nd111 Privacy Policy

nd111 collects personal information from you through several channels: directly when you register and manage your account, automatically when you browse and use the platform, and from third-party sources such as payment processors and identity verification services. The categories of data we collect are described below.

1.1 Registration & Identity Data

When you create an nd111 account, we collect the information needed to establish your identity and verify your eligibility to use the platform:

This data is required to confirm that you are at least 18 years of age, that you are not a politically exposed person (PEP) subject to enhanced due diligence, and that your account is not being used for money laundering or fraud. Identity verification is performed using our third-party KYC provider.

1.2 Financial & Transaction Data

Every time you deposit or withdraw funds on nd111, we record transaction-level data to fulfil our payment processing and anti-money laundering (AML) obligations:

nd111 does not store full card numbers or CVV codes. Card payment data is tokenised by our payment gateway provider and handled in compliance with PCI-DSS standards.

1.3 Betting & Gaming Activity Data

To operate the sportsbook and casino correctly, resolve disputes, detect problem gambling patterns, and produce mandatory audit trails, nd111 records:

1.4 Technical & Device Data

When you access nd111 through a browser or mobile device, we automatically collect:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Referring URL and pages viewed within nd111
• Session cookies and authentication tokens
• Error logs and platform performance metrics

This technical data is used for security monitoring, fraud detection, platform optimisation, and regulatory compliance. IP addresses may be used to enforce geographic access controls.

1.5 Communications Data

If you contact nd111 via live chat, email ([email protected]), or WhatsApp, we retain the content of those communications, including any attachments you send. This data is used to respond to your enquiry, improve our support quality, and maintain a record of interactions in case of disputes.

nd111 processes personal data only for the specific, legitimate purposes listed in this section. We do not process your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

Where nd111 relies on legitimate interest as the legal basis for processing, we have assessed that our interests are not overridden by your privacy rights and freedoms. You have the right to object to processing based on legitimate interest — see Section 7 for details on how to exercise this right.

Where nd111 relies on your consent — such as for receiving promotional emails about BPL season bonuses or IPL free-bet offers — you may withdraw that consent at any time by updating your communication preferences in Account Settings or by contacting support.

nd111 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data is shared only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

nd111 works with a limited set of trusted third-party service providers who process personal data on our behalf and under our instruction. These include:

• KYC & Identity Verification Provider: Processes identity documents and selfies to confirm your age and identity. Data is processed under a data processing agreement with strict confidentiality obligations.
• Payment Gateway Providers: bKash, Nagad, Rocket, Upay, and our card payment processor receive the transaction data necessary to execute each payment. These providers are independently regulated and operate under their own privacy and security frameworks.
• Game Providers: Pragmatic Play, Evolution Gaming, Spribe, and other studio partners receive the minimum game-session data needed to render game content and return results. They do not receive your full profile or financial history.
• Cloud Infrastructure & Hosting: nd111's platform runs on secure cloud infrastructure. Server-side data is encrypted at rest and in transit. Infrastructure providers have no independent access to your account data.
• Customer Support Platform: Our live chat and ticketing system provider processes the content of support conversations. All support data is retained within a secure, access-controlled environment.

3.2 Legal & Regulatory Disclosure

nd111 may disclose personal data to competent authorities, law enforcement agencies, or financial intelligence units where required by applicable law or a valid legal order. This includes disclosures required under anti-money laundering (AML) legislation. nd111 will not notify the affected account holder of such a disclosure if doing so would be unlawful or would prejudice an ongoing investigation.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of nd111's business assets, personal data held by nd111 may be transferred to the acquiring entity as part of that transaction. You will be notified by email in advance of any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

nd111 uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate the platform correctly, keep your session secure, remember your preferences, and understand how players use the site so we can improve it. The table below describes each category of cookie nd111 uses.

nd111 does not use third-party advertising cookies or cross-site tracking pixels. You will not be served targeted advertisements on other websites based on your nd111 activity.

To manage cookie preferences for functional and analytics cookies, use the cookie settings panel accessible from the Account Settings page, or configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

nd111 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our core security measures include:

• Transport Encryption: All data in transit between your device and nd111's servers is protected using TLS 1.2 or higher (256-bit SSL). The nd111.app domain enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Data Encryption at Rest: Sensitive fields — including identity document scans, payment account details, and hashed passwords — are encrypted at rest using AES-256 encryption on our cloud storage infrastructure.
• Password Security: Passwords are stored exclusively as salted cryptographic hashes using a modern hashing algorithm. nd111 staff cannot view or recover your plaintext password. If you forget your password, a reset link is sent to your registered email address.
• Access Controls: Access to personal data within nd111's internal systems is restricted on a strictly need-to-know basis. All internal access is logged, and privileged access requires multi-factor authentication.
• Penetration Testing: nd111 commissions independent security assessments of its platform on a periodic basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: nd111 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, nd111 will notify affected players by email within 72 hours of becoming aware of the incident, describing the nature of the breach, data categories affected, and steps taken to mitigate harm.

nd111 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect the minimum retention required by our AML compliance programme and standard business record-keeping requirements.

After the applicable retention period expires, personal data is either securely deleted from all nd111 systems or irreversibly anonymised such that it can no longer be linked back to an individual. Anonymised aggregated data (for example, aggregate betting volume statistics) may be retained indefinitely for business analytics purposes.

If you submit a verified account closure request, nd111 will begin the deletion/anonymisation process within 90 days of the closure date, subject to the retention obligations described above. Data that must be retained to comply with AML regulations will be held in a restricted archive accessible only by our compliance team.

As an nd111 player, you have the following rights over your personal data. To exercise any of these rights, contact the nd111 support team via live chat or email at [email protected]. We will acknowledge your request within 2 business days and respond in full within 5 business days.

nd111 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will post the revised policy on this page with an updated effective date and, where the changes are significant, notify registered players by email at least 14 days before the changes take effect.

Your continued use of nd111 after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update, you have the right to close your account and request deletion of your personal data in accordance with Section 7 before the new policy takes effect.

The version of this Privacy Policy published at nd111.app/privacy-policy is the current, authoritative version. No other version — whether communicated verbally, by email, or through any third-party channel — supersedes the published version.

Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or the way nd111 handles your personal data, please contact our Data Protection team using the details below. We take all privacy concerns seriously and will respond promptly and professionally.

• Email: [email protected]
• WhatsApp: +880 1700 111 000
• Live Chat: Available 24/7 inside your nd111 account
• Support Hours (email/WhatsApp): 09:00 – 22:00 BST (UTC+6), 7 days a week

All privacy-related correspondence should reference "Privacy Policy Enquiry" in the subject line to ensure it is routed directly to our compliance team. We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 5 business days.