Your game. Your privacy.

Updated 8 September 2026. This notice covers the 11kix game and player platform at 11kix.com, operated by the 11kix team. Use a nickname instead of your real name. You can try one match as a guest. Continuing requires Google sign-in and a username.

What we use

We use your chosen player name, footballer, invitation code, match choices and results to run your duel. A secure session cookie identifies your browser so you can return to your match. Your rival sees your player name, footballer and match results. Your locked direction stays hidden until both players have chosen.

Firebase verifies your Google account and email. We store an account identifier, your chosen username, match history, wins, level, free points, friend connections and referrals in DynamoDB. Public player information includes your username, level, wins, games played, points balances, referral code and recent online status. Players can find and challenge you by username. Referral codes connect an invited account to its referrer and record when a referral reward is earned.

Your points wallet records your balance, points reserved for Rated matches, rewards, transfers from match results, releases and activity times. We retain the match or challenge reference so we can reconcile the result and resolve a balance issue. Your full wallet activity and account history are available to you and authorised operators, not other players. Players in a Rated contest can see its agreed points amount and result.

Public matches and tournament matches may be watched by other visitors. Spectators see the players, scores and completed choices through the action video. They cannot see an unplayed direction. You can turn off spectators when creating an ordinary match. Shared score links show the player names and final score to anyone with the link.

We count room creation, successful joins, starts, completions, rematches and playback errors to improve the game. These records use random room or browser identifiers. We do not use advertising trackers or sell this data. Internet services also process IP addresses and technical request information to deliver the game and prevent abuse. The application uses a hashed IP identifier for request limits. We use account and gameplay data to provide the game you request, and operational records to keep it secure, reliable and resolve support issues.

Where it is processed

The website and media use OpenAI Sites and Cloudflare. Match servers and their journal and application database run on AWS in Cape Town, South Africa. Google Firebase provides authentication from the United States. Google processes the identity information shared during sign-in and technical information such as IP addresses and browser details. See Firebase’s privacy information. Website delivery and provider operations may process data in other countries. Only the game operator and service providers supporting the game can access private operational records.

Optional usage analytics

If you allow it, we use Google Analytics to understand visits, navigation, button use, match setup and results, replay use, sharing, account actions, friends, tournaments and technical problems. Reports include device and browser information, approximate location and how visitors reach the game. Google processes this information on its infrastructure, which can include countries outside Nigeria. We do not link Analytics activity to your player account or send your name, email, username, wallet balance, messages, invitation codes or locked directions. Advertising features are disabled.

The Google tag loads only after you allow analytics. It uses first-party cookies to distinguish visits on the same browser for up to six months. Your choice is remembered on this device for six months. You can decline and keep playing, or turn analytics off below or in Game settings. Turning it off stops future collection and removes the Google Analytics cookies used by this site; it does not remove data already received by Google. See how Google uses information from partner sites.

Analytics user and event data are set to expire after two months, without extending that period when you return. Aggregated reports can remain available longer.

How long it stays

The guest browser cookie lasts up to one year to remember the guest-match allowance. The associated guest participation record has no automatic expiry. An account session expires after seven days. Invitation rooms expire after two hours; live matches have their own 30-minute limit. Expired website match records are scheduled for deletion after another 24 hours. Records with unresolved Rated points remain until those points have been settled or released. The AWS journal expires after the match plus 24 hours; the provider may take up to a few days to physically remove expired entries. They cannot be used to rejoin an expired match.

Profiles, account match history, wallet activity, friend connections, referrals and tournament results have no automatic expiry. You can request deletion through Help. Technical game events and support messages are scheduled to expire after 30 days; database deletion can take additional time. AWS match-service logs expire after seven days. DynamoDB recovery backups retain older records for up to 35 days. Authentication and delivery providers have their own retention periods; Firebase explains these in the privacy information linked above.

Sound, replay, celebration and video-quality preferences, and a referral code if you followed an invitation, may stay on your device until you clear them. Essential session cookies keep you signed in and enforce the one-match guest allowance. Clearing cookies signs you out of this browser; it does not delete your account or wallet.

Contact and choices

Contact the 11kix operator to ask about your data, request access, correction or deletion, or report a concern. Sign in before submitting an account request where possible, include your username, and provide an email if you need a reply. We may ask you to verify account ownership before releasing or deleting records. Support messages include your message, category, optional email, session identifier and submission time. Requests are reviewed by the operator; the support form does not immediately delete your account. You can remove friends in Your squad, choose whether to allow spectators when creating a match, and clear device preferences in your browser settings.

If you believe your personal information has been mishandled, you can contact the Nigeria Data Protection Commission.