.
• KYC and identity verification providers: Third-party screening services used to verify player identity, check PEP and sanctions lists, and support anti-money-laundering compliance. Only the minimum necessary data is shared for each check.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data (such as player session token, stake amount, and game result) for the purpose of delivering and auditing their game content. These providers are certified and operate under independent regulatory frameworks.
• Cloud infrastructure and hosting providers: got11 uses secure cloud infrastructure to host platform data. Infrastructure providers access data only as directed by got11 and have no independent right to process your data.
• Fraud and security services: Anti-fraud and device-fingerprinting service providers receive device and behavioural signals to help protect your account from takeover attempts and protect the platform from coordinated fraud.

Legal and regulatory disclosure: got11 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or in response to a court order. got11 will notify affected players of such disclosures where legally permitted to do so.

Business transfers: In the event of a merger, acquisition, or sale of all or a material portion of got11's assets, personal data held by got11 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where practicable, and the acquiring entity will be required to handle personal data in a manner consistent with this Privacy Policy.

got11 uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the platform effectively, remember your preferences, and analyse aggregate usage patterns. The following categories of cookies are used on got11:

got11 does not deploy advertising cookies, cross-site tracking pixels, or social media sharing buttons that communicate session data to external social platforms. The analytics tools used by got11 are configured with IP anonymisation enabled.

Managing cookies: You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair the core functionality of the got11 platform, including your ability to log in or maintain a betting session. Disabling analytics cookies has no impact on your ability to use any got11 feature.

got11 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

Upon expiry of the applicable retention period, got11 will securely delete or irreversibly anonymise the relevant personal data. Where data is anonymised rather than deleted, the resulting anonymised dataset contains no information capable of identifying you as an individual and is no longer subject to this Privacy Policy.

As a got11 player, you have the following rights in respect of the personal data that got11 holds about you. got11 is committed to facilitating the exercise of these rights promptly and without unnecessary friction.

To exercise any of the above rights, contact got11 via 24/7 in-app live chat or by writing to support at got11.net. got11 will respond to all verified data rights requests within 30 calendar days of receipt. For complex requests, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day window.

got11 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party. Verification typically involves confirming your registered mobile number and account details.

got11 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between your browser or app and got11 servers is encrypted using TLS 1.2 or higher (256-bit SSL). Connections that do not meet this standard are refused.
• At-rest encryption: Sensitive personal data stored in got11 databases — including KYC document data and payment reference data — is encrypted at rest using industry-standard AES- 256 encryption.
• Password hashing: Account passwords are never stored in plain text. got11 uses a strong one-way cryptographic hashing algorithm with per-account salting to protect stored password data.
• Access controls: Access to personal data within got11's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role, and all access is logged and audited.
• Two-factor authentication (2FA): got11 supports and encourages the use of two-factor authentication for all player accounts. OTP-based verification is used during login, withdrawal requests, and sensitive account changes.
• Penetration testing and vulnerability management: got11 conducts regular security assessments to identify and remediate vulnerabilities in its platform infrastructure. Critical security patches are applied within 24 hours of release.
• Data breach response: got11 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, got11 will notify affected players within 72 hours of becoming aware of the breach, providing details of the nature of the breach, data categories affected, and steps taken to mitigate impact.

The got11 platform is strictly for adults aged 18 years and above. got11 does not knowingly collect, process, or retain personal data from any individual under the age of 18. The collection of personal data from minors is strictly prohibited under got11's registration policy and terms of service.

During the account registration process, got11 requires all applicants to confirm that they are 18 years of age or older. Where date-of-birth information provided at registration indicates that an applicant is under 18, the registration process is immediately rejected and no account is created. Where got11 receives information suggesting that a registered account belongs to a person under the age of 18 — including through KYC document review or third-party age verification checks — that account is suspended immediately pending investigation and permanently closed if the minor-age finding is confirmed.

Upon confirmed closure of a minor's account, got11 will securely delete all personal data associated with that account within 30 calendar days, except where retention of specific data is required by applicable law in connection with the investigation itself.

got11 also recommends that parents and guardians in Bangladesh use internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. Responsible gaming resources and guidance on parental controls are available on our Responsible Gaming page.

got11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, got11 will notify registered players via SMS or in-app notification at least 7 days before the revised policy takes effect, unless an immediate change is required for security or legal compliance reasons.

The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically so that you remain informed about how got11 protects your personal data. Your continued use of the got11 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes described.

Where a proposed change to this Privacy Policy involves a new use of your personal data that requires your consent, got11 will seek your explicit consent before the new processing activity begins. You may at any time withdraw consent for any processing activity that relies on consent as its legal basis, without affecting the lawfulness of processing carried out prior to withdrawal.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way got11 handles your personal data, please contact the got11 Data Privacy team using any of the following methods:

• Email: support at got11.net — please include "Privacy Request" in the subject line of your message.
• Live Chat: 24/7 in-app live chat — available directly within the got11 app or platform at any time. Response time: 2–5 minutes.

got11 aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to resolve them fully within 30 calendar days. For data rights requests (as described in Section 8), the 30-day response window begins from the date on which got11 successfully verifies your identity.

This Privacy Policy was last reviewed and updated on 1 January 2026. All times referenced in this policy are Bangladesh Standard Time (BST, UTC+6).