Your Privacy Matters to dt111 — Here Is How We Protect It

1 About This Policy

This Privacy Policy ("Policy") describes how dt111 ("we", "us", "our") collects, uses, stores, protects, and shares personal information about individuals ("you", "Player") who access or use the dt111 online casino and sports betting platform at https://dt111.io and any associated sub-pages or services.

dt111 operates primarily to serve players in Bangladesh. This Policy is written in English and governed by applicable data protection obligations relevant to our operational jurisdiction. By registering an account or using the dt111 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and dt111.

2 Personal Data We Collect

dt111 collects personal data in the following categories. We collect only what is necessary for the purposes described in Section 3.

2.1 Registration & Identity Data

When you open a dt111 account, we collect: your full legal name, date of birth, gender (optional), residential address, email address, and mobile telephone number. This data is required to create your account, verify your identity, and comply with our age-verification obligations (21+ only).

2.2 Know Your Customer (KYC) Documents

To comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, we may collect copies of: a government-issued photo identity document (National Identity Card, passport, or driving licence); proof of residential address (utility bill, bank statement, or government letter dated within three months); and proof of payment method ownership (mobile wallet registration details, bank statement, or card image with middle digits obscured).

2.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and in-platform transactions associated with your account, including amounts, timestamps, payment method identifiers (such as mobile wallet account numbers), and transaction reference numbers. We do not store full card numbers — only the last four digits and card type are retained for reference purposes after a transaction is completed.

2.4 Gaming Activity Data

We record your game sessions, bets placed, game outcomes, bonus activity, wagering progress, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

2.5 Technical & Device Data

When you access the platform, our servers automatically collect: your IP address, browser type and version, operating system, device type, screen resolution, time zone, referring URL, and pages visited on our platform. This technical data is used for platform security, fraud prevention, and service optimisation.

2.6 Communications Data

We retain records of communications you send to dt111 support via email, including the content of the communication, the date and time, and any attachments you provide. This is necessary for resolving your queries, maintaining a record of disputes, and training support staff.

2.7 Data Collected by Cookies

See Section 5 for full details of the cookies and tracking technologies used on the dt111 platform.

3 How We Use Your Personal Data

dt111 uses your personal data for the following purposes:

• Account Creation and Management: To open, maintain, and manage your player account, including processing deposits, crediting winnings, applying bonuses, and fulfilling withdrawal requests.
• Identity and Age Verification: To confirm that you are at least 21 years of age and are the legitimate owner of the payment methods linked to your account, as required by our policies and applicable law.
• Payment Processing: To facilitate secure deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other supported payment methods. Your payment data is shared with the payment processor only to the extent necessary to complete the transaction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, multi-accounting, and other prohibited conduct as described in our Terms and Conditions.
• Regulatory Compliance: To meet our anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations, and to respond to lawful requests from regulatory authorities or law enforcement agencies.
• Responsible Gaming Monitoring: To monitor your gaming activity for indicators of problem gambling and to provide responsible gaming tools and interventions in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain accurate records of all communications and complaint resolutions.
• Platform Improvement: To analyse aggregated usage patterns and platform performance data — in anonymised or pseudonymised form — to improve the quality, security, and functionality of the dt111 platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails about bonuses, new games, and dt111 offers. You may withdraw this consent at any time (see Section 11).

4 Legal Basis for Processing

dt111 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing your identity data, financial data, and gaming activity data is necessary to perform our contractual obligations to you under the Terms and Conditions — principally, to allow you to play games and receive winnings.
• Legal Obligation: Processing your KYC documents and AML-related data is necessary for dt111 to comply with applicable legal and regulatory obligations, including anti-money laundering rules and age-verification requirements.
• Legitimate Interests: Processing your technical and device data for fraud detection and security monitoring is justified by dt111's legitimate interest in protecting the platform and its players from fraudulent activity. This interest does not override your fundamental privacy rights.
• Consent: Processing your data for marketing communications is based solely on your explicit consent given at registration or at a subsequent point via your account preferences. You may withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.

5 Cookies & Tracking Technologies

dt111 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the platform when you visit. Cookies are used for the following purposes on dt111:

5.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account state while you navigate between pages, and remember security tokens. You cannot opt out of strictly necessary cookies while using the platform.

5.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how players use the dt111 platform — for example, which pages are visited most frequently and where errors occur. This data helps us identify and fix issues and improve the overall user experience. No individually identifiable data is collected by these cookies.

5.3 Functional Cookies

These cookies remember your preferences and settings — such as your chosen language or display preferences — so that you do not need to re-enter them on each visit. They improve platform usability but are not essential to core functionality.

5.4 Managing Cookies

You may control and delete cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the dt111 platform, including maintaining a logged-in session. Instructions for managing cookies in the most common browsers are available at each browser vendor's support pages.

