Harta11 Privacy Policy — Our Commitment to Protecting Your Personal Data

Harta11 ("we", "platform", or "harta11") is fully committed to protecting the privacy and personal data of every member who uses our platform. This Privacy Policy sets out in detail how we collect, process, use, store, and protect your personal information when you register for and use harta11's services.

This document applies to all users of the harta11 platform — including website visitors, registered members, and former members whose data remains in our system. This Privacy Policy should be read together with harta11's Terms & Conditions and our Responsible Gaming Policy.

By registering for or continuing to use the harta11 platform, you agree to the data collection and processing practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to discuss available options.

Harta11 collects your personal data through several means — directly from you during registration and platform use, and automatically via platform technology. The following are the categories of data we collect:

Harta11 uses your personal data only for legitimate purposes directly related to the provision of platform services. Below is a detailed breakdown of how your data is used:

• Account management: Creating, maintaining, and managing your harta11 account — including identity verification (KYC), password recovery, and profile updates.
• Transaction processing: Processing deposits and withdrawals in MYR via local Malaysian payment methods supported by the platform.
• Service provision: Gives you full access to all harta11 games and services — from Malaysia Super League football and Live Casino to slots, lottery, e-sports, and the VIP Rewards Programme.
• Service communications: Sending important notifications relating to your account, transactions, service updates, and customer support responses.
• Marketing communications: Sending information about promotions, bonuses, and the latest offers — only if you have given your consent to receive such communications.
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or platform abuse.
• Legal compliance: To fulfil legal obligations under PDPA 2010 and other applicable Malaysian legislation, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Platform improvements: Analysing usage patterns to improve features, performance, and the overall user experience.

We will not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent or having a valid legal basis to do so.

Harta11 does not sell, rent, or trade your personal data to any party for third-party marketing purposes. However, there are specific circumstances in which we may need to share your data with selected third parties:

• Payment providers: Information required to process transactions is shared with payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX — all operating within Malaysia.
• Technology service providers: Companies that assist us in operating the platform — such as server hosting providers, analytics services, and customer support systems — may have limited access to the data required to perform their functions.
• Legal authority: harta11 is required to disclose data to Malaysian authorities (such as PDRM, Bank Negara Malaysia, or SPRM) when lawfully compelled to do so via a court order or official investigation request.
• Game providers: Third-party game providers (Live Casino, slots providers) may receive the session data required to operate games — without access to your personal financial information.

Harta11 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session.

Types of cookies used by harta11:

• Essential cookies (Required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how you use the platform — pages visited, time spent, and errors encountered. This data is used to improve platform performance.
• Functional cookies: Remembers your preferences such as language, display settings, and login details for future visits to make your experience more convenient.
• Analytics cookies: Helps us understand aggregate usage patterns to make better-informed product development decisions.

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the harta11 platform.

Harta11 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS 256-bit Encryption: All communications between your device and harta11's servers are encrypted using 256-bit SSL/TLS encryption — the same standard used by banking institutions.
• Data at rest encryption: Sensitive data stored in harta11's databases — including passwords (stored in hashed form) and authentication credentials — is encrypted using industry-leading encryption algorithms.
• Two-factor authentication (2FA): harta11 offers two-factor authentication to strengthen your account security — highly recommended for all members.
• 24/7 activity monitoring: Our automated threat detection system monitors account activity around the clock to identify any unauthorised access attempts or suspicious patterns.
• Internal access controls: Access to members' personal data within harta11 is restricted to staff who require it to perform their duties, in accordance with the need-to-know principle.
• Regular security audits: harta11 conducts regular security audits and penetration testing to identify and address potential vulnerabilities.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by harta11:

• 👁️

  Right of Access

  You may request a copy of the personal data we hold about you at any time through harta11's official support channels.

• ✏️

  Right to Rectification

  If your personal data is inaccurate or out of date, you have the right to request a correction via the "My Profile" section or by contacting support.

• 🚫

  Right to Withdraw Marketing Consent

  You may withdraw your consent to receive marketing communications at any time via the "unsubscribe" link in any email or through your account settings.

• 📋

  Right to Know the Purpose of Processing

  You have the right to know the specific purposes for which your data is being processed — all of which are set out in this Privacy Policy. Contact us if you require further clarification.

• 🗑️

  Account Closure & Data Deletion Rights

  You may request account closure and deletion of your personal data. Please note that financial transaction records may need to be retained for the period stipulated under Malaysian law.

To exercise any of the above rights, contact the harta11 Data Protection Officer by email at privacy@harta11.ws. We are committed to responding to requests within 14 working days.

Harta11 retains your personal data only for as long as it is needed for the stated purposes, or as required under Malaysian law:

• Active account data: Retained for the duration your account is active and for 6 months after account closure (for dispute resolution or account recovery purposes)
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements (Companies Act, AML/CFT Act)
• Security logs: Retained for 12 months for the purposes of investigating potential security incidents
• Support communication data: Retained for 2 years after a support ticket is resolved
• Analytics data: Aggregated usage data (without personal identification) is retained long-term for trend analysis purposes

When data is no longer required and there is no legal obligation to retain it, harta11 will securely delete or anonymise that data using approved procedures.

Should harta11 discover that personal data has been collected from an individual under the age of 18 without proper verification, we will take immediate steps to:

• Immediate account closure
• Delete all personal data associated with the account
• Return any remaining funds (if applicable) to the verified payment card owner following an investigation

Parents or guardians who discover that an account has been opened by their underage child may contact the harta11 support team for immediate action.

Harta11 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, updates to Malaysian law, or the expansion of platform services.

When material changes occur, harta11 will notify members through:

• Email to your registered email address
• In-platform notification upon next login
• Announcement on the Privacy Policy homepage with a clearly displayed update date

The "Updated" date at the top of this document always reflects the date of the latest revision. We encourage you to review this Privacy Policy periodically. Continued use of the platform after any amendment takes effect will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way harta11 handles your personal data, please contact our Data Protection Officer (DPO):

For formal complaints relating to data protection, you also have the right to contact Department of Personal Data Protection Malaysia through the official channels of the Malaysian Ministry of Communications and Digital if you believe your complaint has not been resolved to your satisfaction by harta11.