1imalaysia Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy describes how 1imalaysia – operating under the domain 1imalaysia.best – collects, uses, stores, and protects your personal data as a member of the platform. This document has been prepared in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, the law governing how organisations handle the personal information of Malaysians.

When you register an account, make a deposit, play games, or interact with any part of the 1imalaysia platform 1imalaysia, you are entrusting us to handle your personal data responsibly. We do not take that trust lightly. Every decision about data – from how it is collected to how long it is retained – is made with one question in mind: "Is this in the best interest and safety of our members?"

By registering and using the 1imalaysia, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please do not proceed with registration or use of the platform. If any part is unclear, our 24/7 support team is ready to help you understand it.

1imalaysia only collects data that is genuinely necessary to operate the platform securely, meet legal requirements, and deliver a quality experience to members. The following are the categories of data we collect:

Identity & Registration Data:

• Full name as shown on your identity document (MyKad or passport).
• Date of birth – to confirm that you meet the minimum age requirement of 18 years.
• An active Malaysian mobile number – for OTP verification and security communications.
• Email address (if provided) – for account notifications and platform communications.
• Username and encrypted password – for logging in to your account.

Financial & Transaction Data:

• The account holder name on your bank account or digital wallet (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) used for deposits and withdrawals.
• Bank account numbers (stored in encrypted and partially masked format).
• Deposit and withdrawal transaction history – required for anti-money laundering (AML) compliance.
• Betting and gaming history – for security, dispute resolution, and audit purposes.

Technical & Usage Data:

• The IP address of the device you use to access the platform.
• Device type, operating system, and web browser.
• Cookie and session data – to maintain your login state and platform preferences.
• Platform activity logs – for security monitoring and technical troubleshooting purposes.

1imalaysia uses your personal data solely for lawful and necessary purposes. The specific purposes, along with their legal bases under PDPA 2010, are set out below:

• Platform Operations: Creating and managing your account, processing deposits and withdrawals, and enabling you to play games and place Sports Betting at 1imalaysia. Basis: Performance of contract.
• Identity Verification (KYC): Verifying that all members are at least 18 years of age and confirming identity for the purposes of the first withdrawal. Basis: Legal obligation and performance of contract.
• Security & Fraud Prevention: Detecting suspicious account activity, preventing the use of multiple accounts, and protecting your account from unauthorised access. Basis: Legitimate interests.
• AML Compliance: Complying with Malaysia's anti-money laundering legal requirements by retaining necessary financial transaction records. Basis: Legal obligation.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes, and promotions you have opted in to receive. Basis: Contract performance and consent.
• Platform Enhancements: Analysing aggregated usage patterns (without identifying individuals) to improve the platform's user experience 1imalaysia. Basis: Legitimate interests.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gambling support, and proactively reaching out to them where necessary. Basis: Public interest and member wellbeing.

1imalaysia does not sell, rent, or trade your personal data. However, there are limited circumstances in which we need to share certain information with trusted third parties to enable the platform to operate securely and in compliance with the law:

• Payment Providers: Payment service providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and banking institutions (Maybank, CIMB) receive the transaction information necessary to process your deposits and withdrawals. This sharing is limited strictly to the data required to complete each transaction.
• Game Software Providers: Third-party providers such as Microgaming, NetEnt, and Pragmatic Play may receive anonymised session identifiers for game generation purposes. They do not receive your full name, phone number, or financial information.
• Legal Authorities: 1imalaysia will disclose personal data to Malaysian law enforcement agencies, courts, or regulatory bodies when required to do so by law or a valid court order.
• Technical Service Providers: Companies providing the technical infrastructure (server hosting, cloud services) used by 1imalaysia may have limited access to data in their technical capacity. All such providers are bound by strict confidentiality agreements.

