Your privacy is a genuine priority at my11b — not a compliance checkbox. This Policy explains precisely what personal data we collect from Malaysian players, why we collect it, how we use and protect it, and what rights you hold over your information.
These highlights summarise our main commitments. Please read the full Policy below for complete details.
This Privacy Policy ("Policy") describes how my11b ("we", "us", "our", "the Operator"), the operator of the online betting and casino platform accessible at https://my11b.cam ("the Platform"), collects, uses, stores, protects, and shares personal data relating to registered players and visitors ("you", "your", "the User") of the Platform.
This Policy applies to all personal data processing activities undertaken by my11b in connection with your use of the Platform, including account registration, identity verification, deposits and withdrawals using Malaysian payment methods, sports betting, casino gaming, and any customer support interactions.
By registering an account on my11b, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.
my11b is an English-language platform serving players in Malaysia, including residents of Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam, and across the country. This Policy is written in English and governs data processing activities related to Malaysian-resident users.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, contact details, identity documents, financial information, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, erasure, or destruction. |
| Data Controller | my11b, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third party that processes personal data on behalf of my11b under a data processing agreement — for example, payment processors handling Malaysian banking and e-wallet transactions. |
| KYC | Know Your Customer — the identity and age verification process applied to all registered accounts. |
| Cookie | A small text file placed on your device by the Platform for the purpose of recognising your browser and storing session or preference data. |
| Consent | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
When you register an account on my11b, we collect:
During the KYC process, we collect copies of:
We collect transactional records including:
my11b collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct Provision | Information you provide during account registration, KYC submission, deposit/withdrawal forms, support chat, and feedback submissions. |
| Automated Collection | Technical data collected automatically when you visit the Platform — IP address, device data, browser cookies, session logs, and page interaction data. |
| Third-Party Sources | Data received from KYC verification vendors, fraud prevention services, payment processors (Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, etc.), and regulatory databases. |
| Publicly Available Sources | Sanctions lists, politically exposed persons (PEP) databases, and other publicly available compliance screening sources used for AML obligations. |
my11b processes your personal data only where a recognised lawful basis applies. The primary legal grounds on which we rely are as follows:
Processing necessary to fulfil the contractual obligations of your account — registering your account, processing deposits and withdrawals via Malaysian payment channels, settling wagers, and delivering customer support.
Processing required to comply with applicable law — including anti-money laundering (AML) obligations, age verification (21+ enforcement), KYC regulatory requirements, and responding to lawful requests from competent authorities.
Processing necessary for our legitimate business interests where these are not overridden by your rights — including fraud detection, responsible gambling monitoring, network security, and Platform improvement through aggregated analytics.
Where we rely on consent — for example, sending marketing communications by email — you may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in marketing emails.
We process your personal data for the following specific purposes:
| Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial data, payment identifiers | Contract |
| Anti-money laundering (AML) screening | Identity data, transaction data | Legal obligation |
| Fraud detection and prevention | Technical data, transaction data, device data | Legitimate interests |
| Responsible gambling tools and monitoring | Gaming activity data, account settings | Legal obligation / Contract |
| Customer support and dispute resolution | Communications data, account data | Contract / Legitimate interests |
| Sending transactional notifications | Contact details, transaction data | Contract |
| Sending promotional communications | Contact details, marketing preferences | Consent |
| Platform security and integrity | Technical data, session logs | Legitimate interests |
| Regulatory reporting | Identity data, transaction data | Legal obligation |
We share personal data with carefully selected third-party service providers who assist us in delivering the Platform. All such providers are bound by data processing agreements that require them to process data only on our instructions and to maintain appropriate security standards. Categories of third-party processors include:
We may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of my11b, our players, or the public. This includes disclosures made in connection with AML reporting obligations.
my11b does not sell, rent, lease, or otherwise transfer your personal data to third-party marketers, data brokers, or advertising networks for commercial purposes.
All third-party data processors engaged by my11b are required to comply with data protection standards equivalent to or exceeding those applied by the Operator. We conduct due diligence reviews of processor security posture before engagement.
