Rolek11 Privacy Policy – Malaysia Personal Data Protection

Rolek11 collects your personal data only when it is necessary to deliver the platform's services to you safely and efficiently. Data collection happens directly — when you provide it to us — or indirectly through your use of the platform.

Data you provide directly during registration and use of the platform:

• Full name as per Malaysian identity card (MyKad)
• An active Malaysian phone number
• A valid email address
• Date of birth (for age verification – 18+ only)
• MyKad number or other official identification document (for KYC verification)
• Malaysian bank account or e-wallet details (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
• Current residential address in Malaysia

Data collected automatically while you use the Rolek11 platform:

• Your device's IP address and approximate geographic location
• Device type, operating system, and browser version
• Game history including game name, stake amount, outcome and time of play
• Financial transaction history including deposits, withdrawals and bonuses
• Account activity logs, including login and logout times
• Cookie data and similar tracking technologies (see section 6 for details)

All data you provide to Rolek11 must be accurate, truthful and up to date. You are responsible for updating your personal information whenever changes occur. Providing false or inaccurate information may result in account suspension and constitutes a violation of Terms & Conditions Rolek11.

Rolek11 using the personal data collected for the following purposes only. Data will not be used for any other purpose without first obtaining your renewed consent:

For marketing and promotional purposes, Rolek11 will only contact you by email, SMS or in-app notification if you have given explicit consent during registration or through the communication preferences settings in your account. You may withdraw this marketing consent at any time via the unsubscribe link in any promotional email or through your account settings.

Rolek11 does not make automated decisions that significantly affect you based solely on data profiling, without human review. Any decisions relating to betting limits, bonus approvals, or investigations into suspicious activity involve review by a trained human team.

Rolek11 does not sell, rent or share your personal data with third parties for their own commercial purposes. However, in certain limited situations, Rolek11 may need to share your data with the following parties:

• Payment Service Providers: Malaysian financial institutions and e-wallet providers including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay operators that process your financial transactions. Data sharing is limited strictly to the information required to complete the transaction.
• Technical Service Providers: Providers of server infrastructure, cybersecurity and analytics services essential to Rolek11's platform operations. All such providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Regulatory Bodies & Authorities: Rolek11 will disclose the required data to Malaysian legal authorities where mandated by a court order, warrant or valid legal requirement. We will not disclose more data than the law requires.
• Identity Verification Service Providers: Authorised third-party companies engaged to conduct KYC (Know Your Customer) checks and identity document verification for anti-money laundering compliance purposes.

Rolek11 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Data Transmission Encryption: All communications between your browser or app and Rolek11's servers are protected with TLS 1.3 and AES-256 encryption — the highest security standard available in the industry today.
• Stored Data Encryption: Personal data and sensitive financial information stored in Rolek11's database are encrypted at the storage level using robust cryptographic algorithms.
• Two-Factor Authentication (2FA): All member accounts can and are encouraged to enable 2FA. All Rolek11 administrative accounts are required to use 2FA to prevent unauthorised access even in the event of a compromised password.
• Internal Access Controls: Rolek11 employees are granted access only to the data necessary to carry out their job responsibilities. Access to sensitive member data is restricted to authorised personnel only, and all access is logged for audit purposes.
• Real-Time Security Monitoring: An Intrusion Detection and Prevention System (IDS/IPS) monitors all Rolek11 network traffic around the clock to detect and block any unauthorised access attempts or cyber attacks.
• Regular Security Audits: Rolek11 conducts penetration testing and security audits by qualified independent cybersecurity firms at least once a year to identify and address any vulnerabilities.

Rolek11 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Rolek11's primary server infrastructure is housed in secure data centres that meet international security standards.

Below are the general data retention guidelines at Rolek11:

• Active Account Data: Retained for as long as your account is active and used to provide services to you.
• Transaction History Data: Financial transaction records are retained for a minimum of 7 years after the last bet or account closure date, in accordance with Malaysian financial law and anti-money laundering requirements.
• Security Log Data: Activity and security logs are retained for 2 years for digital forensic purposes, should they be required in a security investigation or legal dispute.
• Marketing Data: If you withdraw your marketing consent, the data used for marketing communications will be deleted within 30 days from the date of withdrawal.
• Closed Account Data: Following account closure, Rolek11 will retain the minimum records required for legal compliance purposes for the prescribed period, after which your data will be permanently deleted or anonymised.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to you as an identifiable individual.

Rolek11 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions correctly, and help us understand how users interact with it.

Types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic functionality of the Rolek11 platform and cannot be disabled. They include login session cookies, security tokens and cookies that maintain your account security settings. Without these cookies, the platform cannot function properly.
• Analytical Cookies (Optional): We use analytics tools to understand how members use the platform — which pages are visited most, how long play sessions last, and navigation patterns. This data is collected in aggregate form that cannot identify individuals and is used solely to improve the platform.
• Functional Cookies (Optional): These cookies remember your preferences and settings — such as your chosen language, last-used bet limits and display settings — so you don't need to reconfigure them each time you log in.

You can manage your cookie settings through your browser. However, disabling essential cookies may affect the functionality of the platform. Rolek11. Please note that cookie settings you choose in one browser do not automatically apply to other browsers or devices you use.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by Rolek11. Rolek11 is committed to respecting and facilitating the exercise of all these rights:

In the course of operating the Rolek11, some of our technical and infrastructure service providers may be based outside Malaysia. This means your personal data may be transferred to and stored on servers located in other countries.

Rolek11 takes the following steps to ensure your data remains fully protected even during cross-border transfers:

• We only work with providers located in countries with data protection laws equivalent to or stricter than Malaysia's PDPA.
• All data transfers are governed by strict data processing agreements that require recipients to uphold the same data protection standards as set out in this Privacy Policy.
• End-to-end encryption is applied to all cross-border data transfers to ensure data cannot be intercepted or read in transit.
• Rolek11 maintains a complete list of all third-party providers that receive members' personal data, along with their server locations. This list is available upon request at privacy@rolek11.com.

By using the Rolek11, you agree to the transfer of your personal data as described in this section, subject to full compliance with the safeguards outlined above.

Rolek11 has appointed a Privacy Officer responsible for ensuring full compliance with the Personal Data Protection Act (PDPA) Malaysia 2010 and for handling all privacy-related enquiries, requests and complaints from members.

To reach Rolek11's Privacy Officer:

• Email: privacy@rolek11.com
• Response Time: Within 2 business days for general enquiries; 14 business days for formal PDPA rights requests
• Language: Bahasa Melayu or English

If you are dissatisfied with the response provided by Rolek11's Privacy Officer, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital. Rolek11 will cooperate fully with any investigation conducted by the relevant regulatory authority.