rich11 Privacy Policy

1. Who We Are

rich11 is an online gaming and sports betting platform accessible at https://rich11.bid, operated for and directed to players located in Bangladesh. Throughout this Privacy Policy, "rich11", "we", "us", and "our" refer to the operator of the rich11 platform. For all data-related enquiries, you may contact us directly at [email protected].

rich11 acts as the data controller in respect of personal data collected from players and visitors. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under contractual obligations that are consistent with this Privacy Policy.

2. Data We Collect

rich11 collects the following categories of personal data from players and visitors:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, National ID (NID) number, passport or driver's licence details	Account registration, KYC verification, age verification
Contact Data	Mobile number, email address, residential address in Bangladesh (city, district)	Account communication, withdrawal confirmation, support responses
Financial Data	bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, transaction history	Processing deposits and withdrawals, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session tokens	Platform security, duplicate account detection, fraud prevention
Usage Data	Pages visited, games played, bet history, session duration, click paths, search queries on-site	Product improvement, responsible gaming monitoring, personalisation
Communications Data	Support chat transcripts, email correspondence, complaint records	Dispute resolution, quality assurance, legal compliance
Marketing Preferences	Opt-in/opt-out status for email, SMS, and push notifications	Sending or suppressing promotional communications per your stated preference

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in a support communication, it will be used solely to resolve your query and will not be stored separately as a categorised data field.

3. How We Collect Your Data

3.1 Directly From You

The majority of your personal data is collected directly from you when you: register an account on rich11; complete the KYC verification process by submitting identity documents; make a deposit or request a withdrawal; contact the rich11 support team via email or live chat; respond to a survey or promotion; or update your account profile and notification preferences.

3.2 Automatically During Your Use of the Platform

When you visit or use rich11, certain technical and usage data is collected automatically by our servers and analytics infrastructure. This includes your IP address, the pages you navigate to, the games you launch, your session start and end times, and device fingerprint information. This data is used to protect platform security, detect fraudulent behaviour, and understand aggregate usage patterns.

3.3 From Third Parties

rich11 may receive personal data about you from the following third parties in limited circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Transaction confirmation and fraud-flag data relevant to your deposit or withdrawal.
• Identity verification partners: Confirmation responses from document verification services used to validate NID or passport submissions during KYC.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe): Aggregated game session outcome data necessary for bet settlement and dispute resolution. Game studios do not share individual player profiles with rich11 beyond what is required for settlement.

4. How We Use Your Data

rich11 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your rich11 account, authenticating your identity at login, and communicating essential account information such as deposit confirmations and withdrawal statuses.
• KYC and Age Verification: Confirming that you are aged 18 or above and that your identity matches the details provided at registration, as required for responsible gaming compliance.
• Payment Processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels. Financial data is shared with payment processors only to the extent necessary to complete the transaction.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, duplicate accounts, and unauthorised access attempts. This includes automated and manual review of transaction patterns and technical data.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling, enforcing self-exclusion requests, applying deposit and session limits, and proactively reaching out to players who display indicators of at-risk behaviour.
• Product Improvement: Analysing anonymised or aggregated usage data to improve the platform, prioritise new features, optimise game loading performance, and ensure a high-quality experience for all players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Marketing Communications: Sending promotional offers, tournament announcements, and seasonal promotions (such as BPL cricket specials or Eid bonus campaigns) exclusively to players who have opted in to receive them.
• Legal and Regulatory Compliance: Retaining records and responding to lawful requests from regulatory or law enforcement authorities where required.

5. Legal Basis for Processing

rich11 processes your personal data on the following legal grounds, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to create and operate your account, process payments, and deliver the gaming services you have requested from rich11.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and record-keeping duties.
• Legitimate Interests: Processing carried out in the legitimate interests of rich11, including fraud detection, platform security, and product improvement — provided that such interests are not overridden by your fundamental rights and interests.
• Consent: Processing based on your explicit opt-in consent, including the sending of marketing emails and SMS messages. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

rich11 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Payment Service Providers

To process deposits and withdrawals, rich11 shares relevant financial and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data solely to complete the specific transaction and are contractually prohibited from using it for any other purpose.

6.2 Game Content Providers

To deliver games and settle bets, limited session and outcome data is exchanged with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These studios operate their own privacy frameworks and are bound by contractual obligations when processing data on behalf of rich11.

