Op11 Privacy Policy – Data Protection Malaysian Members' Personal

This Privacy Policy ("Policy") is published by op11 ("Platform", "We") and applies to all individuals who use the op11 platform via op11.my, the op11 mobile app, and all related services we offer to users in Malaysia.

Op11 is an online casino entertainment platform offering games such as slots, Live Casino, Classic Blackjack, VIP Baccarat, and more. In operating this platform, we need to collect and process certain personal information from our members to ensure our services run smoothly, securely, and fairly.

We understand that personal data privacy matters deeply to users in Malaysia. That is why we are committed to handling your data with integrity, transparency, and full compliance with applicable laws — in particular, the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains exactly what we collect, why we need it, how we protect it, and what rights you have over that data.

Op11 collects various categories of personal data necessary to operate the platform safely and effectively. Below is a summary of the types of data we may collect from Malaysian members:

Op11 only collects data that is genuinely necessary to deliver our services. We do not collect sensitive information unrelated to platform operations, such as biometric data, health records, or political affiliations.

Op11 collects members' personal data through several different channels. It is important that you understand each of these collection points so you can make informed decisions about the information you share with us:

• During Account Registration: When you register a new op11 account, we ask for basic information such as your full name, Malaysian phone number, email address, and password. This is the minimum required to create a secure account for you.
• During the KYC Process: When you make your first withdrawal or reach certain thresholds, we may request a copy of your MyKad or other identity document, a recent bank statement, or proof of address for identity verification purposes as required under anti-money laundering (AML) procedures.
• During Payment Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks, the required transaction information is processed through a secure payment system. op11 does not directly store your card numbers or eWallet passwords.
• Automatically During Platform Use: When you browse op11.my or use the op11 app, our systems automatically record technical data such as your IP address, device type, operating system, and navigation activity for security and platform improvement purposes.
• Through Communications with Us: When you contact op11 customer support via live chat, email or WhatsApp, conversations may be recorded for service quality improvement and more effective dispute resolution.
• Via Cookies & Tracking Technologies: op11 uses cookies and similar technologies to enhance the user experience, remember your preferences, and analyse platform usage patterns. Full details are provided in Section 9.

Op11 uses the personal data it collects solely for legitimate, stated purposes. We do not use your data for any other purpose without prior notice and, where required, your consent:

• Account Management: Creating, maintaining, and protecting your op11 account — including identity verification, password recovery, and secure login session management.
• Payment Processing: Processing deposits and withdrawals to your Malaysian account via your chosen local payment method in MYR, with no currency conversion.
• Legal Compliance & Anti-Fraud: To comply with legal obligations, anti-money laundering (AML) regulations, and know your customer (KYC) procedures. Data is used to identify and prevent fraudulent activity or platform misuse.
• Service Delivery: Provides access to all op11 games including slots, Live Casino, VIP Baccarat, Classic Blackjack and Jackpot Fishing, while ensuring every gaming session runs smoothly and fairly.
• Customer Support: Providing technical support, addressing account and payment enquiries, and resolving any complaints or disputes raised by op11 members.
• Platform Communications: Sends important notifications to members who have consented to receive communications — covering account updates, transaction alerts, security changes, and relevant op11 promotional information.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support, and ensuring that deposit limits, loss limits, and self-exclusion features are functioning correctly.
• Platform Improvements: We analyse aggregated, anonymised usage data to better understand the needs of Malaysian users and continuously improve the overall op11 platform experience over time.

Op11 does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, there are limited situations where data sharing may be necessary for legitimate operational requirements:

• Payment Service Providers: Information required to process transactions is shared with your chosen payment provider — such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks. All these providers are bound by strict privacy agreements and comply with international payment security standards.
• Game Providers: The minimum data required to log in to a gaming session may be shared with licensed game providers such as Pragmatic Play, Evolution Gaming, and others to ensure a smooth and fair gameplay experience.
• Legal Requirements: op11 may be required to disclose personal data to Malaysian authorities such as the police, LHDN, Bank Negara Malaysia, or other regulatory bodies when mandated by law, court order, or a valid official investigation.
• Fraud Prevention: In situations where we are verifying or investigating fraudulent activity, money laundering, or platform abuse, relevant information may be shared with the appropriate financial crime prevention agencies.
• Business Transfer: In the event of a merger, acquisition or asset transfer involving op11, members' personal data may be transferred to the new entity, subject to privacy protections equivalent to or stricter than those set out in this Policy.

In all of the data-sharing situations described above, op11 ensures that recipients adhere to data protection standards equivalent to, or higher than, those we uphold ourselves.

