1xlite Privacy Policy
for Malaysian Players

This Privacy Policy describes how 1xlite ("we", "us", "our") collects, uses, stores, shares and protects the personal information of individuals ("you", "the player", "the user") who visit the 1xlite website, register an account or use any of the sports-betting, live-casino, slot-game, lottery, payment or customer-support services provided through the platform.

By creating a 1xlite account or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how your personal data is handled, please contact our support team through the details set out in Section 14.

The following terms carry specific meanings throughout this Privacy Policy:

The categories of Personal Data collected by 1xlite depend on how you interact with the platform. Collection may occur through account registration, payment processing, ongoing account activity, KYC procedures, customer-support interactions and automated technical mechanisms.

Identity and contact data may include:

• Full legal name, date of birth and gender.
• Email address, mobile-phone number and residential address (including city references such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam).
• Copies of identity documents submitted for KYC, such as a MyKad or passport.

Financial and transaction data may include:

• MYR deposit and withdrawal records, amounts, timestamps and payment references.
• Payment-method identifiers for e-wallets (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank and cryptocurrency addresses.
• Source-of-funds documentation where requested under AML obligations.

Behavioural and technical data may include:

• Betting and gaming history, session duration, game selections and wagering amounts.
• IP address, browser type, device model, operating system and approximate geographic location.
• Cookie identifiers, clickstream data, page-interaction records and error logs.

Communications data may include:

• Live-chat transcripts and email correspondence with the 1xlite support team.
• Responses to surveys or feedback forms completed at your discretion.

1xlite processes Personal Data only where a recognised lawful basis applies. The principal lawful bases and the corresponding purposes are described below.

Performance of a contract: Account creation and maintenance, authentication, deposit and withdrawal processing, bet settlement, game delivery, bonus administration and customer-support services all require processing to give effect to the player's contractual relationship with 1xlite.

Legal obligation: KYC identity checks, age verification (21+ requirement), anti-money-laundering monitoring, record-keeping and any disclosure required by a lawful authority are carried out to satisfy international licensing obligations.

Legitimate interests: Fraud detection, security-incident investigation, collusion monitoring, responsible-gambling analysis, platform analytics and product improvement are pursued on the basis of 1xlite's legitimate interest in operating a fair, secure and compliant service, provided those interests are not overridden by your rights and freedoms.

Consent: Where 1xlite relies on consent as a basis for marketing communications or non-essential cookies, you may withdraw that consent at any time through your account preferences or by contacting support.

1xlite uses cookies and similar technologies including local storage, pixels and session tokens to operate the platform, maintain login state, prevent fraud and analyse aggregate usage patterns. These technologies do not identify you by name; they associate a pseudonymous identifier with your browser or device.

• Strictly necessary cookies support authentication, security, session continuity and basic platform functions. They cannot be disabled without disrupting core services.
• Analytics cookies help 1xlite understand how players navigate the platform, which markets receive the most interest and where technical errors occur, so that improvements can be prioritised.
• Preference cookies store optional settings such as language choice, odds format and display configuration.
• Marketing cookies may be placed with your consent to support relevant promotional communications and measure campaign effectiveness.

You may control non-essential cookies through your browser settings or device privacy controls. Disabling all cookies may impair account login and platform functionality. 1xlite's cookies are first-party and do not enable third-party advertising networks to profile your broader online activity.

1xlite does not sell Personal Data. Disclosure to third parties is restricted to the following categories, each subject to appropriate contractual, technical and organisational safeguards:

• Payment service providers: Entities facilitating MYR transactions via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB and other channels receive the minimum data necessary to authorise and record each payment.
• KYC and identity-verification partners: Specialist third-party providers assist with automated document checks and biometric verification where required under AML and licensing obligations.
• Game content providers: Casino and sports-data suppliers receive pseudonymised session identifiers to deliver game content, calculate outcomes and return results.
• Cloud and infrastructure providers: Hosting, database, content-delivery and security partners may process platform data under binding data-processing agreements that restrict use to service delivery only.
• Legal and regulatory authorities: Disclosure may be made where required by a lawful court order, regulator instruction or international reporting obligation applicable under 1xlite's licensing framework.

Any third-party processor appointed by 1xlite is contractually required to implement appropriate technical and organisational security measures and to process data solely on documented instructions.

1xlite's platform infrastructure is distributed internationally. Personal Data submitted by Malaysian players, including those residing in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam, may be transferred to and stored on servers located outside Malaysia as part of the platform's operational architecture.

