detik11 Privacy Policy

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, whether directly or in combination with other data.
• "Data Subject" means the individual to whom personal data relates — the context of this Policy, this is you, the Platform User.
• "Data Controller" means detik11, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party that processes personal data on behalf of detik11 pursuant to a written data processing agreement.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, erasure, or destruction.
• "KYC" means Know Your Customer — the identity and address verification process required to comply with anti-money laundering and counter-terrorism financing obligations.
• "Cookie" means a small text file placed on your device by the Platform's server to store session information, preferences, or analytical data.
• "Sensitive Personal Data" means data relating to health, financial status, or identity document numbers, which requires heightened protection under applicable law.

Personal Data We Collect

detik11 collects personal data through several channels and at various stages of your relationship with the Platform. The categories of data collected are as follows:

3.1 Registration Data

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence)
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Selfie photograph holding identity document
• Proof of payment method ownership

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records denominated in MYR
• Payment method identifiers (e.g., last four digits of bank account, DuitNow reference, e-wallet account name)
• Transaction timestamps, amounts, and statuses

3.4 Technical & Usage Data

• IP address, browser type, and operating system
• Device identifiers (where applicable)
• Pages visited, session duration, and navigation patterns within the Platform
• Game activity logs, betting history, and in-platform search queries
• Cookie and tracking technology data (see Section 9)

3.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence between you and detik11
• Feedback, complaints, and formal dispute submissions

Legal Basis for Data Processing

Under applicable data protection law, detik11 is required to identify a lawful basis for each category of personal data processing. The following table sets out the primary legal bases relied upon:

How We Use Your Personal Data

detik11 uses the personal data collected for the following specific purposes:

• Account Management: To create, verify, maintain, and secure your detik11 account, including processing login requests and2FA authentication.
• Identity Verification: To verify your age (21+ requirement), identity, and address as part of our KYC obligations, particularly before processing withdrawal requests or awarding large bonuses.
• Payment Processing: To facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrency networks.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct that could harm users or the Platform.
• Responsible Gambling: To monitor player activity for indicators of problem gambling, apply deposit limits or self-exclusion settings, and fulfil our duty of care obligations to users.
• Service Communications: To send you transactional notifications such as deposit confirmations, withdrawal approvals, bonus activations, and account security alerts.
• Marketing Communications: Where you have provided consent, to send promotional offers, personalised bonus recommendations, and platform updates. You may opt out at any time.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and improve the performance and user experience of the detik11 Platform for Malaysian players.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, or requests from competent authorities.

Disclosure & Data Sharing

detik11 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is disclosed only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary transaction data with payment processors including DuitNow operators, FPX network banks, e-wallet providers (Touch 'n Go, Boost, GrabPay), and cryptocurrency network facilitators to process your financial transactions.
• KYC Verification Partners: Identity and address verification documents may be processed by third-party KYC service providers engaged by detik11 under strict data processing agreements.
• Game Software Providers: Game activity data (but not financial or identity data) may be shared with licensed game providers whose software operates on the Platform, solely for the purpose of game operation and fairness auditing.
• Fraud Prevention Services: We may share relevant data with fraud detection and anti-money laundering partners to protect the integrity of the Platform and its users.
• Regulatory and Legal Authorities: We will disclose personal data to government bodies, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory directive — including disclosures required under Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA).
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of detik11's business assets, personal data held by the Company may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party data processors engaged by detik11 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using your data for any purpose other than those specified in their engagement with us.

Data Retention

detik11 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as general guidelines:

• Account and Registration Data: Retained for the duration of your active account relationship with detik11, plus a minimum of five (5) years following account closure, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required under anti-money laundering regulations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction for financial regulatory compliance purposes.
• Communications and Support Records: Retained for three (3) years from the date of the last interaction, unless the communication forms part of an ongoing dispute or legal matter.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form; may be retained in anonymised, aggregated form for longer periods for analytical purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

Security Measures

detik11 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the detik11 Platform is encrypted using industry-standard 256-bit Transport Layer Security (TLS/SSL). The Platform enforces HTTPS on all pages.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the organisation is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) systems.
• Two-Factor Authentication: Account holders are encouraged to enable 2FA. Internal systems handling personal data require mandatory multi-factor authentication for all staff access.
• Security Monitoring: We deploy continuous security monitoring, intrusion detection, and anomaly detection systems across our infrastructure.
• Penetration Testing: Regular third-party penetration testing and vulnerability assessments are conducted to identify and remediate security weaknesses.
• Incident Response: In the event of a confirmed data breach that may affect your rights or freedoms, detik11 will notify affected users and relevant authorities within the timeframes required by applicable law.

Cookies & Tracking Technologies

The detik11 Platform uses cookies and similar tracking technologies (collectively "Cookies") to provide core functionality, improve performance, and analyse how users interact with the Platform. The following categories of Cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect anonymised information about how visitors use the Platform — pages visited, session duration, error messages encountered. Used solely to improve Platform performance.
• Functionality Cookies: Remember your preferences such as language settings, display preferences, and game lobby configurations to provide a personalised experience.
• Targeting and Marketing Cookies: Used only where you have provided consent. These track your interaction with promotional content to ensure you receive relevant offers. You may withdraw consent at any time through your browser settings.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality and performance of the Platform. Most web browsers allow you to control cookies through their settings preferences.

Your Data Rights

Under applicable data protection law, you hold the following rights with respect to your personal data held by detik11. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within fourteen (14) business days.

Children's Privacy & Age Restriction

The detik11 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, solicit, or retain personal data from any person under the age of 21. Age verification is conducted as part of our mandatory KYC process for all accounts.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds where legally permissible.

If you believe that a person under the age of 21 has registered an account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Services & External Links

The Platform may, from time to time, reference or integrate with third-party services such as payment gateways, KYC providers, and game software platforms. These third parties operate under their own privacy policies and detik11 is not responsible for the data practices of any third-party service providers once you are redirected to their platforms or interfaces.

All third-party processors engaged by detik11 are contractually required to comply with applicable data protection standards through data processing agreements that specify permitted uses of personal data and require equivalent security safeguards.

Changes to This Privacy Policy

detik11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will be revised to indicate the date of the most recent changes.

Where changes are material — for example, changes to the categories of data collected, the introduction of new third-party data processors, or changes to your rights — we will notify registered users via the email address associated with their account at least fourteen (14) days before the changes take effect, where reasonably practicable.

Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you must discontinue use of the Platform and may request account closure by contacting our support team.

Contact Us & Data Protection Enquiries

If you wish to exercise any of your data rights, have a question or concern about this Privacy Policy, wish to report a potential data security incident, or want to submit a formal data protection complaint, please contact the detik11 Data Protection team through the following channels: