11j Privacy Policy
Your Data, Your Rights

This Privacy Policy ("Policy") describes how the internationally licensed gaming entity operating the 11j platform ("11j", "we", "us", "our") collects, processes, uses, stores, and shares personal data belonging to users ("you", "your", "Player") of the 11j online gaming platform accessible at 11j.bio and its associated interfaces.

11j is committed to protecting the privacy and personal data of all players. This Policy applies to all personal data collected through the registration process, 11j Login sessions, financial transactions (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank interactions), identity verification processes, customer support interactions, and any other use of 11j's services.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy. By creating an account or using the 11j platform, you acknowledge that you have read and understood this Privacy Policy.

11j collects personal data across the following categories. The specific data collected depends on the nature of your interaction with the platform:

11j collects personal data through the following mechanisms:

• Directly from you — through the registration form, KYC submission portal, deposit and withdrawal forms, support contact forms, and any other form or interface where you voluntarily provide information;
• Automatically through platform use — technical data including IP address, device identifiers, and session logs are collected automatically when you access the 11j platform or complete the 11j Login process;
• From payment service providers — transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard is received to confirm and record financial transactions on your account;
• From identity verification services — where third-party KYC verification tools are used to cross-reference your CNIC data against public records, confirmation and match results are received by 11j;
• Through cookies and tracking technologies — as described in Section 9 of this Policy.

11j processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 11j — to operate your account, process transactions, pay winnings, and provide the gaming services you have requested;
• Legal obligation: Processing is necessary to comply with 11j's obligations under its international gaming licence, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification mandates;
• Legitimate interests: 11j processes certain technical and behavioural data on the basis of legitimate interests — including fraud prevention, platform security monitoring, responsible gaming enforcement, and product improvement — where these interests are not overridden by your privacy rights;
• Consent: Where 11j sends you promotional communications, this is done on the basis of your consent provided during registration or subsequently. You may withdraw this consent at any time through your account communication preferences.

Your personal data is used by 11j for the following purposes:

• Creating, maintaining, and managing your 11j account, including processing the 11j Login authentication procedure;
• Processing deposits via JazzCash, EasyPaisa, and Pakistani bank transfers, and processing withdrawal requests to your verified payment method;
• Conducting KYC identity verification to confirm your age (21+ requirement), identity, and payment method ownership;
• Detecting and preventing fraud, money laundering, account sharing, bonus abuse, and other prohibited conduct as defined in the 11j Terms and Conditions;
• Complying with anti-money laundering reporting obligations and other regulatory requirements imposed by 11j's international gaming licence;
• Operating responsible gaming monitoring systems — including flagging account behaviour patterns that may indicate problem gambling — and applying player-requested limits and exclusions;
• Providing customer support and responding to queries, complaints, and dispute submissions;
• Sending transactional communications — deposit confirmations, withdrawal notifications, OTP messages, and security alerts — necessary to the operation of your account;
• Sending promotional communications and personalised offers where you have consented to receive them;
• Improving the 11j platform through aggregate, anonymised analysis of usage patterns and technical performance data.

11j does not sell personal data to third parties. Data is shared with third parties only in the following limited circumstances:

• Payment processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard as required to process your deposits and withdrawals. These entities operate under their own privacy policies and regulatory frameworks;
• Game studios and software providers: Your gaming session data may be processed by the studio providing the specific game you are playing (e.g., for bet resolution, jackpot tracking, or RNG operation). Game studios receive only the data necessary for game operation and are contractually prohibited from using it for other purposes;
• KYC and identity verification services: Where third-party verification tools are used to confirm your CNIC documentation, the verification data is shared with those services solely for the verification purpose;
• Regulatory and law enforcement authorities: 11j is required to share data with its licensing authority and, where required by applicable law, with law enforcement agencies. This includes reporting obligations under AML frameworks. Such disclosures are made only when legally required;
• Professional advisors: Legal counsel, auditors, and compliance consultants may access limited personal data in the course of their professional engagements with 11j, subject to strict confidentiality obligations.

All third parties with whom 11j shares personal data are required to maintain appropriate security measures and to use the data only for the permitted purpose.

7.1 JazzCash and EasyPaisa Data. When you deposit or withdraw via JazzCash or EasyPaisa, 11j records your registered Pakistani mobile number associated with the wallet, the transaction amount, the transaction reference ID provided by the network, and the timestamp. This information is used for transaction matching, dispute resolution, AML reporting, and KYC payment method verification.

7.2 Bank Transfer Data. For HBL, UBL, and Meezan Bank transactions, 11j records your bank account title, account number (or IBAN), the bank name, transaction amount, and reference number. This data is used for the same purposes as mobile wallet data above.

7.3 Card Data. 11j does not store full card numbers. Where card payments are accepted, only the last four digits and card expiry month/year are retained by 11j for record purposes. Full card processing is handled by the card payment gateway, which operates under its own PCI-DSS compliance obligations.

