Privacy Policy — md111 Online Casino

1 Information We Collect

md111 collects personal information across two broad categories: information you provide directly to us, and information that is generated automatically as a result of your use of the Platform.

Information you provide directly:

• Registration data: Your chosen username, email address, date of birth, full legal name, and mobile phone number provided when creating an md111 account.
• Identity verification documents: Copies of government-issued photo identification (e.g., National Identity Card, passport, or driving licence), proof of address documents, and where required, proof of the source of funds — collected as part of Know Your Customer (KYC) verification.
• Payment information: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used to fund or withdraw from your md111 account. Full card numbers and mobile financial service PINs are never stored by md111 directly — see Section 6.
• Communications: The content of any messages you send to our support team via email, WhatsApp, or live chat, including queries, complaints, and feedback.
• Responsible gaming preferences: Deposit limits, loss limits, session time alerts, cooling-off periods, and self-exclusion requests that you set through your account dashboard.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and activity data: Pages visited on md111.io, games played, wagers placed, bet amounts, game session duration, features accessed, and navigation paths through the Platform.
• Transaction logs: Records of all deposits, withdrawals, bonus activations, wager events, and game outcomes associated with your account, including timestamps and amounts in BDT.
• Cookie and session data: Session identifiers, preference cookies, and anonymised analytics data. See Section 7 for full details.

2 How We Collect Information

md111 collects your personal information through the following channels:

• Direct submission: When you complete the account registration form, submit KYC documents, contact support, or update your account settings on the Platform.
• Automated technical collection: Through server logs, browser cookies, and platform analytics tools that record your interactions with md111.io as you browse and play.
• Payment processors: When you initiate a deposit or withdrawal, the relevant payment provider (bKash, Nagad, Rocket, Upay, or your bank) transmits a transaction reference and status confirmation to md111. md111 does not receive or store your full mobile financial service PIN or card CVV through this channel.
• Third-party KYC providers: Where md111 uses an authorised third-party identity verification service to process document checks, that provider may return verification outcomes and risk scores to md111 in connection with your submitted documents.
• Game providers: Certified game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may transmit game session outcome data and RNG certification records to md111 in connection with games you play on the Platform.

3 Legal Basis for Processing

md111 processes your personal data on the following legal grounds:

Where md111 relies on your consent as the legal basis for processing (for example, marketing communications), you have the right to withdraw that consent at any time by contacting our support team or using the unsubscribe option in any marketing email.

4 How We Use Your Information

md111 uses the personal data collected for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity and age (21+ minimum), authenticating your login sessions, and processing account settings changes.
• Financial transactions: Processing deposits and withdrawals in Bangladeshi Taka (BDT), reconciling payment records, and investigating transaction disputes or discrepancies.
• Platform security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, unauthorised access, and money laundering patterns.
• Regulatory compliance: Fulfilling Know Your Customer (KYC), anti-money laundering (AML), and age verification obligations.
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling, applying the responsible gaming limits and controls you have set, and enforcing self-exclusion requests.
• Customer support: Responding to your queries, resolving complaints, and providing assistance via email and WhatsApp.
• Platform improvement: Analysing anonymised usage patterns to improve game selection, site performance, user experience, and the layout of the md111 platform.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign updates (e.g., Eid promotions, BPL special offers) — only where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: Retaining records to defend against, bring, or settle legal claims or regulatory inquiries relating to your account or Platform activity.

5 Sharing Your Information

md111 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal information only in the following limited, controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to execute your deposit and withdrawal instructions. Each provider processes your data under its own privacy policy and security standards.
• KYC and identity verification providers: Authorised third-party verification services receive copies of the identity documents you submit during the KYC process, for the sole purpose of verifying your identity and age. These providers are contractually bound to process your data only for this purpose.
• Game providers: Certified studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, Habanero, Play'n GO, and Red Tiger receive your account identifier and session data to deliver licensed games within the md111 platform. They do not receive your full personal profile or payment details.
• Technology and infrastructure partners: Cloud hosting providers and cybersecurity services that support the operation of md111.io may have access to server-level data under strict data processing agreements that prohibit any independent use of that data.
• Legal and regulatory authorities: md111 may disclose personal data to relevant authorities where required by law, court order, or regulatory instruction, including in connection with anti-money laundering investigations, fraud investigations, or age verification enforcement.
• Business transfers: In the event of a merger, acquisition, or sale of md111's business assets, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments being maintained.

