11kab Privacy Policy

This Privacy Policy ("Policy") describes how 11kab ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of individuals ("User", "Player", "you") who register an account, visit the website at 11kab.com, or otherwise interact with the 11kab platform (the "Platform").

11kab is committed to handling your personal information with the highest standards of transparency and security. We operate in full alignment with internationally recognised data protection frameworks, including principles derived from the General Data Protection Regulation (GDPR), and we apply those principles to every player on our Platform — including all players accessing 11kab from cities across Pakistan such as Karachi, Lahore, Islamabad, Faisalabad, and beyond.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy. By registering an account or using the Platform, you confirm that you have read and understood this Privacy Policy in its entirety and consent to the data processing activities described herein.

11kab collects only the data that is necessary for the purposes described in this Policy. The categories of personal data we may collect include the following:

We do not knowingly collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or religious beliefs) except where strictly required by anti-money laundering regulations or responsible gaming obligations, and only with your explicit consent where applicable.

11kab collects personal data through the following primary channels:

• Direct Submission: Data you provide when completing the registration form, submitting a KYC verification request, contacting our support team, or updating your account profile.
• Automated Technical Collection: Data gathered automatically when you access the Platform, including through cookies, web beacons, server logs, and analytics tools. This includes your IP address, device fingerprint, and navigation patterns.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 wallet systems when you make deposits or withdrawals.
• Identity Verification Partners: Where we use third-party KYC service providers to verify your CNIC against national databases, we receive a verification result (pass/fail) and may retain a reference number from that process.
• Fraud Detection Systems: Our automated fraud monitoring systems generate risk scores and flags based on your account activity, device data, and betting patterns.

11kab processes your personal data for the following clearly defined purposes:

• Account Creation and Management: To register your account, verify your identity, manage your profile, and provide access to all Platform features including sports betting, casino games, and live markets.
• Payment Processing: To process deposits and withdrawals in PKR via your chosen local payment method and to maintain accurate financial records of all transactions.
• Legal and Regulatory Compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, gaming license conditions, and any applicable court orders or regulatory directives.
• Responsible Gaming: To monitor betting behaviour and apply responsible gaming tools such as deposit limits, reality checks, cooling-off periods, and self-exclusion where appropriate or requested.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraud, bonus abuse, multi-accounting, money laundering, and other prohibited activities on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of your support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage data and improve the features, performance, and design of the 11kab Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and PSL-related betting promotions by email or SMS — but only where you have given explicit consent or where permitted under applicable law. You may opt out at any time.

For each category of personal data processing carried out by 11kab, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing necessary to comply with AML laws, KYC regulations, gaming license requirements, and court orders applicable in our operating jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — where those interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, optional cookies beyond functional necessity, and certain enhanced personalisation features — where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

11kab does not sell or rent your personal data to any third party. We may share your data only in the following limited circumstances and only with parties who are contractually bound to maintain appropriate data protection standards:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency processors receive only the minimum data necessary to complete your requested transaction.
• Identity Verification Partners: KYC and AML compliance vendors receive identity documents and personal details solely for the purpose of verifying your identity against regulatory requirements.
• Technology and Hosting Providers: Cloud infrastructure, database hosting, and cybersecurity partners who operate our Platform infrastructure under strict data processing agreements.
• Game and Odds Providers: Third-party game studios and sports data providers may receive anonymised session identifiers for game integrity and technical purposes only.
• Regulatory Authorities and Law Enforcement: Where required by a valid court order, regulatory instruction, or legal obligation, we may disclose your data to the relevant Pakistani or international authority.
• Fraud Prevention Networks: Anonymised or pseudonymised fraud signals may be shared with industry-wide fraud prevention networks to protect all players across the Platform.

Any third party receiving your data is subject to a binding data processing agreement that prohibits them from using your information for any purpose beyond the specific service they provide to 11kab.

11kab retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your active account relationship with 11kab.
• Identity and KYC Documents: Retained for a minimum of 5 years following account closure, as required under standard AML compliance obligations.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction to satisfy financial record-keeping requirements.
• Support Communications: Retained for 2 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Device and Technical Logs: Retained for up to 12 months from the date of collection, unless flagged as relevant to a fraud or security investigation.
• Marketing Consent Records: Retained for the duration of your account, plus 2 years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, your data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

11kab applies a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the 11kab Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted using industry-standard AES-256 encryption.
• Password Security: User passwords are never stored in plain text. We use strong one-way hashing algorithms with per-user salting to ensure passwords cannot be recovered even in the event of a database breach.
• Access Controls: Strict role-based access controls limit internal access to personal data on a strict need-to-know basis. All internal access to sensitive data is logged and auditable.
• Two-Factor Authentication: 11kab offers and strongly encourages 2FA via your registered Pakistani mobile number for all account logins.
• Penetration Testing: Our Platform undergoes regular independent security assessments and penetration testing by qualified cybersecurity professionals.
• Incident Response: In the event of a data breach that poses a risk to your rights or freedoms, 11kab will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

11kab uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how players use our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and odds format. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This information is used exclusively to improve 11kab's services.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional content. These track whether you have viewed or interacted with a specific promotion.

You may manage your cookie preferences at any time through your browser settings or through the cookie consent tool available on the Platform. Blocking strictly necessary cookies may impair your ability to access and use certain features of 11kab.

Subject to applicable law and certain legal exemptions, you hold the following rights in respect of your personal data held by 11kab:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how and why we process it.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Basic profile information can be updated directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires us to retain it.
• Right to Restriction of Processing: You may request that we limit our use of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to us directly, for transfer to another service provider.
• Right to Object: You may object to our processing of your data where we rely on legitimate interests as our legal basis, including for direct marketing purposes. Objections to marketing are always honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 days. We may request identity verification before processing your request to ensure your data is not disclosed to an unauthorised party.

The 11kab Platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the relevant account, delete the data to the extent legally permissible, and notify any applicable regulatory authority where required.

As part of our age verification commitment, 11kab may use automated systems combined with manual review to verify that account holders meet the minimum age requirement. Submission of a valid CNIC — which includes date of birth — is a mandatory step in the registration and KYC process and forms the primary basis for our age verification procedure.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

11kab operates infrastructure across multiple geographic regions to ensure Platform reliability and performance for players across Pakistan. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including jurisdictions where 11kab's technology partners and hosting providers operate their data centres.

Wherever your data is transferred internationally, 11kab ensures that appropriate safeguards are in place to protect it to a standard equivalent to that applied within the Platform. These safeguards include:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by 11kab's compliance team.
• Technical and organisational security measures applied consistently across all processing locations regardless of geography.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting our Data Protection Officer at the address provided in Section 14 below.

11kab reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made, we will notify registered users via the email address on file and display a prominent notice on the Platform for a minimum of 7 days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should cease using the Platform and request account closure before the effective date of the changes.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. All prior versions of this Policy are superseded by the current published version. You may request a copy of any previous version by contacting us at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to 11kab's data processing activities, please contact our Data Protection Officer (DPO) through the following channel:

• Email (DPO): [email protected] — please use the subject line "Privacy / DPO Request" for all data protection matters
• Live Chat: Available 24/7 directly from the 11kab Platform — our support team can escalate data protection queries to the DPO on your behalf
• Response Time: All data rights requests and privacy enquiries are acknowledged within 48 hours and resolved within 30 days as a standard commitment

Our support and compliance teams are comfortable communicating in both English and Urdu, and are equipped to assist players across all regions of Pakistan — whether you are in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, or anywhere else in the country.