Privacy
Policy
cd1111 Data Rights & Protection

cd1111 uses the personal data we collect for the following specific purposes. Where a purpose requires a particular legal basis, that basis is identified in Section 3.

cd1111 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by law. If you have opted in to receive promotional communications, you may withdraw that consent at any time by contacting [email protected] or adjusting your account notification preferences.

cd1111 processes personal data only where a valid legal basis exists for doing so. The four legal bases we rely on are as follows:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered user — including account management, payment processing, and game delivery. Without this processing, we cannot provide the services you have registered to use.
• Legal Obligation: Certain processing activities — primarily those related to KYC identity verification, age verification, anti-money laundering checks, and responsible gaming record-keeping — are required by applicable law and regulatory frameworks. We process data for these purposes regardless of your preferences because we are legally required to do so.
• Legitimate Interest: cd1111 has a legitimate interest in processing certain data categories to maintain the security, integrity, and continuous improvement of our platform. This includes fraud detection, platform analytics, network security monitoring, and anti-abuse measures. We apply a balancing test to ensure our legitimate interests do not override your fundamental rights and freedoms.
• Consent: For processing activities that are not required for contract performance or legal compliance — specifically, sending you promotional emails and SMS notifications about bonuses, tournaments, and seasonal offers — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without penalty by contacting [email protected].

cd1111 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, we share relevant financial and identity data with our payment partners including bKash, Nagad, Rocket, Upay, and card processing networks. These partners act as independent data controllers for their own services and are bound by their own privacy policies and applicable financial regulations.

Identity Verification Partners

KYC document verification is performed with the assistance of regulated third-party identity verification service providers. These providers receive copies of identity documents you submit during the verification process and return a verification outcome to cd1111. They are contractually prohibited from using your data for any purpose other than the KYC service they are providing to cd1111.

Game Software Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as an anonymised player ID, bet amounts, and game outcomes) necessary to deliver their games through the cd1111 platform. Personal identity data such as your name and contact details is not shared with game providers.

Fraud Prevention and Security Services

cd1111 uses third-party fraud detection and cybersecurity services that process technical data (IP addresses, device fingerprints, session behaviour) to identify and prevent fraudulent or abusive activity on the platform. This processing is carried out under our legitimate interest legal basis.

Legal and Regulatory Disclosure

cd1111 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised third parties where we are legally compelled to do so, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud and money laundering. We will inform you of any such disclosure where we are legally permitted to do so.

cd1111 uses cookies and similar local storage technologies to ensure the platform functions correctly and to understand how users interact with our services. The following table summarises the categories of cookies we use.

cd1111 does not use third-party advertising cookies, behavioural tracking cookies, or cross-site tracking technologies. We do not partner with ad networks that require the placement of tracking pixels or scripts on our platform.

Managing Cookies

You can manage or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your cd1111 account. For functional and analytics cookies, you can also adjust your preferences through your account settings panel after logging in.

Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, and delete cookies on a per-site basis. Refer to your browser's help documentation for instructions specific to your device and browser version.

cd1111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following retention periods apply to the key data categories we hold:

When personal data reaches the end of its retention period, cd1111 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

cd1111 implements a multi-layered approach to information security designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• TLS/SSL Encryption: All data in transit between your device and our servers is encrypted using current industry-standard TLS protocols. Our platform enforces HTTPS across every page and API endpoint.
• Password Hashing: Account passwords are never stored in plain text. We use strong one-way cryptographic hashing algorithms so that even in the unlikely event of a data breach, passwords cannot be reverse-engineered.
• Access Controls: Access to personal data within cd1111's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job function.
• Two-Factor Authentication: cd1111 encourages all users to enable two-factor authentication (2FA) on their accounts for an additional layer of login security beyond the username and password combination.
• Infrastructure Security: Our servers are hosted in secure data centres with physical access controls, network-level firewall protection, and intrusion detection systems. Regular vulnerability assessments and penetration testing are conducted to identify and remediate security weaknesses.
• PCI-DSS Compliant Payment Processing: All card payment data is handled exclusively by our PCI-DSS certified payment processing partners. cd1111 does not store raw card numbers, CVV codes, or card expiry dates on our own systems.
• Session Management: User sessions are automatically terminated after a period of inactivity to reduce the risk of unauthorised access from unattended devices. Session tokens are cryptographically signed and invalidated upon logout.

While cd1111 takes all reasonable and commercially practicable steps to protect your personal data, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that unauthorised persons do not gain access to your device. If you suspect your account has been compromised, contact [email protected] immediately.

The cd1111 platform integrates third-party game software from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers deliver their game content directly within the cd1111 interface. While cd1111 selects its game partners carefully and requires them to operate under contractual data protection obligations, each provider maintains its own privacy practices for data generated within their game engines.

cd1111 does not include outbound links to external websites for commercial or promotional purposes. Any third-party service referenced on this platform — such as payment partners bKash, Nagad, Rocket, Upay, Visa, and Mastercard — operates as an independent service. When you interact with a payment partner's service, that interaction is governed by the payment partner's own terms and privacy policy in addition to this cd1111 Privacy Policy.

cd1111 does not integrate social media login buttons, social sharing widgets, or any social network tracking pixels on our platform. Your use of cd1111 is not linked to or disclosed to your social media profiles unless you choose to share information publicly on those platforms yourself.

cd1111 is an online gambling platform intended exclusively for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18. Our registration process includes an age declaration step, and our KYC verification process requires submission of a government-issued identity document to confirm that every verified account holder is of legal gambling age.

If cd1111 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and permanently close the associated account. Any deposits made by an underage user will be returned via the original payment method after deducting any applicable processing fees, in accordance with our Terms & Conditions.

We also actively support responsible gaming tools that help adults manage their own gambling activity. For information about deposit limits, cooling-off periods, and self-exclusion options, please visit our Responsible Gaming page.

cd1111 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. The effective date displayed at the top of this document will be updated whenever a revision is made. We encourage you to review this policy periodically.

For material changes — those that significantly affect how we collect, use, or share your personal data, or that affect your privacy rights — cd1111 will notify registered users by email to the address associated with their account at least seven days before the changes take effect. Non-material changes such as typographic corrections, structural reorganisation, or clarifications of existing practices that do not change their substance do not require advance notice.

Your continued use of the cd1111 platform after a revised Privacy Policy has been posted constitutes your acknowledgement of the updated policy. If you do not agree with the revised policy, you should discontinue use of the platform and contact [email protected] to request account closure and withdrawal of any remaining balance.