TK11 Privacy Policy — Your Personal Data Protection

1Introduction

Welcome to tk11's Privacy Policy page. This document is a binding agreement between you as a user and tk11 as the operator of an online gaming platform operating under the domain tk11.bz. We take the responsibility of protecting your privacy seriously — not merely as a legal obligation, but as part of our commitment to building lasting trust with the Malaysian player community.

This Privacy Policy describes our practices regarding personal data collected when you register, use, or browse the TK11 platform. By registering an account or continuing to use TK11's services, you are deemed to have read, understood, and agreed to all provisions contained in this Privacy Policy.

This policy applies concurrently with Terms and Conditions and Responsible Gaming Policy tk11. In the event of any conflict between these documents, the Privacy Policy shall apply specifically to matters relating to the use of personal data.

2Information We Collect

Tk11 collects various types of information depending on how you interact with our platform. Generally, the information we collect can be divided into three main categories:

A. Information You Provide Directly

• Full name as stated on your official identification document
• Date of birth and gender
• Active email address and mobile phone number
• Current residential address
• Bank account or e-wallet details for the purpose of fund withdrawal
• Identity document copies (MyKad, passport) during the KYC process
• Information you share when contacting our customer support team

B. Information Collected Automatically

• IP address and city-level geolocation data
• Device type, operating system and web browser version
• Login history including date, time and location
• Gaming session data — games played, session duration, and wagering outcomes
• Complete deposit and withdrawal transaction records
• Cookie and other tracking technology data (subject to your consent)

C. Information From Third Parties

• Identity verification from accredited KYC service providers
• Fraud and risk information from an integrated fraud prevention system
• Technical data from the infrastructure and hosting providers we use

3How We Use Your Data

Tk11 uses your personal data responsibly and only for lawful, transparent purposes. Below is a detailed description of each primary use of your data:

• Verifying Identity & Preventing Fraud: Identity and KYC data is used to verify that you are a legitimate individual and to prevent fraud, money laundering, and duplicate account registrations.
• Processing Financial Transactions: Your financial information is used to process deposits and withdrawals securely, efficiently and in a timely manner.
• Providing Platform Services: Technical and gaming session data is used to ensure the TK11 platform runs smoothly, remains stable, and delivers the best experience for you.
• Responsible Gaming: Your gameplay pattern data is used to detect early signs of problem gambling and to offer appropriate support or limits.
• Service Communications: We use your email address and phone number to send important notifications relating to your account, transactions and security updates.
• Marketing & Promotions (with consent): With your consent, we use your profile to curate bonus offers and promotions that are relevant and tailored to your interests.
• Legal Compliance: Certain data is retained and shared when required by Malaysian law or by directive of a competent authority.

4Information Sharing

Tk11 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are certain situations where information sharing is necessary to ensure the platform operates securely and in compliance with the law:

• Trusted Service Providers: We share necessary data with technology infrastructure providers, PCI-DSS certified payment processors, and identity verification companies — all bound by strict confidentiality agreements.
• KYC Service Providers: To verify your identity, we share the necessary information with KYC partners that are licensed and approved by the relevant authorities.
• Legal Authority: tk11 will disclose information to government authorities, courts, or law enforcement agencies when required by law or court order.
• Financial Crime Prevention: Certain data may be shared with industry fraud prevention networks to protect all users from financial crime.
• Business Acquisition: In the event of a merger or acquisition involving tk11's business, your data may be transferred to the new entity, which will be subject to this Privacy Policy or an equivalent policy.

5Data Security

Tk11 continually invests in industry-grade security infrastructure to protect every member's personal data. The technical and organisational security measures we employ include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates
• Data encryption at rest using AES-256 standard
• Two-factor authentication (2FA) available for all member accounts
• Real-time security monitoring and an active intrusion detection system (IDS) operating 24/7
• Regular penetration testing conducted by certified independent security firms
• Strict internal access controls based on the need-to-know principle
• Regular internal and external security audits
• A comprehensive incident response plan to address any data breaches

While no security system can guarantee absolute protection, tk11 continually strives to employ the best available technologies and practices to minimise risk. In the event of a material data breach, we are committed to notifying affected members and the relevant authorities within the timeframe prescribed by law.

6Cookies & Tracking Technologies

The tk11 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations.
• Preference Cookies: Saves your preferences such as language, display settings and personal configurations for a more comfortable experience.
• Analytics Cookies: Helps us understand platform usage patterns, frequently visited pages and technical issues that may need to be resolved — this data is collected anonymously.
• Marketing Cookies: Used with your consent to display relevant offers and promotions based on your interests and activity on the TK11 platform.

You can manage and control cookies through your web browser settings at any time. Please note that disabling essential cookies may directly affect the functionality of the TK11 platform. For more information about the cookies we use, visit the Privacy Settings section within your account.

7International Data Transfers

In the context of global operations and the use of distributed cloud infrastructure, your personal data may be processed or stored on servers located outside Malaysia. TK11 ensures that all such data transfers are protected by adequate safeguards, including:

• Standard data transfer agreements compliant with international requirements
• Use of certified cloud service providers compliant with ISO 27001 standards
• Data Protection Impact Assessment (DPIA) conducted before any material new data transfer
• Standard contractual clauses for every partner receiving data from Malaysia

8Data Retention Period

Tk11 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. The following are general retention period guidelines:

• Active Account Data: Retained for the duration your account is active plus the period required to resolve any outstanding claims or disputes.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the termination of the business relationship in accordance with anti-money laundering (AMLA) legal requirements.
• Security Logs: Retained for 12 months for the purpose of security incident investigations if required.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

9Your Rights

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by tk11. We are committed to facilitating the exercise of these rights promptly and without unnecessary bureaucracy:

To exercise any of the above rights, contact the tk11 privacy team via email or the in-platform live chat. We will process your request within 21 business days. If your request is declined, we will provide a clear reason and information on how to file a complaint with Malaysia's Personal Data Protection Department.

10Children's Privacy

The tk11 platform is strictly for individuals aged 18 and above. tk11 does not knowingly collect, store or process personal data of any individual under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate steps to delete that data from our systems and close the associated account.

11Third-Party Links

The tk11 platform may contain links to third-party websites or services not operated by us. This Privacy Policy applies solely to the tk11 platform and does not cover the privacy practices of any third parties.

Tk11 is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information to them.

12Policy Amendment

Tk11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. You will be notified of any material amendments via:

• In-platform notifications on tk11 that will be displayed after you log in
• Emailed to your registered email address at least 14 days before the changes take effect
• Updates to the "Last Updated" date displayed at the top of this document

Continued use of the tk11 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to withdraw and close your account before the effective date of those amendments.

13Contact Us

If you have any questions, concerns or wish to exercise any of your privacy rights, please contact the tk11 Data Protection Officer through the following channels:

• Live Chat 24/7: Available directly within the tk11 platform — the fastest way to get a response
• Privacy Email: [email protected] — for written enquiries that require documentation
• General Support Email: [email protected]

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex rights-exercise requests, the maximum processing period is 21 business days in accordance with the provisions of PDPA 2010.