Data Protection

Privacy Policy

This Privacy Policy explains how 11winrm collects, processes, stores, and protects your personal data when you use our online casino and sports betting platform. Your privacy is a fundamental right — we treat it accordingly.

Last Updated: 1 January 2026

1Introduction

This Privacy Policy (hereinafter "Policy" or "Privacy Policy") is issued by 11winrm (hereinafter "we", "us", "our", or "the Platform"), the operator of the online casino and sports betting services accessible at https://11winrm.cam. This Policy applies to all individuals who access, register on, or otherwise interact with the 11winrm Platform, including visitors and registered account holders (collectively, "you", "your", or "the User").

11winrm is committed to protecting the privacy and personal data of all Users in accordance with applicable international data protection standards. This Policy describes in full transparency what personal data we collect, the purposes for which it is processed, how long we retain it, to whom it may be disclosed, and what rights you hold in respect of your personal data.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By using the 11winrm Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Malaysian Users — Personal Data Protection Malaysian residents are protected by the Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data in commercial transactions. While 11winrm operates under international licensing, we are committed to observing data protection principles consistent with PDPA standards in our handling of all Malaysian user data. Your data will never be sold to third parties.

2Definitions

The following definitions apply throughout this Privacy Policy:

Term Definition
"Personal Data" Any information relating to an identified or identifiable natural person, including name, email address, phone number, financial details, device identifiers, and behavioural data.
"Processing" Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, alteration, deletion, or destruction.
"Data Controller" 11winrm, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
"Data Subject" The individual to whom Personal Data relates — in this context, any User of the 11winrm Platform.
"Third Party" Any natural or legal person, public authority, or body other than the Data Subject, 11winrm, and persons authorised to process Personal Data under 11winrm's direct authority.
"Consent" Freely given, specific, informed, and unambiguous agreement by the Data Subject to the processing of their Personal Data for stated purposes.
"KYC" Know Your Customer — identity and document verification procedures required for regulatory compliance and fraud prevention.

3Data We Collect

11winrm collects the following categories of Personal Data, depending on your interaction with the Platform:

  • Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Malaysian IC / MyKad number, Passport number, Driver's Licence number). Collected during registration and KYC verification.
  • Contact Data: Email address, mobile phone number, and correspondence address. Used for account management, support communications, and promotional notifications (where consented).
  • Financial Data: Payment method details, transaction records, deposit and withdrawal history, account balance information, and cryptocurrency wallet addresses where applicable. This includes records of transactions conducted via Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, USDT, and BTC.
  • KYC Documentation: Copies of identity documents, proof of address documents (e.g., utility bills, bank statements dated within three months), and selfie photographs submitted for identity verification purposes.
  • Technical Data: IP address, browser type and version, device type and operating system, screen resolution, time zone, login timestamps, and session duration.
  • Usage Data: Betting history, game play records, bonus redemption history, search queries within the Platform, pages visited, and feature interaction logs.
  • Communications Data: Records of live chat support interactions, email correspondence, and any other communications you initiate with 11winrm support staff.
  • Preference Data: Your stated preferences regarding marketing communications, deposit and loss limit settings, responsible gambling tool configurations, and notification preferences.
Data Minimisation Principle 11winrm applies a data minimisation approach: we collect only the Personal Data that is necessary for the specific, stated purpose. We do not collect sensitive data categories (e.g., racial or ethnic origin, political opinions, religious beliefs, biometric data) unless expressly required for regulatory compliance and clearly disclosed to you.

4How We Collect Data

We collect Personal Data through the following channels:

  • Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
  • Automated collection: Technical and Usage Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform.
  • Third-party payment providers: Transaction confirmation and status data received from payment processors including Malaysian banking institutions, e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, and cryptocurrency network confirmations.
  • Identity verification services: Verification outcomes and risk scores provided by third-party KYC and anti-fraud service providers used to authenticate your identity and documents.
  • Publicly available sources: Where permitted, information from public registers or databases used to fulfil our anti-money laundering (AML) and regulatory obligations.

