I 1malaysia Privacy Policy – How We Protect Every Member's Personal Data

1Introduction

This Privacy Policy explains how i 1malaysia ("we", "Platform") collects, uses, stores and protects your personal information when you use our website, gaming platform and related services. It applies to all registered members and visitors of the i 1malaysia website.

I 1malaysia takes our responsibilities as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. We are committed to ensuring that your privacy is respected and your personal data is handled with integrity and accountability.

By registering an account or continuing to use the i 1malaysia platform after this policy has been updated, you consent to the practices described in this document. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Personal Data We Collect

I 1malaysia only collects data that is necessary for specific and legitimate purposes. The following are the categories of data we collect:

2.1 Data We Do Not Collect

I 1malaysia does not collect biometric data (fingerprints, facial recognition), special category data such as medical records or religious beliefs, and we do not actively collect information from individuals under the age of 18.

2.2 Data Sources

Your personal data is collected directly from you during registration, deposits, withdrawals and platform use. Some technical data is collected automatically via cookies and tracking technologies as described in Section 6.

3How We Use Your Personal Data

I 1malaysia uses collected data only for legitimate and relevant purposes:

4Data Sharing with Third Parties

I 1malaysia do not sell your personal data. However, under limited and controlled circumstances, we may share data with the following parties:

4.1 Contracted Service Providers

We work with carefully selected third-party service providers to manage certain aspects of our platform — including e-wallet and FPX payment processors, live casino game software providers, cloud infrastructure providers, and anti-fraud services. All these providers are contractually bound to handle your data in accordance with i 1malaysia's security standards and Malaysia's PDPA.

4.2 Legal Authority

I 1malaysia will disclose personal data to the relevant authorities in Malaysia when required by law — for example, in investigations relating to financial fraud, money laundering, or pursuant to a valid court order. We will not disclose data beyond what is legally required.

4.3 Business Acquisition or Merger

In the event of an acquisition, merger, or sale of i 1malaysia's business assets, players' personal data may be transferred to the successor entity. Players will be notified in advance and given the option to opt out before any such transfer takes place.

5Data Security Measures

I 1malaysia implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• Encryption in Transit: SSL/TLS 256-bit encryption for all communications between your browser and i 1malaysia's servers;
• Encryption at Rest: Sensitive data such as financial information is stored in encrypted form within our databases;
• Access Controls: Access to player data is restricted to staff who require it on a need-to-know basis, with full audit logs maintained;
• Two-Factor Authentication: Internal administration systems are protected by multi-factor authentication;
• 24/7 Monitoring: A real-time security threat monitoring system that operates around the clock;
• Penetration Testing: Regular security testing is conducted by independent security experts to identify and address vulnerabilities;
• Staff Training: All staff who handle player data receive regular information security training.

6Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the i 1malaysia website. They help us remember your preferences, authenticate your login sessions and understand how you interact with our platform.

6.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies: Collects information on how you use the platform (without personally identifying you) to help us improve website functionality.
• Functional Cookies: Remembering your preferences such as language, favourite game types, and display settings.
• Analytics Cookies: Helps us understand platform traffic and usage patterns for internal improvement purposes.

6.3 Cookie Controls

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the i 1malaysia platform, and you may be unable to log in or use certain features.

7Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by i 1malaysia:

8Data Retention & Deletion

8.1 Retention Period

I 1malaysia retains your personal data for as long as it is needed for the purpose it was collected, or as required by Malaysian law. Generally:

• Active account data: Retained for the duration your account is active and for 7 years after closure to comply with accounting and anti-money laundering requirements;
• Financial transaction records: Retained for 7 years in accordance with Malaysian financial regulatory requirements;
• Customer support logs: Retained for 3 years for quality control purposes;
• Technical data and logs: Retained for 12 months for security and technical diagnostic purposes.

8.2 Data Deletion

When data is no longer needed and there is no legal obligation to retain it, i 1malaysia will securely delete or anonymise it using industry-recognised methods. You may request the deletion of your account and associated data through our support team, subject to any applicable legal retention obligations.

9Cross-Border Data Transfers

In the course of operating the platform, some of your personal data may be processed or stored on servers located outside Malaysia — for example, by the international cloud service providers we use. In all such cases, i 1malaysia ensures that:

• Transfers are only made to countries or entities that provide a level of data protection equivalent to or higher than the Malaysia PDPA;
• Appropriate data transfer agreements have been put in place with the relevant providers;
• Transferred data is protected with encryption both in transit and at rest;
• We retain control over that data and may withdraw it if the provider fails to meet the required standards.

10Changes to the Privacy Policy

I 1malaysia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Whenever we make a material change:

• We will update the "Last Updated" date at the top of this document;
• We will display a clear notice on the i 1malaysia platform homepage;
• For significant changes, we will send a notification directly to your registered email address;
• We will provide at least 14 days' notice before any material changes take effect.

Your continued use of the i 1malaysia platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how i 1malaysia handles your personal data, or if you wish to exercise any of the rights set out in Section 7, please contact us:

• Privacy Email: privacy@i1malaysia.click
• General Support Email: support@i1malaysia.click
• Live Chat: Available 24/7 via the chat icon on the i 1malaysia platform

We will acknowledge receipt of every privacy request within 3 business days and provide a full response within 14 business days. If the matter cannot be resolved internally, you have the right to escalate your complaint to Department of Personal Data Protection (JPDP) Malaysia.