11pk Privacy Policy — Your Data, Your Rights

1 Who We Are

11pk is an online betting and casino platform operating at 11pk.bet, offering sports betting, live casino games, slots, and instant games to registered players. 11pk operates under an international gaming licence and is committed to maintaining the data protection standards required of a licensed gaming operator.

For the purposes of this Privacy Policy, "11pk", "we", "us", and "our" refer to the operating entity behind the 11pk.bet platform. "You" and "Player" refer to any individual who accesses the 11pk platform, whether as a registered account holder or as an unregistered visitor.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by 11pk through the following channels:

• The 11pk website at 11pk.bet and all associated pages and subdomains.
• The account registration and login process.
• Deposit and withdrawal transactions conducted via supported payment methods.
• Communications between you and the 11pk customer support team, including live chat, email, and any future support channels.
• Participation in promotional campaigns, tournaments, and loyalty programmes offered by 11pk.
• Technical data collected automatically when you visit or interact with the platform, including device data, IP address, and session behaviour.

This Policy does not apply to third-party services that may be linked from the 11pk platform, including payment processors and game content providers who operate under their own separate privacy frameworks. Players are encouraged to review the privacy policies of any third-party service they interact with independently of 11pk.

3 Personal Data We Collect

11pk collects personal data in two ways: information you provide directly, and information collected automatically through your use of the platform.

Information You Provide Directly:

Information Collected Automatically:

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Usage Data: Pages visited, session duration, game titles accessed, betting history, deposit and withdrawal frequency, and navigation patterns within the platform.
• Cookie Data: Session identifiers, preference tokens, and anonymised analytics identifiers as further described in Clause 9.

4 How We Use Your Personal Data

11pk uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your 11pk account, including processing logins, password resets, and account preference changes.
• Payment Processing: To facilitate deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20, and to process withdrawal requests to verified payment methods.
• Identity Verification (KYC): To comply with the KYC obligations associated with 11pk's international gaming licence, which requires verification of player identity before withdrawal processing.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other forms of platform abuse.
• Customer Support: To respond to queries, complaints, and account issues submitted by Players through live chat or email.
• Responsible Gaming: To monitor betting patterns and, where appropriate, apply responsible gaming interventions such as mandatory cooling-off periods or account restrictions in accordance with our Responsible Gaming Policy.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the platform's performance, design, game offering, and overall user experience.
• Regulatory Compliance: To maintain records and respond to information requests from regulatory authorities, law enforcement agencies, and licensing bodies as required by applicable law.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. Players may opt out at any time by contacting support.

5 Legal Basis for Processing

11pk processes personal data under one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to fulfil 11pk's obligations under the Player agreement — including account management, payment processing, and game delivery — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with applicable law, including KYC identity verification, AML record-keeping, and responses to regulatory or law enforcement requests, is conducted on the basis of legal obligation.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of 11pk's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is conducted on the basis of your consent. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing or your ability to use the platform.

6 Data Sharing & Disclosure

11pk does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive only the payment-specific data required to process your transaction. These providers operate under their own regulatory and data protection frameworks.
• KYC & Identity Verification Partners: Third-party identity verification services engaged by 11pk to process KYC documents receive identity data solely for verification purposes and are contractually prohibited from using that data for any other purpose.
• Game Content Providers: Where third-party game studios supply games available on the 11pk casino platform, aggregate session data (such as game outcomes and session duration) may be shared for the purpose of resolving game disputes and ensuring fair play certification compliance.
• Regulatory & Law Enforcement Authorities: 11pk will disclose personal data to regulatory authorities, licensing bodies, and law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. 11pk will not notify Players of such disclosures where doing so is prohibited or would prejudice a lawful investigation.
• Fraud Prevention Networks: In cases involving suspected fraud or money laundering, 11pk may share relevant data with industry fraud prevention bodies and other gaming operators for the purpose of protecting the integrity of the wider gaming ecosystem.

7 KYC & Identity Verification

As a licensed gaming operator, 11pk is obligated to conduct Know Your Customer (KYC) checks on all Players prior to the processing of their first withdrawal. The KYC process is a regulatory requirement, not optional, and cannot be waived.

During the KYC process, 11pk may request the following documents from Pakistani players:

• A clear copy of your Computerised National Identity Card (CNIC) — front and back.
• Proof of residential address, such as a utility bill, bank statement, or official correspondence issued within the last three months and showing your name and current address.
• A selfie photograph of yourself holding your CNIC, where required for enhanced verification.
• Proof of payment method ownership — for example, a screenshot of your JazzCash or EasyPaisa account showing your registered name, where the deposit method differs from the account name.

KYC documents submitted to 11pk are processed securely, stored in an encrypted environment, and retained only for as long as required by the regulatory obligations of 11pk's gaming licence. They are not shared outside the compliance and regulatory context described in Clause 6.

8 Payment Data

When you make a deposit or request a withdrawal on 11pk, the following payment-related data handling practices apply:

• 11pk does not store full card numbers, CVV codes, or full banking credentials on its own servers. Payment transactions are processed through encrypted integrations with regulated payment service providers.
• For mobile wallet payments via JazzCash or EasyPaisa, only the account identifier (mobile number) associated with the transaction is retained in 11pk's records for withdrawal matching and AML audit purposes.
• For USDT TRC20 transactions, the wallet address used for each transaction is recorded. Players should be aware that blockchain transactions are publicly visible by their nature; 11pk does not control the transparency of public blockchain records.
• Payment records are retained for a minimum period as required by AML regulations applicable under 11pk's gaming licence. These records may be provided to regulatory or law enforcement authorities upon a lawful request.

