Privacy Policy i 1malaysia — Member Personal Data Protection

1Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by i 1malaysia and applies to all registered members and visitors using the i 1malaysia platform, whether via the website or mobile app. We are committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering as an i 1malaysia member or continuing to use our platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the i 1malaysia platform and contact us to close your account.

This policy covers all information you provide during registration, while using our services, when making financial transactions, and when interacting with the i 1malaysia customer support team. We encourage you to read this document carefully and to contact us should you have any questions.

2Types of Personal Data We Collect

I 1malaysia collects only the personal data necessary for the safe and efficient operation of the platform. Below are the categories of data we collect and the purposes for which they are used:

3Purpose of Data Collection & Processing

I 1malaysia collects and processes your personal data only for legitimate and necessary purposes. We do not process your data beyond what is required for the following purposes:

• Identity and eligibility verification: Verifying that you meet the minimum age requirement of 18 years and all other eligibility criteria for i 1malaysia membership.
• Account management: Creating, maintaining, and securing your i 1malaysia member account.
• Transaction processing: Managing deposits, withdrawals, and all financial transactions securely in MYR.
• Legal compliance: Fulfilling obligations under Malaysian law, including PDPA 2010 and anti-money laundering (AML) requirements.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Handling enquiries, complaints, and support requests from members.
• Service improvement: Analysing usage patterns to improve the gaming experience on i 1malaysia.
• Marketing communications: Sending promotional information, bonuses, and the latest offers — only if you have consented to receive them.

4Data Sharing & Disclosure to Third Parties

I 1malaysia does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, in certain limited situations, we may share data with the following parties:

• Payment service providers: Providers such as DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay receive only the transaction data strictly necessary to process your payment.
• Third-party game providers: Casino software and game providers that operate certain games on the i 1malaysia platform may receive usage data necessary for game operations.
• Legal authorities: i 1malaysia will disclose data when required by Malaysian law, court order, or a responsible law enforcement agency.
• Auditors and professional advisors: Audit firms, legal counsel, and consultants bound by strict confidentiality agreements.

In the event of a transfer, merger, or acquisition involving i 1malaysia, member data may be transferred as part of the business assets. In such circumstances, we will notify members via an on-platform notice or by email before the data is transferred to the new entity.

5Security & Data Protection

I 1malaysia continuously invests in cutting-edge security infrastructure to ensure members' personal data is protected at all times. The technical and organisational security measures we implement include:

• Data encryption in transit using the SSL/TLS 256-bit industry-recognised.
• Encryption of data stored in databases using AES-256 encryption.
• Role-based access control — only authorised staff may access sensitive member data.
• 24/7 system monitoring to detect suspicious activity or unauthorised access attempts.
• Regular security penetration testing conducted by independent auditors.
• Comprehensive security incident response procedures.

While i 1malaysia takes all reasonable precautions, no system can guarantee 100% absolute security. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities within the timeframe prescribed by Malaysian law.

6Use of Cookies & Tracking Technologies

I 1malaysia uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the i 1malaysia website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve our services. Data is collected anonymously.
• Functional Cookies: Remembering your preferences and settings, such as your preferred language and login account, for a more convenient experience.
• Analytics Cookies: Helping us understand aggregate user behaviour for product improvement purposes.

You can manage or block cookies through your web browser settings at any time. Please note that blocking essential cookies may affect certain features of the i 1malaysia platform.

7Your Rights as a Data Subject

As an i 1malaysia member and data subject under the Malaysia PDPA 2010, you have the following rights regarding the personal information we hold about you:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request the correction of any information that is inaccurate or incomplete.
• Right to Erasure: Request the deletion of your personal data under certain circumstances permitted by law.
• Right to Restrict Processing: Request that we restrict how your data is processed in certain circumstances.
• Right to Object: Object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: Receive your data in a machine-readable format for transfer to another platform.

Please note that in some circumstances we may not be able to fulfil your request in full if doing so would conflict with our legal obligations, prejudice a fraud investigation, or infringe the rights of other third parties.

8Data Retention Period

I 1malaysia retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active account data: Retained for the duration that your i 1malaysia account remains active.
• Financial transaction record data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian legal requirements.
• Identity verification data (KYC): Retained for a minimum of 5 years after account closure in compliance with anti-money laundering requirements.
• Support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical log data: Retained for 12 months and then securely deleted.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

9Child Protection

The i 1malaysia platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete the information and close the associated account. If you believe a minor has registered an account on i 1malaysia, please contact us immediately at support@i1malaysia.im.

10Privacy Policy Amendments

I 1malaysia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Any changes will take effect immediately upon publication on this page.

For material amendments that substantially affect your privacy rights, i 1malaysia will provide advance notice via your registered email or an in-platform notification at least 14 days before the changes take effect.

The date of the most recent update will always be displayed at the top of this page. It is your responsibility to review this Privacy Policy periodically. Your continued use of the i 1malaysia platform after any amendment is published will be considered full acceptance of those changes.