Privacy Policy rekor11 – Our Commitment to Protecting Your Data

01 Introduction to rekor11's Privacy Policy

Rekor11 ("we", "Platform") is committed to protecting the privacy and data security of all members who use our online betting platform. This Privacy Policy outlines our practices regarding the collection, use, storage, protection, and disclosure of your personal information.

This Privacy Policy applies to all services offered through the rekor11 platform, including football betting covering the Malaysia Super League and EPL, Live Casino, slots, e-sports, virtual sports and all other platform features. It also applies to all access methods, including the website, mobile app and any other means of accessing rekor11 services.

This Privacy Policy has been developed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) to ensure that your privacy rights as a user in Malaysia are fully respected and protected across every aspect of rekor11's operations.

02 Personal Data We Collect

Rekor11 only collects personal data that is necessary for legitimate purposes related to providing our platform services. The following are the categories of data we collect:

Data You Provide Directly:

• Full name as shown on your Malaysian identity card (MyKad).
• An active Malaysian phone number for account verification purposes.
• A valid email address for account communications and promotional notifications.
• Date of birth for age verification (21 years and above).
• Relevant payment method details — eWallet username, bank account number for withdrawals (stored in encrypted form).
• Identity verification documents (MyKad) submitted during the KYC process for withdrawal purposes.

Automatically Collected Data:

• IP address, device type, operating system and web browser type used to access rekor11.
• Activity log records including login dates and times, pages visited and actions taken within the platform.
• Country-level geolocation data for compliance and security purposes.
• Complete transaction records including deposits, withdrawals, bets and winnings.
• Gaming session data for fraud detection and account security purposes.

03 How rekor11 Uses Your Personal Data

Rekor11 uses collected personal data solely for legitimate purposes directly related to delivering our platform services to you. Data is used as follows:

• Account Management: Creating, verifying and managing your rekor11 account, including secure login processes and account activity monitoring.
• Transaction Processing: Processing your deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX including Maybank2u and CIMB Clicks, as well as processing withdrawals to the same payment methods.
• Security & Fraud Detection: Monitoring account activity to detect and prevent fraud, money laundering, multi-account usage, and other activities that violate rekor11's terms.
• KYC Verification: Meeting legal requirements related to customer identity verification in line with applicable AML (Anti-Money Laundering) regulations.
• Customer Support: Enabling the rekor11 support team to provide you with accurate and effective assistance based on your account records and history.
• Platform Communications: Sending important notifications related to your account, transactions, security updates, and promotions you have agreed to receive.
• Platform Improvements: Analysing aggregated and anonymised usage data to understand how members use the rekor11 platform and identify areas for improvement.
• Legal Compliance: Fulfilling all legal and regulatory obligations applicable to rekor11's operations in Malaysia.

04 Disclosure of Data to Third Parties

Rekor11 does not sell, rent or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Payment Service Providers: Payment processors required to facilitate deposits and withdrawals in MYR via eWallet and FPX. These providers receive only the minimum data necessary to process your transaction.
• Game Software Providers: Casino, slots, and virtual sports game providers operating under service agreements that require them to protect your data.
• KYC Service Provider: Identity verification companies that assist rekor11 in meeting its AML obligations and age verification requirements under Malaysian law.
• Legal Authorities: rekor11 will disclose your data to the police, courts or Malaysian regulatory authorities when required by law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of rekor11's assets, user data may be transferred to the receiving entity with prior notice given to you.

All third parties that receive your personal data from rekor11 are bound by data protection agreements requiring them to handle your information with a level of security and confidentiality equal to or exceeding rekor11's own standards.

05 rekor11 Data Security & Protection Measures

The security of your data is rekor11's highest priority. We implement multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure:

• 256-bit SSL Encryption: All communications between your device and rekor11's servers are encrypted using the latest TLS protocol with 256-bit encryption keys.
• Stored Data Encryption: Sensitive personal data, including payment information, is stored in encrypted form within the rekor11 database. Even in the event of a security breach, your data cannot be read without the decryption key.
• Two-Factor Authentication (2FA): rekor11 supports two-factor authentication for account login, adding an extra layer of security that helps prevent unauthorised access even if your password is compromised.
• Intrusion Detection System: The rekor11 platform is equipped with a 24/7 monitoring system that automatically detects and blocks suspicious or unauthorised access attempts.
• Internal Access Controls: Access to members' personal data within the rekor11 organisation is strictly limited to employees who require it to carry out their specific job responsibilities.
• Regular Security Audits: The rekor11 system undergoes regular independent security audits by cybersecurity experts to identify and address any vulnerabilities.

While we take every reasonable measure to protect your data, no security system can be guaranteed to be 100% risk-free. You also play an important role in keeping your account secure by maintaining the confidentiality of your password and making use of the security features provided by rekor11.

06 Data Retention Period

Rekor11 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data: For as long as your rekor11 account remains active and for 12 months following your last activity.
• Financial Transaction Records: A minimum of 7 years following each transaction, in compliance with Malaysian financial and tax legal requirements.
• KYC Records (Identity Verification Documents): Minimum 5 years from the date of verification or account closure, in accordance with AML regulations.
• Security & Activity Logs: 2 years from the date the log was created, for fraud investigation and dispute resolution purposes.
• Customer Support Communication Records: 3 years from the date of last interaction.

Once the retention period has expired, your data will be securely deleted or anonymised using procedures that ensure it can no longer be linked to your identity.

07 Your Rights Under the rekor11 Privacy Policy

As a rekor11 member and Malaysian user, you have the following rights with respect to the personal data we hold about you:

To exercise any of the above rights, please contact the rekor11 support team by email at support@rekor11.best or via live chat within the platform. Please include your account number and a brief description of your request. We will verify your identity before processing any data-related request to ensure the security of your account.

08 Cookies & Tracking Technologies

Rekor11 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and understand how members use our services. The following are the types of cookies we use:

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the rekor11 platform, including your ability to log in to your account. For more information on managing cookies in your browser, please refer to your browser's help documentation.

09 Protection of Children's Data

Rekor11 is a betting platform intended exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from anyone under the age of 21.

All rekor11 registrants are required to verify their age during the registration process. We use multiple methods to confirm age, including Malaysian phone number verification and a KYC process that requires MyKad verification for withdrawals.

If we discover that we have inadvertently collected personal data from a minor, we will immediately take the following steps:

• The account in question has been suspended pending age verification.
• Notifying the parent or guardian where the individual can be identified.
• Deleting all personal data associated with the minor in question.
• Returning any deposited funds.

10 Privacy Policy Amendments

Rekor11 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to our platform services.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending an email notification to the address registered to your rekor11 account at least 14 days before the amendments take effect.
• Displaying an in-platform notice on rekor11 to inform you of the changes made.

Your continued use of the rekor11 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect.

11 Contact Us About Privacy

If you have any questions, concerns or requests regarding rekor11's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Email: support@rekor11.best — for personal data requests and privacy enquiries.
• Live Chat: Available 24/7 within the rekor11 platform for an immediate response.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data access or deletion, a full response may take up to 21 business days in accordance with Malaysia's PDPA requirements.