5Data Processing & Purpose

11winrm processes your Personal Data for the following defined purposes. Each purpose is supported by a lawful basis for processing as described in Section 6:

Purpose Data Categories Used
Account Registration & Management — Creating and maintaining your player account, verifying identity, and managing account preferences. Identity Data, Contact Data, Technical Data
KYC & Age Verification — Verifying that you meet the minimum age requirement of 21 years and confirming your identity to comply with regulatory obligations. Identity Data, KYC Documentation
Payment Processing — Processing deposits and withdrawals via all supported Malaysian payment methods and cryptocurrency channels. Financial Data, Identity Data, Technical Data
Service Delivery — Enabling access to betting markets, live casino games, slot titles, and all other Platform features. Usage Data, Technical Data, Financial Data
Fraud Prevention & AML Compliance — Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crimes. All Data Categories
Customer Support — Responding to your enquiries, resolving disputes, and providing technical assistance. Identity Data, Contact Data, Communications Data, Usage Data
Responsible Gambling — Monitoring betting patterns to identify potential problem gambling behaviour and managing self-exclusion, deposit limit, and loss limit requests. Usage Data, Financial Data, Preference Data
Marketing Communications — Sending promotional offers, bonus notifications, and product updates to Users who have consented to receive such communications. Contact Data, Preference Data, Usage Data
Platform Improvement — Analysing aggregated usage patterns to improve Platform performance, user experience, and product offerings. Technical Data, Usage Data (anonymised or pseudonymised)
Legal & Regulatory Compliance — Meeting obligations under applicable international gaming licensing conditions, tax reporting requirements, and law enforcement requests where legally mandated. All Data Categories as required

7Data Sharing & Disclosure

11winrm does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

  • Payment Service Providers: Malaysian banking institutions, e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, and cryptocurrency network service providers — solely for the purpose of processing your deposit and withdrawal transactions.
  • Identity Verification & KYC Providers: Third-party identity verification services engaged by 11winrm to validate the authenticity of your identity documents and perform age and sanctions screening.
  • Fraud Prevention & AML Partners: Specialist fraud detection and anti-money laundering screening services used to protect the Platform and its users from financial crime.
  • Game Content Providers: Third-party game studios and live casino operators whose games are accessible through the Platform. These providers may receive anonymised session data to facilitate game delivery and RTP monitoring.
  • IT Infrastructure & Cloud Service Providers: Service providers supplying hosting, database management, data backup, and cybersecurity services to support Platform operations.
  • Legal & Regulatory Authorities: Courts, law enforcement bodies, licensing authorities, and other government agencies where disclosure is required by applicable law, a valid court order, or regulatory obligation.
  • Professional Advisers: Legal counsel, auditors, and accountants acting in their professional capacity, bound by professional confidentiality obligations.

All third-party service providers engaged by 11winrm are required to process Personal Data only in accordance with our instructions and to implement appropriate technical and organisational security measures. We do not permit third parties to use your Personal Data for their own marketing or commercial purposes.

8Cookies & Tracking Technologies

11winrm uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:

  • Strictly Necessary Cookies: Essential for core Platform functionality, including maintaining your logged-in session, processing transactions, and remembering your security preferences. These cookies cannot be disabled without rendering the Platform non-functional.
  • Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gambling limit configurations.
  • Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the Platform — pages visited, session duration, and device types. This data is used solely to improve Platform performance.
  • Marketing Cookies: Used only where you have provided explicit consent, to deliver personalised promotional offers and measure the effectiveness of marketing communications.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core Platform services, though some personalisation features may be limited.

9Data Retention

11winrm retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

Data Category Retention Period Basis
Account & Identity Data 5 years post-closure AML regulatory requirement
KYC Documentation 5 years post-closure Licensing & AML obligation
Financial Transaction Records 7 years Financial regulatory obligation
Communications Data (Support) 3 years Dispute resolution & legitimate interests
Technical & Usage Data 2 years Platform improvement & security
Marketing Preferences Until consent withdrawn Consent-based

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where data must be retained for legal compliance purposes beyond account closure, it will be isolated from active processing systems and accessible only to authorised compliance personnel.

10Data Security

11winrm implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and the 11winrm Platform is encrypted using industry-standard TLS protocols. The Platform operates exclusively over HTTPS.
  • Data Encryption at Rest: Personal Data and sensitive financial information stored in our databases is encrypted at rest using AES-256 encryption.
  • Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and undergo regular data protection training.
  • Multi-Factor Authentication: Internal systems holding Personal Data are protected by multi-factor authentication for all administrative access.
  • Penetration Testing & Vulnerability Assessment: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
  • Incident Response: 11winrm maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your Personal Data, we will notify you promptly in accordance with applicable regulatory requirements.
Your Responsibility While 11winrm implements robust security measures on the Platform side, you are responsible for maintaining the security of your own account login credentials. Never share your password with anyone — including persons claiming to be 11winrm staff. 11winrm will never ask for your password via email, live chat, or any other channel.

11Your Rights

Subject to applicable data protection legislation, you hold the following rights in respect of your Personal Data held by 11winrm. To exercise any of these rights, please contact us using the details in Section 16.

