Your Privacy at do111 — How We Handle Your Personal Data

Data We Collect

do111 collects personal data from players through several means: directly during the account registration and KYC verification process, automatically through technical systems as you use the platform, and occasionally from third-party payment processors as part of transaction verification. The scope of data collected is limited to what is genuinely necessary to operate the do111 platform safely and in compliance with responsible gaming obligations.

Registration and Identity Data

When you create a do111 account, we collect the following personal information:

• Full legal name (as it appears on your official Bangladesh identity document)
• Date of birth (used for mandatory 18+ age verification)
• Residential address in Bangladesh (city, district, postcode)
• Mobile phone number registered to a Bangladesh network (Gr ameenphone, Robi, Banglalink, Teletalk, or Airtel Bangladesh)
• Email address (used for account notifications and support correspondence)
• Username and password (password is stored as a one-way cryptographic hash — do111 cannot retrieve your plaintext password)

KYC Verification Documents

To comply with responsible gaming obligations and prevent fraudulent activity, do111 requires identity verification before processing withdrawals. During the KYC process, we may collect copies or images of:

• Bangladesh National Identity Card (NID) — front and back
• Valid Bangladesh passport (biographical data page)
• Bangladesh driving licence (accompanied by a utility bill or bank statement as proof of address)
• Proof of payment method ownership (e.g., a screenshot or statement confirming your bKash or Nagad wallet is registered in your name)

Transaction and Financial Data

Every deposit and withdrawal you make on do111 generates a transaction record. We retain the following financial data associated with your account:

• Transaction reference numbers provided by your payment provider (bKash, Nagad, Rocket, Upay, bank transfer, or card network)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Payment method type (mobile wallet, bank transfer, or card) — we do not store full card numbers or mobile wallet PINs
• Withdrawal destination identifiers (e.g., the last four digits of a Nagad number or masked bank account number)

Usage and Behavioural Data

When you use the do111 platform, our systems automatically record technical and behavioural data including:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Pages visited, games played, session duration, and clickstream data
• Login timestamps and logout timestamps
• Betting and wagering activity, including game selections, stake amounts, and outcomes
• Responsible gaming tool usage (deposit limit changes, cooling-off requests, self-exclusion activations)

How We Use Your Data

do111 processes your personal data only for specific, legitimate purposes directly related to operating the platform and fulfilling our obligations to players. We do not use your data for purposes that would be incompatible with those stated at the time of collection.

Purpose	Data Used	Legal Basis
Account creation and authentication	Name, email, mobile number, password hash	Contract performance
Age and identity verification (KYC)	NID / passport copy, date of birth	Legal obligation (18+ compliance)
Payment processing and fraud prevention	Transaction records, payment method identifiers	Contract performance / legitimate interest
Responsible gaming monitoring	Wagering activity, session data, limit settings	Legal obligation / legitimate interest
Customer support	Account data, correspondence history	Contract performance
Platform security and abuse prevention	IP address, device data, login history	Legitimate interest
Service improvement and analytics	Anonymised behavioural and usage data	Legitimate interest
Promotional communications (opt-in only)	Email address, mobile number	Consent

Marketing Communications

do111 will only send you promotional emails or SMS messages regarding bonuses, tournaments, or new game launches if you have explicitly opted in to marketing communications during registration or through your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your do111 account settings or by contacting the support team at [email protected]. Withdrawal of consent for marketing purposes does not affect your ability to use the do111 platform or receive transactional notifications (such as deposit confirmations and withdrawal status updates), which are necessary for the operation of your account.

Data Sharing & Disclosure

do111 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Your personal data may be shared only in the limited and specific circumstances described below.

Payment Service Providers

To process your deposits and withdrawals, do111 shares the minimum necessary transaction data with third-party payment service providers, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card network processors (Visa, Mastercard). These providers receive only the data required to execute and verify your specific transaction. They are bound by their own privacy obligations and are not permitted by do111 to use your data for any other purpose.

Identity Verification Services

For KYC purposes, do111 may use third-party identity verification tools to authenticate the documents you submit. These providers process your identity documents under strict confidentiality obligations and in accordance with their own certified data security standards. do111 selects KYC partners that maintain industry-standard data handling practices.

Legal and Regulatory Disclosure

do111 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law or by a valid legal order. In such cases, do111 will disclose only the specific data requested and will, where legally permitted, notify the affected player of the disclosure requirement before complying. do111 will never voluntarily disclose player data to any government authority without a lawful basis for doing so.

Business Transfers

In the event that do111 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity as part of that transaction. do111 will take reasonable steps to ensure that any acquiring entity is bound by equivalent privacy obligations, and you will be notified of any such transfer via the email address registered to your account.

