1xbit Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is published by 1xbit, a Sports Betting and online casino platform operating under the domain 1xbit-win.net for players in Malaysia. This document explains in detail how 1xbit collect, use, process, store, disclose, and protect your personal information as a user of our platform.

This policy applies to all individuals who interact with the 1xbit platform in any capacity – including website visitors, new account applicants, active registered members, and former members whose accounts have been closed but whose data is still retained in accordance with applicable legal obligations.

We understand that privacy is a serious matter. When you register at 1xbit, you are entrusting us with your personal information – your name, phone number, email address, financial details, and your activity history on the platform. We take that trust seriously and are committed to handling your data with transparency, integrity, and the highest security standards we can maintain.

1xbit only collects information necessary for platform operations, identity verification, payment processing, and compliance with legal obligations. The categories of data we collect are as follows:

Account Registration Information:

• Full name as per official identification documents.
• Date of birth (for age verification to confirm you are 18 or above).
• An active email address used for account communications.
• An active Malaysian mobile phone number.
• Passwords are stored in hashed form — we never store passwords as plain text.

Identity Verification (KYC) Information:

• A copy of your identity card (MyKad) or valid travel document.
• Proof of address documents such as a recent utility bill or bank statement.
• Additional information that may be required to comply with anti-money laundering (AML) obligations.

Financial & Transaction Information:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX.
• Records of all withdrawals to your e-wallet or Malaysian bank account.
• A complete history of all Sports Betting and casino game activity conducted on the 1xbit platform.
• The name of the bank account or e-wallet holder used for transactions (for verification purposes only).

Technical & Usage Data:

• The IP address of the device used to access 1xbit.
• The web browser type and operating system of your device.
• Session data including pages visited, session duration, and navigation patterns within the platform.
• Cookie data and similar tracking technologies (described further in Section 9).

1xbit uses collected personal information solely for the following purposes:

• Account Management: Creating and managing your 1xbit account, processing logins, and handling account or password recovery requests.
• Identity Verification: Verifying age eligibility (18 years and above) and conducting the required KYC process before permitting withdrawals or when required by the relevant authorities.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, and managing withdrawals to your Malaysian bank account or e-wallet.
• Service Provision: Bringing you Sports Betting, live casino, slots and all 1xbit products with a personalised experience tailored to your preferences and activity.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and misuse of the 1xbit platform.
• Service Communications: Sending important notifications related to your account, transactions, changes to terms, and account security information.
• Marketing Communications: Sending information about promotions, bonuses, and the latest offers from 1xbit — only if you have given consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to understand usage patterns and improve 1xbit platform features over time.
• Legal Compliance: Complying with legal obligations, court orders, or requests from relevant authorities in Malaysia.

1xbit processes your personal data on the following legal bases, depending on the purpose of the processing:

• Contract Performance: Processing required to deliver the 1xbit services you have requested upon account registration – including payment processing, account management, and providing access to Sports Betting and casino games.
• Consent: For marketing communications, the use of certain cookies, and other purposes where the law requires your explicit consent. You may withdraw this consent at any time without affecting your eligibility to use core 1xbit services.
• Legitimate Interests: For security purposes, fraud prevention, platform improvement, and legitimate business operations where our interests or those of other members outweigh the individual privacy rights of those involved in the relevant processing.
• Legal Obligations: Processing required to comply with applicable legal obligations, including financial record-keeping requirements, suspicious transaction reporting, and identity verification.

1xbit does not sell, rent, or transfer members' personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: Payment gateways and e-wallet providers — including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, and ShopeePay operators, as well as banks supporting FPX services — solely for the purpose of processing your deposit and withdrawal transactions.
• Game Providers: Companies such as Evolution Gaming and Pragmatic Play Live, which provide live casino games on the 1xbit platform, may receive the minimum data necessary to verify your game session.
• IT & Security Service Providers: Companies that assist us in managing technical infrastructure, security monitoring, fraud prevention, and platform analytics – all bound by strict data protection agreements.
• Regulatory Authority: Government authorities, regulatory bodies, or courts in Malaysia where 1xbit is required to do so by law, court order, or valid legal process.

All third parties that receive 1xbit member data are bound by written agreements requiring them to protect that data to a standard consistent with this privacy policy, and prohibiting them from using it for any purpose other than that specified.

Members' personal data is not transferred outside Malaysia except where required by service operations (such as international game providers) and with adequate safeguards in line with applicable data protection legislation.

