Your game. Your privacy.

Updated October 2026. This notice covers the 11kix game and player platform at 11kix.com, operated by the 11kix team. Use a nickname instead of your real name. You can try one match as a guest. Continuing requires Google sign-in and a username.

What we use

We assign a random name when you play as a guest. Only signed-in players can choose a username. We use this name, footballer, invitation code, match choices and results to run your duel. A secure session cookie identifies your browser so you can return to your match. Your rival sees your player name, footballer and match results. Your locked direction stays hidden until both players have chosen.

Firebase verifies your Google account and email. We store an account identifier, your chosen username, match history, wins, level, friend connections and referrals in DynamoDB. Public player information includes your username, level, wins, games played, referral code and recent online status. Players can find and challenge you by username. Referral codes connect an invited account to its referrer.

Your NGN wallet records your balance, funds reserved for Rated matches and withdrawals, deposits, earnings and stake transfers from match results, tournament rewards, releases and activity times. Deposits and withdrawals involve our payment provider and may include your receipt email and a verified bank account. We retain the match or transaction reference so we can reconcile a result or resolve a balance issue. Your full wallet activity and account history are available to you and authorised operators, not other players. Players in a Rated contest can see its agreed stake amount and result.

New matches, including Play Now and guest games, allow spectators by default. Public matches and tournament matches may be watched by other visitors. Spectators see the players, scores and completed choices through the action video. They cannot see an unplayed direction. You can turn off spectators in More play options when creating an ordinary match. Shared score links show the player names and final score to anyone with the link.

We count room creation, successful joins, starts, completions, rematches and playback errors to improve the game. These records use random room or browser identifiers. We do not use advertising trackers or sell this data. Internet services also process IP addresses and technical request information to deliver the game and prevent abuse. The application uses a hashed IP identifier for request limits. We use account and gameplay data to provide the game you request, and operational records to keep it secure, reliable and resolve support issues.

To prevent multiple accounts entering the same tournament from one browser, we link a hashed identifier from your existing browser cookie to the account that successfully joins that tournament. The restriction remains after withdrawal. We also count unique signed-in accounts that open a tournament’s early-join reminder. The tournament list shows this total as players waiting until joining opens; administrators can also see it afterwards. Individual reminder records remain private. These tournament records have no automatic expiry. They do not use device fingerprinting.

We keep daily operational totals of signed-in visitors, guest visitors, and people who start matches. Days use Nigeria time. We use your account identifier or a hash of your existing guest session cookie to count each account or browser once per day. These private counting records are scheduled for deletion after 400 days; anonymous daily totals have no automatic expiry. Only administrators can view the totals. This uses no new tracking cookie and does not send these records to Google Analytics.

Where it is processed

The website uses Vercel and media uses Cloudflare. Match servers and their journal and application database run on AWS in Cape Town, South Africa. Google Firebase provides authentication from the United States. Google processes the identity information shared during sign-in and technical information such as IP addresses and browser details. See Firebase’s privacy information. Website delivery and provider operations may process data in other countries. Only the game operator and service providers supporting the game can access private operational records.

Optional usage analytics

If you allow it, we use Google Analytics to understand visits, navigation, button use, match setup and results, replay use, sharing, account actions, friends, tournaments and technical problems. Reports include device and browser information, approximate location and how visitors reach the game. Google processes this information on its infrastructure, which can include countries outside Nigeria. We do not link Analytics activity to your player account or send your name, email, username, wallet balance, messages, invitation codes or locked directions. Advertising features are disabled.

The Google tag loads only after you allow analytics. It uses first-party cookies to distinguish visits on the same browser for up to six months. Your choice is remembered on this device for six months. You can decline and keep playing, or turn analytics off below or in Game settings. Turning it off stops future collection and removes the Google Analytics cookies used by this site; it does not remove data already received by Google. See how Google uses information from partner sites.

Analytics user and event data are set to expire after two months, without extending that period when you return. Aggregated reports can remain available longer.

Installation and notifications

You can install 11kix on your Home Screen. Installation caches app icons and an offline reconnect page on your device. Gameplay still requires an internet connection. We remember a dismissed install suggestion for seven days.

If you enable notifications, we store your browser’s push subscription endpoint and encryption keys with your account in DynamoDB for up to 90 days. Your browser’s push provider delivers encrypted alerts for tournaments you join, friend requests, accepted requests and game challenges, according to your saved preferences, including when the app is closed. These alerts can include player usernames and tournament names and may appear on your lock screen. Delivery depends on your device, connection and notification settings. You can choose alert categories in your profile or disable notifications in your profile or device settings. Logging out disconnects notifications for that browser. Expired push subscriptions are removed when the provider rejects delivery. Pending notification jobs expire within one day.

How long it stays

The guest browser cookie lasts up to one year to remember the guest-match allowance. The associated guest participation record has no automatic expiry. An account session expires after seven days. Invitation rooms expire after two hours; live matches have their own 30-minute limit. Expired website match records are scheduled for deletion after another 24 hours. Records with unresolved Rated stakes or pending withdrawals remain until they are settled or released. Money records have no automatic expiry. The AWS journal expires after the match plus 24 hours; the provider may take up to a few days to physically remove expired entries. They cannot be used to rejoin an expired match.

Profiles, account match history, wallet activity, friend connections, referrals and tournament results have no automatic expiry. You can request deletion through Help. Technical game events and support messages are scheduled to expire after 30 days; database deletion can take additional time. AWS match-service logs expire after seven days. DynamoDB recovery backups retain older records for up to 35 days. Authentication and delivery providers have their own retention periods; Firebase explains these in the privacy information linked above.

Sound, replay, celebration and video-quality preferences, and a referral code if you followed an invitation, may stay on your device until you clear them. Essential session cookies keep you signed in and enforce the one-match guest allowance and tournament browser restrictions. Clearing cookies signs you out of this browser; it does not delete your account or wallet.

Contact and choices

Contact the 11kix operator to ask about your data, request access, correction or deletion, or report a concern. Sign in before submitting an account request where possible, include your username, and provide an email if you need a reply. We may ask you to verify account ownership before releasing or deleting records. Support messages include your message, category, optional email, session identifier and submission time. Requests are reviewed by the operator; the support form does not immediately delete your account. You can remove friends in Your squad, choose whether to allow spectators when creating a match, and clear device preferences in your browser settings.

If you believe your personal information has been mishandled, you can contact the Nigeria Data Protection Commission.