Privacy Policy my11a —
Data Protection & Member Security

1. Introduction

My11a ("we", "the platform" or "my11a.pro") is committed to protecting the privacy and security of the personal data of every individual who uses our services. This Privacy Policy is established in accordance with internationally recognised data protection principles and reflects the core value of trust that underpins our operations.

We understand that you entrust us with sensitive personal information when you register and use the my11a platform. We take that trust seriously. Every aspect of how we handle your data — from collection to storage and deletion — is designed to keep your privacy protected at all times.

This document details what data we collect, why we need it, how we use it, and the rights you hold as a my11a member. If you have any questions after reading this policy, our support team is ready to assist via 24/7 Live Chat.

2. Data We Collect

My11a only collects data that is genuinely necessary to deliver a safe, transparent, and high-quality service. The following are the categories of data we collect:

We do not collect information beyond what is required to operate the platform. Sensitive data such as credit card numbers is handled directly by certified payment providers and is not stored on my11a servers.

3. How We Use Your Data

Collected data is used exclusively for the following purposes, and nothing beyond that:

• Identity Verification & KYC: Ensuring every registered member is a real individual who meets the platform's age and eligibility requirements. This process protects the entire my11a member community.
• Transaction Processing: Verifying and processing deposits and withdrawals quickly and securely via supported local payment methods.
• Account Security: Detecting unusual activity, suspicious login attempts, and potential security threats in real time to protect your account.
• Service Improvement: Analysing usage patterns in aggregate (not individually) to improve the platform interface, loading speed, and overall gaming experience.
• Service Communications: Sending important account notifications, security updates, transaction confirmations, and promotional information you have agreed to receive.
• Legal Compliance: Meeting the reporting and compliance obligations required by relevant authorities to prevent money laundering and other illegal activities.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and reaching out to members who may need support.

We do not use your data for automated decision-making that materially affects your rights without human review.

4. Data Sharing with Third Parties

My11a does not sell, rent, or disclose members' personal data to any third party for their own marketing or business purposes. Your data may be shared only in the following limited circumstances:

• Payment Providers: Minimum necessary transaction information is shared with certified payment providers such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay solely for the purpose of processing your transactions.
• Game Providers: Required game session information is shared with licensed game providers to ensure smooth gameplay and fair game outcomes.
• Technical Service Providers: Infrastructure, hosting, and cybersecurity service providers bound by strict confidentiality agreements and permitted to use your data only under my11a's instructions.
• Legal Requirements: In situations where we are required by law, court order, or a competent authority to disclose specific information.
• Fraud Prevention: Minimum required information may be shared with fraud prevention agencies to protect the platform and its members from organised fraud threats.

5. Data Security Measures

We continuously invest in the latest security infrastructure to keep your data safe at all times. Here are the layers of protection we have in place:

• Transit Encryption: All data transmitted between your device and our servers is protected by TLS 1.3 with 256-bit encryption, ensuring no third party can intercept your information.
• Storage Encryption: Collected data is used exclusively for the following purposes, and nothing beyond that:
• Layered Access Control: Access to member data is restricted based on the principle of least privilege — staff may only access the data necessary for their specific role.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or unusual activity in real time.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all members, adding an extra layer of protection to your account.

While we take every reasonable measure to protect your data, no security system can be guaranteed 100% secure. We encourage you to also take precautions on your end, particularly regarding your password security and the devices you use.

6. Use of Cookies

My11a uses cookies to enhance your experience. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for the platform to function properly, such as maintaining your login session and remembering your language preference. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Helping us understand how members use the platform, which pages are most frequently visited, and where any technical issues occur. This information is collected anonymously.
• Functional Cookies: Remembering your preferences such as display format, favourite game settings, and communication choices to make your experience more personalised and comfortable.

My11a does not use third-party cookies for advertising or to track your activity on other websites. You can manage your cookie settings through your web browser, though this may affect certain platform functions.

7. Your Rights as a Member

As a my11a member, you hold the following rights regarding your personal data, and we are committed to fulfilling each request within a reasonable timeframe:

• Right of Access: You have the right to request a copy of all personal data we hold about you at any time. Such requests will be processed within 14 business days.
• Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request an immediate correction. Contact our support team to update your account information.
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal retention requirements. Account closure requests automatically trigger the data deletion process.
• Right to Restriction of Processing: In certain situations, you have the right to request that we restrict the processing of your data while a dispute or inquiry is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider should you choose to do so.
• Right to Object: You may object to the processing of your data for marketing communications at any time through your account settings or by contacting our customer support.

To exercise any of the above rights, please contact the my11a support team via 24/7 Live Chat or our official email. All requests will be handled with care and processed in accordance with established internal procedures.

8. Data Retention Period

My11a only retains your personal data for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: Retained for the entire period your account is active on the my11a platform, plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable legal and financial regulations in Malaysia.
• Security Log Data: Retained for 12 months for security investigation and fraud detection purposes.
• KYC Data: Retained for the duration of the active account and 5 years after account closure in accordance with compliance requirements.
• Support Communication Data: Customer support interaction records are retained for 2 years for service quality improvement purposes.

Once the applicable retention period expires, your data will be securely deleted or anonymised in accordance with industry-standard procedures. Anonymised data can no longer be linked to your identity and may be used for analytical purposes without time restriction.

9. Children's Privacy

The my11a platform is strictly prohibited strictly prohibited for individuals under the age of 18. We do not knowingly collect personal data from children or minors below the specified age.

Should we discover that personal data of a minor has been collected without our knowledge — whether through age misrepresentation or any other means — we will take immediate action to delete that data and close the account in question.

10. Privacy Policy Amendments

My11a reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Any material changes will be communicated to members via:

• In-app notifications on my11a
• Email to your registered address
• A clear notice on the my11a.pro homepage

The "Last Updated" date at the top of this document always reflects the latest version of the Privacy Policy currently in effect. We encourage you to review this page periodically. Continued use of the platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are here to help. The my11a Data Privacy Team can be reached via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the my11a platform
• Email: [email protected] — we aim to respond within 3 business days
• In the App: Via the "Support" section in the my11a mobile app

For enquiries related to retraining, data deletion requests, or any matter requiring urgent attention, please include "Privacy Enquiry" in your message subject line so it can be prioritised.

This Privacy Policy is effective from 1 January 2026. Previous versions are available upon request from our support team.