9 Cookies & Tracking Technologies

11pk uses cookies and similar client-side technologies when you access the platform via a web browser. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how the platform is used.

The following categories of cookies are used by 11pk:

11pk does not use third-party advertising cookies or cross-site tracking pixels that build behavioural advertising profiles. You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

10 Data Retention

11pk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum post-closure period as required by the applicable gaming licence regulations, typically five years following account closure.
• KYC Documents: Retained for the minimum period required by AML regulations under 11pk's licensing framework, typically five years from the date of the last transaction.
• Payment Records: Retained for a minimum of five years from the date of each transaction in accordance with AML record-keeping requirements.
• Support Communications: Retained for three years from the date of each interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for the full duration of that matter plus two years.
• Session & Usage Logs: Retained in identifiable form for up to 12 months for security and fraud monitoring purposes, after which they are either deleted or anonymised.
• Marketing Preferences: Opt-in and opt-out records are retained indefinitely to demonstrate compliance with consent obligations.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

11 Data Security

11pk implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and 11pk's servers is protected by 256-bit SSL/TLS encryption. Connections that do not support minimum TLS standards are rejected.
• Encryption at Rest: Sensitive personal data stored on 11pk's servers, including KYC documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within 11pk is restricted to staff who require it to perform their role. Access permissions are reviewed regularly and revoked immediately upon change of role or employment.
• Intrusion Detection: 11pk's infrastructure is monitored continuously for unauthorised access attempts, unusual traffic patterns, and potential security incidents.
• Incident Response: In the event of a data breach that poses a risk to Players' rights, 11pk will notify affected Players and the relevant regulatory authority within the timeframe required by applicable law.

12 Your Data Rights

Subject to applicable law and the terms of 11pk's licensing obligations, you have the following rights with respect to your personal data held by 11pk:

• Right of Access: You may request a copy of the personal data 11pk holds about you. We will provide this within a reasonable timeframe, typically 30 days of receipt of a verifiable request.
• Right to Rectification: If personal data held by 11pk is inaccurate or incomplete, you may request that it be corrected. Minor contact details such as email address and phone number can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where 11pk no longer has a lawful basis to retain it. Note that where retention is required by regulatory or legal obligation — such as AML record-keeping — erasure requests will be fulfilled only to the extent permitted by those obligations.
• Right to Restrict Processing: In certain circumstances, you may request that 11pk restrict processing of your personal data while a rectification or objection request is being resolved.
• Right to Data Portability: You may request a copy of personal data you have provided to 11pk in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing conducted on the basis of legitimate interests, including direct marketing. We will cease processing for that purpose unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] from the email address registered to your 11pk account. We may ask you to verify your identity before processing any data rights request.

13 Children's Privacy

The 11pk platform is strictly intended for adults aged 21 years and above. 11pk does not knowingly collect or process personal data relating to individuals under the age of 21.

If 11pk becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, the personal data will be deleted to the extent permitted by legal and regulatory retention obligations, and any funds held in the account will be dealt with in accordance with 11pk's underage gambling procedures.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 11pk, please contact us immediately at [email protected].

14 International Data Transfers

11pk operates under an international gaming licence, and aspects of its operations — including payment processing infrastructure, KYC verification services, and game content delivery — may involve the transfer of personal data to servers or service providers located outside Pakistan.

Where personal data is transferred internationally, 11pk ensures that appropriate safeguards are in place to protect that data at a standard equivalent to the protections described in this Privacy Policy. Such safeguards may include:

• Contractual data protection clauses incorporated into agreements with all third-party service providers who receive personal data.
• Selection of service providers located in or operating from jurisdictions that maintain recognised data protection standards.
• Technical measures ensuring that data transmitted internationally is encrypted in transit and at rest.

Players who wish to understand more about the international transfer arrangements applicable to their personal data may contact 11pk at [email protected].

15 Third-Party Links & Services

The 11pk platform may contain references to third-party services — such as payment processors — that operate independently of 11pk. When you interact with a third-party service, you leave the 11pk data environment and your interaction with that third party is governed by their own privacy policy, which is separate from this document.

11pk accepts no responsibility for the data practices of third-party services and encourages Players to review the privacy policies of any third-party service before providing personal information to that service. The fact that 11pk integrates with or references a third-party service does not constitute an endorsement of that party's data handling practices.

16 Changes to This Privacy Policy

11pk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Material changes to this Policy will be communicated to registered Players via a notice displayed on the 11pk platform and, where practicable, by email to the registered address.

The updated Policy will take effect on the date specified in the revision notice. Continued use of the 11pk platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. The current version of this Policy, along with its effective date, is always available on this page.

Players who do not accept the revised Privacy Policy should cease using the platform and may request account closure by contacting support. Account closure in these circumstances will be processed in accordance with the Terms & Conditions and applicable data retention obligations.

17 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 11pk handles your personal data, please contact us through one of the following channels:

• Email: [email protected] — for formal data rights requests, privacy complaints, or policy clarification queries. Please include your registered username and a clear description of your query. We aim to respond within 5 business days.
• Live Chat: Available directly on the 11pk platform, daily from 9:00 AM to 1:00 AM Pakistan Standard Time (PST). Live chat is best suited for general privacy questions rather than formal data rights requests.