dk11 Privacy Policy — How We Collect, Use, and Protect Your Personal Information

This Privacy Policy is issued by the operator of the dk11 platform — the company licensed to operate the online sports betting and casino services available at dk11.lol (hereinafter referred to as "dk11," "the Operator," "we," "us," or "our"). dk11 acts as the data controller in respect of all personal data collected from users of the Platform.

This Policy applies to all personal information collected by dk11 in connection with your use of the Platform, including information collected when you:

• Register a dk11 account using your Pakistani mobile number, CNIC details, or email address;
• Log in to your dk11 account from any device or browser;
• Place bets on cricket, sports events, or other betting markets available on dk11;
• Play live casino games or slot titles hosted on the dk11 platform;
• Make deposits or withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast;
• Contact dk11 customer support via live chat or email;
• Participate in promotions, bonuses, or the dk11 VIP Programme;
• Browse the dk11 website, whether or not you are logged into an account.

By using any dk11 service, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you should discontinue use of the dk11 platform.

dk11 collects only the personal data that is necessary for the provision of our services, compliance with legal obligations, and the protection of our players. The categories of personal data we collect are set out below:

dk11 does not collect sensitive personal data beyond what is required for identity verification (CNIC), and we do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information except where directly relevant to responsible gaming assessments and only with your explicit consent.

dk11 collects personal data through the following methods:

Direct Collection

Information you provide directly when creating your dk11 account, completing KYC verification, submitting payment requests, contacting support, or participating in promotions. This includes all registration form fields, uploaded identity documents, and voluntary information provided during support interactions.

Automated Collection

Technical data collected automatically when you access or use the dk11 platform. This includes your IP address, device identifiers, browser type and version, operating system, screen resolution, pages visited, session duration, click patterns, and betting activity data. This automated collection occurs through server logs, cookies, and first-party analytics tools.

Third-Party Sources

In limited circumstances, dk11 may receive data about you from third parties for specific, defined purposes including:

• Payment processors (JazzCash, EasyPaisa, 1LINK Raast) — transaction confirmation data required to credit or debit your dk11 wallet;
• Identity verification services — where additional verification is required for KYC compliance beyond CNIC documentation;
• Fraud prevention agencies — shared industry blacklist data used to detect accounts operated by known fraudsters or money launderers;
• Self-exclusion registries — where you have registered with a third-party responsible gaming self-exclusion service that shares data with licensed gaming operators.

dk11 processes your personal data only where a valid legal basis exists. The applicable legal bases for each category of processing are as follows:

• Contractual necessity: Processing required to fulfil the contract between you and dk11 — including account creation, bet settlement, payment processing, and customer support. Without this processing, dk11 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including Know Your Customer (KYC) identity verification under anti-money laundering frameworks, age verification requirements, and regulatory reporting obligations applicable under the Operator's gaming licence.
• Legitimate interests: Processing conducted for dk11's legitimate operational interests where these interests are not overridden by your privacy rights — including fraud detection, platform security, responsible gaming monitoring, system performance analytics, and improving the quality of our cricket betting markets and casino product.
• Consent: Processing based on your explicit, freely given consent — including direct marketing communications, non-essential cookies, and any processing of sensitive data beyond standard KYC requirements. You may withdraw consent at any time without affecting the lawfulness of prior processing.

dk11 uses your personal data exclusively for the following defined purposes:

Account & Service Provision

• Creating and maintaining your dk11 account;
• Processing deposits and withdrawals via JazzCash, EasyPaisa, and bank transfer channels;
• Settling bets on cricket, PSL, sports events, and casino games;
• Managing your VIP tier status, bonus eligibility, and promotional entitlements;
• Delivering customer support and resolving account disputes.

Legal & Compliance Obligations

• Verifying your identity and age (21+) during registration and ongoing KYC processes;
• Monitoring transactions for anti-money laundering (AML) indicators;
• Reporting to gaming regulators and law enforcement authorities where legally required;
• Maintaining mandatory transaction records for the required statutory retention period.

Security & Fraud Prevention

• Detecting and preventing unauthorised account access, credential theft, and account takeover attempts;
• Identifying and blocking multiple-account registrations by the same individual;
• Detecting automated bot activity, collusion, and other forms of platform abuse.

Responsible Gaming

• Monitoring betting patterns to identify potential problem gambling indicators;
• Enforcing self-exclusion restrictions and deposit limit settings activated by the player;
• Sending responsible gaming intervention communications where player behaviour triggers relevant thresholds.

Marketing & Communications (With Consent)

• Sending promotional offers, bonus notifications, and PSL betting market alerts via SMS or email — where you have opted in to receive such communications;
• Personalising your dk11 dashboard experience based on your betting and gaming preferences.

dk11 will not use your personal data for any purpose beyond those listed above without obtaining your prior explicit consent or establishing a new legal basis for the processing.

dk11 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes, under any circumstances. Your data is shared with third parties only in the following defined situations:

• Payment service providers: JazzCash (Jazz Financial Services), EasyPaisa (Telenor Microfinance Bank), HBL, UBL, Meezan Bank, and 1LINK receive the minimum data necessary to process your deposit or withdrawal transaction and comply with their own regulatory obligations.
• Game technology providers: Evolution Gaming, Pragmatic Play, NetEnt, Play'n GO, and other certified game providers receive session and wagering data as required to operate and audit the games they supply to the dk11 platform. These providers are bound by contractual data processing agreements.
• Identity verification services: KYC processing partners may receive your CNIC data and identity photographs for verification purposes only, subject to strict data processing agreements and applicable data protection standards.
• Fraud prevention & AML: Industry fraud prevention agencies and AML monitoring services may receive flagged transaction or account data where a genuine suspicion of fraudulent activity exists.
• Regulatory & law enforcement authorities: dk11 will disclose your personal data to gaming regulators, financial intelligence units, or law enforcement agencies where legally obligated to do so under applicable law. We will notify you of such disclosure where legally permitted.
• Professional advisors: Legal counsel, auditors, and insurers who require access to account data in the course of providing services to the Operator, subject to professional confidentiality obligations.