6.3 Identity Verification Services

During the KYC process, identity document images may be transmitted to a third-party verification partner for automated or manual review. The verification partner processes this data solely for the purpose of confirming document authenticity and does not retain it beyond the period required for verification.

6.4 Law Enforcement and Regulatory Authorities

rich11 may disclose personal data to government authorities, law enforcement agencies, or financial intelligence units where required by applicable law, court order, or lawful regulatory request. In such cases, rich11 will disclose only the minimum data necessary to satisfy the legal obligation and will, where permitted, notify the affected player of the disclosure.

6.5 Business Successors

In the event of a merger, acquisition, or transfer of substantially all the assets of rich11, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. rich11 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and gather anonymous analytics data.

7.2 Types of Cookies Used by rich11

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to understand how players navigate rich11 — for example, which game categories are most visited and how long sessions last. Analytics data is aggregated and anonymised. rich11 uses first-party analytics only and does not load third-party analytics scripts from advertising networks.
• Preference Cookies: Used to remember settings such as your preferred language display or notification status. These are optional and their removal will not prevent you from using the platform.

rich11 does not use advertising or retargeting cookies. No data collected via cookies on rich11 is shared with advertising networks or used to build cross-site behavioural profiles.

7.3 Managing Cookies

You can manage or delete cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use rich11. For guidance on managing cookies in common browsers, refer to your browser's help documentation.

8. Data Retention

rich11 retains your personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account Data: Retained for the lifetime of your active account plus a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five years from the date of the transaction.
• KYC Documents: Retained for a minimum of five years following the completion of verification or the closure of the account, whichever is later.
• Support Communications: Retained for three years from the date of the final communication in a support thread, or longer if the communication forms part of an ongoing dispute record.
• Marketing Preference Records: Opt-out records are retained indefinitely to ensure that suppressed players are never re-added to marketing lists without fresh consent.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it contains no personal identifiers.

When the retention period for a category of data expires and no legal obligation requires further retention, rich11 will securely delete or irreversibly anonymise that data.

9. Data Security

rich11 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data in transit between your device and rich11 servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Password Security: Passwords are hashed using the bcrypt algorithm with per-account salts. Plain-text passwords are never stored anywhere on rich11 infrastructure.
• Access Controls: Access to personal data within rich11's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication (2FA): rich11 offers optional 2FA via SMS for all player accounts, providing an additional barrier against unauthorised login.
• Intrusion Detection: rich11's infrastructure is monitored continuously for anomalous behaviour, and automated alerts are in place to flag potential security incidents for immediate investigation.
• Regular Security Audits: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and interests, rich11 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10. Your Rights

As a player of rich11, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. rich11 will respond within 30 calendar days of receiving a valid request.

• Right of Access: You may request a copy of all personal data rich11 holds about you, along with information on how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account profile.
• Right to Erasure: You may request deletion of your personal data in circumstances where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. This right is subject to overriding legal retention obligations, particularly those arising from AML regulations.
• Right to Restrict Processing: You may request that rich11 temporarily halt active processing of your data while the accuracy of the data or the legitimacy of the processing is being contested.
• Right to Data Portability: You may request that personal data you provided to rich11 be delivered to you in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling for product personalisation.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

11. Children's Privacy

rich11 is strictly intended for individuals aged 18 years and above. We do not knowingly collect personal data from persons under the age of 18. If rich11 becomes aware that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all data associated with the account will be securely deleted in accordance with our data retention policy, and any funds will be handled in accordance with the Terms & Conditions. Parents or guardians who believe a minor has accessed rich11 are encouraged to contact us immediately at [email protected].

12. Third-Party Links

The rich11 platform may contain references to third-party services, such as game studio promotional pages or payment provider help centres. These references do not constitute endorsement, and rich11 has no control over and accepts no responsibility for the privacy practices of any third-party website or service. We encourage you to review the privacy policies of any third-party service you choose to access from links on rich11 before submitting personal data to those services.

13. Changes to This Policy

rich11 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address or mobile number on record at least seven calendar days before the revised Policy takes effect. The updated Policy will be published at https://rich11.bid/privacy-policy with a revised effective date at the top of the document. Your continued use of rich11 following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you must close your account before the revision takes effect.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data rich11 holds about you, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" in the subject line of your email for faster routing to our data team.
• Response Time: rich11 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).