Privacy Policy 1xbet Apps – How We Protect Your Data

This Privacy Policy ("Policy") describes how 1xbet apps ("Platform", "We") collect, use, store, protect, and in certain circumstances share your personal data when you use our platform. This applies to all users who register and use 1xbet apps services, including Sports Betting, live betting, Live Casino, virtual sports, digital lottery, and all other services we provide.

1xbet apps operates in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. We take this responsibility seriously and continually invest in technology and procedures to ensure your personal data receives industry-standard protection.

By registering for or continuing to use the 1xbet apps, you are giving your consent to the data collection and usage practices described in this Policy. If you do not agree with any part of this Policy, please stop using our platform and contact us to close your account and request deletion of your personal data.

1xbet apps collects various categories of personal data depending on how you interact with our platform. We organise this data into three main categories:

A. Data You Provide Directly

• Full name as per MyKad
• Date of birth and national identification number (for age and identity verification)
• An active Malaysian phone number
• Email address
• Account password (stored as a non-reversible hash)
• Payment account information used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) — we store account identifiers only, not full card details or banking passwords
• Identity verification documents (copy of MyKad) requested during the KYC process

B. Automatically Collected Data

• Your device's IP address
• Web browser type and operating system
• Pages visited within the platform and time of visit
• Login and logout session data
• Records of all deposit and withdrawal transactions
• Records of all betting and gaming activity
• Cookie data and similar tracking technologies (see Section 6)

C. Data from Third-Party Sources

• Identity verification information from the KYC service providers we use
• Address verification data from payment service providers such as Touch 'n Go and GrabPay
• Self-exclusion information from any relevant gambling exclusion scheme (where applicable)

1xbet apps use your personal data for the following purposes, all grounded in a valid legal basis under Malaysia's PDPA:

• Service Provision – Managing your account, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, verifying your identity, and enabling you to enjoy all platform services including Sports Betting on the Malaysia Super League, EPL, badminton, e-sports, Live Casino, and digital lottery.
• Security & Fraud Prevention – Detecting and investigating suspicious activity, preventing money laundering, identifying duplicate accounts, and safeguarding the security of all users on the platform.
• Service Communications – Sending notifications about account activity, betting or lottery results, transaction processing, security alerts, and important platform updates.
• Platform Improvements – Analysing usage patterns to improve the interface, identify technical issues, and develop new features that better serve users in Malaysia.
• Legal Compliance – Fulfilling applicable legal and regulatory obligations, including those under the PDPA, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA), and any other requirements in force.
• Responsible Gaming – Monitoring gameplay patterns to identify users who may need responsible gaming support, and enabling self-control tools to function effectively.
• Marketing (With Consent) – Sending you information about promotions, bonuses, and special offers that may interest you – only if you have given explicit consent to receive marketing communications. You may withdraw this consent at any time.

We will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent.

1xbet apps does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where we need to share your data with certain parties, and we want you to know exactly when and why:

• Payment Service Providers – When you make a deposit or withdrawal, we are required to share the necessary transaction details with service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers (Maybank2u, CIMB Clicks). Only the minimum data required to process the transaction is shared.
• KYC Service Providers – To verify user identity and age, we engage authorised third-party verification services. These providers are bound by strict confidentiality agreements and may only use your data for the specific purpose of verification.
• Technology Service Providers – The server infrastructure and cloud computing providers we use may have limited access to data in the context of delivering technical services. All such providers are bound by strict data processing agreements.
• Legal Authorities – Where required by a court order, legal investigation, or obligations under AMLATFPUAA or other Malaysian laws, we may be required to disclose certain data to the relevant authorities. We will notify you of any such disclosure to the extent permitted by law.

The security of your personal data is an absolute priority for 1xbet apps. We implement the following technical and organisational security measures to protect your data from unauthorised access, loss, destruction, or disclosure:

• Data Encryption in Transit – All communication between your device and our servers is secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring data cannot be intercepted during transmission.
• Stored Data Encryption – Sensitive data including passwords (stored as bcrypt hashes), financial information, and identity documents are stored in encrypted format within our databases.
• Strict Access Controls – Only staff who require access to specific data for their job responsibilities are permitted – based on the principle of least privilege access.
• 24/7 Threat Monitoring and Detection – Our automated monitoring system continuously detects suspicious activity and any unauthorised access attempts.
• Regular Security Audits – We conduct regular penetration testing and security audits through accredited independent parties to identify and patch any vulnerabilities.
• Two-Factor Authentication – 2FA is available for all user accounts as an additional layer of protection against unauthorised access.

