md111 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data md111 collects, why we collect it, how it is stored and protected, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
Data We Collect
md111 collects personal data from you in several ways — directly when you register an account or contact support, automatically as you use the platform, and occasionally from trusted third-party sources as part of our verification and fraud-prevention obligations. The categories of personal data we collect are described in full below.
1.1 Registration & Account Data
When you create a player account on md111, we collect the following information: your full legal name, date of birth, email address, username, and password (stored in encrypted form). This data is required to create and maintain your account, verify your eligibility to play (including age verification), and communicate with you about your account.
1.2 Identity Verification (KYC) Data
To comply with our Know Your Customer (KYC) obligations and to prevent fraud and money laundering, md111 collects copies of government-issued identity documents — such as your National Identity Card (NID), passport, or driving licence — as well as proof of address documents such as utility bills or bank statements issued within the last three months. We may also collect a photograph of your payment method (for example, a screenshot of your bKash or Nagad account registration details) to confirm that the payment method belongs to you.
1.3 Financial Transaction Data
md111 records all deposit and withdrawal transactions associated with your account. This includes transaction amounts, timestamps, payment method identifiers (mobile wallet numbers, bank account references), and transaction reference numbers issued by payment providers such as bKash, Nagad, Rocket, and Upay. Full payment account credentials — such as full card numbers or complete mobile banking PINs — are never stored by md111.
1.4 Technical & Usage Data
When you access the md111 platform, our systems automatically collect certain technical data including: your IP address, browser type and version, device type and operating system, referring URL, session duration, pages visited, game sessions played, and feature interactions. This data is used for platform security, fraud detection, and to improve the overall player experience.
1.5 Customer Support Data
When you contact md111's customer support team via live chat or email, we retain records of those communications including the content of messages, any attachments shared, and the date and time of each interaction. This data is used to resolve your query, improve our support quality, and maintain an audit trail of complaint handling.
1.6 Marketing Preferences
If you opt in to receive promotional communications from md111, we record that preference along with your email address and, where applicable, your mobile number. You may withdraw this consent at any time by contacting support [at] md111.club or by clicking the unsubscribe link in any marketing email we send you.
Data Categories at a Glance
- Identity data — name, DOB, NID / passport
- Contact data — email address
- Financial data — transaction records, payment method references
- Technical data — IP address, device, browser
- Usage data — game sessions, page interactions
- Support data — live chat and email records
- Marketing prefs — opt-in/opt-out status
What We Never Collect
- Full mobile banking PINs or passwords
- Full payment card numbers
- Biometric data of any kind
- Data from minors under 18
How We Use Your Data
md111 processes your personal data only for specific, legitimate purposes. Each processing purpose is grounded in one of the following legal bases: the performance of our contract with you (providing the gaming service), compliance with a legal obligation, our legitimate business interests (where those interests are not overridden by your privacy rights), or your explicit consent where required.
The specific purposes for which md111 uses your personal data are as follows:
- Account creation and management: To register your account, verify your identity and age, maintain your account settings, and communicate essential account-related information to you.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records associated with your account.
- Legal and regulatory compliance: To fulfil our KYC and anti-money-laundering (AML) obligations, to respond to lawful requests from regulatory or law enforcement authorities, and to retain records as required by applicable Bangladeshi law.
- Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other security threats to the platform and to other players.
- Platform improvement and analytics: To analyse player behaviour patterns in aggregate to improve platform performance, game selection, user interface design, and customer support quality. Analytics are conducted on anonymised or pseudonymised data wherever possible.
- Customer support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality assurance purposes.
- Responsible gaming: To monitor player behaviour for signs of problem gambling and to enforce any deposit limits, cooling-off periods, or self-exclusion arrangements you have requested.
- Marketing communications: Where you have provided explicit consent, to send you information about md111 promotions, bonuses, seasonal offers (such as Eid or BPL promotions), and platform updates. You may opt out at any time.
md111 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in the context of our fraud-detection systems where such processing is necessary for platform security. Where automated fraud detection flags your account, a member of our compliance team will review the flagged activity before any material action is taken.