8.1 CNIC Data. Your Computerised National Identity Card (CNIC) number and the photographic image of your CNIC are collected during the KYC verification process. This data is used to confirm your identity, verify your age (21+ requirement), and comply with 11j's regulatory obligations under its international gaming licence.

8.2 Storage of Identity Documents. CNIC images and other identity documents are stored on secured servers with access restricted to compliance personnel with a legitimate operational need. These documents are not used for any purpose beyond identity and age verification and regulatory reporting.

8.3 Deletion of Identity Documents. Identity documents are retained for the period required by 11j's licensing authority after account closure. Following the mandatory retention period, documents are securely deleted. Retention periods align with international AML record-keeping requirements, typically five to seven years from the date of account closure.

8.4 Failed Verification. Where your KYC submission fails verification, 11j retains a record of the failed attempt and the reason for a limited period in accordance with fraud prevention obligations. Submitted documents from failed verifications are securely deleted within 30 days where no further legal obligation to retain them exists.

The 11j platform uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the 11j Login session to function, to maintain your authenticated state, and to apply your security settings. These cannot be disabled without impacting platform functionality;
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming limit configurations;
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the 11j platform. This information is used internally to improve platform design and performance — it is not shared with third-party advertising networks;
• Security cookies: Used to detect suspicious activity, flag unusual login patterns, and protect against automated attacks on the 11j platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 11j account.

11j retains personal data only for as long as necessary for the purposes for which it was collected, subject to any longer periods required by regulatory obligations. The following general retention framework applies:

• Active account data: Retained for the duration of the account's active status plus any mandatory regulatory period following closure;
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction in accordance with AML record-keeping requirements;
• KYC and identity documents: Retained for the regulatory period specified by 11j's licensing authority, typically five to seven years from account closure;
• Support communication records: Retained for a period of two years from the date of the interaction, or longer where a dispute or legal matter remains unresolved;
• Technical and session logs: Retained for up to 12 months for security and fraud investigation purposes, after which they are deleted or anonymised;
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to document the consent history.

Following the applicable retention period, personal data is securely deleted using methods appropriate to the sensitivity of the data involved, or is anonymised in a manner that permanently prevents re-identification.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 11j:

To exercise any of these rights, contact 11j's support team via live chat or at [email protected]. Requests will be acknowledged within 5 business days and fulfilled within 30 days where legally required. 11j may require identity verification before fulfilling access or deletion requests to prevent unauthorised data disclosure.

12.1 Technical Measures. 11j implements the following technical security measures to protect personal data: 256-bit SSL/TLS encryption for all data in transit; AES encryption for sensitive data at rest; role-based access controls limiting staff access to personal data on a need-to-know basis; multi-factor authentication for internal systems access; automated intrusion detection systems; and regular penetration testing of platform infrastructure.

12.2 Organisational Measures. Access to player personal data within 11j is restricted to employees, contractors, and partners with a documented operational need. All personnel with access to personal data are required to complete data protection training and are bound by confidentiality obligations. Third-party partners are vetted for data security compliance before being permitted to process 11j player data.

12.3 Breach Response. 11j maintains a documented data breach response procedure. In the event of a breach that creates a high risk to your personal data, 11j will notify affected users without undue delay, describing the nature of the breach, the categories of data involved, and the steps taken to mitigate harm.

The 11j platform is strictly intended for adults aged 21 years and above. 11j does not knowingly collect, process, or store personal data of individuals under the age of 21. The platform's age verification processes — including CNIC-based KYC verification — are designed to enforce this restriction before any real-money gaming activity is permitted.

If 11j becomes aware that personal data of a person under 21 has been collected — for example through a fraudulent registration — the relevant account will be closed immediately, all funds will be handled in accordance with the 11j Terms and Conditions, and any personal data collected will be deleted within the timeframe permitted by regulatory obligations.

Parents or guardians who believe a minor may have registered an account on 11j should contact the support team immediately via live chat or at [email protected]. Such reports will be treated as a priority and investigated promptly.

11j reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, regulatory requirements, or data processing practices. When a material change is made, 11j will provide notice through a platform notification, an email to your registered mobile number or email address, or a prominent announcement on the 11j website.

The effective date displayed at the top of this Policy indicates the date of the most recent revision. Your continued use of the 11j platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. You are encouraged to review this Policy periodically.

For any questions, concerns, or requests related to your personal data and this Privacy Policy, you may contact 11j through the following channels:

• Live Chat: Available 24/7 directly from your 11j account dashboard. This is the fastest channel for data access requests and urgent privacy concerns.
• Email: [email protected] — for written privacy requests, data subject access requests, and complaints. Responses within 5 business days.

When submitting a data access or deletion request by email, please include your registered mobile number (or CNIC last four digits for verification purposes) so that 11j can confirm your identity before fulfilling the request. This step exists solely to protect your data from being disclosed to or deleted by an unauthorised party.