atk11 Privacy Policy — How We Handle Your Personal Data

atk11 collects personal information through several channels: the account registration process on the atk11 Login page, ongoing account activity, payment transactions, communications with the support team, and automatic technical data generated when you browse atk11.net. The categories of information we collect are detailed below.

Identity and Contact Information

When you register an atk11 account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number. This information is used to create and maintain your account, verify your identity in line with our KYC obligations, and communicate with you about your account status, transactions, and promotions.

Financial and Payment Information

To process deposits and withdrawals in BDT, atk11 collects information about the payment methods you use. This includes your bKash account number, Nagad account number, Rocket account number, Upay account identifier, or bank account details (account holder name, bank name, account number, and branch) as applicable. atk11 does not store full card numbers for Visa or Mastercard transactions — these are handled directly by the relevant payment processor using their own PCI-DSS compliant infrastructure.

Gaming Activity Data

atk11 logs all in-platform activity associated with your account, including game sessions played (game title, provider, stake amounts, outcomes), sports and cricket bets placed (market, selection, odds, settlement result), bonus offers claimed and wagering progress, and login timestamps with IP address and device type. This data is used for account security, responsible gaming monitoring, fraud prevention, and regulatory compliance.

Technical and Device Data

When you access atk11.net, our servers automatically receive certain technical information from your device and browser. This includes your IP address, browser type and version, operating system, screen resolution, referring URL, pages visited on atk11.net, session duration, and cookie identifiers. This data is used for platform security, performance optimisation, and aggregate analytics. It is not used to build individual advertising profiles.

Communications Data

If you contact atk11 support via email or live chat, we retain a record of that correspondence — including the content of your messages and the resolution applied — for quality assurance, dispute resolution, and staff training purposes. Support communications are stored for a maximum of 24 months from the date of the interaction unless a longer period is required for an ongoing dispute or legal matter.

atk11 uses the personal data it collects for the following specific purposes. Each purpose is grounded in one of three lawful bases: contractual necessity (we need the data to deliver the service you signed up for), legal obligation (we are required by applicable law to collect and retain certain data), or legitimate interest (we have a genuine operational reason that does not override your rights).

Where atk11 sends you promotional communications — such as bonus offers, cricket betting promotions, BPL season campaigns, or Eid special offers — this is done only where you have opted in at registration or subsequently updated your marketing preferences. You may withdraw consent to receive marketing communications at any time by contacting support or updating your preferences in account settings.

atk11 does not sell or commercially transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. However, to deliver the full range of services available on the platform, atk11 necessarily shares certain categories of data with a limited set of trusted third parties, each of which is bound by contractual data-processing obligations consistent with this Privacy Policy.

Payment Processors

To process your BDT deposits and withdrawals, atk11 shares the minimum necessary payment information with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or card scheme processors (Visa / Mastercard). Each of these providers operates under its own privacy framework and applicable financial regulations. atk11 does not retain full card or mobile wallet credentials on its own servers.

Game Software Providers

Games on the atk11 platform are supplied by certified third-party studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Play'n GO, and Spribe. When you play a game, your account identifier and session data may be passed to the relevant provider's game server to initialise and log the session. These providers are contractually required to use this data only to deliver the game and maintain session records; they are not permitted to use it for any other purpose.

Identity Verification Services

To fulfil KYC obligations, atk11 may engage a third-party identity verification service to validate the documents you submit — such as your Bangladesh NID card, passport, or bank statement. Identity verification providers process your data solely for verification purposes and are prohibited from retaining, reselling, or repurposing your documents outside of that scope.

Legal and Regulatory Disclosure

atk11 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we receive a valid legal order or where disclosure is necessary to prevent or detect criminal activity, including money laundering or fraud. In such cases, atk11 will disclose only the minimum information required to comply with the relevant legal obligation.

Business Transfers

In the event that atk11 undergoes a merger, acquisition, or sale of substantially all of its assets, player data held by atk11 may form part of the assets transferred to the acquiring entity. In such circumstances, atk11 will notify affected players and ensure the acquiring party commits to honouring the privacy protections described in this policy or provides players with an opportunity to delete their accounts prior to the transfer.

atk11.net uses cookies and similar tracking technologies to deliver a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device or install software.

atk11 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the atk11 platform to function. They maintain your login session after you authenticate via the atk11 Login page, preserve your account preferences during a session, and enable secure navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your choices — such as your preferred language (English), last-visited game category, or notification settings — so that you do not need to reconfigure them on each visit to atk11.net. Functional cookies do not track browsing activity across external websites.
• Analytics Cookies: atk11 uses aggregated, anonymised analytics data to understand how players navigate the platform — for example, which game categories are most visited, where users exit the registration flow, and which pages generate the most support queries. This data is used solely to improve the atk11 product experience. It is not used to build individual advertising profiles.
• Security Cookies: These cookies help atk11 detect unusual account activity, identify potential bot traffic, and protect against cross-site request forgery (CSRF) attacks. They are active for the duration of your session and expire immediately on logout.

atk11 does not deploy third-party advertising cookies or retargeting pixels on atk11.net. You will not be tracked across external websites by atk11 for the purpose of serving targeted advertisements.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security section of the browser preferences menu. Please note that disabling strictly necessary cookies will prevent you from logging in and using real-money features on atk11.net.

atk11 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or irreversibly anonymised. The table below sets out the standard retention periods applied to the principal categories of data held by atk11.

