i1bet Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how i1bet ("i1bet", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with the i1bet Platform, accessible at https://i1bet.co and any associated interfaces (collectively, the "Platform").

This Policy applies to all individuals who access the Platform, including registered Members, prospective Members who browse the Platform without registering, and individuals who contact i1bet's support team. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the i1bet Terms & Conditions, which together constitute the Agreement governing your use of the Platform.

2. Data Controller

i1bet is the data controller responsible for the personal data collected through the Platform. i1bet operates under international gaming licensing, which imposes specific obligations on the collection, retention, and security of Member data. Where i1bet engages third-party service providers to process data on its behalf (for example, payment processors or KYC verification providers), those providers act as data processors under written agreements that bind them to data protection standards consistent with this Policy.

3. Personal Data We Collect

Depending on how you interact with the Platform, i1bet may collect the following categories of personal data:

Identity Data:

• Full legal name as it appears on your government-issued identification;
• Date of birth and age verification data;
• Malaysian IC number (MyKad) or passport number, as submitted during KYC verification;
• Photographs or copies of identification documents submitted for KYC purposes.

Contact Data:

• Email address registered to your Account;
• Malaysian mobile phone number registered to your Account;
• Residential or correspondence address (where required for KYC).

Financial Data:

• Transaction history including deposits, withdrawals, and wagering activity;
• Payment method identifiers (e.g., registered bank account names, Touch 'n Go eWallet user IDs, Boost account references) — i1bet does not store full card numbers or full bank account numbers;
• Source of funds documentation submitted in connection with AML compliance procedures.

Technical and Usage Data:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Pages visited, features accessed, and session duration on the Platform;
• Login timestamps and access logs.

Communications Data:

• Records of communications between you and i1bet's support team, including live chat transcripts and email correspondence;
• Feedback, complaints, and dispute records.

4. How We Collect Your Data

i1bet collects personal data through the following means:

• Direct submission: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, or contacting support;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies and server logs;
• Third-party verification: Identity and address data received from licensed KYC and AML verification service providers used to confirm the information you have submitted;
• Payment processors: Transaction confirmation and payment method identifier data received from licensed payment processing partners including Touch 'n Go eWallet, Boost, and banking FPX systems.

5. Purposes and Legal Bases for Processing

i1bet processes personal data for the following purposes and on the following legal bases:

• Account registration and operation — necessary for the performance of the Agreement between i1bet and the Member;
• KYC identity and age verification — necessary for compliance with i1bet's licensing obligations and applicable law, including the prevention of underage gambling;
• Processing deposits and withdrawals — necessary for the performance of the Agreement and for compliance with AML regulations;
• Fraud prevention and security — necessary for the legitimate interests of i1bet and its Members in maintaining a secure Platform;
• Platform analytics and improvement — necessary for the legitimate interests of i1bet in understanding how the Platform is used and improving its features;
• Regulatory compliance and reporting — necessary for compliance with legal obligations under i1bet's gaming licence, including audit requirements and regulatory reporting;
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from i1bet. You may withdraw this consent at any time.

6. Sharing Your Personal Data

i1bet does not sell your personal data. We share personal data only in the following circumstances and with the following categories of recipients:

• KYC and AML verification providers: Licensed identity verification services that process your identification documents to confirm your identity and age on i1bet's behalf;
• Payment processors: Licensed payment service providers (including Touch 'n Go eWallet, Boost, and banking partners) to the extent necessary to process your deposit and withdrawal transactions;
• Gaming platform providers: Game software providers may receive anonymised session data necessary to operate the specific game within the Platform environment. Full identity data is not shared with game providers;
• Regulatory authorities: i1bet's licensing authority and relevant law enforcement agencies, where required by applicable law or as necessary to respond to a lawful request, court order, or regulatory investigation;
• Professional advisors: Legal, accounting, and auditing professionals retained by i1bet, subject to professional confidentiality obligations;
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of i1bet's assets, Member data may be transferred to the successor entity, subject to the same privacy commitments contained in this Policy.

7. International Data Transfers

As i1bet operates under international gaming licensing, some personal data may be processed in jurisdictions outside Malaysia. Where personal data is transferred internationally, i1bet implements appropriate safeguards — including contractual data protection clauses with service providers — to ensure that your data receives a level of protection consistent with applicable data protection standards.

Your use of the Platform constitutes your acknowledgement that your personal data may be processed internationally in the manner described in this Policy.

8. Data Retention

i1bet retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law or our licensing obligations.

• Active Account data: Retained for the duration of the Member's Account, plus a minimum period of five (5) years following Account closure, as required under AML and gaming licence regulations;
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or from Account closure, whichever is later, in compliance with licensing requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AML regulations;
• Support communications: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the withdrawal.

Data that is no longer required for any lawful purpose is securely deleted or anonymised in accordance with i1bet's data retention procedures.

9. Cookies and Tracking Technologies

i1bet uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled without impairing your ability to use the Platform;
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors navigate and interact with the Platform, enabling i1bet to identify usability issues and improve Platform performance;
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, including bot access, account takeover attempts, and suspicious wagering patterns.

i1bet does not use third-party advertising networks or cross-site behavioural tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality.

10. Security Measures

i1bet implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data in transit between Members and i1bet servers;
• Encryption of sensitive personal data at rest, including KYC documents and financial identifiers;
• Access controls restricting i1bet staff access to Member personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for internal system access;
• Regular security assessments and penetration testing of the Platform;
• Incident response procedures enabling prompt notification of Members in the event of a data breach that poses a risk to their rights and interests.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. Members are encouraged to use strong, unique passwords and to enable two-factor authentication in their Account security settings.

11. Your Data Rights

Subject to applicable law and i1bet's legal obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data i1bet holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to i1bet's legal retention obligations;
• Right to restriction: You may request that i1bet restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed;
• Right to data portability: Where technically feasible and where processing is based on consent or contract, you may request a machine-readable copy of personal data you have provided to i1bet;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact i1bet's support team via the live chat facility or by email at [email protected]. i1bet will respond to all data rights requests within 30 calendar days. i1bet may require identity verification before processing a data rights request.

12. Children and Minors

The Platform is strictly for individuals aged 21 years and over. i1bet does not knowingly collect personal data from individuals under the age of 21. If i1bet becomes aware that personal data has been submitted by an individual under this age, the Account will be immediately closed, all data will be deleted, and any funds will be returned via the original payment method.

If you believe a minor has registered an Account on the Platform, please contact i1bet's support team immediately.

13. Third-Party Links

The Platform may contain references to third-party services (for example, payment method providers). i1bet is not responsible for the privacy practices of third-party websites or services, and this Policy does not apply to your interactions with those third parties. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

14. Changes to This Policy

i1bet reserves the right to amend this Privacy Policy at any time. Amendments will be published on this page with an updated effective date. Where changes are material, i1bet will provide advance notice via email to your registered address or through an on-Platform notification. Your continued use of the Platform following the effective date of an amendment constitutes acceptance of the revised Policy.

15. Contact and Data Requests

For questions about this Privacy Policy, to exercise a data right, or to report a privacy concern, please contact i1bet's Data Protection team via:

• Live chat: Available on all pages of the Platform, 24 hours a day, 7 days a week in Malaysian Standard Time (UTC+8);
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights matters.

i1bet is committed to resolving all privacy inquiries promptly and transparently. Where you are dissatisfied with i1bet's response to a privacy concern, you may escalate the matter to the relevant regulatory authority under i1bet's gaming licence.