The security of members' personal data is the highest technical priority at 1imalaysia. We continuously invest in our security infrastructure to ensure your data is protected against all reasonable threats. Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your browser and our servers 1imalaysia encrypted using TLS 1.3 protocol with 256-bit key length – the same standard used by Malaysia's leading banking institutions.
• Stored Data Encryption: Sensitive data such as bank account numbers and passwords are stored in encrypted form using industry-standard algorithms. Passwords are never stored in plain text – they are hashed using a one-way irreversible function.
• Internal Access Controls: Access to member personal data within internal systems 1imalaysia is strictly limited – only staff who require access to carry out their specific duties are granted permission, and all access is logged and audited.
• 24/7 Security Monitoring: An active intrusion detection system continuously monitors all server and network activity to detect and respond to any security threats in real time.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA via SMS OTP for an added layer of security when logging in to their account 1imalaysia them.

Platform 1imalaysia uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality – including login sessions, security, and language preferences. These cookies cannot be disabled as they are necessary for the platform to operate. No personally identifiable data is shared with third parties through these cookies.
• Performance Cookies: Collects information on how you use the platform – pages visited, time spent on each page, and any error messages encountered. This data is collected in aggregate and anonymised form to help us improve the platform 1imalaysia.
• Functional Cookies: Remembering your preferences such as language, display settings, and gaming preferences to make your experience more seamless. This data is not shared with any third parties.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect platform functionality 1imalaysia and prevent you from logging in or using certain features. For step-by-step guidance on managing cookies across different browsers, please contact our customer support.

1imalaysia retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law. Our data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active on the platform 1imalaysia. Accounts inactive for more than 24 months may be archived, with prior notice sent to you.
• Financial Transaction Data: Retained for a minimum of seven (7) years from the transaction date as required by Malaysian law for tax audit and AML compliance purposes – even after account closure.
• KYC Records & Identity Verification: Retained for a minimum of five (5) years from the date of verification, or longer if required by the relevant regulatory authority.
• Technical Logs: System activity logs are retained for 90 days for security monitoring and troubleshooting purposes, then automatically deleted.
• Marketing Data: If you have given consent to receive marketing communications, this data is retained until you withdraw that consent via the unsubscribe option.

Once the applicable retention period has expired, your personal data will be securely deleted using methods that ensure it cannot be recovered. For accounts closed at a member's request, data not subject to legal retention requirements will be deleted within 30 days of the account closure being confirmed.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you certain rights in relation to the personal data we hold about you. 1imalaysia respects and fully supports the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data that 1imalaysia hold about you. Requests will be processed within 21 business days of receiving a complete and valid request.
• Right to Rectification: If you find that any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Corrections will be processed within 14 business days.
• Right to Withdraw Consent: For data processing based on your consent (such as receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Restrict Processing: Under certain circumstances defined by the PDPA, you have the right to request that we restrict how we use your data while a dispute is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including processing for direct marketing.

Please note that these rights are not absolute and may be limited in certain circumstances – for example, 1imalaysia cannot delete financial transaction data that is legally required to be retained under Malaysian law, even upon a deletion request. In such cases, we will clearly explain the applicable limitations in our response to your request.

Platform 1imalaysia is strictly not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. All account registrations require age verification, and any account suspected of belonging to an underage individual will be terminated immediately upon detection.

If you are a parent concerned about your teenager's online gambling habits, we encourage you to make use of the parental control features available on their devices and web browsers to block access to online gambling platforms, including 1imalaysia. You may also contact Talian Kasih 15999 for guidance from child and youth welfare experts.

1imalaysia reserves the right to update this Privacy Policy from time to time as needed — whether due to changes in our data practices, new legal requirements, or newly introduced platform features. Each revised version will be published on this page with an updated "Last Updated" date.

For material changes – those that significantly alter how we collect or use your data – we will provide reasonable notice via:

• Clear in-platform banner notifications 1imalaysia at least 14 days before the changes take effect.
• An email to your registered address (if you have provided one) outlining the key changes.
• In-account notification 1imalaysia yours when you log in after the changes have been published.

Continued use of the platform 1imalaysia after the effective date of an updated Privacy Policy will be considered acceptance of those changes. If you do not agree with any of the changes, you have the right to close your account by contacting our customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 1imalaysia, please reach out to us through the following channels:

For enquiries regarding personal data and PDPA rights, please email us with the subject line "Privacy Enquiry – [Your Account Number]" to ensure your enquiry is routed directly to the responsible team. We are committed to responding to all privacy-related enquiries within 24 business hours and all formal PDPA requests within the timeframe stipulated by law.