All personal data processed by atk11 is stored on servers located in secure data centres. Data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to live databases is subject to role-based access controls; only personnel with a documented operational need are granted access, and all access events are logged.

Where atk11 engages third-party data processors (such as KYC verification providers or payment processors), those processors are contractually required to apply data security standards consistent with or exceeding those described in this policy and to delete data upon the expiry of the agreed retention period.

atk11 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include both technical controls and organisational policies that govern how staff interact with player data.

• Transport Layer Security (TLS 1.3): All data transmitted between your device and atk11.net is encrypted using TLS 1.3. The atk11 platform is accessible only over HTTPS; all HTTP requests are redirected to HTTPS automatically.
• Database Encryption: Personal data stored in atk11 databases is encrypted at rest using AES-256. Encryption keys are managed via a dedicated key management service with access restricted to the atk11 security team.
• Two-Factor Authentication (2FA): Players are encouraged to enable SMS-based 2FA on their atk11 accounts. 2FA is also enforced for all atk11 staff accounts with access to production systems.
• Intrusion Detection: atk11 operates automated intrusion detection systems (IDS) that monitor network traffic and server activity for anomalous patterns indicative of an attack or data breach attempt. Alerts are reviewed by the security team on a 24/7 basis aligned to Bangladesh Standard Time (BST, UTC+6).
• Penetration Testing: The atk11 platform undergoes regular third-party penetration testing. Identified vulnerabilities are triaged, prioritised by severity, and remediated within defined SLA windows.
• Access Controls: Internal access to systems holding personal data is governed by the principle of least privilege. Staff are granted only the permissions required for their specific role. Access rights are reviewed quarterly and revoked immediately upon staff offboarding.
• Incident Response: In the event of a confirmed personal data breach that poses a material risk to affected players, atk11 will notify impacted individuals by email within 72 hours of confirming the breach, detailing the nature of the data affected and the remediation steps taken.

While atk11 implements robust security controls, no internet-based system can guarantee absolute security. Players are strongly advised to use a strong, unique password for their atk11 account, to enable 2FA, and to log out of their account after each session — particularly when accessing the platform from a shared or public device.

As an atk11 player, you hold a set of rights over the personal data we hold about you. These rights can be exercised at any time by contacting the atk11 support team at [email protected]. atk11 will respond to all verified data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that atk11 holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) where technically feasible.
• Right to Rectification: If any personal data atk11 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields — such as your registered name and date of birth — atk11 may require supporting documentation before making changes, in order to maintain the integrity of our KYC records.
• Right to Erasure: You may request that atk11 delete your personal data. atk11 will honour erasure requests where there is no overriding legal obligation requiring continued retention — for example, financial transaction records that must be kept for 7 years under applicable anti-money laundering regulations cannot be deleted ahead of schedule. Where full deletion is not possible, atk11 will anonymise your data so that it can no longer be linked to you as an individual.
• Right to Restrict Processing: You may request that atk11 restrict the processing of your personal data while a rectification or erasure request is under review, or where you have objected to a particular use of your data and that objection is being assessed.
• Right to Data Portability: You may request that atk11 transfer your personal data directly to another service provider in a structured, machine-readable format, where technically feasible and where the processing is based on consent or contractual necessity.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, atk11 will immediately cease all marketing communications to the relevant contact details. You may also object to processing based on legitimate interest grounds, although atk11 may be able to demonstrate a compelling legitimate reason to continue in certain circumstances.
• Right to Withdraw Consent: Where atk11 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

To exercise any of the rights listed above, please contact [email protected] with the subject line "Data Rights Request" and a brief description of your request. atk11 may ask you to verify your identity before processing the request to ensure we are communicating with the registered account holder.

atk11 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect new legal obligations, updates to our technical infrastructure, changes in the range of services offered on the platform, or improvements to the clarity of our existing data practices.

When a material change is made to this Privacy Policy — for example, a change to the categories of data we collect, the third parties we share data with, or the rights available to you — atk11 will notify registered players by email to the address held on your account, and the "Last updated" date at the top of this document will be revised to reflect the date the amended policy takes effect.

For minor changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — atk11 may update the document without issuing an individual notification, relying on the "Last updated" date as the notification mechanism.

It is your responsibility to review this Privacy Policy periodically. The current version of the Privacy Policy is always accessible at atk11.net/privacy-policy. Your continued use of the atk11 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how atk11 handles your personal information, please contact the atk11 support team at [email protected]. Our team is available 24 hours a day, seven days a week, in English, aligned to Bangladesh Standard Time (BST, UTC+6).