NTC11 Privacy Policy

NTC11 ("NTC11", "we", "us", "our") operates the online casino and sports betting platform accessible at ntc11.asia. As part of delivering our services to players across Malaysia and other eligible jurisdictions, we necessarily collect and process personal information. We do so with care, purpose, and in accordance with applicable international data protection standards.

This Privacy Policy ("Policy") explains in clear, plain English how NTC11 handles your personal data — from the moment you land on ntc11.asia to account registration, verification, active play, and beyond. It describes:

• What categories of personal data we collect and the sources from which we collect them;
• The specific purposes for which we use your personal data;
• The legal basis that justifies our processing activities;
• With whom we may share your data, and under what conditions;
• How long we retain your data and why;
• The security measures we apply to protect your information; and
• The rights you hold over your personal data and how to exercise them.

By registering an account with NTC11, making a deposit, or continuing to use our platform after this Policy has been brought to your attention, you acknowledge that you have read and understood this Privacy Policy.

The following terms have the meanings set out below throughout this Privacy Policy:

NTC11 collects Personal Data through several channels and in several categories. We collect only what is necessary for the purpose stated at the time of collection.

When you create an NTC11 account, we collect: full legal name, date of birth, nationality, residential address, email address, phone number, and chosen username. This information is required to create your account, verify your identity, and fulfil our KYC obligations.

To process withdrawals and comply with anti-money laundering (AML) requirements, we collect copies of: a valid government-issued photo ID (Malaysian National Identity Card, Passport, or Driver's Licence); a recent proof of residential address (utility bill or bank statement dated within 90 days); and a live selfie with ID. This constitutes Sensitive Data and is handled with heightened protection measures.

We record all deposit and withdrawal transactions, including the payment method used (e.g., Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, or cryptocurrency wallet address), the transaction amount in MYR, timestamps, and transaction reference numbers. We do not store full card numbers or complete banking credentials — payment processing is handled by our certified payment processor partners.

We collect records of all gaming activity on the Platform, including: game sessions, bet amounts, game outcomes, bonus activations and progress, and session duration. This data is used for account management, dispute resolution, regulatory reporting, and responsible gambling monitoring.

We automatically collect technical data when you access the Platform, including: IP address, device type and model, operating system version, browser type and version, screen resolution, and geolocation (country/region level, derived from IP). This data is used for security, fraud detection, and platform optimisation.

When you contact our support team via live chat or email, we retain transcripts and records of that communication. This allows us to maintain service continuity, resolve disputes, and improve support quality.

If you use our responsible gambling tools — such as setting deposit limits, requesting self-exclusion, or making a responsible gambling complaint — we collect and retain the details of that request. This data is handled with strict confidentiality and is used solely for the purpose of fulfilling your responsible gambling request and associated monitoring obligations.

NTC11 processes your Personal Data for the following specific purposes:

NTC11 does not use your Personal Data for purposes beyond those listed above without first obtaining your explicit consent or as required by applicable law.

Every processing activity undertaken by NTC11 rests on one or more of the following legal bases:

• Contractual Necessity: Processing that is required to perform the contract between you and NTC11 — including account creation, payment processing, and the delivery of gaming services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC verification, AML monitoring, and record-keeping obligations imposed by our licensing authority — is carried out on the basis of legal obligation.
• Legitimate Interest: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and the improvement of our services is carried out on the basis of NTC11's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing, optional personalisation features, and any non-essential communications is carried out only where you have provided explicit, freely given, and informed consent. You may withdraw this consent at any time.

NTC11 does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below and only to the extent necessary for the specified purpose:

We share financial transaction data with our certified payment processor partners who facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, 7-Eleven CLiQ, and cryptocurrency networks. These processors operate under contractual obligations that restrict their use of your data to the provision of payment services only.

KYC document verification may be processed through a certified third-party identity verification service. Such partners are bound by data processing agreements requiring them to handle your documents with strict confidentiality and to delete them following the completion of verification.

Live dealer and RNG game content is provided by third-party game studios. These providers receive limited technical session data necessary to deliver their games but do not receive your identity or financial data unless required by their own regulatory obligations.

NTC11 may be required by law, court order, or regulatory direction to disclose Personal Data to competent authorities. In such cases, we will disclose only what is legally required and, where permitted by law, will notify you of such disclosure.

In the event of a merger, acquisition, restructuring, or sale of all or part of NTC11's business, Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.

NTC11 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the player experience. The categories of cookies we use are set out below:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Consent to analytics and marketing cookies is entirely optional and does not affect your access to core Platform features.

NTC11 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents identification of the individual.

NTC11 implements a layered set of technical and organisational security measures designed to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and ntc11.asia is encrypted using TLS 1.2 or higher (HTTPS). We enforce HTTPS site-wide with HSTS headers.
• Encryption at Rest: Personal Data and KYC documents stored on NTC11's servers are encrypted at rest using AES-256 or equivalent.
• Access Controls: Access to Personal Data within NTC11's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion Detection: NTC11 employs real-time intrusion detection and log monitoring to identify and respond to potential security incidents promptly.
• Two-Factor Authentication (2FA): Players are strongly encouraged — and for withdrawals, required — to enable 2FA on their NTC11 accounts as an additional layer of protection.
• Third-Party Security Audits: NTC11's platform infrastructure undergoes periodic third-party security assessments to identify and remediate vulnerabilities.

NTC11 operates globally and may transfer your Personal Data to servers, processors, or affiliates located outside of Malaysia. This may include transfers to countries whose data protection laws differ from those in Malaysia.

Where such transfers occur, NTC11 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Binding contractual clauses between NTC11 and the recipient entity that impose equivalent data protection standards;
• Transfers to recipients in jurisdictions that have been assessed to provide an adequate level of data protection; and
• Transfers that are necessary for the performance of a contract with you (e.g., processing a withdrawal via an international payment provider).

You may request further information about the specific safeguards applicable to any particular international transfer by contacting our data enquiries team using the details in Section 15.

You hold the following rights in relation to your Personal Data held by NTC11. These rights may be subject to certain limitations or conditions prescribed by applicable law or our regulatory obligations.