Fortune11 Privacy Policy — Our Commitment to Protection Malaysian Players' Personal Data

This Privacy Policy ("Policy") is published by Fortune11 ("We", "Platform") and applies to all individuals ("Members", "You") who register, browse or use the services offered through the fortune11.xyz website and related Fortune11 applications.

Fortune11 is an online Sports Betting, Live Casino, poker and e-sports platform built specifically for Malaysian players. We understand that privacy is a fundamental need for every user, and we are committed to ensuring that all data you provide to Fortune11 is handled responsibly, transparently and in accordance with applicable Malaysian law — in particular the Personal Data Protection Act (PDPA) 2010.

This Privacy Policy clearly outlines: what data we collect, why we need it, how we use it, who can access it, how long it is retained, and what your rights are as the data owner. If you have any questions not addressed in this document, please contact us at support@fortune11.xyz.

Fortune11 collects your personal data through the following methods:

• Account Registration: When you register a Fortune11 account, you provide us directly with basic information such as your name, email address, phone number and date of birth.
• KYC Process (Identity Verification): Fortune11 requires a copy of your identity document (MyKad) to verify your identity and age before processing your first withdrawal or when additional verification is required for certain account activity.
• Financial Transactions: When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), transaction details including the amount and payment method are automatically recorded in the Fortune11 system.
• In-Platform Activity: Fortune11's systems automatically record your gaming activity — bets placed, games played, wins and losses — for account statement purposes, dispute resolution and platform analysis.
• Technical Data: When you browse the Fortune11 website, our servers automatically collect standard technical data such as your IP address, browser type and device information for security and platform optimisation purposes.
• Support Communications: Records of all your communications with the Fortune11 customer support team — whether via live chat, email, or Telegram — are retained for quality control purposes and future reference as needed.
• Cookies and Tracking Technologies: Fortune11 uses cookies and similar technologies to enhance user experience, remember your preference settings, and analyze platform usage patterns in aggregate.

Fortune11 does not collect your personal data from third-party sources without your knowledge, except where a competent law enforcement authority makes an official request in accordance with proper Malaysian legal procedures.

Fortune11 uses your personal data solely for the following legitimate and necessary purposes:

• Service Providers: To enable you to access and use all features of the Fortune11 platform — including placing Sports Betting wagers, playing Live Casino, poker and e-sports, making deposits, and withdrawing winnings.
• Identity Verification and KYC: To verify your identity, age (minimum 18 years) and nationality, ensuring compliance with the legal requirements and regulations applicable to the betting platform.
• Financial Transaction Processing: To process deposits via Touch 'n Go, DuitNow, GrabPay, FPX and others, and to process withdrawal of winnings to your Malaysian bank account or e-wallet.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-account usage and any other activity that violates Fortune11's Terms & Conditions.
• Customer Support: To assist you when you contact the Fortune11 support team with enquiries, complaints or requests relating to your account or gameplay.
• Service Communications: To send important notifications relating to your account, transactions, changes to our Terms or Privacy Policy, and relevant security information.
• Marketing (With Consent): To send you information about Fortune11 promotions, bonuses, and special offers — only if you have given consent to receive marketing communications. You may withdraw this consent at any time through your Fortune11 account settings.
• Platform Improvements: To analyse Fortune11 platform usage patterns on an aggregate basis (not individually) in order to improve the interface, performance, and new features relevant to Malaysian players.
• Legal Compliance: To fulfil Fortune11's legal obligations under PDPA 2010, anti-money laundering regulations (AMLA) and the requirements of relevant regulatory bodies.

Fortune11 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating our platform, Fortune11 may share your data with the following parties in limited and controlled circumstances:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions — including Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and Malaysian banks via FPX — receive only the transaction data required to process your payment.
• Live Casino Providers: Providers such as Evolution Gaming and Pragmatic Play Live, which supply Fortune11's live casino tables, may receive your session identifier to grant table access — but not your full personal identification data.
• Technology Service Providers: Companies that provide Fortune11 with infrastructure, cloud computing, analytics and cybersecurity services may access your data in the course of delivering those services — all subject to strict confidentiality agreements.
• Legal Authorities: Fortune11 will disclose required data to Malaysian law enforcement authorities or relevant regulatory bodies when mandated by law, court order, or valid official directive.