While we take every reasonable measure to protect your data, no security system in the world is 100% guaranteed. We therefore encourage you to take your own precautions as well – use a strong, unique password for your 1xbet apps yours, enable the 2FA feature, and contact us immediately if you suspect any suspicious activity on your account.

1xbet apps use cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser when you visit our platform. They cannot carry viruses and cannot access information stored on your device.

We use cookies for the following purposes:

• Essential Cookies (Required) – These cookies are essential for the platform to function correctly. They store your login session, language preference, and basic security settings. Without them, the platform cannot operate.
• Performance Cookies – Collecting information on how you use the platform (pages visited, time spent on each page) to help us improve the user experience. This data is aggregated and does not identify you individually.
• Functional Cookies – Remembering your preferences and settings, such as your preferred odds format, favourite sports, and language – so you don't have to reconfigure them each time you log in.

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling or blocking essential cookies may affect platform functionality and your overall user experience. For guidance on managing cookies in popular browsers, please refer to your browser's official documentation.

Under Malaysia's PDPA and our commitment to privacy protection, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact us by email at support@1xbetapps.best by stating the right you wish to exercise along with your identity verification details. We will process your request within 14 working days from the date of receipt, with no charge for reasonable requests.

Platform 1xbet apps is intended for users aged 18 years and above only, without exception. We do not knowingly collect personal data from children or individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian who believes that your child or dependent has registered an account on our platform, please contact us immediately at support@1xbetapps.best and we will treat the matter with the highest priority.

In the course of our operations, your personal data may be stored or processed on servers located outside Malaysia – for example, in cloud data centres we use for system reliability and redundancy. When this occurs, we ensure that protection equivalent to Malaysia's PDPA standards is upheld through:

• Binding data processing agreements with all server and cloud service providers.
• End-to-end encryption applied to all data in transit.
• Selecting only service providers that meet internationally recognised security standards.
• Full data ownership and control retained by 1xbet apps regardless of where it is physically stored.

We are committed to ensuring that the personal data of Malaysian users receives the same high level of protection regardless of where that data is physically stored or processed.

1xbet apps retain your personal data for as long as necessary to fulfil the purposes set out in this Policy, or for as long as required under applicable Malaysian law.

• Active Account Data – Retained for the duration your account remains active, and for an additional period following account closure to meet legal obligations.
• Financial Transaction Records – Retained for a minimum of 7 years in accordance with AMLATFPUAA requirements and Malaysian tax laws.
• KYC and Identity Verification Records – Retained for the period required by applicable compliance obligations, typically a minimum of 5 years after account closure.
• Security Log Data – Retained for 12 months for the purpose of security incident investigations where required.
• Marketing Data (where applicable) – Retained until you withdraw your consent to receive marketing communications.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-recognised methods.

1xbet apps may update this Privacy Policy from time to time to reflect changes in our privacy practices, relevant legislative amendments, or the development of new services. When we make significant changes, we will:

• Notifying all registered users via email or in-platform notification at least 14 days before any changes take effect.
• Updating the "Last Updated" date at the top of this document.
• Retaining previous versions of the Privacy Policy, which users may request if needed.

For minor changes that do not materially affect users' fundamental rights, we may update this document without a separate notice. You are encouraged to review this Privacy Policy periodically to stay informed of our latest practices.

Continued use of the platform 1xbet apps after any amendment to the Privacy Policy takes effect constitutes your acceptance of the amended policy.

If you have any questions, concerns, or wish to exercise any of your rights regarding your personal data, please contact our Data Privacy Officer through the channels below. We are committed to responding to all privacy enquiries within 14 business days.

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner if you believe that 1xbet apps has violated your privacy rights under the PDPA. That said, we encourage you to contact us first so we have the opportunity to address any issues directly before further action is taken.