🔒 Data Protection

Privacy Policy
— i1malaysia

Your privacy is a fundamental commitment at i1malaysia — not a legal afterthought. This Privacy Policy explains precisely what personal data we collect from Malaysian players, why we collect it, how we use and protect it, how long we retain it, and what rights you hold over your own information.

Effective Date: 1 January 2026 | Version 1.0

🛡️

Privacy at a Glance

No selling of data to advertisers
256-bit SSL on all transmissions
Data collected only as necessary
Right to access, correct & delete
Cookies used for platform function
12-section comprehensive policy

Our Commitments

How i1malaysia Protects Your Privacy

Data Minimisation

i1malaysia collects only the personal data that is strictly necessary to operate your account, process transactions in MYR, comply with KYC obligations, and deliver customer support. We do not collect data "just in case" — every data point has a defined purpose.

No Advertising Data Sales

We do not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing networks under any circumstances. Your contact details and betting behaviour remain strictly within i1malaysia's operational ecosystem.

Encryption & Secure Storage

All data in transit between your browser and i1malaysia's servers is encrypted using 256-bit SSL/TLS. Sensitive data at rest — including payment method details and identity documents — is stored in encrypted form on access-controlled infrastructure.

Your Rights, Clearly Stated

You have the right to access a copy of your personal data, request corrections, ask us to delete your data (subject to regulatory retention obligations), and withdraw consent for processing where consent is the legal basis. These rights are exercisable by contacting our support team.

Transparent Cookie Use

Cookies and similar tracking technologies are used solely for platform operation — session management, fraud detection, and anonymous traffic analytics. We do not use third-party advertising cookies that follow you across other websites after you leave i1malaysia.

Defined Retention Periods

We do not retain personal data indefinitely. Account data is retained for the duration of your registration plus a minimum post-closure period required by our licensing obligations (typically five years). KYC documents are held for the period mandated by AML regulations.

1 Introduction

This Privacy Policy ("Policy") issued by i1malaysia ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://i1malaysia.cam (the "Platform"). This Policy governs the collection, use, storage, disclosure, and deletion of personal data relating to individuals who register accounts, make deposits, or otherwise interact with the Platform ("Players", "you", "your").

i1malaysia is committed to protecting the privacy and personal data of all players, including those accessing the Platform from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations across Malaysia. We process personal data in a manner that is lawful, fair, transparent, and consistent with our obligations under applicable international data protection frameworks and our gaming licence conditions.

This Policy should be read in conjunction with our Terms & Conditions, which are incorporated by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the Platform.

Scope: This Policy applies to personal data collected through the Platform's website interface, customer support channels (including live chat and email correspondence to [email protected]), and payment processing activities. It does not apply to third-party websites linked from the Platform, to which their own privacy policies apply.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings defined below:

Term	Meaning
Personal Data	Any information that identifies or could identify a living individual, including name, date of birth, email address, device identifiers, IP address, and transaction records.
Processing	Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
Data Controller	i1malaysia, as the entity that determines the purposes and means of processing player personal data.
Data Processor	A third party that processes personal data on behalf of i1malaysia under a data processing agreement, such as payment gateway operators or KYC verification service providers.
KYC	Know Your Customer — the identity verification and anti-money laundering due diligence process applied to player accounts before withdrawals are approved.
Cookies	Small text files placed on a user's device by a web server to store session information, preferences, and anonymised usage data.
AML	Anti-Money Laundering — the regulatory framework requiring financial service operators to identify, monitor, and report suspicious financial activity.

3 Personal Data We Collect

i1malaysia collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the Platform; and from third-party service providers (such as payment processors and identity verification services) as part of our KYC obligations. The categories of data collected are as follows:

3.1 Account Registration Data

Full legal name (as it appears on your government-issued identification document);
Date of birth (for age verification — minimum 21 years old);
Residential address (including postcode and country of residence);
Email address (primary contact channel);
Username and encrypted account password;
Mobile telephone number (for account security and two-factor authentication).

3.2 Identity Verification (KYC) Data

Scanned copy or photograph of a government-issued identity document — Malaysian MyKad, passport, or equivalent;
Proof of residential address (utility bill or bank statement, issued within three months);
Photograph or selfie for liveness verification purposes;
Documentation evidencing source of funds, where required by AML procedures.

3.3 Financial & Transaction Data

Deposit and withdrawal transaction history in MYR (Malaysian Ringgit);
Payment method identifiers (e.g., masked DuitNow account reference, FPX transaction IDs, Touch'n Go eWallet account identifier, last four digits of a debit card);
Transaction timestamps and amounts;
Bonus credits, wagering activity, and cashback records.