Cookies & Tracking

do111 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session whilst you are logged in, and to analyse how the platform is used in aggregate. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used

• Strictly necessary cookies: These are essential for the do111 platform to operate. They maintain your login session, remember your language and display preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember optional preferences you have set, such as your preferred deposit method or notification settings. Disabling these cookies means you may need to re-enter preferences on each visit.
• Analytics cookies: do111 uses anonymised analytics to understand aggregate player behaviour — for example, which game categories attract the most sessions or where players encounter difficulties. Analytics data is processed in aggregate form and cannot be used to identify individual players. These cookies can be disabled through your browser settings without affecting your ability to use the platform.
• Security cookies: Short-lived cookies that help do111 detect and prevent fraudulent login attempts, unusual account activity, and automated bot access.

Managing Cookie Preferences

Most web browsers allow you to view, manage, block, and delete cookies through the browser's settings menu. Blocking all cookies will prevent you from logging in to your do111 account, as session cookies are strictly necessary for authentication. If you have questions about cookie management, contact [email protected].

do111 does not use third-party advertising cookies or behavioural profiling cookies that track your activity across websites other than do111.vip.

Data Retention

do111 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and responsible gaming obligations. The following retention periods apply to different categories of data held on the do111 platform:

• Account registration data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to comply with financial record-keeping obligations.
• KYC identity documents: Retained for a minimum of 5 years from the date of verification, or longer if required by law enforcement or regulatory order.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with standard financial compliance requirements.
• Wagering and gameplay history: Retained for a minimum of 3 years to support responsible gaming monitoring, dispute resolution, and audit purposes.
• Customer support correspondence: Retained for 3 years from the date of the last interaction to assist with future queries and dispute resolution.
• Marketing consent records: Retained for the duration of consent, plus 2 years after withdrawal of consent, to demonstrate compliance with consent obligations.
• Self-exclusion records: Retained permanently to prevent re-registration during or after a self-exclusion period, in accordance with responsible gaming best practices.

Upon the expiry of the applicable retention period, do111 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.

Your Privacy Rights

As a player on the do111 platform, you hold the following rights in respect of your personal data. do111 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact the do111 data team at [email protected] with the subject line "Privacy Rights Request" and include your registered account mobile number for identity verification purposes.

• Right of Access: You may request a copy of all personal data that do111 holds about you. do111 will provide a structured, machine-readable data export within 30 days of receiving a verified request.
• Right to Rectification: If any personal data held by do111 is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require you to submit updated verification documents.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to do111's legal retention obligations. Note that financial transaction records and KYC documents cannot be erased during their mandatory retention period.
• Right to Restrict Processing: You may request that do111 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that your personal data be transferred to you or to another service provider in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to the processing of your personal data where do111 is relying on its legitimate interests as the legal basis, unless do111 can demonstrate compelling legitimate grounds that override your interests.

do111 will acknowledge all privacy rights requests within 5 business days (BST) and will aim to resolve them within 30 calendar days. Where a request is complex or do111 is handling a high volume of requests, this period may be extended by a further 30 days, of which you will be notified.

Data Security

do111 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your browser and do111.vip is encrypted using industry-standard TLS encryption. The padlock icon in your browser's address bar confirms that your connection is secure.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using a modern secure hashing algorithm. do111 cannot retrieve or view your plaintext password; if forgotten, it must be reset via verified mobile number.
• Access controls: Access to personal data within do111's internal systems is restricted on a strict need-to-know basis. Customer support agents can access only the account data necessary to resolve your query and cannot access your full payment details or identity documents without authorisation.
• Two-factor authentication (2FA): do111 offers optional 2FA for player accounts, which sends a one-time verification code to your registered Bangladesh mobile number when a login is detected from an unrecognised device or IP address. do111 strongly recommends enabling 2FA.
• Intrusion detection: do111's platform monitors for unusual access patterns, repeated failed login attempts, and signs of credential stuffing or brute-force attacks, and will temporarily lock accounts showing signs of compromise.
• KYC document security: Identity documents submitted for KYC verification are stored in an encrypted document management system with access limited to authorised verification staff only.

While do111 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to player rights, do111 will notify affected players via their registered email address within a reasonable timeframe.

Policy Updates & Contact

do111 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this page will be updated to reflect the date of any revision. Where a change materially affects player rights or the way in which personal data is processed, do111 will notify registered players via their registered email address prior to the change taking effect.

Players are encouraged to review this Privacy Policy periodically. Continued use of the do111 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

Contact the do111 Privacy Team

For any question, concern, or formal request relating to your personal data and privacy rights on the do111 platform, please contact us at:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Response time: Acknowledgement within 5 business days (BST); resolution within 30 calendar days
• Platform: do111.vip — Online Casino & Sports Betting Bangladesh

do111 treats all privacy-related correspondence with the utmost confidentiality. Your request will be handled by a designated member of the do111 data team and will not be shared with customer-facing staff beyond what is necessary to resolve your query.