11zon Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

11zon understands that trust is the foundation of every healthy relationship between a platform and its users. When you register as a member and begin playing at 11zon – whether slots, live casino, or any other games we offer – you are entrusting us with your personal information. We do not take this responsibility lightly.

This Privacy Policy is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010), which governs how organisations in Malaysia collect, use, disclose, process, and protect individuals' personal data. As a platform serving Malaysian players, compliance with PDPA 2010 is both a legal obligation and an ethical commitment we uphold firmly.

This Privacy Policy covers all of your activities on the platform 11zon, including account registration, identity verification (KYC), financial transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and other supported methods, gaming activity, communications with our support team, and use of the platform's promotional features and bonuses.

11zon collects several categories of personal information depending on how you interact with our platform. Below is a full breakdown of the types of data we collect:

11zon collects your personal information through a number of different channels. It's important that you understand each of these channels so you know exactly under what circumstances your data is collected:

• Directly from you – When you complete the account registration form, go through the KYC process, make a deposit or withdrawal, contact customer support, or submit any form on the platform 11zon.
• Automatically via technology – When you use the platform 11zon, our systems automatically record technical data such as your IP address, device type, browser information and usage patterns via cookies and similar tracking technologies.
• From authorised third parties – In certain cases, we may receive information from payment processors (such as DuitNow, FPX, Touch 'n Go eWallet) to verify transactions, or from authorised identity verification agents for KYC compliance purposes.
• From gaming interactions – The gaming system 11zon automatically records all gaming activity for the purposes of bet settlement, technical issue resolution, and regulatory compliance.

We only collect data that is strictly necessary for the stated purposes — a practice known as data minimisation. We do not collect data that is unnecessary or irrelevant to the operation of the platform. 11zon.

11zon using the personal data we collect for the following purposes, all of which are lawful, necessary, and proportionate to the information gathered:

• Registration & Account Management – Creating, maintaining and managing your member account at 11zon, including identity verification, password management and account security.
• Financial Transaction Processing – Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other supported methods, as well as withdrawals of winnings in MYR (RM) to your bank account or digital wallet.
• Identity Verification (KYC) – Conducting the mandatory Know Your Customer (KYC) process to ensure compliance with anti-money laundering (AML) laws.
• Gaming Services Provision – To grant you access to and enjoyment of all games at 11zon including slots, live casino and other games, as well as settling bets accurately and fairly.
• Customer Support – Handling enquiries, complaints, and support requests submitted to our support team 11zon via live chat or email.
• Promotions & Marketing – To inform you about bonuses, promotions, and special offers 11zon relevant to your gaming activity — only if you have given consent to receive marketing communications.
• Security & Fraud Prevention – Detecting and preventing fraud, multi-accounting, money laundering and any other unlawful activity that threatens the security of our platform and members.
• Responsible Gaming – Monitoring members' gaming patterns to identify signs of problem gambling and provide appropriate support.
• Legal Compliance – Fulfilling legal obligations imposed by applicable Malaysian law, including PDPA 2010 and related regulations.
• Platform Improvement – Analysing usage patterns in aggregate (not at an individual level) to improve platform performance, interface and features 11zon.

11zon affirms that we do not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. However, in certain limited and legitimate circumstances, we may need to share your data with the following parties:

• Payment Processors – Transaction information that must be shared with payment processors such as banks, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX to securely process your deposits and withdrawals.
• KYC Service Providers – Authorised third-party identity verification agents who assist us in carrying out the required KYC process. These providers are bound by strict confidentiality agreements.
• Technology Providers – Technology companies providing the infrastructure, cloud services, or software required for the operation of 11zon. All such providers are bound by data processing agreements requiring a level of protection equal to or greater than our own standards.
• Legal Authorities – Where required by Malaysian law, court order, or direction from a competent authority such as Bank Negara Malaysia or law enforcement agencies.
• Professional Advisors – Lawyers, accountants or auditors providing professional services to 11zon, subject to their professional confidentiality obligations.