3.4 Technical & Device Data

IP address (used for fraud detection and geographic access control);
Browser type, version, and operating system;
Device identifiers (where available via the mobile browser);
Session duration, pages visited, and interaction logs within the Platform;
Geolocation data at the country and city level (not precise GPS coordinates).

3.5 Communications Data

Live chat transcripts with the customer support team;
Email correspondence to and from [email protected];
Records of any complaints, disputes, or formal escalations.

We do not collect: Sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond document photographs required for KYC), or health information. We do not collect data from individuals we know to be under 21 years of age.

4 Legal Basis for Processing

i1malaysia processes personal data on the following legal bases, in accordance with applicable international data protection principles:

Legal Basis	Processing Activities Covered
Contractual Necessity	Processing required to fulfil our obligations under the account agreement — account creation, deposit and withdrawal processing, game access, support provision.
Legal Obligation	KYC identity verification, AML transaction monitoring, record-keeping required under gaming licence conditions.
Legitimate Interest	Fraud detection and prevention, platform security monitoring, anonymous traffic analytics, responsible gambling monitoring.
Consent	Optional marketing communications (email newsletters about promotions). Consent may be withdrawn at any time via account settings or by contacting support.

5 How We Use Your Personal Data

Personal data collected by i1malaysia is used exclusively for the purposes described in this Policy. The principal uses are as follows:

5.1 Account Management & Service Delivery

Your registration data is used to create and maintain your account, authenticate logins, process deposits and withdrawals in MYR via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and other supported channels, and to grant access to live casino, slots, sports betting, and other game verticals on the Platform.

5.2 Identity Verification & Regulatory Compliance

KYC data is processed to verify your identity and age (21+), confirm your residential address, assess the legitimacy of fund sources, and comply with AML obligations under our international gaming licence. This processing is mandatory — accounts that do not complete KYC verification will have withdrawal privileges withheld until verification is completed.

5.3 Fraud Prevention & Security

IP address data, device identifiers, and session logs are analysed to detect and prevent fraudulent activity, including multi-accounting, payment fraud, chargeback abuse, and use of the Platform from restricted jurisdictions via VPN or proxy services. This processing is conducted as legitimate interest of the Company and its player community.

5.4 Customer Support

Communications data — live chat transcripts and email correspondence — is retained to resolve support queries, investigate complaints, and maintain quality assurance in our support team's performance. Our support team operates in English and covers Malaysia Time (MYT / UTC+8) around the clock.

5.5 Responsible Gambling Monitoring

Aggregate transaction and gameplay data is analysed to identify patterns consistent with problem gambling behaviour — for example, unusual increases in deposit frequency or session duration. Where such patterns are detected, i1malaysia may contact the player to offer responsible gambling resources and, in appropriate cases, impose deposit or activity limits in accordance with our Responsible Gambling Policy.

5.6 Marketing Communications

Where you have provided explicit consent, we may send you promotional communications regarding bonuses, new game releases, and platform features by email. You may unsubscribe from marketing communications at any time by following the unsubscribe link in any marketing email or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6 Data Sharing & Third-Party Disclosure

i1malaysia does not sell, rent, or trade personal data to any third party for commercial or advertising purposes. Personal data is shared with third parties only in the limited circumstances described in this section:

6.1 Payment Processors

Deposit and withdrawal transactions require sharing relevant account details with payment service providers operating the DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and other payment channels. These processors receive only the data strictly necessary to process the relevant transaction and are contractually bound to process it for that purpose only.

6.2 KYC & Identity Verification Services

KYC document verification may be carried out with the assistance of specialist third-party identity verification service providers. Such providers process identity documents solely to verify their authenticity and extract the verification data required; they do not use this data for any other purpose.

6.3 Game Studio Technology Providers

Game platforms and RNG-certified game studios receive anonymised player session identifiers necessary to load game sessions, record outcomes, and calculate RTP statistics. Game studios do not receive personally identifiable information such as your name, residential address, or payment details.

6.4 Legal & Regulatory Disclosures

Where required by applicable law, court order, or regulatory authority, i1malaysia may be obligated to disclose personal data to law enforcement agencies, regulators, or judicial bodies. Such disclosures will be made only to the extent required by the relevant obligation.

No Data Sales: i1malaysia will never sell, lease, or commercially transfer your personal data to advertising networks, data brokers, or marketing companies. Any request purporting to come from i1malaysia asking you to consent to such a transfer should be treated as suspicious and reported to our support team.

