1xbit Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how 1xbit (hereinafter "1xbit", "we", "us", "the Platform"), operator of the online sports betting and casino platform accessible at 1xbit.casa, collects, processes, stores, and protects the personal data of its users (hereinafter "you", "User", "Player").

This Policy applies to all Users of the 1xbit Platform, including registered account holders, visitors to the website, and individuals who interact with our customer support channels. It covers data collected through the website, mobile interfaces, live chat systems, email correspondence, and any other interaction you have with 1xbit.

By registering an account, making a deposit, or otherwise using the 1xbit Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, IP address, payment data, and betting history.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — 1xbit, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party engaged by 1xbit to process Personal Data on its behalf, subject to written data processing agreements.
• "KYC Data" — identity and verification documents collected pursuant to Know Your Customer obligations, including government-issued identification and proof of payment ownership.
• "Cookies" — small text files placed on your device by the Platform for the purposes of session management, analytics, and functionality.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a specified purpose.

1xbit collects Personal Data through several channels in the course of operating the Platform. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable law or in the context of a responsible gambling self-exclusion request.

1xbit uses your Personal Data for the following purposes, and only for the purposes listed below unless we obtain your specific consent for a new or different use:

• Account Management: Creating, maintaining, and administering your 1xbit account, including identity verification and password reset processes.
• Transaction Processing: Processing deposits, withdrawals, and refunds in MYR via your registered payment methods, including Touch 'n Go eWallet, DuitNow, FPX, and Malaysian bank transfers.
• Legal Compliance: Fulfilling our obligations under our international gaming licence, including KYC verification, anti-money laundering (AML) screening, and age verification (21+ enforcement).
• Customer Support: Responding to your enquiries, resolving disputes, and handling complaints submitted via live chat or email.
• Fraud Prevention: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Improvement: Analysing aggregated usage data and Technical Data to improve the performance, stability, and user experience of the Platform.
• Marketing Communications: Sending you promotional communications, bonus offers, and platform updates — only where you have provided consent or where we have a legitimate interest, and subject to your right to opt out at any time.
• Responsible Gambling: Monitoring account activity to identify potential problem gambling indicators and to administer self-exclusion, deposit limit, and cooling-off requests.

Where 1xbit processes your Personal Data, it does so on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and 1xbit — including operating your account, processing transactions, and delivering platform services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC, AML obligations, and licensing conditions.
• Legitimate Interests: Processing carried out for 1xbit's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, such as receiving marketing emails. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing prior to withdrawal.

1xbit does not sell or rent your Personal Data to any third party. We may share your data only in the following limited circumstances:

• Payment Processors: We share financial data with third-party payment processors (such as providers facilitating Touch 'n Go eWallet, DuitNow, FPX, and bank transfer integration) solely to process your transactions. These processors are contractually bound to handle your data securely and only for the specified payment purpose.
• KYC & Compliance Providers: We engage specialist identity verification and AML screening services to fulfil our compliance obligations. These providers act as Data Processors under our instruction.
• Technology & Hosting Providers: Our platform infrastructure relies on third-party hosting and software service providers. Access to your data by these providers is limited to what is technically necessary and governed by data processing agreements.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to relevant government or regulatory authorities where required to do so by law, court order, or as required under the conditions of our gaming licence. We have no obligation to inform you of such disclosure where notification is prohibited by law.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of 1xbit's business, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

1xbit uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, detect fraud, and understand how players interact with our services. The main categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in while you navigate between pages. They cannot be disabled without impairing core platform functionality.
• Analytical Cookies: Used to collect anonymised information about how visitors use the Platform, including which pages are most visited and where users encounter errors. This data helps us improve the platform experience for all Malaysian players.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language settings and regional configurations relevant to Malaysian users.
• Security Cookies: Support our fraud detection systems by recording Technical Data associated with your session, including device identifiers and IP addresses.

Most web browsers allow you to control cookie acceptance through browser settings. Please note that disabling Strictly Necessary Cookies will prevent you from logging in or using the Platform. Disabling other cookies will not impair core functionality but may reduce your browsing experience.

1xbit retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and licensing obligations, and to resolve any outstanding disputes or complaints.

As a general principle, the following retention periods apply:

• Account Data and KYC Documents: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements under our licensing framework.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, for audit and legal compliance purposes.
• Customer Support Correspondence: Retained for up to three (3) years from the date of the last interaction, or longer where the correspondence relates to an unresolved dispute.
• Technical & Log Data: Retained for up to twelve (12) months, unless required for longer periods in connection with a security investigation or fraud matter.
• Marketing Consent Records: Retained until you withdraw your consent, and for a reasonable period thereafter as proof of your prior consent.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

1xbit implements appropriate technical and organisational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include, without limitation:

• 256-bit SSL/TLS encryption across all data transmitted between your browser and the 1xbit Platform;
• Encryption of sensitive data at rest, including financial data and KYC documents;
• Role-based access controls limiting access to Personal Data to authorised personnel with a documented business need;
• Regular security assessments and penetration testing by third-party security specialists;
• Two-factor authentication (2FA) available for all player accounts to reduce the risk of unauthorised access;
• Incident response procedures ensuring that any data breach is investigated promptly and, where required, reported to the relevant authorities.

As an internationally licensed platform, 1xbit may process and store your Personal Data on servers located outside Malaysia. Where such transfers occur, 1xbit takes measures to ensure that an adequate level of protection is maintained for your Personal Data, including through:

• Contractual safeguards with international data processors, including standard data processing clauses requiring equivalent protection standards;
• Transfers to jurisdictions that maintain data protection standards comparable to international norms;
• Technical security measures applied consistently regardless of the location of data storage.

By using the 1xbit Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. In all cases, 1xbit remains responsible for ensuring that your data is handled in accordance with this Policy.

Subject to applicable law and our legal obligations (including KYC and AML record-keeping requirements), you have the following rights with respect to your Personal Data:

The 1xbit Platform is strictly prohibited for persons under the age of 21 years. We do not knowingly collect Personal Data from individuals under this age threshold. If we determine that an account has been registered by a person under 21, the account will be closed immediately, any deposits will be returned to the originating payment method, and all associated data will be deleted in accordance with our data destruction procedures, subject to any legal retention requirements.

If you are a parent or guardian and believe that a minor has provided Personal Data to 1xbit without your consent, please contact us immediately at [email protected] so that we may take appropriate action.

1xbit reserves the right to update or modify this Privacy Policy at any time. Changes will be published on this page with a revised effective date. Where changes are material — for example, a new category of data being collected or a new purpose for which existing data will be used — we will provide advance notice via email or an in-platform notification.

Your continued use of the 1xbit Platform following the publication of any revised Privacy Policy constitutes your acceptance of those changes. If you disagree with a revision, you should cease using the Platform and may request account closure by contacting our support team.

For all privacy-related enquiries, data rights requests, or concerns regarding the handling of your Personal Data, please contact the 1xbit Data Privacy team using the details below. All correspondence should be submitted in English.

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry or Data Rights Request
• Live Chat: Available 24/7 via the in-platform live chat function
• Response Time: Within 4 hours during Malaysian Standard Time (MYT, UTC+8) business hours; within 30 days for formal data rights requests

For queries about our Responsible Gambling programme, self-exclusion, or account closure on responsible gambling grounds, please visit our dedicated Responsible Gambling page.