Privacy Policy 1bext — Our Commitment to Protecting Every Malaysian Player's Personal Data

1bext collects several categories of personal data when you register and use our platform. Here is an overview of the data collected by category:

1bext uses collected personal data only for legitimate and transparent purposes. We do not collect data for any purpose not listed below:

• Account management — to create, verify, and securely manage your user account.
• Transaction processing — to process deposits, withdrawals, and all financial transactions on the platform.
• KYC and AML compliance — to fulfil legal compliance obligations related to identity verification and anti-money laundering prevention.
• Platform security — to detect and prevent unauthorised access, fraud, and suspicious activity.
• Customer support — to handle enquiries, complaints, and support requests from users.
• Service improvement — to analyse aggregated usage patterns in order to improve platform functionality and user experience.
• Important communications — to send account notices, terms updates, and critical security information.

If you have provided explicit consent, we may also use your data for promotional communications such as bonus offers and exclusive promotions. You may withdraw this consent at any time from your account settings.

1bext will not share, sell, or disclose your personal data to any third party except under the following limited and controlled circumstances:

• Payment service providers — such as DuitNow, FPX, Touch 'n Go, and other eWallet processors required to handle your transactions. These providers are bound by strict data protection agreements.
• Licensed game providers — to enable access to games integrated within the 1bext platform. Only data required for technical purposes is shared.
• Authorities and regulatory bodies — when we are legally required to disclose information to competent authorities pursuant to a court order or compliance obligations.
• Technology and infrastructure providers — to support platform operations including hosting, cybersecurity, and other technical services. All such providers are subject to strict confidentiality terms.

In all data-sharing situations described above, 1bext ensures that the receiving party has appropriate data protection measures in place and uses the data only for the specified purpose. We never share data for third-party advertising or external marketing.

The security of your personal data is a top technical and operational priority at 1bext. We implement multiple layers of protection to keep your data safe from both internal and external threats:

• Encryption of data in transit — all communication between your browser and the 1bext platform is protected by TLS 1.3 with 256-bit SSL encryption.
• Encryption of data at rest — sensitive data such as passwords and financial information is stored in encrypted form using industry-recognised encryption algorithms.
• Role-based access control — 1bext staff may only access data required for their specific duties, in accordance with the principle of least privilege.
• Continuous security monitoring — our systems are actively monitored to detect any suspicious activity or unauthorised access attempts.
• Regular security testing — we conduct regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

The 1bext platform uses cookies and similar tracking technologies to enable core platform functionality and enhance your experience. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as maintaining your login session and saving language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — collects anonymised information about how users interact with the platform to help us identify and resolve performance issues.
• Functional cookies — saves your preferences such as display theme and game settings so you do not need to reconfigure them each time you log in.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's help documentation.

1bext retains your personal data only for as long as necessary based on the purpose of collection and applicable legal requirements. The following are general guidelines for our retention periods:

• Active account data — retained for as long as your account is active and for any additional period required by legal compliance obligations following account closure.
• Financial transaction records — retained in accordance with financial compliance and anti-money laundering legal requirements, typically seven years from the transaction date.
• KYC and identity verification data — retained in accordance with relevant compliance requirements and may be deleted upon request once those compliance requirements have been fulfilled.
• Technical and security logs — retained for the period necessary for fraud detection and security purposes, typically not exceeding 90 days for detailed access logs.
• Inactive account data — accounts that have been inactive for more than 24 months may be deleted after notice is sent to your registered email.

Once the defined retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any specific individual.

As a 1bext platform user, you have the following rights regarding your personal data. All privacy rights requests can be submitted to our support team:

1bext reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or relevant technological developments.

When significant changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notices to all registered users before changes take effect.
• Displaying in-platform notices for changes that require immediate attention.

Continued use of the 1bext platform after changes take effect constitutes acceptance of the updated privacy terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly.

Available channels for privacy inquiries:

• Live Chat — the fastest way to get help, available 24/7 via the chat icon on the 1bext platform.
• Email — send your privacy enquiry to [email protected] and our team will respond within 2 business days.

For further reading on 1bext's other policies and guidelines, you may refer to the following pages:

• Terms and Conditions — the complete platform usage policy.
• Responsible Gaming — tools and resources for playing responsibly and safely.
• FAQ — answers to the most frequently asked questions from players.

We are committed to responding to all privacy-related enquiries transparently and within a reasonable timeframe. Your trust in 1bext starts with the confidence that your data is handled responsibly.