Privacy Policy

1. Introduction

1xcasino ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access or interact with the website located at https://1xcasino.casa and all associated services. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which it is processed, with whom it may be shared, the safeguards we apply to protect it, and the rights available to you as a data subject.

This Policy applies to all registered account holders, visitors to the website, and any individual who interacts with 1xcasino's services, including Malaysian players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations where the Platform is made available.

By accessing the Platform, creating a player account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — 1xcasino, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" — the individual to whom personal data relates; in this context, the registered player or website visitor.
• "Third Party" — any person or entity other than the data subject and1xcasino, including service providers, payment processors, and analytics partners.
• "KYC Data" — identity verification documents and associated personal information submitted as part of the Know Your Customer process.
• "Cookies" — small text files stored on a user's device by a web browser to facilitate session management, preference storage, and analytics.

3. Data We Collect

1xcasino collects personal data through several channels: directly from you when you register or interact with the Platform, automatically when you use our services, and from third parties such as payment providers and KYC verification services. The categories of data we collect include:

3.1 Sensitive Personal Data

1xcasino does not intentionally collect sensitive personal data (including health data, religious beliefs, or racial or ethnic origin) except where required by applicable law or regulation, such as where player discloses a gambling problem in the context of a responsible gambling self-exclusion request.

4. Legal Basis for Processing

1xcasino processes personal data on the following legal bases, as applicable to the specific processing activity:

• Contractual Necessity: Processing required to create and maintain your account, process deposits and withdrawals, and deliver the services you have requested — including payment processing via Touch'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and cryptocurrency networks.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, identity verification (KYC), and tax reporting requirements.
• Legitimate Interests: Processing necessary for the prevention of fraud, platform security, responsible gambling monitoring, and the improvement of our services — where such interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent for processing activities such as the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

1xcasino uses the personal data we collect for the following purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your player account on the 1xcasino platform.
• Processing deposits and withdrawals in MYR via supported payment channels.
• Providing access to casino games, sports betting markets, live dealer tables, and all other Platform features.
• Administering bonus credits, loyalty rewards, and VIP tier benefits.

5.2 Identity Verification & Compliance

• Conducting KYC verification to confirm your identity and age (minimum 21 years) before processing withdrawals.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited conduct.
• Complying with applicable anti-money laundering, counter-terrorism financing, and gaming regulatory obligations.

5.3 Platform Security & Operations

• Monitoring platform activity to identify and respond to security incidents, technical errors, and unauthorised access attempts.
• Maintaining audit logs for dispute resolution and regulatory compliance purposes.
• Improving platform performance, game offerings, and user experience based on aggregated and anonymised analytics.

5.4 Responsible Gambling

• Monitoring gaming patterns to identify indicators of problem gambling behaviour and, where appropriate, applying responsible gambling interventions.
• Administering self-exclusion requests and enforcing deposit and loss limit settings configured by players.

5.5 Communications

• Sending transactional communications including account confirmations, payment receipts, and security alerts.
• Providing customer support responses via live chat and email.
• Where you have consented, sending promotional communications about bonuses, game launches, and platform updates. You may opt out of marketing communications at any time.

6. Data Sharing & Disclosure

1xcasino does not sell, rent, or trade personal data to third parties. We may, however, share your personal data with the following categories of recipients where necessary and proportionate to the purpose:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network operators — solely for the purpose of processing your financial transactions.
• KYC & Identity Verification Partners: Third-party verification services engaged to confirm your identity documents. These partners are bound by strict data processing agreements and may not use your data for any other purpose.
• Game Content Providers: Including Pragmatic Play, PG Soft, Evolution Gaming, Spribe, and other licensed game developers — who may receive limited technical and session data necessary to deliver and audit game outcomes.
• Analytics & Platform Infrastructure: Cloud hosting providers and analytics tools used to operate and improve the Platform. All such providers are subject to contractual confidentiality and data protection obligations.
• Regulatory & Law Enforcement Authorities: Where disclosure is required by applicable law, court order, or lawful government request, we may disclose personal data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.

In all cases where personal data is shared with third parties, 1xcasino ensures that appropriate contractual, technical, and organisational safeguards are in place to protect your data.

7. Data Retention

1xcasino retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention schedule is as follows:

• Account and Identity Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of the transaction for accounting and regulatory compliance purposes.
• Gaming Activity Logs: Retained for five (5) years to support dispute resolution, responsible gambling assessments, and regulatory audits.
• Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

8. Security Measures

1xcasino implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data fields at rest using industry-standard algorithms.
• Two-factor authentication (2FA) available to all registered players for account login.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their function.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Staff training on data protection obligations and information security best practices.

9. Cookies & Tracking Technologies

1xcasino uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and display options. These improve your experience but are not required for the Platform to operate.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, which pages are visited most frequently, and where technical issues occur. This data is used solely for internal Platform improvement.
• Security & Fraud Prevention Cookies: Used to detect and mitigate fraudulent activity, bot behaviour, and suspicious login patterns.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. We do not use third-party advertising cookies or cross-site tracking technologies for the benefit of external advertisers.

10. Your Data Rights

Subject to applicable law, you have the following rights regarding the personal data 1xcasino holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For account details, updates can be made directly through your account settings or by contacting support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us via the details provided in Section 14. We will acknowledge your request within 5 business days and complete it within 30 days, unless an extension is required due to complexity or volume of requests.

11. Protection of Minors

The 1xcasino Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals below this age. Where we become aware that personal data has been submitted by a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on our Platform or submitted personal data without authorisation, please contact our support team immediately via live chat or at the email address listed in Section 14.

12. International Data Transfers

In order to deliver our services, personal data may be transferred to and processed in countries other than Malaysia, including locations where our technology infrastructure, game providers, or payment processing partners operate. Such transfers are conducted in accordance with applicable data protection requirements, including the use of:

• Standard contractual clauses or equivalent data transfer mechanisms approved by relevant authorities.
• Contractual obligations requiring the receiving party to apply protections equivalent to those described in this Policy.
• Adequacy assessments to confirm that the destination country provides an adequate level of data protection.

1xcasino will not transfer personal data to jurisdictions that do not provide adequate protections without your explicit consent or a lawful basis for doing so.

13. Policy Updates & Changes

1xcasino reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or how we process your personal data — we will notify registered players via email at least 14 days before the updated Policy takes effect.

Minor amendments, such as corrections to typographical errors or clarifications that do not alter the substance of the Policy, may be made without prior notice. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Continued use of the Platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

14. Contact Us

For all privacy-related enquiries, data subject requests, or concerns about how1xcasino handles your personal information, please contact our data protection team through the following channels:

• Live Chat: Available24 hours a day, 7 days a week, directly within the Platform. Live chat is the fastest way to reach us for urgent data concerns.
• Email (plain text): [email protected]
• Postal Address: 1xcasino, Kuala Lumpur, Malaysia

When submitting a data subject request by email, please include your full registered name, your account username, and a brief description of your request to help us locate your records promptly.