co111 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how co111 ("we", "us", "our", "the Platform") collects, processes, stores, shares and protects personal information relating to users ("you", "your", "Player") of the co111 online casino and sportsbook platform available at co111.ws. This Policy applies to all services operated by co111, including sports betting, live casino, slot games, crash games, fish shooting games, account registration, promotional activity, customer support interactions, and all associated digital touchpoints. By registering for a co111 account or by accessing and using the co111 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

co111 takes your privacy seriously. We collect only the personal data that is necessary to operate the platform, deliver services, fulfil legal and regulatory obligations, and maintain account security. We do not sell your personal data to third parties for their own commercial marketing purposes. If you have questions about how your personal information is handled, please contact our support team at [email protected] at any time.

co111 collects personal data from you in the following categories, depending on how you interact with the platform:

• Registration data: When you create a co111 account, we collect your mobile phone number, chosen username, and the password you set (stored in hashed, non-reversible form). If you voluntarily provide an email address, this is also stored. We do not require an email address to register, but players who provide one may receive account notifications and promotional communications.
• Identity verification data: To comply with our anti-money-laundering and responsible gaming obligations, co111 may request copies of government-issued identity documents (such as a national ID card or passport), proof of address, and in some cases proof of source of funds. This data is collected and stored only where required for KYC purposes and is processed in accordance with this Policy.
• Transaction data: All deposits, withdrawals, bonus credits, wagers placed and game results associated with your account are logged. This data is used to maintain accurate account records, process payments, calculate bonus eligibility and investigate any disputes you raise.
• Technical and device data: When you access co111, our systems automatically log certain technical information including your IP address, device type, operating system version, browser type and version, session timestamps, and pages or game screens visited. This data is used for platform security, fraud detection, and improving the co111 user experience.
• Communications data: When you contact co111 support — whether via live chat, email or any other channel — the content of that communication and any associated metadata is recorded. This enables co111 to track issue resolution, audit customer service quality, and reference previous interactions when handling follow-up enquiries.

co111 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric identifiers, or health information, except where specifically required as part of a mandatory KYC verification process under applicable law.

co111 uses the personal data it collects for the following specific purposes. In each case the use of your data is limited to what is necessary and proportionate to the purpose stated:

• Account operation: To create and maintain your co111 account, verify your identity, process your deposits and withdrawals, credit bonuses to your account, and provide access to all platform features you are entitled to use.
• Regulatory compliance: To fulfil co111's obligations under applicable anti-money-laundering regulations, including conducting customer due diligence, verifying the source of player funds, and maintaining transaction records for the legally required retention period.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, bonus abuse, account takeover attempts, money laundering, and other prohibited conduct. This includes automated monitoring of account activity patterns, device fingerprinting, and IP-based access controls.
• Responsible gaming: To monitor account activity for signs of problem gambling, to enforce deposit limits, loss limits and session time reminders you have set, and to implement self-exclusion requests promptly and effectively.
• Customer support: To respond to your support enquiries, resolve disputes, trace transaction histories, and improve the quality and efficiency of the co111 support service.
• Service improvement and analytics: To analyse aggregated, anonymised usage data to understand how players interact with the co111 platform, identify areas for improvement, and develop new features and services. Where analytics involve personal data, they are conducted under strict data minimisation principles.

co111 processes your personal data on one or more of the following legal bases, depending on the specific activity involved:

• Contractual necessity: Processing your registration data, transaction data and account activity data is necessary to perform the contract between co111 and you — namely, the provision of online casino and sportsbook services in accordance with the co111 Terms & Conditions.
• Legal obligation: Processing your identity verification data, transaction records and communications logs is required to comply with co111's obligations under applicable anti-money-laundering regulations, responsible gaming requirements, and data retention laws.
• Legitimate interests: Processing technical and device data for platform security, fraud detection and service improvement is carried out on the basis of co111's legitimate interest in operating a safe, fair and reliable gaming platform. This processing does not override your fundamental rights and freedoms.
• Consent: Where co111 relies on consent as the legal basis for processing — for example, sending you marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to its withdrawal.

co111 does not sell your personal data. We share your data with third parties only where it is necessary to operate the platform and deliver our services, or where we are required to do so by law. The categories of third parties with whom co111 may share data are:

• Payment processors and mobile wallet providers: co111 shares transaction-related data with the payment service providers who process your deposits and withdrawals — including bKash, Nagad , Rocket and other approved payment partners. These providers receive only the data necessary to process the specific transaction and are bound by their own applicable data protection obligations.
• Game content providers and technology partners: The third-party game studios whose titles appear on the co111 platform — such as Pragmatic Play, Evolution Gaming, Spribe and others — may receive anonymised session data necessary for game operation and RNG certification. Personal data such as your name or contact details is not shared with game providers.
• Regulatory and law enforcement authorities: co111 is required by law to disclose relevant account data to financial intelligence units, law enforcement agencies, and other competent authorities upon receipt of a valid legal order, warrant or regulatory demand. In such cases co111 will comply with the legal requirement and, where permitted by law, will notify the affected player.
• Fraud prevention and identity verification services: co111 may share relevant identity data with third-party KYC and fraud-prevention service providers to verify player identities, screen for politically exposed persons, and comply with sanctions screening obligations. These providers act as data processors under co111's instructions.