11zon implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure:

• 256-bit SSL Encryption – All data transmitted between your device and our servers 11zon encrypted using 256-bit SSL protocol, ensuring that no third party can intercept or read the information transmitted.
• Database Security – Data stored in the database 11zon is also encrypted using robust data-at-rest encryption, providing an additional layer of protection.
• Access Control – Only staff 11zon who have a legitimate need-to-know and are authorised to access member personal data, with all access logged and monitored.
• Two-Factor Authentication – Our internal systems are protected with two-factor authentication (2FA) to prevent unauthorised access by third parties.
• 24/7 Monitoring – IT security team 11zon monitor our systems around the clock to detect any suspicious activity or intrusion attempts.
• Periodic Security Audits – We conduct regular security audits and independent penetration testing to identify and address any vulnerabilities before they can be exploited.
• Staff Training – All staff 11zon with access to member data are required to complete mandatory data protection training and sign confidentiality agreements.

While we take every reasonable step to protect your data, no security system in the world can guarantee 100% protection against all cyber threats. We therefore encourage you to also safeguard your own account by using a strong password and never sharing your login credentials with anyone.

As a member 11zon and as a data subject under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, you may contact us by email at [email protected]:

Platform 11zon uses cookies and similar tracking technologies to enhance the user experience, remember your preferences, and help us understand how the platform is used. Below are the types of cookies we use:

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the platform. 11zon. Please refer to your web browser's help guide for more information on how to manage cookies.

11zon retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements in Malaysia. The following are our data retention guidelines:

• Active Account Data – For as long as your account remains active at 11zon. Once an account is closed, core records will be retained for 7 years for Malaysian financial law compliance purposes.
• Financial Transaction Records – Minimum 7 years from the date of the transaction, in accordance with Malaysian tax and anti-money laundering legal requirements.
• KYC Records – A minimum of 5 years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering Act 2001.
• Customer Support Records – 3 years from the date of interaction, for quality control purposes and resolution of any disputes that may arise.
• Technical Log Data – 12 months, retained for troubleshooting technical and security issues.
• Marketing Data – Until you withdraw your consent to receive marketing communications from 11zon.

Once the retention period has expired and there is no legal requirement to retain the data in question, 11zon will securely and irreversibly delete or anonymise your data.

In a limited number of situations, platform operations 11zon may require the transfer of your personal data to another country – for example, when we use cloud services or technical infrastructure based outside Malaysia.

Every cross-border data transfer carried out by 11zon comply with the following conditions:

• The recipient country maintains a level of data protection comparable to Malaysia, or
• We have implemented appropriate safeguard mechanisms such as data processing agreements with robust data protection clauses, or
• The transfer is necessary for the fulfilment of a contract between you and 11zon, such as processing international financial transactions.

We are committed to ensuring that any such data transfers are carried out in a manner that protects the privacy and security of your personal information to a standard comparable to the protections we apply in Malaysia.

Platform 11zon is strictly intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have inadvertently collected data from a minor, we will take the following steps immediately:

• Closing the account immediately.
• Securely deleting all personal data associated with the account in an irreversible manner.
• Returning any remaining account balance to the payment method used for the deposit.

If you are a parent or guardian who believes your underage child has registered an account on 11zon, please contact us immediately at [email protected] with the relevant evidence and we will handle the matter as a priority.

If you have any questions, concerns or complaints regarding how 11zon handles your personal data, or if you wish to exercise any of your rights as a data subject, please contact us through the following channels:

• Email: [email protected] (include "Privacy Enquiry" in the subject line)
• Live Chat: Available 24/7 via the chat icon on the platform 11zon

We are committed to handling every privacy enquiry and request with the utmost seriousness and within a reasonable timeframe – typically within 14 business days of receiving your request.

If you are dissatisfied with how we have handled your privacy query or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) as provided under the PDPA 2010.