3111bat Privacy Policy

3111bat collects personal data from players in Bangladesh for the purposes of account management, identity verification, payment processing, regulatory compliance, and platform improvement. We collect only the data that is necessary to deliver a safe, reliable, and compliant gaming experience. The categories of data we collect are outlined below.

Personal Identification Data: When you register a 3111bat account, we collect your full legal name, date of birth, gender, nationality, and a copy of a government-issued identity document (National ID Card, passport, or driving licence). This data is used to verify that you meet the 18+ age requirement and to fulfil our Know Your Customer (KYC) obligations.

Contact Information: We collect your email address, Bangladeshi mobile number, and residential address. These are used for account communications, two-factor authentication, withdrawal confirmations, promotional messages (where you have opted in), and KYC correspondence.

Financial Data: We collect details of the payment methods you use on the platform, including bKash wallet numbers, Nagad account references, Rocket mobile banking details, Upay identifiers, and bank account information for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank transfers. We also maintain records of your deposit and withdrawal history, transaction amounts in BDT (৳), and associated timestamps. We do not store full card numbers — card payment data is handled by our PCI-DSS compliant payment gateway partners.

Behavioural and Gaming Data: We collect records of your gaming activity on 3111bat, including game sessions, bet amounts, bet outcomes, game preferences, bonus claims, and wagering history. This data is used for responsible gaming monitoring, fraud detection, and platform improvement.

Technical Data: We automatically collect certain technical information when you access the 3111bat platform, including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This information is used for security monitoring, fraud prevention, and platform performance analytics.

3111bat does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only with carefully selected partners and service providers who assist us in operating the platform, and only to the extent necessary to fulfil the stated purpose. All third-party data processors are bound by data processing agreements that require them to maintain appropriate technical and organisational security measures.

The categories of third parties with whom we may share your data are as follows:

• Payment Service Providers: We share the minimum necessary financial information with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard gateway partners to process your deposits and withdrawals. These partners operate under their own privacy policies and are responsible for the security of the data they handle.
• Identity Verification Partners: We may use third-party KYC and identity verification service providers to cross-reference your identity documents against authoritative databases. These providers process your data strictly for verification purposes.
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and pseudonymised player data to deliver their game content on our platform. These providers do not receive your full identity data.
• Fraud Prevention and AML Screening: We may share data with specialist fraud detection and anti-money laundering screening services to detect suspicious transactions and comply with our legal obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, 3111bat will disclose personal data to the relevant authorities. We will notify you of any such disclosure where we are legally permitted to do so.
• Analytics and Infrastructure Providers: We use cloud hosting and performance analytics providers to operate and improve the platform. These providers process technical and usage data only and are bound by strict data processing agreements.

3111bat applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme is reviewed and updated on a regular basis to account for evolving threats and best practices in the online gaming and financial technology sectors.

The key security measures we maintain include:

• SSL/TLS Encryption: All data transmitted between your device and the 3111bat platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, personal details, and payment information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored in our databases — including identity document scans, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 3111bat's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific role, and all internal access is logged and audited.
• Two-Factor Authentication (2FA): 3111bat strongly recommends that all players enable 2FA on their accounts. 2FA adds a critical second verification step using your registered Bangladeshi mobile number, significantly reducing the risk of unauthorised account access.
• Intrusion Detection and Monitoring: Our infrastructure is monitored 24/7 by automated intrusion detection systems. Any anomalous activity patterns trigger an immediate alert to our security team for investigation.
• Penetration Testing: 3111bat conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While we apply robust technical and organisational security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, 3111bat will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

3111bat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. When data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

The following retention periods apply to the main categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure. This retention period reflects our AML and KYC compliance obligations, which require us to maintain records of customer identity for a prescribed period after the end of the business relationship.
• Financial Transaction Records: All deposit and withdrawal records, including bKash, Nagad, Rocket, and bank transfer data, are retained for a minimum of 5 years from the date of the transaction. This is required for financial audit, dispute resolution, and regulatory compliance purposes.
• Gaming Activity Records: Bet history, game session logs, and wagering records are retained for a minimum of 3 years. These records are used for responsible gaming monitoring, dispute resolution, and bonus compliance auditing.
• Customer Support Correspondence: Communications between you and the 3111bat support team (including live chat transcripts and email exchanges) are retained for 2 years from the date of the last interaction in a given support thread.
• Technical and Access Logs: Server access logs, IP address records, and device fingerprint data are retained for 12 months for security monitoring and fraud investigation purposes.
• Marketing Preferences: Records of your marketing opt-in and opt-out decisions are retained for the duration of your account relationship to ensure that your preferences are consistently respected.

Where you request account closure and the deletion of your personal data, 3111bat will erase all data that is not subject to a mandatory legal retention obligation. Data subject to mandatory retention will be held securely in a restricted archive and will not be used for any active processing purposes during the retention period.