Privacy Policy Fortune11 – Malaysia Member Data Protection

Fortune11 collects various types of personal data when you register and use our platform. Below is a full breakdown of what we collect, why it is collected, and how it is used:

Fortune11 does not collect sensitive data such as medical information, religious background, or members' political views. The only category of sensitive data we may process relates to responsible gambling, where a member voluntarily discloses information to the Fortune11 support team when seeking assistance — and this is handled with the highest level of confidentiality.

Every piece of data Fortune11 collects is used for a specific and legitimate purpose. Here are the key ways Fortune11 uses members' personal data:

• Account Management: Creating and maintaining your Fortune11 account, processing logins and logouts, and enabling account functions to work properly — including saving your settings and preferences
• Transaction Processing: Processing your deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, or any other supported method, as well as processing your winnings withdrawal requests to the same account
• Platform Security: Detecting and preventing unauthorised access, fraudulent activity, multiple-account usage, and other conduct that violates Fortune11's Terms & Conditions
• Customer Support: Enabling Fortune11's Bahasa Malaysia-speaking support team to assist you more effectively when you reach out via live chat or email
• Account Communications: Sending important notifications about your account, such as deposit confirmations, successful withdrawal alerts, and security notices when a login is detected from a new device
• Responsible Gaming: Monitoring activity patterns to identify early signs of problem gaming and proactively reaching out to members when necessary, in line with Fortune11's commitment to member wellbeing
• Legal Compliance: Meeting anti-money laundering obligations, minimum age verification (18+), and lawful information requests from relevant authorities
• Platform Improvements: Analysing aggregated, anonymised usage data to understand how members use the Fortune11 platform and to make more relevant improvements

Fortune11 does not use member data to make automated decisions that significantly affect you without human involvement. All major decisions — such as account closures or withdrawal rejections — are reviewed by a real human team before being carried out.

Fortune11 does not sell or rent member personal data to any third party. However, there are a limited number of situations in which we need to share certain data with specific parties to keep the platform functioning properly and to meet our legal obligations:

• Payment Processors: Transaction information required for payment processing is shared with Malaysian payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX operators solely for the purpose of processing your deposits and withdrawals. These processors are bound by strict confidentiality agreements with Fortune11 and may only use the data for transaction processing purposes
• Technical Service Providers: Companies providing Fortune11 with technical infrastructure — such as cloud computing and cybersecurity services — may have limited access to certain data as part of delivering those services. All such providers are selected based on strict data security standards and are bound by comprehensive data protection agreements
• Relevant Authority: Fortune11 will disclose member data to law enforcement agencies or relevant authorities when required to do so by applicable Malaysian law, a valid court order, or an official investigation into unlawful activity
• Independent Auditors: Independent auditors conducting RNG and fair play audits on Fortune11 may need to access certain technical data within the scope of their audit work. This data does not include any personally identifiable information belonging to members

In all instances of data sharing described above, Fortune11 ensures that only the minimum necessary data is shared, and that recipients are bound by data protection obligations equivalent to or stricter than those Fortune11 itself follows. Fortune11 takes full responsibility for how these third-party processors handle our members' data.

Fortune11 continually invests in the latest security technologies and procedures to protect the personal data of our Malaysian members. Our layers of protection include:

• 256-bit SSL Encryption: All communications between your device and Fortune11's servers are fully encrypted using the latest version of the TLS protocol. This means that even if someone were to intercept your connection, they would be unable to read the content.
• Secure Password Storage: Fortune11 account passwords are not stored in readable form. Fortune11 uses a strong one-way hashing algorithm to store passwords, meaning even Fortune11's internal systems cannot "read" your password — only you know it
• Two-Factor Authentication (2FA): Fortune11 offers two-factor authentication for all member accounts. With 2FA enabled, even if someone obtains your password, they still cannot log in to your Fortune11 account without access to your Malaysian mobile phone.
• 24/7 Security Monitoring: Fortune11's security monitoring system operates around the clock to detect suspicious activity such as login attempts from unusual locations, abnormal transaction patterns, or signs of a compromised account.
• Strict Internal Access Controls: Access to members' personal data within Fortune11's internal systems is restricted to staff who genuinely require it to carry out their duties. All access is logged and audited on a regular basis
• Regular Security Testing: Fortune11 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited

Even with all these measures in place, no security system can guarantee absolute 100% protection. Fortune11 is committed to promptly notifying affected members in the event of any security breach, and to taking every necessary step to minimise the impact of such an incident.

