Privacy Policy nday11 –
Your Data, Our Responsibility

When you register and use the nday11 platform, we collect several categories of personal information required for specific purposes. All data collection is carried out transparently and only for legitimate purposes in accordance with PDPA 2010.

The information we collect falls under the following categories:

Technical and activity data is collected automatically when you use the nday11 platform — whether via the website or mobile app. This information helps us detect unauthorised access, monitor platform performance, and improve the overall user experience.

Every piece of information we collect has a clear and legitimate purpose. nday11 does not use your data for any purpose unrelated to platform operations or contrary to the consent you have provided.

• Process account registration and verify your identity through established KYC procedures.
• Process deposits, withdrawals, and financial transactions securely and accurately.
• Provide effective customer support and resolve any complaints or disputes.
• Send important notifications related to your account, promotions, and relevant platform updates.
• Detect and prevent fraud, money laundering, and unlawful activity on the platform.
• Comply with applicable legal and regulatory obligations, including AML reporting requirements.
• Personalise your gaming experience based on your preferences and usage patterns.
• Conduct internal analytics to enhance our products, services, and platform performance.

Nday11 invests seriously in cybersecurity infrastructure to ensure your data remains protected against both external and internal threats at all times. The following technical and organisational security measures are applied continuously:

• Encryption in transit: All communications between your device and nday11's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates that are regularly renewed.
• Encryption at rest: Sensitive data stored in our databases is encrypted using AES-256 — a globally recognised encryption standard.
• Layered access control: Only authorised personnel with a legitimate business need may access members' personal data, and every access is logged for audit purposes.
• 24/7 Threat Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate around the clock to detect and block suspicious activity.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of protection to their accounts.
• Regular backups: Data is backed up regularly to secure, geographically separated locations to ensure service continuity.

Nday11 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes without your explicit consent. However, there are limited situations where data sharing is necessary for platform operations:

• Payment service providers: Payment gateways and financial service providers partnered with nday11 receive the transaction data necessary to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Technical service providers: Companies providing cloud infrastructure, analytics, and technical support for nday11 operations may have limited access to certain data strictly within the scope of their services.
• Legal authorities: nday11 will disclose information to the relevant authorities when required by law, court order, or official investigations relating to money laundering or fraud.
• Fraud Enforcement: Information may be shared with industry bodies or other platforms involved in integrated fraud prevention programmes to protect the online gaming ecosystem.

Nday11 uses cookies and similar tracking technologies to enhance platform functionality, understand how users interact with our website, and deliver a more personalised experience. Cookies are small text files stored on your device when you browse our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, account security, and navigation. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve the user experience.
• Functional Cookies: Save your preferences such as language, display settings, and gaming preferences so you don't need to reconfigure them every time you log in.
• Analytics Cookies: Help us understand aggregated usage patterns to make data-driven decisions on platform improvements.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect platform functionality and your overall gaming experience.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you. nday11 is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal information we hold about you at any time through our customer support channels.
• Right to Rectification: If any of your personal information is inaccurate or out of date, you have the right to request a correction and we will update it within a reasonable timeframe.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict how we process your data, particularly while a dispute or investigation is ongoing.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, and we will honour that request immediately.
• Right to Erasure: Once your account is closed and there is no legal obligation to retain the data, you may request the deletion of your personal data from our systems.
• Right to Data Portability: You have the right to receive a copy of your personal data in a machine-readable format for the purpose of transferring it to another service provider if needed.

Nday11 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. The following are data retention period guidelines by category:

Once the retention period has expired and there is no legal obligation requiring continued retention, nday11 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered. This process runs automatically according to a schedule defined in our data management system.

Nday11 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements in how we protect your information. Any material amendments will be communicated to you through the following channels:

• In-app or on-site notification the next time you log in after an amendment is made.
• Email notification to the address registered on your account for significant amendments.
• Update the "Updated" date at the top of this document for minor amendments.

Your continued use of the nday11 platform following any amendments to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your privacy.

If you disagree with any amendments made, you have the right to stop using the platform and close your account. Our support team is ready to assist you through the account closure process if needed.