7 Cookies & Tracking Technologies

i1malaysia uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain login sessions, detect fraudulent access patterns, and generate anonymised aggregate traffic statistics. A summary of the cookies used is set out below:

Cookie Type	Purpose	Retention
Session Cookies	Maintain your authenticated login session while you are active on the Platform.	Deleted at browser close
Security Cookies	Detect anomalous login patterns, CSRF protection, and fraud risk signals.	Up to 30 days
Preference Cookies	Remember your language preference, display settings, and last-visited game category.	Up to 12 months
Analytics Cookies	Collect anonymised data on page views, navigation paths, and session duration to improve Platform performance.	Up to 24 months

You may manage cookie preferences through your browser settings. Disabling session or security cookies will prevent you from logging into your account. Analytics cookies may be disabled without affecting Platform functionality. i1malaysia does not use third-party advertising cookies that track your activity across other websites.

8 Data Retention

i1malaysia retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and licensing obligations. The principal retention periods are as follows:

Active Account Data: Retained throughout the period your account remains registered on the Platform.
Post-Closure Account Data: Following account closure, account data (excluding KYC documents) is retained for a minimum of five (5) years to satisfy gaming licence audit and AML record-keeping requirements.
KYC Documents: Identity documents submitted for verification are retained for five (5) years from the date of submission, or longer if required by applicable AML regulation.
Financial Transaction Records: Transaction logs are retained for five (5) years from the transaction date.
Customer Support Communications: Live chat transcripts and email records are retained for two (2) years from the date of the interaction.
Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for five (5) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

9 Data Security

i1malaysia implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

TLS/SSL Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. The connection is secured with 256-bit encryption certificates.
Encrypted Storage: Sensitive data categories — including identity document images, payment method identifiers, and account passwords (stored as salted hashes) — are stored in encrypted form.
Access Controls: Access to personal data within i1malaysia's systems is restricted to personnel with a legitimate operational need. Access rights are reviewed regularly and revoked when no longer required.
Infrastructure Security: Our Platform is hosted on infrastructure protected by firewalls, intrusion detection systems, and DoS mitigation services.
Incident Response: i1malaysia maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities as required by applicable law.

Player Responsibility: While we take all reasonable steps to secure your data on our end, the security of your account also depends on the confidentiality of your login credentials. Do not share your password with anyone. Enable two-factor authentication where available. If you suspect unauthorised access, contact our support team immediately.

10 Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by i1malaysia. These rights may be exercised by contacting our support team via live chat or email.

Right of Access

Request a copy of the personal data we hold about you. We will respond within 30 days.

Right to Rectification

Request correction of inaccurate or incomplete personal data, such as a change of address or contact details.

Right to Erasure

Request deletion of your personal data where processing is no longer necessary, subject to mandatory retention obligations.

Right to Restrict Processing

Request that we limit the processing of your data while a query or complaint is being investigated.

Right to Portability

Request a machine-readable export of the personal data you have provided to us directly.

Right to Object

Object to processing based on our legitimate interests — including marketing communications and profiling for responsible gambling purposes.

To exercise any of the above rights, please contact us via live chat on the Platform or send a written request to [email protected] We will respond to all data rights requests within thirty (30) days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension.

Identity Verification for Rights Requests: To protect the security of your personal data, we will require you to verify your identity before actioning any data rights request. We may ask you to confirm account registration details or, in some cases, provide a copy of your identity document.

11 Amendments to This Policy

i1malaysia reserves the right to update or amend this Privacy Policy at any time. We will provide notice of material changes by displaying a prominent notification upon your next login to the Platform, or by sending an email to your registered address. The effective date of the most recent version is displayed at the top of this document.

Your continued use of the Platform following notification of a material amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and contact support to arrange account closure. Any data collected prior to the amendment will continue to be processed in accordance with the version of this Policy in effect at the time of collection, except where applicable law requires retroactive application.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, the manner in which i1malaysia processes your personal data, or the exercise of your data protection rights, please contact us through the following channels:

Live Chat

Available 24 hours a day, 7 days a week. Click the live chat icon on any page of the Platform. Fastest response channel for urgent enquiries — average response under 2 minutes during Malaysian peak hours (8 PM–2 AM MYT).

Email — Privacy Enquiries

For formal data rights requests, written complaints, or privacy-related enquiries, contact us at:
[email protected]
Please include "Privacy Request" in the subject line for data rights enquiries. We will acknowledge receipt within 2 business hours and respond in full within 30 days.

All communications are handled in English. Our support team is staffed on Malaysia Time (MYT / UTC+8),24 hours a day including Malaysian public holidays. If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

Your Data, Your Choice

Privacy You Can Trust —Play With Confidence

At i1malaysia, transparency is not just a policy document — it is the way we operate every day. Malaysian players from Kuala Lumpur to Johor Bahru can deposit in MYR, play certified games, and withdraw their winings knowing their personal data is protected, never sold, and handled with exactly the care this Policy describes.

Back to Homepage Read Our FAQ

🔞 For players aged 21 and above only. Please gamble responsibly. Responsible Gambling Guidelines →

Privacy Policy — i1malaysia