Privacy Policy — my11bet

my11bet ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of all users who access our website athttps://my11bet.cam and use our online casino and sports betting services.

This Privacy Policy ("Policy") sets out in clear terms what personal data we collect from you, the lawful bases upon which we process it, how we use and protect it, how long we retain it, and what rights you have in relation to your data. This Policy applies to all users of the my11bet Platform, including registered account holders, visitors, and any person who interacts with the Platform in any capacity.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means my11bet, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of my11bet under written contractual arrangements.
• "User" / "You" means any natural person who accesses or uses the Platform, whether or not they hold a registered account.
• "KYC" means Know Your Customer — the identity and age verification process applicable to all account holders prior to withdrawal processing.
• "Cookie" means a small data file stored on your browser or device by a website, used to remember information about your session or preferences.

We collect the following categories of Personal Data in the course of operating the my11bet Platform:

my11bet collects Personal Data through the following methods:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access or navigate the Platform.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC providers, payment processors, and where lawfully applicable, publicly available data sources used to verify the accuracy of information you have provided.
• Transaction records: Financial data generated through your deposit and withdrawal activity on the Platform, processed via our integrated Malaysian payment partners.

my11bet processes your Personal Data on the following lawful bases:

• Contractual necessity: Processing required to register your account, fulfil deposits and withdrawals, administer your gaming activity, and provide the services described in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, KYC regulations, licensing requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, internal analytics, and service improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Where we process data for marketing communications, optional personalisation features, or non-essential cookies, we rely on your express consent, which you may withdraw at any time.

The Personal Data we collect is used for the following specific purposes:

• Creating, verifying, and maintaining your my11bet Account;
• Processing deposits and withdrawals via your chosen Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect;
• Performing identity and age verification to enforce the Platform's 21+ minimum age requirement;
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities;
• Administering bonuses, promotions, VIP programme benefits, and loyalty rewards;
• Monitoring gaming patterns to support responsible gambling obligations, including identifying potentially at-risk behaviour;
• Providing 24/7 customer support and resolving disputes;
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account alerts;
• Sending promotional communications where you have provided consent and have not subsequently opted out;
• Improving Platform performance, fixing bugs, and conducting internal analytics to enhance user experience;
• Complying with applicable legal, regulatory, and licensing obligations.

my11bet does not sell, rent, or commercially transfer your Personal Data to third parties. Your data may be shared in the following limited circumstances only:

• Payment processors: Financial data shared with licensed payment gateway operators and Malaysian banking partners (including FPX-connected banks and e-wallet operators) solely for the purpose of processing your transactions.
• KYC and identity verification providers: Identity documents and verification data shared with certified third-party identity verification services under strict data processing agreements.
• Fraud and AML screening services: Data shared with industry-standard fraud prevention and anti-money laundering monitoring platforms to protect the integrity of the Platform.
• Regulatory and law enforcement authorities: Personal Data disclosed where required by applicable law, court order, or the directives of a competent regulatory authority.
• Technology and infrastructure partners: Hosting, security, and analytics service providers who process data on our behalf under binding data processor agreements that require them to maintain equivalent data protection standards.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity, subject to equivalent privacy protections.

my11bet retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting obligations.

Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active account plus minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• KYC documentation: Retained for the duration of the account relationship and for a minimum of five (5) years post-closure.
• Support and communications records: Retained for a minimum of two (2) years from the date of the communication.
• Technical and usage data: Retained in anonymised or aggregated form for internal analytics purposes; personally identifiable technical data is typically purged within twelve (12) months.

Following the expiry of applicable retention periods, your Personal Data will be securely deleted or anonymised in manner that renders individual re-identification impossible.

my11bet implements a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of all sensitive personal and financial information at rest;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access Personal Data;
• Two-factor authentication (2FA) options available for user accounts;
• Regular vulnerability assessments and penetration testing of Platform infrastructure;
• Incident response procedures with defined escalation and notification protocols in the event of a data breach;
• Staff training on data protection obligations and security awareness.

my11bet uses cookies and similar tracking technologies to operate the Platform efficiently, maintain session continuity, and gather anonymised analytics data. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without affecting core Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data on how users interact with the Platform — such as pages visited and time spent — helping us identify areas for improvement. These do not track you personally.
• Functionality cookies: Used to remember your preferences, such as language settings and login state, to provide a more personalised experience.
• Marketing and targeting cookies: Used only where you have provided explicit consent. These may track your activity across sessions to deliver relevant promotional content.

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some Platform features. Continued use of the Platform following your initial consent to cookies constitutes ongoing acceptance of their use, subject to your ability to withdraw consent at any time through your browser controls.

Subject to applicable law, you have the following rights in relation to your Personal Data held by my11bet:

• Right of access: You may request a copy of the Personal Data we hold about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overiding legal obligations that may require us to retain it.
• Right to restrict processing: You may request that we limit the processing of your Personal Data in certain circumstances, for example while a data accuracy dispute is pending.
• Right to data portability: Where technically feasible and legally applicable, you may request that we provide your Personal Data in a structured, machine-readable format for transfer to another controller.
• Right to object: You may object to processing based on legitimate interests grounds, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us via live chat or by email at [email protected]. We will respond to all valid data rights requests within a reasonable timeframe and in any event within thirty (30) days of receipt.

The my11bet Platform is intended exclusively for individuals aged21 years and above. We do not knowingly collect Personal Data from individuals below the age of 21, and we enforce mandatory age verification during the account registration and KYC processes.

If we become aware that Personal Data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — we will immediately close the relevant account, void any associated wagering activity, and securely delete or anonymise all Personal Data associated with that account.

If you believe that a minor has registered an account on the Platform, or if you are a parent or guardian concerned about a minor's access to this service, please contact us immediately via our 24/7 support channels so that we can investigate and take prompt action.

my11bet operates within an international environment, and your Personal Data may be transferred to, stored in, or processed by systems located in jurisdictions outside Malaysia. This may occur, for example, where our hosting infrastructure, KYC providers, or fraud screening services are based in other countries.

Where Personal Data is transferred internationally, my11bet takes steps to ensure that adequate safeguards are in place to protect your data, including the use of standard contractual clauses, data processor agreements, and transfer mechanisms recognised under applicable data protection frameworks.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the protections outlined in this Policy.

The my11bet Platform may integrate with or link to third-party services, including licensed payment processors, identity verification providers, and other operational service providers. These third parties operate under their own privacy policies, which my11bet does not control and for which we bear no responsibility.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of my11bet — in particular, the privacy policies of your chosen Malaysian payment methods, such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, DuitNow, and FPX.

my11bet reserves the right to update or amend this Privacy Policy at any time. When we make material changes to how we collect or process your Personal Data, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-Platform notification.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform following any posted update to this Policy constitutes your acceptance of the revised terms. If you disagree with any amendment, you should discontinue use of the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by my11bet, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your my11bet Account dashboard. This is the fastest route for urgent data-related queries.
• Email: [email protected] — formal data rights requests, complaints, or privacy-related enquiries. We aim to respond within 5 business days, though most queries are addressed soner.

When submitting a data rights request by email, please include your registered Account username and a clear description of your request. We may ask you to provide proof of identity before processing access, rectification, or deletion requests, to protect your data from unauthorised third-party access.

my11bet serves players across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and Bangsar. Our support and data protection team is available at all times to assist with privacy-related matters.