Privacy Policy pg11 – Malaysian Player Data Protection

This Privacy Policy ("Policy") describes how PG11 ("We", "Platform") collects, stores, processes, protects, and discloses the personal data of users ("You", "Player", "Member") who use PG11's online casino and Sports Betting platform, including PG11's official website and mobile applications for Android and iOS.

This Privacy Policy has been drafted with the needs of Malaysian users in mind and complies with Malaysia's Personal Data Protection Act 2010 (PDPA). By registering a PG11 account or using any of our services, you agree that your personal data will be collected and processed in accordance with the terms set out in this Policy.

Pg11 reserves the right to update this Privacy Policy from time to time in response to changes in how we operate, applicable legal requirements, or improvements to our privacy practices. Any material amendments will be communicated to members via email or in-platform notification at least 14 days before taking effect.

PG11 collects various types of personal data depending on how you interact with our platform. The main categories of data collected are as follows:

Data you provide directly:

• Full name as stated on your Malaysian identity card (MyKad).
• An active Malaysian phone number for OTP verification and communications.
• Email address for account notifications and promotional communications (if you have consented).
• Date of birth for minimum age verification of 21 years.
• A Malaysian residential address is required for KYC verification purposes at certain withdrawal limits.
• Payment method details — including the Malaysian bank account number, account holder name, or digital wallet information (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) you register for deposits and withdrawals.
• A copy of your identity document (MyKad) for KYC purposes when required.

Automatically collected data:

• The IP address of your device when accessing the PG11 platform.
• Device type, operating system, and web browser version used.
• In-platform activity history — including games played, bets placed, session duration, and general usage patterns.
• Approximate location data based on IP address (state or city) for the purpose of verifying access from permitted geographic regions.
• Technical logs including access times, system errors, and usage patterns for platform improvement purposes.

Pg11 uses the personal data it collects solely for legitimate purposes directly related to the operation of the platform. Below is a full breakdown of how we use your data:

PG11 will not use your data for any purpose beyond those listed above without first obtaining your fresh consent. If you agreed to receive marketing communications during registration, you may withdraw that consent at any time by updating your account settings or contacting the PG11 support team.

Pg11 is committed to never selling, renting, or trading your personal data to any third party for commercial purposes. However, there are limited circumstances in which we need to share your data with other parties to keep the platform running properly:

• Payment service providers: Transaction details necessary for processing are shared with payment providers such as FPX, Touch 'n Go, DuitNow, GrabPay, Boost, and ShopeePay to handle your deposits and withdrawals. These providers are bound by strict confidentiality agreements and comply with PCI DSS security standards.
• Game providers: Some basic technical information (such as anonymised session IDs) may be shared with game software providers to ensure games function correctly. These providers do not receive any personally identifiable information.
• Identity verification services: For KYC purposes, your verification information may be validated through authorised third-party services operating in compliance with applicable data protection laws.
• Legal authorities: PG11 will disclose personal data to the relevant authorities or government agencies when required by law or a valid court order, or where there is a reasonable need to prevent or investigate criminal activity.

PG11 continuously invests in security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Data encryption in transit: All communications between your device and PG11's servers are protected by TLS 1.3 with 256-bit SSL certificates. This ensures no third party can intercept or read the data being transmitted.
• Encryption of data at rest: Sensitive data, including payment information and identity verification documents, is encrypted using AES-256 standards when stored in PG11's database.
• Two-factor authentication (2FA): PG11 provides and encourages the use of 2FA for all accounts. This adds an important layer of security — even if someone obtains your password, they will still need a second verification code to gain access.
• Internal access controls: Only pg11 staff with a legitimate operational need are permitted to access player personal data. All access is logged and actively monitored.
• 24/7 Security Monitoring: The pg11 IT security team continuously monitors servers and account activity to detect any suspicious behaviour or intrusion attempts.
• Regular security testing: pg11 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.

PG11 retains your personal data only for as long as necessary for the purposes set out in this Policy, or as required under applicable Malaysian law. Once the data is no longer needed, it will be securely deleted or anonymised.

Once the retention period has ended, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual. The deletion process follows industry-standard procedures that ensure data cannot be recovered after deletion.

As a registered PG11 user, you have the following rights regarding your personal data, which you may exercise at any time by contacting the PG11 support team:

PG11 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site. They help us recognise you on subsequent visits and personalise your experience.

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies may affect certain PG11 platform functions, including potentially requiring you to log in again on each visit. PG11 does not use third-party cookies for advertising or cross-site tracking purposes.

Pg11 is a platform designed exclusively for adults aged 21 and above. pg11 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification and requires users to agree to terms confirming they have reached the minimum required age.

If pg11 determines that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take reasonable steps to delete that data promptly and close the account in question. If you believe that someone below the minimum age has registered a pg11 account, please notify us at support@pg11.casino so that immediate action can be taken.

While PG11 implements comprehensive security measures, no system can guarantee 100% security at all times. In the unlikely event of a security breach involving your personal data, PG11 has a clear incident response procedure in place:

• PG11's security team will identify and contain the incident promptly upon detection.
• A risk assessment will be conducted within 24 hours to determine the scope and potential impact of the breach.
• Players whose data may be affected will be notified within 72 hours once the breach has been confirmed, via email and/or in-app notification.
• The notice will describe the type of data involved, the actions already taken, and steps you can take to protect yourself.
• If the breach is serious, the relevant authorities will be notified in accordance with legal requirements.

To better protect yourself, PG11 recommends enabling two-factor authentication (2FA) on your account, using a unique and strong password, and notifying us immediately if you suspect any suspicious activity on your account.

PG11 has appointed a Privacy Officer responsible for ensuring compliance with this Privacy Policy and applicable data protection laws. For any privacy-related enquiries, concerns, or requests, please contact us via:

• Email: support@pg11.casino (subject: DATA PRIVACY)
• Live Chat: Available 24/7 within the pg11 platform — select the "Privacy & Security" category
• Response time: Acknowledgement within 24 hours, full response within 30 business days for privacy rights requests

We encourage you to contact us directly with any privacy concerns before filing a complaint with an external authority. We are committed to addressing every concern seriously and transparently.