As a Fortune11 member based in Malaysia, you have data protection rights recognised under the Personal Data Protection Act 2010 (PDPA). Fortune11 respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request and receive a copy of all personal data Fortune11 holds about you. Requests will be processed within 14 business days at no charge
• Right to Rectification: If you find that any personal data Fortune11 holds about you is inaccurate or out of date, you have the right to request that we correct it immediately
• Right to Erasure: In certain circumstances – for example, when data is no longer needed for its original purpose and there is no legal requirement to retain it – you have the right to request that Fortune11 delete your personal data
• Right to Restrict Processing: You may request that Fortune11 restrict how we process your data in certain circumstances — for example, while you are considering closing your account or while a complaint is under investigation.
• Right to Withdraw Consent: Where Fortune11 processes your data based on your consent (such as for optional marketing communications), you may withdraw that consent at any time without affecting your access to other Fortune11 services
• Right to Lodge a Complaint: If you believe Fortune11 has not handled your data in accordance with the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact the Fortune11 privacy team by email at privacy@fortune11.best or via live chat within your account. We will verify your identity before processing any request to ensure we do not disclose your data to unauthorised parties.

Fortune11 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better user experience. Below are the types of cookies we use and their purposes:

• Essential Cookies (Required): These cookies are essential for the core functions of the Fortune11 platform — including maintaining your login session, saving your Bahasa Malaysia language settings, and securing your browsing session. Without these cookies, the Fortune11 platform cannot function properly
• Performance Cookies: These cookies help Fortune11 understand how members use the platform — which pages are visited most, where members typically drop off, and where technical issues need to be addressed. All such data is collected in aggregate and anonymised form
• Preference Cookies: These cookies store your preferences — such as your preferred stake values, odds display format (Asian or European), and other display settings — so you do not need to reconfigure them every time you log in to Fortune11

Fortune11 does not use third-party cookies for advertising or cross-site behavioural tracking. You can manage or delete cookies through your browser settings at any time, though please note that removing essential cookies may affect certain features of the Fortune11 platform.

Fortune11 retains members' personal data only for as long as necessary for the purpose it was collected, or for as long as required under applicable Malaysian law. Fortune11's data retention policy is as follows:

• Active Account Data: For as long as your Fortune11 account remains active, we retain all data necessary to provide the platform's services to you.
• Data After Account Closure: After an account is closed, Fortune11 retains transaction records and identity data for the minimum period required under Malaysian anti-money laundering laws — generally no longer than 7 years. Once that period has elapsed, the data is securely deleted or anonymised.
• Support Communication Data: Customer support conversation records are retained for 2 years from the date of the conversation, for quality control purposes and to assist with any follow-up complaints.
• Security Log Data: Access logs and technical security logs are retained for 12 months for the purpose of security incident investigation where necessary

When data is no longer needed and there is no legal obligation to retain it, Fortune11 securely deletes it using methods that ensure it cannot be recovered. For data held in physical format (where applicable), secure destruction is carried out in accordance with certified procedures.

Fortune11 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the Fortune11 platform's operations. When changes are made, Fortune11 will:

• Updating the "Last Updated" date at the top of this page to reflect the date of the latest change
• Sending email notifications to all active Fortune11 members when changes are significant and materially affect their privacy rights
• Display an in-platform notification on Fortune11 when members log in for the first time after the changes take effect
• Providing at least 14 days' advance notice before major changes take effect, giving members sufficient time to read and consider the implications

Continued use of the Fortune11 platform after an updated Privacy Policy takes effect constitutes acceptance of the revised policy. If you do not agree with the changes, you have the right to close your Fortune11 account and request deletion of your data in accordance with the procedure set out in Section 5 above.

The effective date of this Fortune11 Privacy Policy is 1 January 2026. This document is the current version and supersedes all previous versions.

Fortune11 has appointed a Data Protection Officer responsible for ensuring PDPA compliance and handling all member data privacy enquiries. You may contact this officer through the following channels:

• Privacy Email: privacy@fortune11.best – for data rights requests, privacy complaints, and general enquiries relating to this policy
• Live Chat: Available 24/7 within your Fortune11 account — for privacy enquiries that require an immediate response
• General Support Email: support@fortune11.best – for general account and service enquiries at Fortune11

Fortune11 is committed to responding to all privacy-related enquiries within 24 business hours of receipt. For more complex data rights requests — such as full data access or deletion requests — processing may take up to 14 business days. We will acknowledge receipt of your request within 24 hours and provide regular status updates throughout.