Where such transfers occur, 1xlite applies contractual or technical safeguards to maintain a level of data protection consistent with the standards expected under its international licensing framework. Malaysian users acknowledge that data-protection laws differ across jurisdictions and that the international framework governing this platform may not be identical to Malaysian domestic legislation.

Personal Data is retained for as long as necessary to fulfil the purposes described in this Privacy Policy, after which it is securely deleted, anonymised or archived. Retention periods are determined by the following considerations:

• Active accounts: Data is retained throughout the period that an account remains open and active on 1xlite.
• Closed accounts: Transaction records, KYC documentation and correspondence may be retained for a minimum of five years after closure to satisfy AML, licensing and legal-record obligations.
• Security logs: Technical access and audit logs are retained for periods sufficient to support fraud investigation and platform security analysis.
• Legal claims: Where data is relevant to a dispute, complaint or legal proceeding, it is retained until that matter is fully resolved.

At the end of applicable retention periods, Personal Data is permanently deleted or rendered irrecoverably anonymous using industry-standard procedures.

1xlite implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration or destruction. Technical measures in place include 256-bit TLS encryption for all data in transit, AES-grade encryption for sensitive data at rest, multi-factor authentication for administrative access, and regular independent penetration testing.

Organisational measures include restricted-access controls on a need-to-know basis, mandatory security training for personnel who handle player data, and documented incident- response procedures that govern how 1xlite identifies, contains and notifies stakeholders in the event of a data breach. Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials and payment details confidential.

Subject to applicable law and platform-specific verification requirements, registered 1xlite players may exercise the following rights in relation to their Personal Data:

• Right of access: Request a copy of the Personal Data held about you and information on how it is used.
• Right of rectification: Ask for inaccurate or incomplete Personal Data to be corrected or updated.
• Right to restrict processing: Request that certain processing activities be paused while a dispute is being resolved.
• Right to object: Object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right of erasure: Ask for Personal Data to be deleted where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to data portability: Receive a structured, machine-readable copy of data you have provided directly to 1xlite, where technically feasible.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a request through the 1xlite support team. 1xlite may ask for identity verification before acting on a request to prevent unauthorised disclosure. A response will ordinarily be provided within a reasonable period consistent with the applicable framework.

1xlite may analyse account activity, deposit patterns, session frequency and betting behaviour to identify players who may be exhibiting signs of problem gambling. This processing is carried out for the protection of player welfare and forms part of our responsible-gambling programme. The 1xlite platform is available to players aged 21 and above only; behavioural data is one tool used to enforce this requirement.

Where responsible-gambling analysis indicates that a player may benefit from intervention, support information or account controls, that player may be contacted by the support team. Responsible-gambling data is handled with discretion and is not used for commercial profiling or marketing. Further information on account controls, deposit limits, self-exclusion and support resources is available on the Responsible Gambling page.

1xlite is strictly intended for individuals aged 21 and above. 1xlite does not knowingly collect Personal Data from persons under the age of 21. Where it comes to our attention that a minor has accessed the platform or provided personal information, the account will be suspended, any associated data will be deleted in accordance with applicable obligations, and the matter will be handled under our minor-protection procedures.

Guardians who believe a minor may have created or accessed a 1xlite account are encouraged to contact support immediately so that the situation can be investigated and resolved promptly.

1xlite may revise this Privacy Policy to reflect changes to the platform, payment integrations, international licensing requirements, security practices or applicable data-protection standards. Material changes will be communicated through the website or via account-notification channels before taking effect. The effective date shown at the top of this page will be updated whenever the policy is amended.

Continued use of the 1xlite platform following a published update constitutes acceptance of the revised Privacy Policy. If you do not accept material changes, you should cease using the platform and contact support to discuss your account.

For all privacy-related enquiries, including data-access requests, correction requests, objections and general questions about how 1xlite handles your Personal Data, please contact the support team. Include your registered username and a clear description of your request. Do not include your account password or full payment-card details in any communication.

The 1xlite support team is available 24 hours a day, seven days a week, via live chat with an average response time of 3–5 minutes. Non-urgent data enquiries may be directed to the email address below, which is displayed as plain text for your security.

Support email: [email protected]

Support is provided in English, Bahasa Melayu and Chinese to serve the full spectrum of 1xlite's Malaysian player community.