1xbit continually invests in data security to protect the personal and financial information of our members. Key security measures we have implemented include:

• 256-Bit SSL Encryption: All communications between your browser or app and 1xbit's servers are protected with 256-bit SSL encryption, ensuring your data cannot be intercepted in transit.
• Sensitive Data Encryption: Sensitive information such as passwords is stored in hashed form using modern encryption algorithms. Even 1xbit staff cannot read your password.
• Layered Access Controls: Access to member data is restricted to staff who require it for specific operational duties only, using a role-based access control (RBAC) system with comprehensive audit logs.
• 24/7 Security Monitoring: The 1xbit security team monitors the platform around the clock using intrusion detection systems and security analytics to identify and respond to any threats promptly.
• Regular Security Testing: The 1xbit platform undergoes regular independent security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication: Two-factor authentication is available on all 1xbit accounts, adding an extra layer of protection beyond your password alone.

While 1xbit takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure against all threats. In the highly unlikely event of a data breach affecting your data, 1xbit will notify you and the relevant authorities in accordance with applicable legal obligations.

1xbit retains your personal data only for as long as necessary for the purposes set out in this policy or as required by applicable law. The following are general retention guidelines for the various categories of data:

• Active Account Data: For as long as your 1xbit account remains active, we retain all your personal information and activity records for account management and service delivery purposes.
• Financial Transaction Data: Records of all deposits, withdrawals, and bets are retained for a minimum of seven (7) years from the transaction date, in line with financial record-keeping requirements under Malaysian law.
• KYC Documents: Identity verification documents are retained for the period required under applicable anti-money laundering legislation, typically no less than five (5) years after account closure.
• Technical Data & Logs: Server logs and technical data are typically retained for 90 days for security and debugging purposes, after which they are automatically deleted or anonymised.
• Communication Data: Customer support communications are retained for two (2) years for reference purposes and to support 1xbit service quality improvements.

When data is no longer needed and there is no legal obligation to retain it, 1xbit will securely delete or deactivate that data in accordance with industry best practices.

As a 1xbit member, you have the following rights regarding your personal data that we hold, subject to applicable data protection laws in Malaysia:

The 1xbit platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how players interact with our platform. The types of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are required for the 1xbit platform to function properly. They manage your login session, retain content in your betting slip, and support core security features. They cannot be disabled without affecting the platform's core functionality.
• Performance & Analytics Cookies: Used to gather information on how players interact with the 1xbit platform — including the most frequently visited pages, time spent, and navigation paths. This data is collected in aggregated form without identifying individuals and is used to improve our platform.
• Functional Cookies: Allows the 1xbit platform to remember your preferences — such as language, display settings, and favourite games — to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant 1xbit advertisements and promotions to you based on your interests and activity. You can opt out of marketing cookies via the platform's cookie settings without affecting your access to core 1xbit services.

You can manage your cookie settings through your web browser settings. Please be aware, however, that disabling certain cookies may affect the functionality of some parts of the 1xbit platform. For more information on managing cookies, refer to your web browser's help documentation.

All 1xbit services are exclusively available to individuals aged 18 and above. 1xbit does not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and suspect that your minor child has registered for or is using the 1xbit platform without your permission, please contact our support team immediately via live chat or email. We will investigate the matter and, if confirmed, close the account immediately and delete all associated personal data in accordance with our data deletion procedures.

1xbit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements that require data to be processed in new ways.

When we make material changes to this policy, we will notify you via:

• A notification sent via email to the registered email address of your 1xbit account.
• In-platform notifications when you are logged in to your 1xbit account.
• Updating the "Last updated" date at the top of this policy page.

Changes will take effect no less than seven (7) days after the notification is sent, giving you sufficient time to review the amended policy. Your continued use of the 1xbit platform after the effective date of those changes will be considered your acceptance of the amended policy.

It is your responsibility to review this Privacy Policy page periodically. The latest version will always be available on this page. If you disagree with any amendments made, you have the right to close your 1xbit account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 1xbit handles your personal data, please reach out to us through the following channels:

• Live Chat: Available directly within the 1xbit platform – the fastest option with a typical response time of under five minutes, available 24 hours a day, 7 days a week including public holidays.
• Email: support@1xbit-win.net – for privacy-related enquiries requiring more detailed clarification or written confirmation. Response time is typically within 2 to 4 hours.

For data rights requests (access, correction, deletion, and so on), please clearly state the type of request you wish to make and provide sufficient information for us to verify your identity. This is an important security measure to ensure we do not disclose or alter your data to or at the request of an unauthorised party.

This Privacy Policy document is published in Bahasa Melayu (ms-MY) and constitutes the official version governing the handling of 1xbit player data in Malaysia. Last updated: January 2026.