Right of Access

Request a copy of the Personal Data we hold about you and information about how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held in your account record.

Right to Erasure

Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.

Right to Restrict Processing

Request that we temporarily halt processing of your data while a dispute about its accuracy or lawfulness is resolved.

Right to Data Portability

Request a copy of your Personal Data in a structured, machine-readable format for transfer to another controller where technically feasible.

Right to Object

Object to processing of your Personal Data based on our legitimate interests, including direct marketing communications.

Right to Withdraw Consent

Withdraw any consent you have given for consent-based processing at any time, without affecting the lawfulness of prior processing.

Right to Complain

Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe your rights have been infringed.

We will respond to all verifiable data subject requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, with prior notification to you. Identity verification may be required before a request can be processed.

12International Data Transfers

As an internationally licensed platform, 11winrm may transfer your Personal Data to servers, service providers, or processing facilities located outside of Malaysia. Such transfers may include countries that do not provide a level of data protection equivalent to that offered by Malaysian legislation.

Where such transfers occur, 11winrm ensures that appropriate safeguards are in place to protect your Personal Data, including:

  • Standard contractual clauses or equivalent data transfer agreements with the recipient entity.
  • Ensuring that third-party recipients operate under binding data protection obligations consistent with international standards.
  • Where required, conducting transfer impact assessments to evaluate the risks to your Personal Data in the recipient jurisdiction.

By using the 11winrm Platform, you acknowledge and agree that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia, subject to the safeguards described above.

13Children & Minors

The 11winrm Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store Personal Data from individuals under 21 years of age.

If we become aware that Personal Data has been collected from an individual under 21 years of age — whether through a false declaration during registration or any other means — we will promptly close the associated account and securely delete all related Personal Data, subject to any mandatory legal retention obligations.

Parents and guardians who believe that a minor may have accessed the Platform and submitted Personal Data are encouraged to contact us immediately via the support channels listed in Section 16. We will treat all such reports as a priority.

21+ Strictly Enforced We strongly encourage parents and guardians to use parental control software to prevent underage individuals from accessing online gambling platforms. For information on responsible gambling tools and age restriction resources, visit our Responsible Gambling page.

14Third-Party Links

The 11winrm Platform may contain references to third-party services, payment providers, or technology partners. This Privacy Policy applies solely to data processed by 11winrm. We are not responsible for the privacy practices or data handling procedures of third-party entities whose services are accessed in connection with the Platform.

When you interact with third-party payment providers — such as Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow, or FPX — you are subject to the privacy policies of those respective providers in addition to this Policy. We recommend reviewing the privacy policies of any third-party service with which you share Personal Data.

15Policy Amendments

11winrm reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or Platform operations. The "Last Updated" date displayed at the top of this document will be revised accordingly.

Where material changes are made to this Policy — particularly changes that affect the nature of processing or your rights — we will notify registered Users via a prominent in-Platform notice at login, or by email to your registered address, prior to the changes taking effect. We encourage you to review this Policy periodically to remain informed.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and submit an account closure request.

16Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data — including the exercise of any data subject rights described in Section 11 — please contact the 11winrm Data Protection team through the following channels:

Privacy Enquiries
[email protected]
Live Chat Support
Available 24/7
Response Time
Within 30 days (DSR)

When submitting a data subject request, please include your registered username, a description of your request, and any relevant account reference numbers to allow us to process your request efficiently and verify your identity.

Your Data, Protected

Six concrete commitments that underpin how 11winrm handles every piece of your personal information.

256-bit SSL Encryption

All data transmitted between you and 11winrm is protected by industry-standard TLS encryption — the same standard used by major international banks.

Zero Data Sales

Your Personal Data is never sold, rented, or traded to third parties for commercial purposes. Full stop. Your information serves your account — nothing else.

PDPA-Aligned Practices

Our data handling practices are aligned with Malaysia's Personal Data Protection Act 2010 principles, respecting your rights as a Malaysian data subject.

Full Data Subject Rights

Access, correct, delete, or port your data at any time. We honour all data subject requests within 30 days and provide a clear, friction-free process for doing so.

Encrypted Data at Rest

Personal and financial data stored in our systems is encrypted at rest using AES-256 — ensuring your data remains unreadable even if storage media were ever compromised.

Breach Notification

In the unlikely event of a data security incident affecting your Personal Data, 11winrm will notify you promptly and take immediate remediation action.

Still Have Privacy Questions?

Our support team is available 24/7. For detailed data protection enquiries, reach us at [email protected] — or visit our FAQ for quick answers to the most common questions from Malaysian players.

 For players aged 21 and above only. Please gamble responsibly. Responsible Gambling →