11bola Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 11bola ("11bola", "we", "us", "our") and applies to all personal information collected from individuals ("User", "you", "your") who access or register on the website located at https://11bola.casa and its associated services (together, the "Platform").

11bola is an English-language online sports betting and casino information platform serving adult users in Malaysia. This Policy describes the categories of personal data we collect, the purposes for which that data is used, the conditions under which it may be shared, and the rights available to you as a data subject.

By registering an account on the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. This Policy should be read alongside the11bola Terms & Conditions, which govern your use of the Platform more broadly.

Definitions

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a living individual, whether directly or indirectly.
• "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, 11bola.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, subject to contractual instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data.
• "KYC" refers to Know Your Customer procedures used to verify the identity and eligibility of Platform users.
• "Cookies" means small data files stored on your device by your browser when you visit the Platform, used to remember preferences and gather usage analytics.

Data We Collect

11bola collects the following categories of Personal Data in connection with your use of the Platform:

We do not collect special categories of sensitive personal data (for example, health information, biometric data or political opinions) unless explicitly required for regulatory compliance and with your express prior consent.

How Data Is Collected

Personal Data is collected through the following methods:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in promotions.
• Automated collection: When you browse the Platform, we collect technical and usage data through cookies, log files, session tracking and similar technologies.
• Third-party sources: We may receive verification data from identity verification service providers, fraud prevention databases and payment processing partners, solely for the purpose of fulfilling our regulatory and security obligations.
• Referal programmes: If you arrive on the Platform through a referral link, limited referal tracking data may be recorded for reward attribution purposes.

Data Processing

11bola processes your Personal Data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your profile and manage your preferences.
• Service delivery: To provide access to sports betting information, casino game content, live event data and promotional offers available on the Platform.
• Payment processing: To facilitate deposits and withdrawals through Malaysian payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account compromise and other unauthorised behaviour.
• Regulatory compliance: To meet obligations under applicable law, including KYC and anti-money laundering requirements.
• Responsible gambling: To monitor usage patterns that may indicate problem gambling behaviour and to facilitate self-exclusion, deposit limit tools and cooling-off period requests.
• Customer support: To respond to enquiries, resolve disputes and improve the quality of support services.
• Platform improvement: To analyse user behaviour, optimise navigation and develop new features based on aggregate usage data.
• Marketing communications: To send relevant promotional information where you have provided consent. You may withdraw this consent at any time by contacting support.

Legal Basis for Processing

11bola processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and 11bola, including account operation and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering obligations and age verification.
• Legitimate interests: Processing carried out in pursuit of legitimate business interests, including fraud prevention, platform security and service improvement, where these do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit agreement, for example in relation to marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

11bola does not sell, rent or otherwise trade your Personal Data to external parties for their own commercial benefit. We may share your data only in the following limited circumstances:

• Service providers: Third-party organisations engaged to provide platform infrastructure, payment processing, identity verification, fraud detection and customer support services. These partners are bound by contractual data processing agreements and may only use your data for the purposes we specify.
• Regulatory authorities: Where required by law, court order or regulatory directive, 11bola may disclose Personal Data to relevant authorities in Malaysia or other applicable jurisdictions.
• Business transfers: In the event of a merger, acquisition or sale of assets, Personal Data held by 11bola may be transferred as part of that transaction, subject to equivalent data protection obligations.
• Fraud prevention networks: Where necessary to prevent or investigate fraudulent activity, data may be shared with industry fraud prevention databases or law enforcement agencies.

Data Retention

11bola retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to meet applicable legal, regulatory and business requirements.

The general retention principles applied are as follows:

• Active accounts: Personal Data is retained for the duration of your account relationship with 11bola and for a defined period thereafter, in accordance with applicable legal requirements.
• Closed accounts: Following closure, certain categories of data (particularly transaction records and KYC documentation) may be retained for a minimum period specified by applicable law — typically five to seven years.
• Marketing data: Data held solely for marketing purposes is deleted promptly upon withdrawal of consent.
• Technical and usage data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents recovery or re-identification.

Data Security

11bola implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest within our storage infrastructure.
• Role-based access controls that limit data access to authorised personnel only.
• Regular security assessments and vulnerability monitoring of Platform systems.
• Staff training on data protection obligations and incident response procedures.
• Incident response processes to identify, contain and report data breaches in accordance with applicable obligations.

While 11bola takes all reasonable steps to protect your data, no internet-based system can be guaranteed as completely secure. You are responsible for maintaining the security of your own account credentials and should notify us immediately if you suspect any unauthorised access.

Cookies and Tracking Technologies

The 11bola Platform uses cookies and similar tracking technologies to support core platform functionality, personalise your experience and collect analytics data. The following categories of cookies may be active on the Platform:

• Strictly necessary cookies: Required for the Platform to function correctly. These cookies support session management, authentication and security features and cannot be disabled without disrupting core services.
• Functional cookies: Used to remember your preferences — such as language settings, preferred currency display (MYR) and previously selected game categories — to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This information helps us identify usage patterns, fix issues and improve the overall experience.
• Marketing cookies: Where consent has been provided, these cookies support targeted content delivery and help us understand the effectiveness of promotions. Marketing cookies may be set by trusted third-party analytics partners.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality. For further guidance on managing cookies in common Malaysian browsers and mobile operating systems, refer to the help resources provided by your browser or device manufacturer.

User Rights

As a user of the 11bola Platform, you hold the following rights in relation to the Personal Data we process about you. Requests may be submitted by contacting us at [email protected].

11bola will endeavour to respond to verified data rights requests within 30 calendar days. We may ask you to verify your identity before processing a request. Where a request is complex or involves a large volume of data, we may extend this period by an additional 60 days, with prior notification.

Minors

The 11bola Platform is strictly intended for adults aged21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a user is under the minimum age requirement, the relevant account will be closed immediately, any associated data will be deleted, and any deposits or balances will be handled in accordance with our Terms and Conditions and applicable law.

If you believe that a minor has registered on the Platform or provided us with personal information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Links and Services

The 11bola Platform may reference or display the names of third-party services, including Malaysian payment providers such as Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX. While these services are referenced for informational and payment facilitation purposes, 11bola is not responsible for the privacy practices of any external organisation.

When you interact with a third-party payment processor or service, your data is processed in accordance with that provider's own privacy policy and terms of service. We encourage you to review the privacy documentation of any external service you use in connection with your11bola account.

Policy Amendments

11bola reserves the right to update or revise this Privacy Policy at any time to reflect changes in legal requirements, business practices, technology or the services we provide. Where material changes are made, we will notify registered users through a Platform notification or by email to the address on your account, with reasonable notice prior to the changes taking effect.

The "last reviewed" date displayed at the top of this page will be updated to reflect the most recent revision. Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with a change, you should discontinue Platform use and may request account closure.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way11bola handles your Personal Data, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.

When submitting a data rights request, please include your registered email address and a brief description of your request to help us locate your account records and process your submission efficiently.