Any third party with whom md111 shares personal data is required by contract to maintain appropriate security standards and to use the data only for the specific, agreed purpose. md111 does not share personal data with advertising networks, social media platforms, or data brokers.

6 Payment Data & Security

md111 takes the security of your financial information extremely seriously. The following measures and practices govern how payment data is handled on the Platform:

• All deposit and withdrawal transactions are processed over encrypted HTTPS connections using 256-bit SSL/TLS protocols. Payment credentials are never transmitted in plain text.
• md111 does not store full card numbers (PANs), card CVV/CVC codes, or mobile financial service PINs on its own servers. Card transactions are tokenised through Visa and Mastercard's certified processing infrastructure. Mobile financial service transactions via bKash, Nagad, and Rocket are completed entirely within those providers' own secure environments.
• md111 retains only the transaction reference numbers, amounts in BDT, timestamps, and payment method type (e.g., "bKash", "Visa") required for account reconciliation, audit trails, and withdrawal processing.
• Where a withdrawal is requested, funds are returned to the same payment method used for the player's most recent qualifying deposit. This practice protects against third-party money movement and potential financial crime.
• Internal access to payment records is restricted on a strict need-to-know basis. md111 staff who are not involved in financial operations do not have access to player payment data.
• Any suspected unauthorised transaction should be reported to our support team immediately at [email protected]. md111 will investigate all reports promptly and may place a temporary hold on the affected account during the investigation period.

7 Cookies & Tracking Technologies

md111 uses cookies and similar browser-based tracking technologies to provide a functional, consistent, and secure experience on the Platform. The following categories of cookies are used:

• Essential / Session Cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, keep your account authenticated across page loads, and preserve your in-session game state. These cookies cannot be disabled without preventing core Platform functionality.
• Preference Cookies: These cookies remember your Platform preferences, such as your selected language and display settings, so that you do not need to reconfigure them on each visit.
• Analytics Cookies: md111 uses anonymised analytics tools to understand how players navigate the Platform — which pages are visited most frequently, where users encounter friction, and how game categories perform. This data is used in aggregate and does not identify individual players.
• Security Cookies: Short-lived security tokens used to validate form submissions, prevent cross-site request forgery (CSRF), and detect suspicious access patterns during authentication.

md111 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology that shares your browsing behaviour with external advertising networks.

You can manage or block cookies through your browser's settings (typically found under Privacy, Security, or Advanced settings). Please note that disabling essential session cookies will prevent you from logging in to your md111 account. Disabling preference or analytics cookies will not affect your ability to play or make transactions on the Platform.

8 Data Retention

md111 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, and defend or resolve any disputes that may arise in connection with a player account. The following retention periods apply:

• Active account data: Retained for the duration of the active account relationship plus 5 years following account closure, in line with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for 5 years following the date of verification or account closure, whichever is later.
• Transaction and financial records: Retained for 5 years following each transaction date, as required for financial audit and AML compliance purposes.
• Customer support communications: Retained for 3 years following the resolution of the support interaction, in case of subsequent related disputes.
• Marketing consent records: Retained for as long as you remain opted in, plus 2 years following any opt-out, to maintain evidence of consent status.
• Anonymised analytics data: Retained indefinitely in anonymised, aggregated form that cannot be linked back to any individual player.
• Self-exclusion records: Retained for a minimum of 6 years following the self-exclusion request to ensure that re-registration attempts can be identified and prevented.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players (see Section 9) are actioned subject to any outstanding legal retention obligations — data that must be kept for AML or regulatory purposes cannot be deleted prior to the mandatory retention period expiring, even on request.

