doo111 Privacy Policy

This Privacy Policy ("Policy") describes how doo111 ("doo111", "we", "us", "our") collects, processes, stores, and shares personal data when you use the doo111 website and associated gaming services. The Policy applies to all registered players and visitors to the doo111 platform, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

This Policy should be read alongside the doo111 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and doo111. Where this Policy conflicts with any other document, this Policy shall govern with respect to data privacy matters.

doo111 reserves the right to update this Policy at any time. Material changes will be notified by displaying a prominent notice on the doo111 platform and by updating the effective date at the top of this page. Your continued use of doo111 following any update constitutes acceptance of the revised Policy.

2.1 Account Operations

doo111 uses your identity, contact, and financial data to create and maintain your player account, process deposits and withdrawals in BDT, verify your identity, apply bonuses and promotions, and communicate essential account information such as transaction confirmations and security alerts.

2.2 Legal & Regulatory Compliance

doo111 is obligated to collect and retain certain categories of personal data to fulfil anti-money laundering (AML) obligations, comply with Know Your Customer (KYC) requirements, respond to lawful requests from competent authorities, and maintain transaction records for audit purposes. Data collected for compliance purposes is retained for a minimum of five (5) years from the date your account is closed, unless a longer retention period is required by applicable law.

2.3 Fraud Prevention & Security

Technical and gaming activity data is analysed to detect and prevent fraudulent activity, identify multiple-account abuse, monitor for collusion or bonus manipulation, and protect the integrity of the doo111 platform. doo111 may share data with payment processors and fraud-detection services for this purpose, under strict confidentiality agreements.

2.4 Responsible Gaming

doo111 monitors gaming activity patterns to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are detected, doo111 may proactively contact the player, apply responsible gaming prompts, or in serious cases implement protective account restrictions. This processing is carried out in the player's vital interest and in accordance with doo111's Responsible Gaming obligations.

2.5 Marketing Communications

With your explicit consent, doo111 may send you promotional communications regarding new games, bonuses, seasonal offers (such as Eid specials, Pohela Boishakh promotions, or BPL cricket season offers), and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences within your doo111 account or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.6 Platform Improvement

Aggregated and anonymised technical and usage data may be used by doo111 to analyse platform performance, improve the user experience, optimise game selection, and plan infrastructure capacity. This data does not identify you as an individual and is not shared with third parties in identifiable form.

3.1 Payment Service Providers

To process your deposits and withdrawals, doo111 shares the minimum necessary financial data with authorised payment service providers including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers are contractually bound to use your data solely for payment processing purposes.

3.2 Game Technology Providers

Game studios and technology providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — may receive limited session and technical data necessary to deliver game content and resolve technical disputes. These providers operate under data processing agreements with doo111 and are not permitted to use your data for any independent purpose.

3.3 Identity Verification Partners

doo111 may use third-party KYC and identity verification services to cross-reference the identity documents you submit against authoritative databases. These services operate under strict confidentiality obligations and do not retain your documents beyond the verification process.

3.4 Legal & Regulatory Authorities

doo111 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or where doo111 reasonably believes disclosure is necessary to prevent imminent harm, investigate fraud, or fulfil AML reporting obligations. doo111 will notify you of any such disclosure where it is legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of doo111's business, your personal data may be transferred to the acquiring entity. doo111 will notify affected players before their personal data becomes subject to a different privacy policy as a result of such a transfer.

3.6 No Sale of Personal Data

doo111 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Any sharing of data is strictly limited to the purposes described in this Policy and conducted under binding contractual agreements that require the recipient to protect your data at a standard no less rigorous than that applied by doo111 itself.

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. doo111 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and gather anonymised analytics data.

4.2 Essential Cookies

Essential cookies are required for the doo111 platform to function correctly. They include session authentication tokens, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language and display preferences. Essential cookies cannot be disabled without impairing your ability to use the platform.

4.3 Analytics Cookies

With your consent, doo111 uses analytics cookies to understand how players navigate the platform — which pages are visited most frequently, where players encounter difficulties, and how long sessions last on average. This data is collected in aggregated, anonymised form and is used solely to improve the doo111 platform experience.

4.4 Managing Cookies

You may manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies will affect your ability to access certain doo111 features, including the ability to remain logged in across page loads. Detailed instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Samsung Internet, etc.).

6.1 Retention Periods

doo111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. As a general guide:

• Active account data — retained for the lifetime of your doo111 account plus five (5) years following account closure.
• KYC and identity documents — retained for a minimum of five (5) years from account closure, in compliance with AML obligations.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Support communications — retained for three (3) years from the date of the communication.
• Marketing consent records — retained until consent is withdrawn plus one (1) year thereafter for audit purposes.
• Analytics data — retained in anonymised, aggregated form indefinitely; no individual identifiers are retained beyond 24 months.

6.2 Security Measures

doo111 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the doo111 platform.
• Encryption at rest for sensitive personal and financial data stored in doo111's databases.
• Role-based access controls ensuring that doo111 personnel can only access the personal data required for their specific job function.
• Regular security assessments and vulnerability scanning of the doo111 platform infrastructure.
• Two-factor authentication available for player accounts.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, doo111 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the categories and approximate number of players affected, the likely consequences, and the measures doo111 has taken or proposes to take to address the breach.