All third parties that receive data from Fortune11 are bound by strict data processing agreements and are only permitted to use that data for the specific agreed purposes. Fortune11 regularly monitors third-party compliance.

Fortune11 invests seriously in security technology and procedures to protect your personal data from unauthorized access, misuse, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your web browser or app and Fortune11's servers is encrypted using the latest TLS standards — ensuring no data can be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in Fortune11's databases — including passwords (which are not stored in plain text) and financial information — is encrypted using strong encryption algorithms.
• Layered Access Controls: Only Fortune11 staff who require access to specific data in order to perform their duties are permitted to access it — based on the need-to-know principle.
• 24/7 Security Monitoring: Fortune11's automated monitoring system detects and flags suspicious activity — including repeated failed login attempts, access from unusual locations, and anomalous transaction patterns.
• Regular Security Audits: Fortune11 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Fortune11 offers two-factor authentication for player accounts — we strongly encourage all members to enable this feature in their Fortune11 account security settings.

While Fortune11 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role in keeping your Fortune11 account safe — never share your password, use a strong and unique password, and always log out when using a shared device.

Fortune11 uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. The following are the types of cookies used by Fortune11:

You can manage your cookie settings through your web browser's options. However, disabling essential cookies may affect the functionality of the Fortune11 platform. For more information on managing cookies, please refer to your web browser's user guide.

As a Fortune11 member and as an individual protected under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights with respect to your personal data:

Fortune11 will process all data rights requests within 14 business days from the date of receipt of a complete request. In cases that require additional time (for complex requests), we will notify you and provide an estimated resolution timeframe.

Fortune11 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal obligations. In general:

• Active Account Data: Retained for the duration of your active Fortune11 account and for a reasonable period following account closure, to facilitate the resolution of any disputes or claims that may arise.
• Financial Transaction Records: Records of all deposits (Touch 'n Go, DuitNow, GrabPay, FPX) and withdrawals are retained for a minimum of 7 years as required under Malaysian financial regulations and anti-money laundering (AMLA) laws.
• KYC and Identity Verification Records: Identity verification documents are retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Support Communication Records: Live chat conversations, emails and other support records are retained for 3 years from the date of communication, for quality control and dispute reference purposes.
• Technical Data and Logs: System logs and technical data are retained for 12 months for security purposes and technical troubleshooting.
• Inactive Account Data: Fortune11 accounts that have been inactive for more than 12 consecutive months will be considered dormant. Data will be retained for 2 years from the date of last activity before being considered for deletion, subject to applicable legal requirements.

When data is no longer needed and there is no legal obligation to retain it, Fortune11 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

The Fortune11 platform is intended exclusively for individuals aged 18 years and above. Fortune11 does not knowingly collect, store or process personal data from children or individuals under the age of 18.

If we determine that personal data has been collected from individuals under the age of 18 without proper verification, Fortune11 will take immediate action to delete the data, close the account in question, and return any remaining balance in accordance with the appropriate procedures.

Fortune11 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements in Malaysia.

When significant changes are made to this Privacy Policy, Fortune11 will:

• Send email notifications to all active Fortune11 members at least 14 days before the changes take effect.
• Displaying prominent notices within the Fortune11 platform informing users of upcoming changes.
• Updating the "Last Updated" date at the top of this document with the date of the latest change.

Your continued use of the Fortune11 platform after an amended Privacy Policy takes effect will be deemed as your acceptance of those changes. If you do not agree with the amendments made, you have the right to close your Fortune11 account by contacting our support team.

If you have any questions, concerns or complaints regarding how Fortune11 handles your personal data, or if you wish to exercise your rights under Malaysia's PDPA 2010, please contact us through the following channels:

• Privacy Email: support@fortune11.xyz (please include "Data Privacy Enquiry" in your email subject line)
• Live Chat: Available 24 hours a day, 7 days a week within the Fortune11 platform — our agents can assist you in Bahasa Melayu
• Telegram: Through Fortune11's official support channels

Fortune11 is committed to responding to all privacy-related enquiries within 7 working days. For requests involving data access or deletion, please provide your full name, Fortune11 account number and a clear description of your request to help us process it efficiently.

If you are not satisfied with Fortune11's response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory body established under the Personal Data Protection Act 2010.