9 Your Rights

As a player on md111, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". md111 will acknowledge your request within 5 business days and complete it within 14 business days where technically feasible.

• Right of Access: You may request a copy of the personal data that md111 holds about you, including your registration details, transaction history, and KYC status.
• Right to Rectification: If any personal data held by md111 is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can typically be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that md111 delete your personal data. This right is subject to legal retention obligations — data required for AML compliance, active dispute resolution, or regulatory record-keeping cannot be deleted until the applicable mandatory retention period has expired.
• Right to Restrict Processing: You may request that md111 temporarily suspend active processing of your personal data (other than storage) while a correction or erasure request is under review.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data that you have provided to md111 directly (e.g., registration data, preference settings) for the purpose of transferring it to another service provider.
• Right to Object to Marketing: You may withdraw consent to receive marketing communications at any time by emailing [email protected] or clicking the unsubscribe link in any promotional email. Opting out of marketing does not affect operational account communications (e.g., withdrawal confirmations, security alerts).
• Right to Lodge a Complaint: If you believe that md111 has processed your personal data in a manner that is inconsistent with this Privacy Policy, you have the right to raise a formal complaint with our support team. md111 will investigate all complaints and respond in writing within 28 days.

10 Children & Minors

The md111 Platform is strictly intended for adults aged 21 years and above. md111 does not knowingly collect, store, or process the personal data of any individual under the age of 21.

During the account registration process, all applicants are required to confirm that they meet the minimum age requirement. Where md111 has reasonable grounds to suspect that a registered account is held by a person under the age of 21, the account will be suspended immediately and the matter escalated to the KYC verification team. If the age verification check confirms that the account holder is under 21, the account will be permanently closed and any real-money balance will be returned to the originating payment method.

If you are a parent or guardian and believe that a minor under your care has registered an account on md111, please contact our support team immediately at [email protected]. We will prioritise the investigation and closure of any such account. md111 takes its age verification obligations seriously and continuously works to improve the technical controls that prevent underage access to the Platform.

11 International Data Transfers

md111 is a platform primarily serving players located in Bangladesh. However, some of the third-party service providers that md111 works with — including game studios such as Pragmatic Play and Evolution Gaming, cloud infrastructure providers, and KYC verification services — may operate servers or processing facilities outside of Bangladesh.

Where personal data is transferred to a third-party provider operating outside Bangladesh, md111 ensures that appropriate contractual safeguards are in place, including data processing agreements that require the recipient to maintain data protection standards equivalent to those described in this Privacy Policy. md111 does not transfer personal data to any third party that cannot demonstrate adequate security and privacy commitments.

If you have specific questions about where your data is processed or the safeguards in place for international transfers, please contact our support team at [email protected].

12 Third-Party Links

The md111 platform may, in certain contexts such as game lobby pages or promotional content, reference the names of third-party game providers or payment services. This Privacy Policy applies solely to the data processing activities of md111 itself at md111.io.

md111 does not accept any responsibility or liability for the privacy practices, data collection activities, or security standards of any third-party service provider whose services are integrated into or referenced by the Platform. Players who interact directly with a third-party payment provider's interface (for example, completing a bKash or Nagad mobile transaction) should review that provider's own privacy policy for details of how their data is handled in that context.

13 Changes to This Policy

md111 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, md111 will notify registered players via the email address associated with their account and will publish the revised Policy on this page with an updated effective date.

Continued use of the md111 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease use of the Platform and may request voluntary account closure as described in the Terms & Conditions.

md111 recommends that players review this Privacy Policy at least once every three months to remain informed of any updates. The effective date shown at the top of this page always reflects the date of the most recent revision.

14 Contact & Data Requests

For all privacy-related enquiries, data subject access requests, or complaints regarding md111's handling of your personal information, please contact our dedicated support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700-000111
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Response Time: Acknowledgement within 5 business days; completion within 14 business days

When submitting a data rights request, please include your registered username and email address so that our team can locate your account quickly and process your request without delay. md111 may request additional verification before actioning a data access or deletion request in order to protect your account from unauthorised third-party requests.