gk11 Privacy Policy

This Privacy Policy ("Policy") describes how gk11 ("gk11", "we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals who visit, register on, or otherwise interact with the gk11 online betting and casino platform, accessible at https://gk11.io and any associated mobile applications (collectively, the "Platform").

gk11 is committed to protecting the privacy and security of all players, particularly those based in Bangladesh. We recognise that the personal data you entrust to us is sensitive, and we take our obligations as a data handler seriously. This Policy is written in plain English so that every player can understand exactly how their information is being used — not just legal professionals.

This Policy should be read alongside the gk11 Terms and Conditions and the Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with the gk11 platform. In the event of any conflict between this Policy and the Terms and Conditions regarding data matters, this Policy shall take precedence.

We may update this Policy from time to time. The effective date at the top of this page indicates when the current version was last reviewed. Material changes will be communicated to registered players via email or in-platform notification. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.

For the purposes of this Privacy Policy, gk11 acts as the data controller in respect of personal data collected from players who use the Platform. As data controller, gk11 determines the purposes for which, and the means by which, your personal data is processed.

All data-related queries, requests to exercise your rights, and complaints regarding gk11's data handling practices should be directed to our dedicated support team:

gk11 collects personal data from you through several routes. The categories of data we collect, and the circumstances under which we collect them, are described below.

3.1 Data You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotional campaigns, you may provide us with the following categories of personal data:

3.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically by our systems:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited, features used, games played, bet history, session duration, clickstream data, and search queries entered within the Platform.
• Location Data: General geographic location inferred from your IP address. We do not collect precise GPS location data.
• Cookie and Tracking Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

3.3 Data from Third Parties

In limited circumstances, gk11 may receive personal data about you from third parties, including identity verification services, fraud prevention agencies, payment processors (such as bKash and Nagad), and game providers. This data is used solely in conjunction with the purposes described in Section 4 of this Policy.

gk11 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or being required to do so by law.

Where gk11 wishes to use your personal data for a new purpose not covered by this Policy, we will update this Policy and notify you in advance, and where required by law, obtain your consent before proceeding.

gk11 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and gk11 (i.e., the Terms and Conditions) — for example, to create your account, process your deposits and withdrawals, and provide access to platform services.
• Legal Obligation: Processing is required for gk11 to comply with its legal and regulatory obligations — for example, identity verification for anti-money-laundering compliance, responsible gaming monitoring, and responding to lawful authority requests.
• Legitimate Interests: Processing is necessary for gk11's legitimate business interests, provided those interests are not overridden by your rights and interests — for example, fraud prevention, platform security, abuse detection, and analytics for service improvement.
• Consent: Where neither contractual necessity, legal obligation, nor legitimate interests provide a sufficient basis, gk11 will seek your explicit, informed consent before processing. This applies primarily to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

gk11 uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) to operate and improve the Platform. This section explains what these technologies are, how we use them, and the choices available to you.

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently and to provide analytical and functional information to website operators. Cookies set by gk11 are known as "first-party cookies". Cookies set by third parties such as analytics or game providers are known as "third-party cookies".

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in while you navigate between pages. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, currency display (Bangladeshi Taka / ৳), and notification settings.
• Analytics Cookies: Help gk11 understand how players interact with the Platform by collecting aggregated, anonymised usage data. This information is used exclusively to improve Platform design and performance.
• Performance Cookies: Used to monitor Platform speed, uptime, and error rates to ensure a reliable experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.

6.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features, including logging in and placing bets. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

gk11 does not sell, rent, or otherwise trade your personal data with any third party for commercial or marketing purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers

gk11 works with carefully selected third-party service providers who process personal data on our behalf in order to deliver Platform services. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other authorised payment partners process financial transaction data to handle your deposits and withdrawals.
• Identity Verification (KYC) Partners: Specialised KYC service providers assist with document verification and age confirmation as required for responsible gaming compliance.
• Game Studios: Certified providers including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and others receive session data necessary to deliver their games on the Platform.
• Analytics and Security Providers: Aggregated, anonymised technical data is processed by platform analytics and cybersecurity tools to maintain service quality and detect threats.

All third-party service providers are required to process personal data only in accordance with gk11's instructions and applicable data protection obligations. They are prohibited from using your data for any purpose other than delivering the contracted service.

7.2 Legal and Regulatory Disclosure

gk11 may disclose personal data to competent authorities — including law enforcement agencies, financial intelligence units, and regulatory bodies — where required or permitted to do so by applicable law. Such disclosures include but are not limited to responses to legally binding orders, warrants, subpoenas, or requests made in connection with the investigation of money laundering, fraud, or other criminal activity.

