tu1111y Privacy Policy

tu1111y collects personal information from you in several ways — directly when you register and use our platform, automatically as you navigate our website, and occasionally from trusted third- party sources as part of our verification and fraud prevention processes. The categories of information we collect are described in detail below.

Information You Provide Directly

When you register an account, deposit funds, contact support, or interact with any feature of tu1111y, you may provide us with the following types of personal information:

• Identity Information: Your full legal name, date of birth, gender, and nationality, as provided during account registration or KYC verification.
• Contact Information: Your email address, Bangladeshi mobile number, and residential address — including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), district, and postcode.
• Account Credentials: Your chosen username and encrypted password. tu1111y never stores passwords in plain text — all passwords are hashed using industry-standard algorithms.
• Identity Documents: Copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence, submitted as part of the KYC process.
• Financial Information: Details of payment methods used for deposits and withdrawals, including bKash wallet numbers, Nagad account numbers, Rocket mobile banking details, Upay account information, bank account details, and the last four digits of any card used. Full card numbers are never stored on our servers.
• Communications: Records of any correspondence you send to tu1111y via email, live chat, or any support channel, including the content of messages, timestamps, and any attachments provided.
• Responsible Gaming Preferences: Any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you set via our responsible gaming tools.

Information Collected Automatically

When you access and use tu1111y, our systems automatically collect certain technical and behavioural data. This information is used to maintain platform security, personalise your experience, and improve our services:

• Device and Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and preferred language settings.
• Usage and Behavioural Data: Pages visited, time spent on each page, games played, bets placed (including amount, market, and outcome), features accessed, and navigation patterns within tu1111y.
• Session Data: Login timestamps, session duration, logout events, and geographic location data derived from your IP address (country and city level only — tu1111y does not access GPS or precise location data).
• Cookie and Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 4 of this Privacy Policy.
• Transaction Logs: Detailed records of all deposits, withdrawals, bonus claims, wager activity, and balance changes associated with your account, including timestamps and method references.

Information from Third Parties

In certain circumstances, tu1111y may receive personal information about you from trusted third-party sources, including:

• Identity verification and anti-fraud service providers used as part of our KYC process
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners) who confirm transaction status and flag potentially fraudulent payment activity
• Responsible gaming databases and self-exclusion registries, where applicable, to honour player-initiated exclusion requests
• Analytics and security service providers who help us detect bot activity, account takeover attempts, and other fraudulent behaviour

tu1111y processes your personal data for specific, clearly defined purposes. We rely on one or more lawful bases for each type of processing activity, which are identified alongside each purpose below. We do not use your data for any purpose that is incompatible with the purposes stated in this Privacy Policy.

Primary Purposes

• Account Creation and Management: To register your account, verify your identity, maintain your profile, and provide you with access to tu1111y's betting and gaming services. Lawful basis: performance of a contract.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and card payments; to verify that payment methods belong to you; and to maintain accurate financial records. Lawful basis: performance of a contract; legal obligation.
• KYC and Age Verification: To confirm that you are at least 18 years of age and to verify your identity as required by our platform's responsible operation standards. Lawful basis: legal obligation; legitimate interests.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide technical assistance. Lawful basis: performance of a contract; legitimate interests.
• Platform Security and Fraud Prevention: To detect, prevent, and investigate fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions. Lawful basis: legitimate interests; legal obligation.
• Responsible Gaming Compliance: To honour self-exclusion requests, enforce deposit limits, monitor for signs of problematic gambling behaviour, and fulfil our commitment to player protection. Lawful basis: legal obligation; legitimate interests.

Secondary Purposes

• Platform Improvement and Analytics: To analyse usage patterns, identify popular features, fix bugs, optimise performance, and develop new products and services. Data used for analytics is aggregated or pseudonymised wherever possible. Lawful basis: legitimate interests.
• Personalisation: To tailor your experience on tu1111y — for example, by surfacing cricket betting markets relevant to BPL or IPL seasons, or highlighting slots categories you have previously engaged with. Lawful basis: legitimate interests; consent where applicable.
• Marketing Communications: To send you information about promotions, bonuses, seasonal offers (such as Eid or Pohela Boishakh specials), and new features — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support@tu1111y. Lawful basis: consent.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable financial crime prevention obligations. Lawful basis: legal obligation.

tu1111y does not sell or rent your personal data to third parties. We share your information only in the limited circumstances described below, and only to the extent necessary for each specified purpose.

