Privacy Policy 11kk — Personal Data Protection

11kk collect your personal information solely to provide a safe, responsible, and personalized online entertainment service. We only collect data that is strictly necessary — nothing more.

The categories of information we collect are as follows:

Personal information collected by 11kk used responsibly and solely for the purposes stated below. We do not use your data for any other purpose without obtaining your consent first.

• Account Management: Creating, maintaining, and verifying your member account; processing login requests; managing password resets.
• Transaction Processing: Securely processing deposits and withdrawals through the various payment methods supported by 11kk, including FPX, TNG eWallet, GrabPay, and cryptocurrency.
• Regulatory Compliance: Fulfilling legal requirements under the Personal Data Protection Act 2010 (PDPA), the Anti-Money Laundering Act 2001 (AMLA), and other applicable regulations.
• Platform Security: Detecting and preventing fraud, hacking, multi-account abuse, and other suspicious activity.
• Experience Personalization: Presenting relevant promotions, bonuses, and content based on your gameplay habits and preferences.
• Service Communications: Sending important account-related notifications, security updates, terms changes, and promotional information (can be disabled).
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking appropriate protective action.
• Service Improvement: Analyzing aggregated and anonymized usage data to improve platform features, speed, and overall user experience.

11kk does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. However, there are limited situations where we need to share certain information with specific parties, as outlined below.

• Payment Service Providers: Required transaction information is shared with banks and payment processors (such as Maybank, CIMB, RHB, Public Bank, FPX, TNG eWallet) solely to securely process your deposits and withdrawals.
• Game Providers: Game platform providers integrated with 11kk may receive minimal, anonymized gameplay session data for technical operational purposes only.
• Statutory Authority: 11kk will disclose information when required by law, court order, or official request from a legitimate law enforcement agency.
• Fraud Prevention Service: Certain technical data (such as IP addresses and device fingerprints) may be shared with third-party security service providers bound by strict confidentiality agreements.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, your personal data may be transferred as part of that process. Members will be notified in advance.

All third parties that receive data from 11kk are bound by strict confidentiality agreements and are only permitted to use that data for the stated purposes. 11kk remains responsible for the protection of your data even when processed by third parties.

11kk implement comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure.

Key security measures we implement include:

• Data Encryption at Rest: All data stored in the 11kk database is encrypted using AES-256 standards, ensuring data remains unreadable even in the event of an unauthorized physical access attempt.
• Data Encryption in Transit: All communications between the 11kk platform and your device are secured with TLS 1.3, the most modern and robust security protocol available today.
• Multi-Layer Access Control: Access to sensitive member data is restricted to specific personnel only, based on the principle of least privilege. Every access is logged and audited automatically.
• Two-Factor Authentication (2FA): All internal 11kk staff accounts with access to user data are protected with mandatory 2FA.
• Regular Penetration Testing: 11kk conducts penetration testing by independent security experts at least twice a year.
• 24/7 Anomaly Monitoring: Our automated monitoring system continuously watches for abnormal traffic and access patterns, and will take immediate action if a threat is detected.

Data Retention Period: Your personal data is retained for as long as your account is active. After an account is closed, data is kept for the period required by law (typically 7 years for financial records) before being securely deleted.

11kk use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies (Strictly Necessary): Required for core platform functions such as login sessions, account security, and navigation. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information about how you use our platform — such as pages visited and time spent — to help us improve the overall user experience.
• Functional Cookies: Remembering your preferences such as language selection, display settings, and login details for future sessions so you don't need to reconfigure each time.
• Analytics Cookies: Helps us understand aggregate platform usage patterns. This data is used to make better product development decisions. No personal information can be identified from analytics data.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 11kk platform. For cookie management guidance on major browsers, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internal policies 11kk, as a member you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights.

11kk is an entertainment platform open exclusively to individuals aged 18 years and above. We have a zero-tolerance policy against the use of our platform by underage children or minors.

We do not knowingly collect, process, or store any personal data from individuals under the age of 18. All registration applicants are required to verify their age during the KYC process, and valid identification documents are required to complete registration.

If we determine that a child's personal data has been collected unintentionally, we will take immediate action to:

• Immediately suspending and deleting the account in question.
• Permanently deleting all personal data associated with the account.
• Returning any funds held in the account through the appropriate channels.
• Reporting the case to the relevant authorities where suspected fraud is involved.

11kk reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. Any amendments made are intended to further enhance your privacy protection, not reduce it.

When material changes are made to this Privacy Policy, we will:

• Displaying a clear notice on the 11kk platform homepage and this Privacy Policy page at least 14 days before the changes take effect.
• Sending email notifications to all registered members with a summary of the changes made and their effective date.
• Updating the "Last Updated" date at the top of this document so you always know when this policy was last updated.
• Archiving previous versions this policy for 12 months for your reference if needed.

Continued use of the 11kk platform after any amendments take effect will be considered your acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and discontinue use of our platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 11kk handling your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist and will respond within a reasonable timeframe.