1xlite Privacy Policy – Protection of Malaysian Users' Data

1xlite is a sports betting and online casino platform operating in Malaysia. We understand that user trust is our most valuable asset, and that trust begins with full transparency about how we handle your personal information.

This Privacy Policy covers all aspects of data processing, including:

• The types of information we collect during registration, platform use, and financial transactions.
• The purposes for which your data is collected and processed.
• Parties that may have access to your data under certain circumstances.
• The security measures we implement to protect your data.
• Your rights as a data subject under Malaysian law.

This Policy may be updated from time to time in line with changes to applicable laws, technology, or our business practices. We will notify you of any material changes via an in-platform notice or email to registered users.

We collect your personal data through various points of interaction with the platform 1xlite. Below are the categories of data we collect along with their specific purposes:

Personal data collected by 1xlite is used solely for the following purposes:

• Account Management: Creating, verifying, and maintaining your user account on the 1xlite platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handling withdrawals to registered accounts.
• KYC Verification: Verify your identity in accordance with anti-money laundering (AML) and know-your-customer (KYC) compliance requirements.
• Platform Security: Detect and prevent fraud, money laundering, and unauthorised access to your account.
• Service Improvement: Analysing aggregated platform usage patterns to enhance the user experience and develop new features.
• Service Communications: Sending important notifications related to your account, transactions, and policy updates.
• Customer Support: Responding to enquiries and resolving issues reported by users.
• Responsible Gambling: Monitoring betting patterns to identify users who may benefit from responsible gambling support and intervention.
• Consent-Based Marketing: Promotional offers and 1xlite bonuses are sent only to users who have given explicit consent to receive marketing communications.

We do not use your data to make automated decisions that significantly affect you without human oversight, except in cases of fraud detection that require immediate action.

1xlite does not sell users' personal data to any third party. However, under the following limited circumstances, data may be shared:

• Payment Providers: Transaction information is shared with Malaysian local payment processors (Touch 'n Go, GrabPay, Maybank2u, CIMB Clicks, etc.) to facilitate deposits and withdrawals.
• Technology Service Providers: Technical partners who assist in managing the platform's infrastructure, cloud services, and cybersecurity, subject to strict data protection agreements.
• Legal Compliance: Where required by Malaysian law, court order, or direction from a competent authority such as Bank Negara Malaysia or the Royal Malaysia Police.
• 1xlite Rights Protection: When necessary to protect the rights, property, or safety of the platform, its members, and the public, including in cases of fraud investigation.
• Business Transfer: In the event of a company merger or acquisition, data may be transferred to the new entity with advance notice provided to users.

The security of your personal data is our highest priority 1xlite. We implement multiple layers of technical and organisational security controls:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 1xlite's servers is encrypted using industry-standard security protocols.
• Encrypted Database: Stored personal data is encrypted at rest using AES-256 encryption.
• Role-Based Access Controls: Only staff who require access to specific data to carry out their duties are permitted to do so.
• Two-Factor Authentication (2FA): 1xlite's internal systems use 2FA for all staff access to systems containing user data.
• Regular Security Audits: Independent penetration testing and security audits are conducted regularly to identify and address vulnerabilities.
• 24/7 Threat Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and potential data breaches.

In the event of a data breach affecting user information, 1xlite is committed to notifying affected users within a reasonable timeframe in accordance with applicable legal requirements.

Platform 1xlite uses cookies and other tracking technologies to enhance the user experience and ensure the platform functions correctly. Below are the types of cookies we use:

You can manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the 1xlite platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data you provide to 1xlite:

Your personal data is stored by 1xlite for as long as necessary to fulfil the original purpose of collection or to meet applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active and in operation.
• Financial Transaction Data: Retained for a minimum of 7 years in compliance with Malaysian tax legislation and AML requirements.
• KYC Records: Retained for 5 years after account closure in accordance with compliance requirements.
• Communication Logs: Customer support records are retained for 3 years for reference and dispute resolution purposes.
• Data After Account Closure: Information not required by law will be deleted or anonymised within 90 days of account closure.

1xlite's servers operate in data centres located in Malaysia and the Asia-Pacific region. Any cross-border data transfers are carried out with appropriate contractual safeguards to ensure your data is protected to a standard equivalent to Malaysia's PDPA.

Platform 1xlite is not designed or intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will immediately take the following steps:

• Immediately closing the account in question.
• Permanently delete all associated personal data from our systems.
• Freezing and returning any funds in accordance with the applicable procedures.

Parents or guardians who believe their child has registered or used the 1xlite platform are urged to contact us immediately at support@1xlite.me for prompt action.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 1xlite, please contact us through the following channels:

• Email: support@1xlite.me (subject: "Data Privacy Inquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Response Time: All privacy enquiries will be responded to within 14 business days

For complaints that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP), under the Ministry of Communications and Digital Malaysia.

Privacy Policy Version: 3.1 | Last updated: 1 January 2026 | Previous versions are no longer in effect.