ba11 Privacy
Policy

This Privacy Policy ("Policy") describes how ba11 ("ba11", "we", "us", "our") collects, processes, stores, and protects personal data in connection with the online casino and sports betting services available at ba11.io. This Policy applies to all registered players, visitors to our website, and any individual whose personal data is processed by ba11 in the course of providing its services to the Bangladesh market.

By registering an account on ba11 or continuing to use the ba11 platform, you acknowledge that you have read and understood this Policy in full. This Policy forms an integral part of the ba11 Terms & Conditions. Defined terms used here that are not separately defined carry the meanings given in the Terms & Conditions.

ba11 is the data controller responsible for the personal information collected through the ba11.io platform. As data controller, ba11 determines the purposes and means by which your personal data is processed. All data practices described in this Policy are carried out under ba11's direct authority and oversight.

You may contact ba11's data controller at any time using the contact details provided in Section 13 of this Policy. We are committed to responding to all privacy-related enquiries within five (5) business days of receipt.

ba11 collects personal data through several channels: directly from you when you register, deposit, or interact with our platform; automatically through your use of the ba11 website and mobile interface; and in limited circumstances from third-party verification and payment providers. The categories of personal data we collect are set out in the table below.

ba11 uses the personal data it collects only for the specific, clearly defined purposes listed below. We do not use your data in any way that is incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis.

• Account Registration & Management: To create and maintain your ba11 player account, verify your identity, and manage your account profile and preferences.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment methods in BDT. Financial data is processed solely for the purpose of completing your requested transactions.
• Identity Verification (KYC): To comply with our obligations to prevent underage gambling, money laundering, and fraud. ba11 strictly enforces a minimum age of 21 and uses identity data to verify compliance.
• Service Delivery: To provide access to ba11's casino games, live casino, sports betting markets (including BPL, IPL, T20 World Cup, and other cricket competitions), fishing games, and slots.
• Bonus & Promotion Administration: To determine eligibility for and administer bonus offers, free plays, cashback rewards, and promotional campaigns.
• Responsible Gaming: To identify patterns of potentially harmful gambling behaviour, enforce self-exclusion requests, apply deposit and loss limits, and reach out proactively to players who may be at risk.
• Security & Fraud Prevention: To monitor for and investigate suspicious account activity, unauthorised access attempts, bonus abuse, and any form of collusion or cheating.
• Customer Support: To respond to your enquiries, complaints, and support requests promptly and accurately.
• Platform Improvement: To analyse aggregated usage patterns in order to improve game selection, platform performance, and the overall player experience.
• Legal Compliance: To meet our obligations under applicable laws and to respond to lawful requests from courts, regulators, or law enforcement authorities.
• Marketing Communications: To send you promotional emails or on-platform notifications about ba11 offers and new game launches, but only where you have explicitly opted in to receiving such communications. You may opt out at any time.

ba11 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which ba11 relies are:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the ba11 Terms & Conditions — including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing necessary for ba11 to comply with applicable laws, including age verification obligations, anti-money laundering requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for ba11's legitimate business interests — such as fraud detection, platform security, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. Where we rely on consent, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

ba11 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your data is shared with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

• Payment Processors: bKash, Nagad, Rocket, Upay, and our banking partners receive financial transaction data solely to process your deposits and withdrawals. These providers operate under their own privacy and security policies.
• Identity Verification Providers: Where ba11 uses a third-party KYC service to verify government-issued identification documents, your identity data is shared with that provider under strict contractual data processing terms.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt may receive anonymised session and gameplay data to facilitate game delivery. They do not receive your personally identifiable information except as required for live casino or tournament participation under their own terms.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics partners to help ba11 understand platform performance. No personally identifiable data is shared for analytics purposes.
• Legal & Regulatory Authorities: ba11 will disclose personal data to courts, law enforcement bodies, or regulatory authorities where required to do so by law, court order, or binding regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ba11's assets, player personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms.

ba11 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your ba11 account plus a minimum of five (5) years following account closure, to meet legal and regulatory record-keeping obligations.
• Transaction Records: Financial transaction data — including deposit records, withdrawal requests, and payment method details — is retained for a minimum of seven (7) years from the date of the transaction.
• Identity Verification Documents: KYC documents (copies of government ID, proof of address) are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing opt-in or opt-out status are retained for as long as necessary to demonstrate compliance with your stated preference.
• Self-Exclusion Records: Records of self-exclusion or responsible gaming restrictions are retained permanently to prevent re-registration during exclusion periods.

