At my11a, your privacy is treated with the same seriousness we apply to platform security. This Privacy Policy explains what personal data we collect from players across Malaysia, how we use and protect that data, and what rights you hold in relation to the information we hold about you.
These cards summarise our core privacy commitments. They complement — but do not replace — the full Privacy Policy set out in the sections below.
We collect registration details (name, date of birth, email, phone), identity verification documents (MyKad or passport), payment method information, and in-platform activity data such as betting history, session logs, and device identifiers.
Your data enables us to operate your account, process deposits and withdrawals in MYR, verify your identity for KYC compliance, send transactional communications, and personalise your experience on the platform within the scope of our legitimate interests.
We share data only with trusted service providers who support platform operations — such as payment processors (Touch 'n Go, DuitNow, FPX), KYC verification partners, and IT infrastructure providers. We do not sell your personal data to third parties.
We apply 256-bit SSL encryption to all data in transit, encrypt sensitive fields at rest, and conduct regular security audits. Access to personal data is restricted to personnel with a legitimate operational need, governed by strict internal access controls.
You have the right to access, correct, and request deletion of your personal data, subject to legal retention obligations. You may also object to certain processing activities or request data portability. Contact our support team to exercise these rights.
We retain personal data for as long as your account is active and for a minimum of five (5) years thereafter to satisfy anti-money-laundering regulatory obligations. Marketing preferences are reviewed annually and updated upon your request.
This Privacy Policy ("Policy") describes how my11a ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("User", "Player", "you") who access or use the services available at https://my11a.cam and any associated subdomains or mobile applications.
my11a is committed to handling personal data responsibly, in accordance with applicable data protection and privacy laws. This Policy is intended to provide clear and transparent information about our data practices, enabling you to make informed decisions about how you interact with the Platform.
By registering an account with my11a, depositing funds, placing wagers, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.
Scope: This Policy applies to all personal data processed in connection with the my11a platform. It covers data collected from players located in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories from which the Platform is accessed.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, transmission, erasure, or any combination thereof. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this context, my11a. |
| Data Processor | A third-party entity that processes personal data on behalf of my11a pursuant to a data processing agreement. |
| Consent | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data. |
| KYC | Know Your Customer — the regulatory identity verification process requiring collection of government-issued identification and related documents. |
| Cookies | Small text files stored on a user's device by a web browser, used to recognise returning users and track session activity. |
| Sensitive Data | A subset of personal data attracting heightened protection obligations, including financial information, identification documents, and data related to responsible gambling self-assessments. |
my11a collects personal data through several channels: directly from you at registration and during account use, automatically through your interaction with the Platform, and from authorised third-party verification and payment service providers.
3.1 Registration and Account Data
3.2 Identity Verification (KYC) Data
3.3 Financial and Transaction Data
3.4 Gameplay and Activity Data
3.5 Technical and Device Data
Note: We do not collect or store full credit or debit card numbers. All sensitive payment credentials are handled directly by our PCI-DSS-compliant payment processing partners.
my11a processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Performance of a Contract | Operating your account, processing deposits and withdrawals in MYR, recording betting activity, and delivering the core gambling services you have requested. |
| Legal Obligation | KYC identity verification, age verification (21+), anti-money-laundering transaction monitoring, regulatory reporting, and data retention obligations. |
| Legitimate Interests | Platform security, fraud prevention, abuse detection, improving our services, responsible gambling monitoring, and internal analytics. |
| Consent | Sending you marketing communications, newsletters, and promotional offers via email or SMS. You may withdraw consent at any time by contacting support or updating your account preferences. |
Where processing is based on your consent, withdrawal of that consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
my11a uses personal data collected from players for the following purposes:
We do not use your personal data to make fully automated decisions that produce significant legal effects, except where required to enforce self-exclusion or comply with mandatory regulatory screening — in which case you may request human review of any automated decision by contacting our support team.
my11a does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:
6.1 Service Providers
We engage trusted third-party service providers who process personal data on our behalf pursuant to binding data processing agreements. These include:
6.2 Regulatory and Legal Disclosure
We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of my11a, our players, or the public. Such disclosures are made on a minimum-necessary basis.