6 Third-Party Data Sharing

dt111 does not sell, rent, or trade your personal data to third parties for commercial gain. We share personal data with the following categories of third-party service providers solely to the extent necessary for them to deliver their services to us:

• KYC and Identity Verification Providers: Third-party identity verification services that check the authenticity of the identity documents you submit. These providers receive your identity data under strict contractual data protection agreements and may not use it for any purpose beyond the verification service.
• Payment Processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) receive transaction-specific data necessary to process your deposits and withdrawals. They operate under their own privacy policies, which we encourage you to review.
• Game Studio Providers: When you play games supplied by providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, the game provider's platform receives your session data, bet amounts, and game outcomes in order to run the game and settle results. Game providers may not use this data for purposes beyond game operation and fairness auditing.
• IT Infrastructure and Hosting Providers: Our platform infrastructure is operated on secure cloud servers. These hosting providers have access to server-level data logs but operate under strict data processing agreements that prohibit any use of dt111 player data outside the scope of infrastructure services.
• Regulatory Authorities and Law Enforcement: dt111 may disclose personal data to relevant authorities where required by law, court order, or where disclosure is necessary to protect the safety of players or the public. We will notify you of such disclosures wherever legally permitted to do so.

All third-party service providers used by dt111 are required to implement appropriate technical and organisational security measures to protect the personal data entrusted to them, and may use that data only for the specific purpose for which it was disclosed.

7 Data Retention

dt111 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:

When personal data is no longer required and the applicable retention period has expired, dt111 securely deletes or anonymises that data in accordance with our internal data disposal procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any identifiable individual.

8 Data Security

dt111 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• TLS/SSL Encryption: All data in transit between your browser or device and the dt111 platform is encrypted using current TLS/SSL protocols, protecting it from interception during transmission.
• Encryption at Rest: Sensitive personal data stored in dt111's systems — including identity documents, financial data, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within dt111's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role, and all access is logged and subject to regular review.
• Two-Factor Authentication: Internal system access by dt111 staff requires two-factor authentication. Players are also offered two-factor authentication on their accounts as an optional additional layer of security.
• Penetration Testing and Security Audits: dt111 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: dt111 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay.

9 Your Data Rights

As a dt111 player, you have the following rights in relation to your personal data. These rights are subject to applicable legal exceptions, including our obligations to retain certain data under anti-money laundering and financial regulation requirements.

• Right of Access: You have the right to request a copy of all personal data dt111 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data, you can update this directly through your account profile. For KYC documents, contact [email protected].
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right does not apply to data we are legally required to retain (see Section 7).
• Right to Restriction: You have the right to request that we restrict processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) and to transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests. dt111 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw your consent at any time by updating your account preferences or by contacting [email protected]. Withdrawal does not affect the lawfulness of processing that took place before you withdrew consent.

To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request — [Your Account Username]". Include a description of the right you wish to exercise and, where relevant, the specific data you are enquiring about. We will acknowledge your request within 72 hours and complete it within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case we will notify you of the extension.

If you are not satisfied with how dt111 has handled your personal data, you have the right to submit a complaint to the competent data protection supervisory authority in your jurisdiction.

10 Children's Privacy

The dt111 platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, void any associated balance in accordance with our Terms and Conditions, and securely delete the personal data as soon as practicable.

If you believe that a person under 21 has registered an account on the dt111 platform, please notify us immediately at [email protected]. We take all such reports seriously and investigate them as a priority.

11 Marketing Communications

dt111 may send you promotional emails about bonuses, new game launches, seasonal promotions, and platform news if you have given explicit consent to receive marketing communications. Consent may be given during the registration process by ticking the relevant opt-in box, or at any subsequent time by updating your marketing preferences in your account settings.

You may unsubscribe from marketing emails at any time by:

• Clicking the "Unsubscribe" link included in every marketing email dt111 sends.
• Updating your communication preferences in your account settings.
• Emailing [email protected] with the subject line "Marketing Unsubscribe — [Your Account Username]".

Unsubscribe requests are processed within five (5) business days. After opting out, you will continue to receive transactional and account-related emails (such as deposit confirmations, withdrawal notifications, and KYC requests) as these are necessary for the administration of your account and are not marketing communications.

dt111 does not engage in SMS marketing, push notification marketing, or third-party social media targeting based on your dt111 account data.

12 Cross-Border Data Transfers

In the course of operating the dt111 platform, your personal data may be transferred to, processed in, or stored in countries other than Bangladesh — for example, where our server infrastructure, KYC providers, or game studio partners operate from a different jurisdiction.

Where such transfers occur, dt111 takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that which it receives within Bangladesh. These steps may include entering into contractual data transfer agreements with the receiving party that incorporate appropriate data protection obligations, or relying on the receiving party's certification under a recognised international data protection framework.

If you have questions about the specific countries to which your data may be transferred or the safeguards in place, you may contact us at [email protected].

13 Changes to This Policy

dt111 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify all registered players via email to their registered address at least seven (7) days before the changes take effect. The updated Policy will also be published on this page with a revised "Last Updated" date.

For minor or non-material changes — such as corrections to typographical errors or clarifications that do not affect the substance of how your data is processed — we may update the Policy without prior individual notice, though the "Last Updated" date on this page will always reflect the most recent revision.

We encourage you to review this Policy periodically to stay informed about how dt111 protects your personal data. Continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the changes.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the dt111 Privacy Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how dt111 handles your personal data, please contact us using the details below. All privacy-related contacts are handled by our dedicated data team and are treated as a priority.

When submitting a privacy enquiry or data rights request, please include your registered account username and a clear description of your request. This helps us locate your records accurately and respond to you as quickly as possible. We may ask you to verify your identity before processing certain requests to protect the security of your data.