Legal Bases for Processing
- Contract performance — operating your account and the gaming service
- Legal obligation — KYC, AML, regulatory reporting
- Legitimate interest — fraud prevention, platform security, analytics
- Consent — marketing communications (withdrawable at any time)
Data Sharing & Third Parties
In order to operate the md111 platform and fulfil our legal obligations, we share certain categories of personal data with a limited number of trusted third-party service providers and, where required, with regulatory or law enforcement authorities. All third parties who receive personal data from md111 are contractually required to process that data only for the purpose for which it was shared and to maintain appropriate technical and organisational security measures.
| Recipient Category | Data Shared | Purpose |
|---|---|---|
| Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank) |
Transaction amount, account reference, timestamp | Processing deposits and withdrawals |
| Game software providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi) |
Player session token, bet amounts, game outcomes | Delivering game content and maintaining fair-play audit trails |
| Identity verification providers | Name, DOB, ID document images | KYC and age verification |
| Fraud prevention & analytics | IP address, device fingerprint, behavioural data (pseudonymised) | Fraud detection, security monitoring |
| Customer support platform | Name, email, support chat content | Delivering and managing customer support |
| Regulatory & law enforcement authorities | As required by lawful request | Legal compliance, AML reporting, fraud investigation |
md111 does not transfer your personal data to recipients located outside Bangladesh except where strictly necessary to deliver the platform's services (for example, where a game software provider operates servers in another jurisdiction). In such cases, md111 takes all reasonable steps to ensure that appropriate data-protection safeguards are in place, including contractual data-processing agreements with each third-party provider.
In the event that md111's business is acquired, merged, or transferred to another entity, your personal data may form part of the assets transferred. You will be notified in advance of any such transfer that materially affects how your data is processed, and you will retain all rights described in Section 6 of this Privacy Policy.
Our Data-Sharing Commitments
- Data shared only for stated purposes
- All third parties bound by data-processing agreements
- No sale of personal data to advertisers
- Minimum necessary data principle applied
- Regulatory disclosures made only when lawfully required
Cookies & Tracking Technologies
md111 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, maintain your login session, remember your preferences, and gather aggregated analytics about how the platform is used. A cookie is a small text file placed on your device by the md111 website. Cookies do not contain executable code and cannot access other files on your device.
The cookies md111 places fall into the following categories:
- Strictly necessary cookies: These cookies are essential for the md111 platform to function. They maintain your login session, enforce security controls, and ensure that the platform operates correctly across page loads. These cookies cannot be disabled without breaking platform functionality. No consent is required for strictly necessary cookies.
- Functional cookies: These cookies remember your preferences — such as your chosen language, notification settings, and display preferences — so that you do not need to re-enter them on every visit. Disabling functional cookies may reduce your experience but will not prevent you from using the platform.
- Analytics cookies: md111 uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues most commonly occur. Analytics cookies do not identify you individually. You may opt out of analytics cookies via your browser settings or by contacting md111 support.
- Security and fraud-detection cookies: These cookies help md111 identify unusual patterns of behaviour that may indicate fraudulent activity or unauthorised account access. They work by comparing your current session characteristics against a stored baseline. These are treated as strictly necessary for security purposes.
md111 does not use third-party advertising or retargeting cookies. No data collected via md111 cookies is shared with advertising networks for the purpose of serving targeted advertisements on other websites.
