11wln Privacy Policy

Welcome to the 11wln Privacy Policy. 11wln operates an internationally licensed online gaming platform accessible at 11wln.org, offering cricket betting, live casino, premium slots, virtual sports, and related entertainment services to registered users, including players based across Pakistan — in Karachi, Lahore, Faisalabad, Islamabad, and throughout the country.

This Privacy Policy describes, in plain and precise terms, how 11wln collects your personal data, the specific purposes for which we process it, the parties with whom we may share it, the security measures we apply to protect it, and the rights you hold in respect of your information. This Policy applies to all personal data collected through the 11wln website (11wln.org), any 11wln progressive web application (PWA), and all interactions between you and 11wln's customer support team.

This Privacy Policy should be read in conjunction with the 11wln Terms and Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms and Conditions on a privacy-specific matter, this Privacy Policy shall prevail.

For the purposes of applicable data protection legislation, the Data Controller responsible for the personal data processed under this Privacy Policy is the legal entity that operates the 11wln platform under its international gaming licence.

As Data Controller, 11wln determines the purposes and means by which your personal data is processed. 11wln is accountable for ensuring that data processing on the platform complies with the data protection obligations imposed by our licensing jurisdiction and the internationally recognised privacy principles to which we adhere — including the core principles of the General Data Protection Regulation (GDPR) as a global benchmark standard, where applicable.

11wln collects the following categories of personal data from registered users and Platform visitors. The specific data points collected in any given category depend on how you interact with the Platform:

11wln does not collect or process special categories of sensitive personal data (such as health, biometric, religious, or political data) except where strictly required under applicable regulatory obligations and with your explicit consent where required by law.

11wln collects personal data through the following mechanisms:

4.1 Direct Collection

Data you provide directly when registering for an 11wln account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotional activities. This constitutes the largest volume of personal data 11wln holds about you.

4.2 Automated Collection

Data collected automatically when you access or use the 11wln Platform, including technical data (IP address, device information, browser type), cookies and similar tracking technologies, and gaming session logs. This data is collected continuously during Platform use and is primarily used for security, fraud prevention, and platform performance purposes.

4.3 Third-Party Sources

In certain circumstances, 11wln may receive data about you from third-party sources, including:

• KYC Verification Providers — identity verification databases used to confirm the accuracy of identity documents provided during KYC.
• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme operators may provide transaction confirmation data.
• Anti-Fraud and AML Services — third-party fraud screening and anti-money laundering databases used to identify risk indicators.

Where 11wln receives data from third parties, we handle it with the same care and in accordance with the same principles as data collected directly from you.

11wln processes your personal data for the following specific purposes, each supported by a defined legal basis under applicable data protection law:

5.1 Contract Performance

Processing your identity and contact data to create and manage your 11wln account; processing financial data to execute deposits and withdrawals; maintaining your gaming activity records as part of service delivery. Legal basis: Performance of contract between 11wln and the User.

5.2 Legal and Regulatory Compliance

Conducting Know Your Customer (KYC) identity verification as required under 11wln's international gaming licence; performing anti-money laundering (AML) checks on account activity; maintaining financial records for the periods required by our licence jurisdiction; responding to lawful requests from competent authorities. Legal basis: Legal obligation.

5.3 Legitimate Interests

Fraud detection and prevention across all Platform transactions; maintaining platform security and integrity; analysing aggregated gaming behaviour to improve Platform features; enforcing the 11wln Terms and Conditions and Responsible Gaming Policy. Legal basis: Legitimate interests of 11wln, balanced against your privacy rights.

5.4 Consent-Based Processing

Sending promotional communications, personalised bonus offers, and marketing materials where you have opted in to receive such communications. Legal basis: Your consent, which may be withdrawn at any time without affecting processing already conducted.

11wln shares your personal data with third parties only to the extent strictly necessary for the operation of the 11wln Platform, and only under binding data processing agreements that prohibit those parties from using your data for any purpose other than the specific service they provide to 11wln.

Categories of third parties with whom 11wln shares personal data include:

• Payment Service Providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive payment information necessary to process your deposits and withdrawals. These entities are separately regulated financial institutions and process your payment data under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Providers — Third-party identity verification services receive your submitted KYC documentation for the purpose of verifying your identity against reference databases. These providers are bound by strict confidentiality and data processing obligations.
• Game Software Suppliers — Certified game suppliers (including live casino studio operators) may receive session data necessary to deliver game functionality. These suppliers are vetted and licensed third parties operating under regulatory oversight.
• Anti-Fraud and AML Service Providers — Specialist fraud detection and anti-money laundering screening providers may receive transactional and behavioural data for the purpose of identifying financial crime risk indicators.
• Regulatory and Law Enforcement Authorities — 11wln will disclose personal data to competent authorities where required to do so by applicable law, court order, or as a condition of our gaming licence.
• IT Infrastructure and Cloud Service Providers — Third-party infrastructure providers who host 11wln's systems process personal data on our behalf as data processors, under binding contractual instructions from 11wln.

As an internationally operating platform, 11wln may transfer your personal data to countries outside Pakistan for the purpose of service delivery — particularly to the jurisdiction in which our gaming licence is held, and to the countries where our game supplier partners, KYC providers, and infrastructure providers are based.

Where personal data is transferred outside Pakistan to a country that does not provide an equivalent level of data protection, 11wln implements appropriate safeguards to protect the transferred data, which may include:

• Standard Contractual Clauses (SCCs) approved by recognised data protection authorities;
• Binding corporate rules applicable to group entities;
• Adequacy decisions by applicable regulatory authorities recognising the destination country as providing adequate data protection.

