Privacy Policy

This Privacy Policy ("Policy") describes how m11sot ("we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the m11sot online sportsbook and casino platform, accessible at https://m11sot.cam (the "Platform").

This Policy applies to all individuals who visit, register on, or otherwise interact with the Platform, including registered players and prospective users who browse without registering ("you", "your"). By creating an account on m11sot or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your relationship with m11sot. In the event of any conflict between this Policy and the Terms & Conditions on data-related matters, this Policy shall prevail.

m11sot collects the following categories of personal data in the course of providing its services:

m11sot collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotional survey.
• Automated Collection: Technical and behavioral data collected automatically through server logs, session cookies, analytics tools, and platform event tracking as you navigate and interact with the m11sot Platform.
• Payment Processors: Transaction confirmation data received from local bank transfer intermediaries and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when processing your deposits and withdrawals.
• Identity Verification Partners: Where we use a third-party KYC verification service to cross-check submitted identity documents, that partner may return verification status data to m11sot. We only receive the verification outcome and any discrepancies flagged, not raw identity data held by the third party.
• Fraud Prevention Services: Risk scoring signals and device fingerprint data shared by fraud detection partners to protect the integrity of the Platform and safeguard all players.

m11sot uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your m11sot account, including authentication, password recovery, and session management.
• Service Delivery: Processing bets, settling wagers, calculating and crediting winnings, and providing access to all gaming content available on the Platform — including BRI Liga 1 match betting, mix parlay (accumulator) markets, live casino tables, and slot gacor (high-payout slot) games.
• Financial Processing: Verifying and processing deposits and withdrawals via local Indonesian banks and e-wallets, reconciling transactions, and generating account statements.
• KYC & Compliance: Verifying your identity and age (21+), fulfilling anti-money-laundering (AML) obligations, and maintaining records required by our licensing authority.
• Customer Support: Responding to your inquiries, resolving account disputes, and escalating complex issues to the appropriate internal team.
• Platform Improvement: Analyzing aggregated usage patterns, A/B testing new features, diagnosing technical issues, and optimizing the user experience across devices.
• Responsible Gaming: Monitoring gaming behavior to identify signs of problematic gambling patterns and, where applicable, applying account restrictions in accordance with our Responsible Gaming policy.
• Marketing Communications: Sending you promotional offers, bonus notifications, and event-based alerts (such as BRI Liga 1 fixture weekends, Ramadhan promotions, or Idul Fitri bonus events) where you have consented to receive such communications.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, preventing multi-accounting, and protecting the financial integrity of the Platform.

m11sot processes your personal data on the following legal bases, depending on the specific processing activity involved:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications does not affect your ability to continue using the Platform.

m11sot does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processing Partners: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process your deposits and withdrawals. These providers are contractually bound to use your data solely for payment execution purposes.
• KYC & Identity Verification Providers: Third-party verification services that assist us in confirming player identities and ages as part of our compliance obligations. These providers process data only as instructed by m11sot and are prohibited from using it for their own commercial purposes.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session identifiers to facilitate game delivery and RNG integrity auditing. No personally identifiable information is shared with game studios.
• Fraud Prevention & Risk Management Services: Specialist providers that assist m11sot in detecting multi-accounting, bonus abuse, and financial fraud. Data shared is limited to technical identifiers, device fingerprints, and transaction flags.
• Legal & Regulatory Authorities: In response to a lawful request, court order, or regulatory requirement, m11sot may be obliged to disclose specific player data to authorized government or law enforcement bodies. We will notify affected users of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of m11sot, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

m11sot retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for as long as we are required to do so by our licensing and compliance obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being open and active on the Platform, plus a minimum of five (5) years following account closure to satisfy AML and record-keeping requirements.
• KYC Documentation: Identity and address verification documents are retained for a minimum of five (5) years from the date of the last transaction on your account, in line with standard AML compliance frameworks.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming History: Bet, wager, and session records are retained for a minimum of three (3) years from the date of each gaming session.
• Support Communications: Customer support records, including chat transcripts and email correspondence, are retained for two (2) years from the date of the last interaction in each support case.
• Marketing Consent Records: Records of your marketing opt-in and opt-out preferences are retained for the lifetime of your account and for five (5) years thereafter, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an individual. Anonymized, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

m11sot uses cookies and similar tracking technologies to operate the Platform effectively, analyze usage patterns, and deliver relevant content and promotions. The following categories of cookies are in use:

You can manage cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may limit certain Platform features and personalization options. Clearing all cookies will log you out of any active session.

m11sot implements a multi-layered approach to data security, combining technical controls, operational policies, and staff training to protect your personal data from unauthorized access, loss, alteration, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, the cashier, and the account management interface.
• Encryption at Rest: Sensitive data fields — including KTP numbers, bank account details, and authentication credentials — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access Controls: Personal data is accessible only to authorized m11sot staff with a verified operational need. Access is governed by role-based permissions and reviewed on a quarterly basis.
• PCI-DSS Compliance: Our financial data storage and processing infrastructure conforms to PCI-DSS standards, ensuring that your transaction and payment method data is handled according to the highest industry security requirements.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. Internal m11sot systems that process personal data require mandatory 2FA for all staff access.
• Penetration Testing: Our infrastructure undergoes regular penetration testing and vulnerability assessments conducted by qualified independent security specialists.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights, m11sot will notify affected players promptly and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

As a registered player on m11sot, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with your registered email address and the specific right you wish to exercise. We will respond within 30 calendar days.

Please note that certain rights may be limited where exercising them would conflict with our legal obligations — for example, we cannot erase transaction records that we are required to retain under AML regulations, even if you submit an erasure request.

The m11sot Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Registration by underage individuals is a violation of our Terms & Conditions and is actively prevented through our age verification and KYC processes.

If we become aware that personal data belonging to a person under 21 has been collected — whether through a registration attempt, a parental report, or our own detection processes — we will immediately suspend the relevant account, delete all associated personal data to the extent not required for legal record-keeping, and void any transactions conducted under that account.

The m11sot Platform integrates with third-party services to deliver a complete gaming experience. These integrations are limited to operationally necessary providers and are governed by data processing agreements that require those providers to handle your data in accordance with the same principles described in this Policy.

Third-party service categories used by m11sot include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft deliver game content through secure API integrations. These studios receive only anonymized session identifiers and do not receive your personal identity or payment information.
• Analytics Providers: Server-side analytics tools that collect aggregated, anonymized usage data to help us measure Platform performance and user experience quality.
• Customer Support Tools: The chat and ticketing infrastructure used by our support team to manage and respond to player inquiries. Support conversations are stored within this infrastructure and subject to the retention periods described in Section 7.
• Security & Anti-Fraud Services: Specialist providers delivering real-time device fingerprinting, bot detection, and transaction risk scoring to protect the Platform and its players.

m11sot is not responsible for the privacy practices of websites or services that are not operated by m11sot. If you follow a link from the Platform to an external site, that site's own privacy policy will govern how your data is handled there.

m11sot reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal standards. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Post a prominent notice on the Platform for a minimum of 30 days following the effective date of the change;
• Send a notification to your registered email address summarizing the key changes where the amendments materially affect how we process your personal data.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should cease using the Platform and contact us to request account closure and data deletion in accordance with Section 10.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way m11sot handles your personal data, please contact our dedicated privacy support team:

When contacting us regarding a data rights request, please include your registered email address, a description of the right you wish to exercise, and — if requesting access or erasure — a brief description of the specific data involved. This helps us locate and process your request as efficiently as possible.