Cookies are small text files stored on your device by your web browser when you visit the Platform. They allow the Platform to recognise your device across sessions, maintain your login state, and store preferences. my11b uses first-party cookies only — we do not use third-party advertising cookies or tracking pixels.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential / Session | Maintain your login session, protect against CSRF attacks, and support basic Platform functionality. Cannot be disabled without breaking core features. | Session (deleted on browser close) |
| Functional / Preference | Remember your Platform preferences such as language settings, notification preferences, and layout choices. | Up to 12 months |
| Analytics | Aggregate, anonymised data on page usage, session duration, and navigation paths — used to improve Platform performance and user experience. No personal identifiers stored. | Up to 24 months (aggregated) |
| Security / Fraud | Device fingerprinting and session integrity signals used by our fraud prevention systems to detect unusual account activity. | Up to 90 days |
You may control cookie settings through your browser's privacy settings. Disabling essential cookies will impair core Platform functionality including the ability to log in or process transactions. Disabling functional or analytics cookies will not affect your ability to use the Platform but may reduce personalisation features.
my11b implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
No digital platform can guarantee absolute data security. You play an important role in protecting your account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with third parties.
We retain personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. Our general retention schedule is as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and registration data | Duration of account + 5 years post-closure | Regulatory and AML compliance |
| KYC documents | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| Financial transaction records | 7 years from transaction date | AML / financial records legislation |
| Betting and gaming activity logs | 5 years from last activity | Regulatory compliance / dispute resolution |
| Support communications | 3 years from last interaction | Dispute resolution / quality assurance |
| Marketing preference records | Until withdrawal of consent + 12 months | Consent management records |
| Technical / session logs | 90 days (rolling) | Fraud prevention and security |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.
As a data subject, you hold the following rights with respect to your personal data processed by my11b. To exercise any of these rights, please contact our Data Privacy team at the contact details in Section 15.
You have the right to request a copy of the personal data we hold about you, along with information on how it is being processed. We will respond within 30 days of a verified request.
You have the right to request correction of inaccurate or incomplete personal data. Some data (such as legal name and date of birth) may require re-verification of supporting KYC documents before correction is applied.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations — for example, AML regulations require retention of certain records for a minimum of 5 years and we cannot delete data that we are legally obligated to retain.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
Where processing is based on consent or contractual performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling for fraud prevention. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, contact our support team with your full name, registered email address, and a clear description of your request. We may ask for identity verification before processing requests. We will respond within 30 calendar days.
my11b is strictly an adult platform. Access is limited to individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21.
All accounts are subject to age verification as part of the KYC process. Where we discover or have reasonable grounds to suspect that an account has been registered by a person under 21, we will immediately:
If you become aware that a minor has accessed or registered on the Platform, please contact our support team immediately so that we can take appropriate action.
Some of the third-party service providers engaged by my11b operate infrastructure outside Malaysia — for example, cloud hosting providers and fraud detection platforms with servers in Singapore, Hong Kong, or the European Economic Area. Where personal data is transferred to jurisdictions outside Malaysia, we ensure that appropriate safeguards are in place, including:
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries other than Malaysia in accordance with the safeguards described above.
my11b reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the Platform's features. The "Last Updated" date at the top of this Policy will be revised accordingly.
Material changes to this Policy — for example, a change in the categories of data we collect or the purposes for which we process data — will be communicated to registered Players via their registered email address or through a prominent notice on the Platform prior to the changes taking effect. Continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.
We encourage you to review this Policy periodically to stay informed about how my11b protects your personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by my11b, please contact our Data Privacy team using the details below:
Data Privacy Enquiries:
[email protected]
(plain text — not a clickable link)
Subject Line: "Privacy Request — [Your Full Name]"
Response Target: Within 30 calendar days of a verified request
Support Hours: 24 hours a day, 7 days a week
Please include your full name, registered email address, account username, and a clear description of your request or concern. We may require identity verification before actioning data subject requests to protect against unauthorised access to account information.
If you are unsatisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
We take your privacy seriously. If you have questions about this Policy or want to exercise your data rights, our support team is here 24/7. Ready to explore the Platform? 21+ only. Play responsibly.