6.3 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of the assets of my11a, personal data held by the Platform may be transferred to the acquiring entity. We will notify affected players via in-account notification prior to any such transfer and ensure the receiving entity commits to equivalent privacy protections.
No Data Sales: We confirm that my11a does not and will not sell your personal data to marketing companies, data brokers, or any third party for commercial gain.
my11a uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform, maintain session continuity, and gather analytics data that helps us improve the user experience.
Types of cookies we use:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account or using core Platform features. For analytics and marketing cookies, you may opt out via your account privacy settings or by contacting our support team.
my11a implements a layered approach to data security, applying technical and organisational measures proportionate to the sensitivity of the data we hold. Our security infrastructure includes:
Despite these measures, no data transmission over the internet or electronic storage method can be guaranteed to be 100% secure. We encourage you to use a strong, unique password for your my11a account and to enable two-factor authentication to reduce the risk of unauthorised access.
We retain your personal data for as long as your account remains active with my11a and for a defined period thereafter, determined by the nature of the data and the applicable legal obligations:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and registration data | Duration of account + 5 years post-closure | AML regulatory obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Regulatory and legal compliance |
| Transaction and financial records | 7 years from transaction date | Financial reporting obligations |
| Betting / gameplay history | Duration of account + 2 years post-closure | Dispute resolution and fraud prevention |
| Customer support records | 2 years from last interaction | Legitimate interests / quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful processing basis |
| Technical and device logs | 90 days from collection | Security and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical system constraints, it is isolated and protected from further active processing until deletion is completed.
Subject to applicable law and certain limitations arising from our legal and regulatory obligations, you have the following rights in relation to your personal data:
To exercise any of the above rights, please contact us via live chat or email at [email protected] (plain text — not a clickable link). We will verify your identity before processing any request and will respond within the timeframe required by applicable law.
The my11a platform is strictly for players aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the account registration process and as part of our KYC procedures.
If we become aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the account, void any associated wagers or transactions, and permanently delete the relevant data in accordance with our data retention and deletion procedures.
If you are a parent or guardian and believe that a minor in your care has registered with my11a, please contact our support team immediately via live chat so that we can take appropriate action without delay.
For players aged 21 and above only. Gambling is not suitable for minors and is actively harmful to individuals under the legal minimum age. We take our age gate obligations seriously and invest in robust verification technology to enforce them.
In providing the my11a platform to Malaysian players, certain personal data may be transferred to and processed in countries outside Malaysia — for example, where our cloud infrastructure providers or KYC verification partners operate data centres in other jurisdictions.
Where such transfers occur, my11a ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which applies in Malaysia. These safeguards may include standard contractual clauses, data processing agreements with cross-border transfer provisions, or transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
If you would like further information about the specific safeguards applied to international data transfers affecting your personal data, please contact our support team and we will provide details applicable to your account.
my11a may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The version date shown at the top of this page indicates when the Policy was most recently revised.
Where updates are material — for example, where we introduce a new category of data processing, a new category of third-party sharing, or changes that significantly affect your rights — we will notify you via in-account messaging or a prominent banner on the Platform homepage prior to the changes taking effect.
For minor clarifications and formatting updates that do not affect the substance of the Policy, we will update the version date without separate notification. We recommend reviewing this page periodically.
If you have questions, concerns, or requests relating to this Privacy Policy or the way in which my11a processes your personal data, please reach out through the following channels:
Data subject rights requests (access, rectification, erasure, objection, portability) will be acknowledged within 3 business days and processed within 30 calendar days of identity verification, unless extended by applicable law with appropriate notification.
Privacy contact: [email protected]
Platform: https://my11a.cam
Data Controller: my11a — operator of https://my11a.cam
We take privacy seriously so you can focus on what matters — sports betting on Liga Super Malaysia and EPL, live casino tables, and thousands of slots, all in MYR on a platform built for Malaysian players.
For players aged 21 and above only. Gambling involves financial risk — always play responsibly.