Where you require further information about the specific safeguards applied to international transfers of your personal data, you may contact 11wln's data team using the contact details in Section 16 of this Policy.

11wln retains personal data for defined periods aligned with the original purpose of collection and applicable legal or regulatory requirements. The following retention schedule applies to the main categories of personal data held by 11wln:

Upon expiry of the applicable retention period, 11wln will securely delete or irreversibly anonymise the relevant personal data so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained beyond these periods for statistical and analytical purposes.

As a data subject whose personal data is processed by 11wln, you hold the following privacy rights, which you may exercise at any time by contacting our data team as described in Section 16:

11wln implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 11wln's servers is encrypted using TLS 1.3 protocol, providing the same level of protection used by major international banks.
• AES-256 Encryption at Rest: Personal data stored in 11wln's databases is encrypted at rest using AES-256 encryption, the current global standard for data storage security.
• Multi-Factor Authentication: Internal 11wln systems that process personal data require multi-factor authentication for all authorised personnel access.
• Role-Based Access Controls: Personal data access within 11wln is restricted on a strict need-to-know basis. Only personnel whose job function requires access to specific categories of data are authorised to view it.
• Regular Security Audits: 11wln's systems and data handling procedures are subject to periodic third-party security audits and penetration testing exercises to identify and address potential vulnerabilities.
• Incident Response Plan: 11wln maintains a documented data breach response plan, including procedures for containing breaches, assessing impact, notifying regulatory authorities where required, and communicating with affected users in the event of a significant data security incident.

11wln uses cookies and similar tracking technologies to enable the Platform to function correctly, to maintain your login session, to remember your preferences, and to analyse how the Platform is used so that we can continuously improve it.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. You cannot opt out of strictly necessary cookies while using the Platform.
• Functional Cookies: Store your preferences (such as preferred language, game lobby view, and responsible gaming settings) so you do not need to re-enter them on each visit. Persistent for up to 12 months.
• Analytical Cookies: Collect anonymised data about how users interact with the Platform — pages visited, time on page, error events — to help 11wln identify usability improvements. Data from analytical cookies is aggregated and does not identify individual users.
• Security and Fraud Prevention Cookies: Used to identify suspicious session behaviour and protect against account takeover attempts and automated bot activity.

11.2 Cookie Management

You can manage your cookie preferences through your browser settings, which allow you to refuse, delete, or be notified about cookies. Please note that disabling strictly necessary cookies will affect your ability to use key Platform features, including the login function. Instructions for managing cookies in major browsers are available through your browser's help documentation.

11wln may send you promotional communications about bonuses, offers, new game launches, and Platform features where you have opted in to receive such communications during registration or through your Account Settings.

12.1 Opting In and Out

Your consent to marketing communications is entirely voluntary and does not affect your ability to use the 11wln Platform. You may withdraw your consent and opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in every 11wln marketing email;
• Updating your communication preferences in the Notifications section of your Account Settings;
• Contacting 11wln support at [email protected] with an opt-out request.

Opt-out requests are processed within 5 business days. You may continue to receive transactional and service communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing opt-out status, as these are necessary for the delivery of our contracted services to you.

12.2 No Third-Party Marketing

11wln does not share your personal data with any third party for that third party's own marketing purposes. All promotional communications you receive in connection with 11wln are sent by 11wln or by 11wln's authorised communications service providers acting on 11wln's behalf.

As part of the KYC process, 11wln verifies the date of birth of every registered user against their CNIC or passport. Any account found to have been created by or used by a person under the age of 21 will be immediately closed, all funds will be returned to the verified owner of the deposited payment method, and all gaming activity conducted on the account will be voided.

If you believe that a person under the age of 21 has registered for or is using an 11wln account, please report this immediately to [email protected]. 11wln takes underage access extremely seriously and will act swiftly on any credible report.

The 11wln Platform does not contain links to external third-party websites for general navigation or promotional purposes. Where references to third-party services (such as payment providers) are made within the Platform for functional purposes, those services operate under their own independent privacy policies and terms of use, which are entirely separate from this Privacy Policy.

11wln is not responsible for the privacy practices, data handling, or security measures of any third-party service or website, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or any game software provider. We recommend that you review the privacy policies of any third-party service you use in connection with your 11wln account.

11wln reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, updates to our services, or changes in our data processing practices. The date of the most recent update is always displayed at the top of this page.

Where changes to this Policy are material — meaning they meaningfully affect how we process your personal data or reduce the privacy protections we provide — 11wln will notify you via email to your registered address or via a prominent in-Platform notice at least 14 days before the changes take effect, giving you the opportunity to review the updates before they apply to your account.

We recommend bookmarking this page and reviewing it periodically to stay informed about how 11wln protects your personal information.

If you have any questions, concerns, or complaints about this Privacy Policy or about how 11wln handles your personal data, please contact us through the following channels:

16.1 Complaints

If you are not satisfied with 11wln's response to a privacy complaint, you have the right to escalate your complaint to the competent data protection authority in the jurisdiction where you reside or where the alleged infringement took place. 11wln will cooperate fully with any investigation by a competent supervisory authority.

This Privacy Policy was last reviewed and updated on 1 January 2026. We appreciate you taking the time to read it in full. Your trust in 11wln with your personal data is something we take seriously, and this Policy is our commitment to honouring that trust.