The security of op11 members' personal data is our absolute priority. We continually invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorised access, loss, or misuse:

• AES-256 End-to-End Encryption: All data in transit and data stored in op11's databases is encrypted using AES-256 — the same encryption standard used by Malaysia's leading banks and world-class financial institutions.
• SSL/TLS Protocol: The connection between your web browser or the op11 app and our servers is protected by the latest SSL/TLS protocols. You can verify this by the padlock icon that appears in your browser's address bar when browsing op11.my.
• Two-Factor Authentication (2FA): The 2FA feature is available and recommended for all op11 members. With 2FA enabled, every login requires an additional OTP code sent to your registered Malaysian mobile number, providing an effective second layer of protection.
• Role-Based Access Control: Internal access to op11 member data is strictly limited on a need-to-know basis. All access is logged, monitored, and regularly audited by our IT security team.
• 24/7 Monitoring: op11's automated security monitoring system operates around the clock to detect and respond to suspicious activity or intrusion attempts in real time.
• Regular Security Audits: op11's technical infrastructure undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Isolated Database: op11 members' funds and financial data are stored in systems that are isolated from general operational infrastructure, providing an additional layer of protection against system failure or cyber threats.

While op11 takes every reasonable measure to protect your data, no digital security system can be guaranteed 100% secure against all threats. We encourage members to take their own precautions as well, such as using strong passwords, enabling 2FA, and never sharing account information with anyone.

Op11 retains members' personal data only for as long as necessary to fulfil the original purpose of collection, or as required under applicable Malaysian law. The following are general guidelines on op11's data retention periods:

• Active Account Data: For as long as your op11 account remains active, all associated account data will be retained to ensure uninterrupted and secure service.
• Financial Transaction Data: Records of MYR deposit and withdrawal transactions are retained for a minimum of seven years, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Data & Identity Verification: Identity verification documents such as copies of MyKad are retained for the period required under Malaysia's AML legislation, typically no less than five years after account closure.
• Support Communication Data: Customer support chat records are retained for two years for reference purposes and potential dispute resolution.
• Technical & Log Data: Technical logs such as IP address records and login activity are retained for ninety days for security and incident investigation purposes.

Once data is no longer needed for any legitimate purpose, op11 will delete or anonymise it in accordance with our established secure data disposal procedures. You may also request earlier deletion of your data, subject to applicable legal limitations – see Section 8 for more information on your rights.

As an op11 member and a data subject under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold about you. We are committed to making the exercise of these rights as straightforward and hassle-free as possible:

Op11 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how Malaysian members interact with our platform. Below is an overview of the types of cookies we use:

• Essential Cookies: These cookies are essential for the core functions of the op11 platform, including login authentication, gaming session management, and transaction security. Disabling these cookies will significantly impair the platform's functionality.
• Preference Cookies: These cookies remember your preferences — such as your interface language, favourite games, and display settings — so you don't have to reconfigure them every time you use op11.
• Analytics Cookies: These cookies help us understand how users engage with the op11 platform as a whole — which pages are visited most often, which games are most popular among Malaysian players, and where users encounter navigation difficulties.
• Security Cookies: These cookies help us identify and prevent unauthorised access attempts, phishing attacks and automated bot activity that could compromise the security of the op11 platform and member accounts.

You can manage your cookie preferences through your web browser settings. However, disabling all cookies may affect the functionality and your overall experience on the op11 platform. For more information on managing cookies, refer to the help documentation for your browser or app.

The op11 platform is strictly for individuals aged 21 and above. op11 does not knowingly collect or process the personal data of anyone under the age of 21 under any circumstances.

Should we discover or become aware that personal data belonging to an individual under the age of 21 has been collected through the op11 platform without valid consent, we will take immediate steps to delete that data from our systems and close the relevant account without delay.

Op11 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect developments in Malaysian law, shifts in industry practice, improvements to the op11 platform or feedback from our member community.

When material changes are made to this Privacy Policy, op11 will notify members via one or more of the following methods:

• An in-platform pop-up notification or banner on your next login to op11 after the changes have been published.
• An email to the address registered with your op11 account for any highly significant changes that may materially affect your rights.
• Updating the "Last Updated" date displayed at the top of this Privacy Policy document on op11.my.

Your continued use of the op11 platform after any changes to the Privacy Policy are published will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed on how we protect your personal data.

Op11 has appointed a Data Protection Officer (DPO) responsible for overseeing privacy compliance and handling data-related enquiries from Malaysian members. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way op11 handles your personal data, please reach out to us through the following channels:

If you are dissatisfied with op11's response to your privacy enquiry or complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia appointed under PDPA 2010.