You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please note that blocking strictly necessary cookies will prevent you from logging in to your md111 account. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
Cookie Summary
- Strictly necessary — session, login, security
- Functional — preferences and settings
- Analytics — anonymised usage data
- Security — fraud detection baseline
- No advertising or retargeting cookies
Data Retention & Storage
md111 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Bangladeshi law and regulatory obligations. The following retention periods apply to the principal categories of data we hold:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / AML compliance |
| KYC identity documents | Duration of account + 5 years after closure | Legal obligation / AML compliance |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Customer support records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical / usage logs | 13 months from collection | Legitimate interest / security monitoring |
| Marketing preferences | Until consent is withdrawn | Consent |
All personal data held by md111 is stored on servers protected by 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to stored personal data is restricted on a strict need-to-know basis and is subject to role-based access controls and audit logging. md111 conducts regular internal security reviews to ensure that data storage practices remain current and appropriate.
When a retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction practices. md111 does not archive personal data beyond the retention periods stated above except where a legal hold is in place in connection with ongoing litigation or regulatory investigation.
Storage Security Standards
- 256-bit SSL/TLS encryption in transit
- AES-256 encryption at rest
- Role-based access controls
- Access audit logging enabled
- Regular internal security reviews
- Secure deletion on retention expiry
Your Privacy Rights
As a player on the md111 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact md111's privacy team at support [at] md111.club with your full name, registered email address, and a clear description of the right you wish to exercise. md111 will respond within 30 calendar days of receiving a valid request.
Data Security Measures
SSL / TLS Encryption
All communications between your device and the md111 platform are encrypted using 256-bit TLS. This ensures that your personal and financial data cannot be intercepted in transit by any third party.
Password Hashing
Player passwords are never stored in plain text. md111 uses a modern adaptive hashing algorithm with per-account salting, ensuring that even in the unlikely event of a data breach, passwords cannot be recovered.
Access Controls
Internal access to player personal data is restricted to authorised md111 staff on a strict need-to-know basis. All internal access events are logged and subject to regular audit review.
Fraud & Anomaly Detection
md111 operates 24/7 automated monitoring for unusual account activity, login anomalies, and suspicious transaction patterns. Alerts are reviewed by the compliance team in real time.
Regular Security Audits
md111 conducts periodic internal and third-party security assessments of its platform infrastructure, data storage systems, and access-control policies to identify and remediate vulnerabilities proactively.
Breach Notification
In the event of a personal data breach that poses a material risk to affected players, md111 will notify affected individuals without undue delay and will take immediate steps to contain and remediate the breach.
While md111 implements industry-standard technical and organisational measures to protect your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure: use a strong, unique password for your md111 account, do not share your login credentials with any third party, and contact md111 support immediately if you suspect that your account has been accessed without your authorisation. md111 support staff will never ask you for your password.
Changes to This Policy
md111 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data-processing practices, improvements to the platform, or feedback from players and regulatory guidance. The revised Privacy Policy will always be published at md111.club/privacy-policy with an updated effective date shown at the top of the document.
Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data, or meaningfully reduces your privacy rights — md111 will provide advance notice via email to the address registered on your account, or via a prominent notice on the platform, at least 14 calendar days before the change takes effect. Continued use of the md111 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms.
We encourage you to review this Privacy Policy periodically to remain informed about how md111 protects your personal data. If you have any questions about a specific change or about this Privacy Policy in general, please contact the md111 privacy team at the email address provided below.
Contact Us About Privacy
All privacy-related queries, data-subject rights requests, and complaints should be directed to the md111 privacy team. You can reach us by emailing support [at] md111.club. Please include "Privacy Request" in the subject line of your email along with your registered username and a description of your query. Our team aims to respond to all privacy requests within 30 calendar days. For complex requests, we may request additional information to verify your identity before processing the request.
How We Notify You of Changes
- Updated effective date published on this page
- Email notice for material changes (14 days advance)
- Platform banner notice for significant revisions
- Version number updated in document meta
Privacy Contact
For all privacy queries and data-subject rights requests:
support [at] md111.club
Response time: within 30 calendar days
Explore md111 With Confidence
Your privacy and security are our foundation. Now that you understand how md111 handles your data, explore our games, betting markets, and platform features — all protected by SSL encryption and certified fair play.