All third parties with whom dk11 shares personal data are required to process it only for the specified purpose, implement appropriate technical security measures, and comply with applicable data protection law. dk11 does not permit third-party processors to use your data for their own independent purposes.

dk11 uses cookies and similar tracking technologies on the Platform for the following purposes:

Essential Cookies (Always Active)

These cookies are strictly necessary to operate the dk11 platform and cannot be disabled. They include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery (CSRF) attacks, and load-balancing cookies that ensure stable platform performance across dk11's server infrastructure.

Functional Cookies (Enabled by Default)

These cookies remember your preferences within the dk11 platform — including your preferred cricket market view, your language and display settings, and whether you have previously acknowledged certain notifications. Disabling these cookies may affect your platform experience but will not prevent access.

Analytics Cookies (Consent Required)

First-party analytics cookies help dk11 understand how Pakistani players navigate the platform — which pages are most visited, where users spend the most time, and which features generate the most engagement. This data is used in aggregate, anonymised form to improve the dk11 product. These cookies are only deployed with your prior consent.

Managing Your Cookie Preferences

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential or functional cookies may materially impair your ability to use the dk11 platform, including logging in and accessing your account. dk11 does not use third-party advertising or retargeting cookies.

dk11 retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data (KYC documentation): Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable under dk11's gaming licence framework.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five (5) years following the date of each transaction, for AML compliance and dispute resolution purposes.
• Customer support communications: Retained for three (3) years following the last interaction, to enable dispute resolution and quality assurance review.
• Technical and session logs: Retained for twelve (12) months from the date of collection, unless a specific security investigation requires extended retention.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to any minimum retention periods imposed by applicable law.

Following the expiry of the applicable retention period, personal data is securely destroyed using industry-standard data destruction methods, including cryptographic erasure for digitally stored data and certified destruction for any physical records.

dk11 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport encryption: All data transmitted between your device and dk11's servers is encrypted using TLS 1.3 — the current industry standard for secure web communications. This applies to all account sessions, payment transactions, and support interactions.
• Password security: Your dk11 account password is never stored in plain text. All passwords are processed through bcrypt hashing with individual salts before storage, making stored credentials resistant to brute-force decryption even in the event of a data breach.
• Two-factor authentication (2FA): dk11 enforces OTP-based two-factor authentication for all account logins, requiring verification via your registered Pakistani mobile number in addition to your password. This prevents unauthorised account access even where credentials are compromised.
• Access controls: Access to player personal data within dk11's operations is restricted on a strict need-to-know basis. Internal access logs are maintained and reviewed regularly.
• Anomaly detection: Automated systems monitor login patterns, transaction behaviour, and account activity for unusual indicators — triggering additional verification steps and security alerts where anomalies are detected.
• Penetration testing: The dk11 platform undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in respect of your personal data held by dk11. These rights may be exercised by contacting our support team via live chat or at [email protected]:

dk11 will respond to all verified privacy rights requests within 30 calendar days. We may need to verify your identity before processing your request. Where a request is complex or involves a high volume of data, we may extend this period by an additional 60 days with prior notification.

dk11 does not knowingly collect, process, or store personal data relating to any individual under the age of 21 years. We employ the following safeguards to enforce this restriction:

• Date of birth collection and validation at the point of account registration, preventing registration by individuals who declare an age below 21;
• CNIC-based KYC verification, which cross-references the declared date of birth against official identity documentation before enabling withdrawal access;
• Automated flagging of account behaviour patterns that may indicate use by a minor, triggering manual review by our compliance team.

Parents or guardians who have reason to believe that a minor in their household has registered a dk11 account should contact our support team immediately via live chat. We will verify the claim, close the account, and delete all associated personal data without delay. Any funds in the account will be returned to the verified depositing payment method.

dk11 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable data protection law, changes to our data processing practices, regulatory guidance, or material changes to the dk11 platform and its services.

When material changes are made to this Policy, dk11 will provide notice by:

• Displaying a prominent notification on the dk11 platform informing you of the amendment and its effective date;
• Sending an email notification to your registered email address, where feasible and appropriate to the nature of the change;
• Updating the "Effective Date" and "Last Reviewed" date displayed at the top of this Privacy Policy.

Your continued use of the dk11 platform following the effective date of any amended Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any amendment, you should cease using the platform and contact support to request account closure in accordance with our Terms and Conditions.

dk11 recommends that you review this Privacy Policy periodically — particularly before making large deposits or providing additional personal information — to remain informed of how your data is being handled.

Privacy Queries & Rights Requests

For all questions, concerns, or formal rights requests relating to your personal data held by dk11, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the dk11 platform — this is the fastest way to receive an initial response and raise an urgent privacy concern.
• Email: [email protected] — for formal written privacy requests, please include your full name, registered mobile number, and a clear description of your request. Mark your email with the subject line "Privacy Request."

Formal Complaints

If you are not satisfied with dk11's response to a privacy concern or rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. dk11 will cooperate fully with any investigation conducted by a competent supervisory authority and will implement any binding decision issued in respect of a data subject complaint within the required timeframe.

Before escalating to a supervisory authority, we encourage you to raise the matter with dk11 directly, as the majority of privacy concerns are resolvable at the platform level within the standard 30-day response window. dk11 takes all privacy complaints seriously and commits to investigating every formal complaint thoroughly and impartially.