All third parties with whom co111 shares personal data are required to handle that data securely and in accordance with applicable data protection standards. co111 does not permit third-party recipients to use your data for their own independent marketing or profiling purposes beyond the scope of the service they provide to co111.

co111 processes financial data — including deposit amounts, withdrawal requests, bKash and Nagad wallet references, and transaction timestamps — strictly for the purpose of executing and recording financial transactions on your account. co111 does not store full payment instrument credentials such as complete card numbers or mobile banking PINs. Where partial payment identifiers (such as the last four digits of a card or the first digits of a mobile wallet number) are retained, they are used solely to assist with transaction verification and dispute resolution.

All financial transaction records are retained for a minimum of five years from the date of the transaction in order to comply with applicable anti-money-laundering record-keeping requirements. This retention obligation applies even after your co111 account has been closed. During the retention period, access to archived financial data is restricted to authorised co111 compliance personnel and relevant regulatory authorities only.

co111 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session when you are logged in, and to gather anonymised analytics about how the platform is used. The types of cookies co111 uses are:

• Essential cookies: These are strictly necessary for the platform to operate. They maintain your login session, remember your language preference, and enable core features such as the game lobby, account dashboard and payment flow. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: co111 uses anonymised analytics cookies to understand aggregate user behaviour on the platform — such as which game categories are most popular, where users navigate from, and how long sessions typically last. This data is used only in aggregated, non-identifiable form to guide platform improvements.
• Security cookies: co111 uses session-integrity cookies to detect and prevent suspicious activity such as session hijacking, cross-site request forgery and automated bot access. These cookies are essential to platform security and cannot be disabled.

co111 does not use third-party advertising cookies or cross-site tracking cookies. You may manage your browser's cookie settings at any time via your device's browser preferences. Please note that disabling essential cookies may prevent you from logging in to your co111 account or using certain platform features.

co111 retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply: account registration data and identity verification documents are retained for the duration of your active account plus a minimum of five years following account closure; transaction records are retained for a minimum of five years from the date of the transaction; support communications are retained for a minimum of three years from the date of the last interaction; technical and device logs are retained for a rolling period of up to twelve months.

When the applicable retention period expires and there is no overriding legal basis for continued retention, co111 will securely delete or anonymise the relevant personal data. Where anonymisation is used, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

co111 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption on all data transmissions between your device and co111's servers, ensuring that data cannot be intercepted in transit by unauthorised parties.
• Access controls and role-based permissions, ensuring that co111 personnel can access personal data only to the extent required for the specific function they perform. Access to sensitive data such as KYC documents and financial records is restricted to authorised compliance and finance team members.
• Regular security reviews and vulnerability assessments of the co111 platform infrastructure, conducted to identify and remediate potential security weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, co111 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

Subject to applicable law, you have the following rights in relation to the personal data co111 holds about you. To exercise any of these rights, contact co111 support at [email protected]:

• Right of access: You have the right to request a copy of the personal data co111 holds about you, together with information about how it is being used and the legal basis for its processing.
• Right to rectification: If any personal data co111 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where the data has been processed unlawfully. This right is subject to co111's legal retention obligations, which may override a deletion request.
• Right to restriction of processing: In certain circumstances, such as where you contest the accuracy of the data or object to its processing, you may have the right to request that co111 restricts the processing of your personal data to storage only while the matter is resolved.
• Right to object: Where co111 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. co111 will comply with an objection unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

To exercise any of your privacy rights, please contact us in writing at [email protected], clearly stating which right you wish to exercise and providing sufficient information to verify your identity. co111 will respond to all valid requests within a reasonable timeframe. co111 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

The co111 platform is strictly for adults aged 21 years and above. co111 does not knowingly collect, process or store personal data belonging to individuals under the age of 21. If co111 discovers or is notified that a user under the age of 21 has registered an account or provided personal data to co111, the account will be closed immediately, all associated personal data will be deleted, and any deposited funds will be returned subject to identity verification. If you have reason to believe that a minor has accessed the co111 platform or provided personal data to co111, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

co111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the co111 platform. When this Policy is updated, the revised version will be published on this page with the "Last Updated" date amended accordingly. Where changes to the Policy are material — meaning they significantly affect how we use your personal data or the rights available to you — co111 will make reasonable efforts to notify active account holders via the platform's notification system or by email.

Your continued use of the co111 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated Policy. If you do not agree with the revised Policy, you must stop using the co111 platform and may request account closure by contacting [email protected].

If you have any questions, concerns or requests regarding this Privacy Policy or the way in which co111 handles your personal data, the co111 support team is available seven days a week. We are committed to addressing all privacy enquiries promptly and transparently.

Email us at: [email protected]