Service Providers and Data Processors

We engage carefully vetted third-party service providers who process personal data on our behalf, subject to strict contractual data protection obligations. These providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors (Visa, Mastercard) receive the minimum payment data necessary to execute your transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to confirm your identity and age during account verification.
• Game Technology Providers: Game studios and software providers — including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi — may receive your Player ID (a pseudonymous identifier) to facilitate game session management. These providers do not receive your full name, contact details, or financial information.
• Analytics and Security Providers: Providers of fraud detection, bot mitigation, and platform analytics tools who process technical and behavioural data in pseudonymised or aggregated form.
• Email and Communication Services: Providers used to deliver transactional emails (account confirmations, withdrawal notifications, support responses) and, where you have opted in, promotional communications.

Legal and Regulatory Disclosure

tu1111y may disclose your personal data to competent authorities, law enforcement bodies, or regulatory agencies where we are legally required to do so — for example, in response to a lawful court order, a request from a financial intelligence unit, or as part of an investigation into financial crime or fraud. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that tu1111y undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

tu1111y uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how our users interact with the site. This section explains what cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, remember user preferences, and provide information to site operators. Cookies set by tu1111y are first-party cookies; cookies set by our service providers (such as analytics platforms) are third-party cookies.

Managing Your Cookie Preferences

Most modern web browsers allow you to control cookies through their settings — you can choose to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from logging in or using core platform features. Instructions for managing cookies in popular browsers are available via each browser's official help documentation.

tu1111y takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. No online platform can guarantee absolute security, but we work continuously to maintain robust protections across all systems that handle your data.

Technical Security Measures

• Encryption in Transit: All data transmitted between your browser or app and tu1111y's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This prevents interception of your login credentials, payment details, and personal information during transmission.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Passwords are never stored in plain text. All passwords are processed using bcrypt or an equivalent industry-standard hashing algorithm with individual salting.
• Access Controls: Access to personal data within tu1111y's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason may access identifiable player data, and all access is logged and audited.
• Intrusion Detection: tu1111y operates continuous monitoring systems designed to detect and alert on suspicious access patterns, brute-force login attempts, and other potential security incidents in real time.
• Secure Payment Channels: Financial transaction data is processed through payment partners who maintain PCI-DSS-aligned security standards. tu1111y does not store full card numbers or full mobile banking PIN details on its own servers.

Organisational Security Measures

• All tu1111y staff and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers who process data on our behalf are subject to data processing agreements that mandate equivalent security standards.
• tu1111y maintains an incident response plan to ensure that any data security breach is identified, contained, and — where legally required — reported to affected individuals and relevant authorities within mandatory timeframes.

tu1111y retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following table summarises our standard data retention periods by category.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymisation is applied, the resulting data may be retained indefinitely for aggregate statistical purposes.

As a player registered on tu1111y, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at support@tu1111y (plain text — not a clickable link), providing sufficient information to verify your identity before we process your request.

• Right of Access: You have the right to request a copy of the personal data that tu1111y holds about you. We will provide this information in a clear, structured format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly via your tu1111y account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. Note that we may be required to retain certain data to fulfil legal obligations even after receiving an erasure request — we will explain any such limitations in our response.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to us, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where we process your data based on consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all verified privacy rights requests within 30 days. In complex cases we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

tu1111y reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform features, or industry standards. The effective date displayed at the top of this page indicates when the current version was last reviewed and approved.

Where material changes are made to this Privacy Policy — for example, changes that affect how we use your data in ways that are meaningfully different from what was previously described — we will notify registered players via email to their registered address and/or via a prominent notification on the tu1111y platform. For minor or clarificatory changes, we may update the policy without sending individual notices, though the effective date will always be updated.

Your continued use of tu1111y following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and contact our support team to request account closure in accordance with our Terms and Conditions.

Children's Privacy

tu1111y is strictly an adults-only platform. We do not knowingly collect, store, or process personal data from persons under the age of 18. If we become aware that a minor has registered an account or that personal data belonging to a minor has been submitted to our platform, we will take immediate steps to delete that data and close the associated account. Parents and guardians who believe their child may have accessed or registered on tu1111y are encouraged to contact us at support@tu1111y without delay.

Links to Third-Party Content

tu1111y's platform may reference third-party services such as payment providers (bKash, Nagad, Rocket) or game studios (Pragmatic Play, Evolution Gaming, etc.). This Privacy Policy applies solely to tu1111y. We are not responsible for the privacy practices of any third-party provider, and we encourage you to review the privacy policies of those providers directly where relevant to your use of their services.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to how tu1111y processes your personal data, please contact our support and data team. We aim to respond to all privacy-related inquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Contact email (plain text — not a clickable link): support@tu1111y

Our support team operates 24 hours a day, 7 days a week. For formal privacy rights requests (access, erasure, portability, etc.), please include "Privacy Request" in the subject line of your email along with your registered account username to help us locate your records promptly.