7.3 Business Transfers

In the event that gk11 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, personal data held by gk11 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any material changes to how their data will be handled by the new entity.

gk11 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data — which cannot be used to identify any individual — may be retained beyond these periods for analytical and reporting purposes.

If you request deletion of your account and personal data, gk11 will action your request subject to any overriding legal retention obligations. Where data must be retained for legal reasons despite a deletion request, we will inform you of the specific legal basis and the anticipated retention period.

gk11 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security programme includes the following measures:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and gk11's servers is encrypted using industry-standard TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting https://gk11.io.
• Encryption at Rest: Sensitive personal data stored on gk11's servers — including identity documents, financial data, and passwords — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within gk11's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific role. All access is logged and audited.
• Password Security: Player passwords are never stored in plain text. gk11 uses industry-standard cryptographic hashing with salting to ensure that even in the unlikely event of a system breach, stored passwords cannot be recovered in usable form.
• Two-Factor Authentication: gk11 offers two-factor authentication (2FA) for player accounts. We strongly recommend that all players enable 2FA to add an additional layer of security to their account login.
• Fraud Detection Systems: Automated real-time systems monitor Platform activity for indicators of fraudulent behaviour, account takeover attempts, and unusual transaction patterns.
• Regular Security Audits: gk11 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in its systems and processes.

As a player on the gk11 Platform, you have the following rights in relation to your personal data. gk11 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of the personal data that gk11 holds about you, along with information about how it is being used. Requests will be fulfilled within a reasonable timeframe, typically 30 days of receipt.
• Right to Rectification: If you believe that any personal data gk11 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings; for other corrections, contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to gk11's legal retention obligations — we may be required by law to retain certain data (such as financial transaction records) for a specified period even after account closure.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data or object to its processing — you may request that gk11 restricts processing of your data while the matter is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to gk11.
• Right to Object: You have the right to object to processing of your personal data where gk11 relies on legitimate interests as its legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please contact gk11's support team via live chat (available 24/7) or by email at [email protected]. We may need to verify your identity before processing a data rights request. We will respond to all requests within 30 days; for complex or high-volume requests, this period may be extended by up to a further 60 days with prior notice.

If gk11 discovers or is notified that personal data belonging to an individual under the age of 21 has been collected, the affected account will be immediately suspended, all personal data associated with that account will be deleted, and any funds deposited by an underage player will be returned via the original payment method where possible.

Parents and guardians who believe that a minor in their care may have registered an account with gk11 are encouraged to contact our support team immediately at [email protected]. gk11 will investigate and act on all such reports without delay.

gk11 also supports the use of parental control tools that restrict access to gambling websites on shared or family devices. Details of available filtering software can be provided by our customer support team on request.

gk11 operates a platform that serves players primarily based in Bangladesh. Some of our third-party service providers — including game studios, payment technology partners, and cloud infrastructure providers — may be located in, or process data from, countries outside Bangladesh.

Where personal data is transferred internationally, gk11 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under this Policy. Such safeguards may include:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those described in this Policy.
• Transfers only to entities that operate under recognised data protection frameworks or are subject to equivalent legal protections.
• Technical controls, including end-to-end encryption for data in transit across borders.

If you would like further information about the specific safeguards applied to international data transfers involving your personal data, please contact our support team at [email protected].

The gk11 Platform may contain references to, or integrations with, third-party services — for example, certified game studio interfaces provided by Pragmatic Play, Evolution Gaming, Ezugi, or other partners. While these partners are carefully vetted by gk11, their own privacy practices are governed by their own respective privacy policies, which are separate from and independent of this Policy.

gk11 is not responsible for the privacy practices, data handling, or content of any third-party service. We recommend that you review the privacy policy of any third-party service you interact with, particularly in the context of game-specific features or tournaments operated by external providers.

This Policy covers only personal data collected and processed by gk11 in connection with the gk11 Platform. It does not extend to data collected by third-party platforms, tools, or services that you access independently.

gk11 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. The effective date displayed at the top of this page will be updated whenever a new version of the Policy is published.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — gk11 will notify registered players via email and/or an in-platform notification at least 14 days before the changes take effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), the updated Policy will be published without prior notice.

Your continued use of the gk11 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must discontinue use of the Platform and may request closure of your account by contacting support.

We encourage you to review this Policy periodically to stay informed about how gk11 is protecting your personal data. The most current version will always be accessible at https://gk11.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to gk11's handling of your personal data, please do not hesitate to get in touch with our dedicated support team. We aim to respond to all data-related enquiries within 2 business days.