f1111 Privacy
Policy

f1111 collects personal data from players in Bangladesh and other permitted jurisdictions for the specific, legitimate purposes described in this Privacy Policy. We collect only the minimum data necessary to fulfil those purposes. The categories of personal data we may collect are set out below.

1.1 Registration Data

When you create an f1111 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are aged 18 or above)
• Email address (used as your primary account identifier and communication channel)
• Mobile phone number (used for two-factor authentication and account notifications)
• Residential address (city, district, and postal code — Dhaka, Chittagong, Sylhet, Khulna, and all Bangladesh districts are supported)
• Username and hashed password (your password is never stored in plain text)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify your age before processing your first withdrawal, f1111 may collect:

• A copy of your Bangladesh National Identity Card (NID), passport, or birth certificate
• A selfie or live photograph for facial matching purposes
• Proof of address (e.g., a recent utility bill or bank statement issued within 90 days)
• Source of funds documentation where enhanced due diligence is required

KYC documents are processed through our secure verification partner and are stored in encrypted form. They are used solely for identity verification and anti-money laundering compliance. They are never used for marketing purposes.

1.3 Financial Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect:

• Mobile wallet number or partial card number (last four digits only — full card numbers are never stored on f1111 servers)
• Transaction reference numbers issued by the payment provider
• Deposit and withdrawal amounts in BDT
• Transaction timestamps (Bangladesh Standard Time, UTC+6)

1.4 Technical & Usage Data

When you access f1111.club, our systems automatically collect certain technical data:

• IP address and approximate geolocation (country and city level)
• Device type, operating system version, and browser type
• Pages visited, time spent on each page, and navigation paths
• Game sessions played, wager amounts, and session durations
• Login timestamps and session activity logs

This technical data is used for fraud prevention, platform performance optimisation, and responsible gaming monitoring. It is not linked to your personal profile for marketing segmentation purposes.

1.5 Communication Data

If you contact the f1111 support team via live chat or email at [email protected], we retain records of those communications. This includes the content of your messages, the time and date of contact, and the resolution outcome. Communication records are retained for a period of 3 years for quality assurance and dispute resolution purposes.

f1111 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only with trusted partners who process data on our behalf under strict contractual obligations, or where we are required to do so by law.

3.1 Service Providers

f1111 engages the following categories of third-party service providers, each of whom may receive limited personal data necessary to perform their contracted function:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank payment gateway partners — receive transaction data solely to process deposits and withdrawals.
• KYC verification providers: Identity document verification platforms receive NID/passport images and selfies to perform automated identity checks on behalf of f1111.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive anonymised session identifiers to deliver game content. These providers do not receive your full name, NID, or payment data.
• Cloud infrastructure providers: f1111's servers and databases are hosted on enterprise-grade cloud infrastructure. Physical and logical access is restricted to authorised f1111 personnel only.
• Customer support platforms: Our live chat and email ticketing system provider receives communication content to facilitate support delivery.

All service providers are bound by data processing agreements that prohibit the use of your data for any purpose other than providing their contracted service to f1111, and that require them to maintain security standards equivalent to those described in Section 5 of this Policy.

3.2 Legal Disclosures

f1111 may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies without prior notice where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of players or third parties, or comply with a court order. Such disclosures are logged and reviewed by our compliance team.

f1111 takes the security of your personal data seriously and implements industry-standard technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• Transport Layer Security: All communications between your browser and f1111 servers use TLS 1.2 or higher with 256-bit encryption. The f1111.club domain enforces HTTPS at all times.
• Password Hashing: Passwords are hashed using a modern cryptographic algorithm (bcrypt with a high work factor). Plain-text passwords are never stored or logged.
• Two-Factor Authentication: SMS-based 2FA is available to all players and is strongly recommended. High-value withdrawal requests above ৳50,000 may require 2FA completion.
• Database Encryption: Sensitive fields including KYC document references, partial payment identifiers, and contact details are encrypted at rest in f1111's database.
• Network Security: f1111's server infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Access Controls: Access to production systems and player data is restricted to a small number of authorised f1111 technical personnel, and requires multi-factor authentication and access logging.

5.2 Organisational Safeguards

• f1111 staff who handle personal data are trained in data protection obligations and bound by confidentiality agreements.
• Internal data access is governed by a least-privilege policy — staff access only the data necessary for their specific role.
• Security reviews and penetration testing are conducted periodically to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures are in place to detect, contain, and notify affected parties in the event of a data breach.

5.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your personal data, f1111 will notify affected players by email within 72 hours of becoming aware of the breach (where technically feasible), describing the nature of the data affected, the likely consequences, and the steps f1111 has taken or proposes to take to address the breach. You are encouraged to change your password immediately if you receive such a notification.

As an f1111 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and respond within 30 calendar days.