Upon expiry of the applicable retention period, ba11 will securely delete or anonymise personal data in accordance with our internal data destruction protocols. Anonymised data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

Protecting your personal data from unauthorised access, alteration, disclosure, or destruction is a top priority for ba11. We implement a layered approach to data security that includes technical, administrative, and physical safeguards appropriate to the sensitivity of the data we process.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ba11 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data stored in ba11's databases — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within ba11's systems is strictly limited to authorised personnel who have a legitimate need to access it for their job function. All internal access is logged and audited.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. ba11 never stores or transmits passwords in plain text. You are responsible for choosing a strong, unique password and keeping it confidential.
• Security Monitoring: ba11 maintains continuous monitoring of platform systems for suspicious activity, intrusion attempts, and data anomalies. Potential security incidents are escalated and investigated promptly.
• Vendor Security Standards: All third-party data processors engaged by ba11 are contractually required to maintain security standards that are at least equivalent to those described in this section.

ba11 uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot access other files on your device.

ba11 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the ba11 platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and responsible gaming limit configurations. Disabling these cookies may affect your platform experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the ba11 platform. This data helps us identify performance issues and improve the player experience. No personally identifiable information is collected through analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts. These are strictly necessary for platform security.

ba11 does not use third-party advertising cookies, cross-site tracking cookies, or any cookie that builds a behavioural advertising profile of you for use by external advertisers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the ba11 platform.

ba11 respects your rights over your own personal data. The following rights are available to all ba11 players in relation to their personal information. To exercise any of these rights, please contact ba11 support using the details in Section 13.

ba11 will not charge a fee for exercising any of the above rights in ordinary circumstances. We reserve the right to charge a reasonable administrative fee or decline requests that are manifestly unfounded or excessive. We will always explain our reasoning if a request is declined.

The ba11 platform is strictly intended for players who are 21 years of age or older. ba11 does not knowingly collect personal data from individuals under the age of 21. Age verification checks are applied during account registration, and additional documentary proof of age may be requested at any stage.

If ba11 becomes aware that personal data has been collected from a person under 21 without verifiable parental consent, that data will be deleted immediately and the associated account will be closed without delay. All deposits and winnings associated with an underage account are void.

ba11's primary operations and data infrastructure are oriented towards serving the Bangladesh market. In certain circumstances — for example, where ba11 uses a game software provider or identity verification service whose servers are located outside Bangladesh — your personal data may be transferred to and processed in countries other than Bangladesh.

Wherever such transfers occur, ba11 takes steps to ensure that an adequate level of data protection is maintained. This includes putting in place appropriate contractual safeguards with the receiving party, requiring them to process your data in a manner consistent with this Policy and applicable data protection standards.

ba11 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will publish the revised Policy on this page with an updated effective date and, where appropriate, notify registered players through on-platform messaging or email.

We encourage you to review this page periodically so that you remain informed about how ba11 handles your personal data. Your continued use of the ba11 platform following any published amendment constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about ba11's data practices, please contact us using the details below. All privacy-related correspondence is handled by ba11's dedicated support and compliance team.

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 directly on the ba11 platform
• Support Hours: 10:00 AM – 2:00 AM BST (UTC+6) for live responses; email monitored at all hours

ba11 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve complaints fully within thirty (30) days of receipt. If you are not satisfied with ba11's response to a privacy complaint, you retain the right to seek further recourse through applicable legal channels in your jurisdiction.