I1cash Privacy Policy — Malaysia Personal Data Protection

1Introduction & Our Commitment

I1cash ("Platform", "We", "Company") is committed to protecting the privacy and security of every member's and user's personal information on our platform. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This document transparently explains how i1cash collects, processes, stores, and protects your personal data when you use our online casino platform — including our website, slots, Live Casino, baccarat, blackjack, roulette, and Sports Betting services. It also outlines your rights regarding that personal data and how to reach us if you have any concerns.

This Privacy Policy applies to all users of the i1cash platform, regardless of how you access it — whether via a web browser on a laptop, smartphone, or tablet. We encourage you to read this document carefully and check back periodically for any updates.

2Types of Personal Information We Collect

I1cash collects various types of personal information depending on how you interact with our platform. The following are the main categories of data we may collect:

2.1 Identity & Account Information

• Full name as shown on a valid identity document
• National Registration Identity Card (NRIC) number or passport number
• Date of birth and gender
• Email address and Malaysian mobile number
• Username and password (stored in encrypted form)
• Current residential address

2.2 Financial & Transaction Information

• E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
• Bank account details for FPX transactions (Maybank2u, CIMB Clicks)
• Registered DuitNow account number
• Deposit, withdrawal, and account balance records
• Transaction history and betting activity

2.3 Device & Technical Information

• IP address and geographic location (state/city level)
• Device type, operating system, and web browser used
• Login session records, including time and duration
• Platform usage data, including games played

2.4 Communication Information

• Chat records with our customer support team via live chat
• Emails and feedback you send to us
• Responses to customer surveys and satisfaction questionnaires

3How We Collect Personal Information

I1cash collects your personal information through several transparent and lawful methods:

4Purpose & Legal Basis for Data Processing

I1cash processes your personal information for the following purposes, each supported by a valid legal basis:

4.1 Service Provision

Your information is used to create and manage your account, process deposits and withdrawals via Malaysian local payment methods such as Touch 'n Go, GrabPay, and DuitNow, provide access to online casino games and Sports Betting, and handle your bonus claims and VIP programme rewards.

4.2 Security & Legal Compliance

We process data to verify your identity through the KYC (Know Your Customer) process, prevent fraud, money laundering, and other illicit activities, comply with applicable legal and regulatory requirements including Malaysia's PDPA, and investigate any suspicious or non-compliant activity. Terms & Conditions us.

4.3 Service Improvement & Communications

Your usage data helps us understand how Malaysian players use the platform, improve the user experience, optimise performance across slots, Live Casino, and Sports Betting, and send you important notifications about your account, promotions, and relevant bonus offers.

4.4 Marketing & Personalisation

With your consent, we may use your data to send marketing communications, tailor offers and promotions based on your gaming preferences, and provide relevant game recommendations. You may opt out of marketing communications at any time via your account settings or by contacting us.

5Information Sharing & Disclosure

I1cash does not share your personal information with external parties except in the circumstances outlined below:

5.1 Third-Party Service Providers

We may share necessary data with trusted business partners for platform operations purposes, including:

• Payment gateway providers — to securely process transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Game providers — such as slots, Live Casino, baccarat, and blackjack providers that require session data to ensure smooth gameplay
• KYC & Identity Verification Services — to verify the identity documents you submit
• Cloud & hosting services — which stores and processes our platform data to the highest security standards

All third-party service providers are bound by strict confidentiality agreements and are only permitted to process your data for the specified purposes.

5.2 Legal Requirements

I1cash may disclose your personal information when required by law, court order, direction from a Malaysian government authority, or a legitimate law enforcement body. In such cases, we will endeavour to notify you in advance where permitted by law.

5.3 Protection of Interests

We may disclose information where we reasonably believe it is necessary to protect the rights, property, or safety of i1cash, our users, or the public, including to prevent or investigate fraud and unlawful activity.

6Security & Data Protection

I1cash invests heavily in security infrastructure to protect your personal data. The security measures we have implemented include:

While we take reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your account secure — use a strong password and never share your login credentials with anyone.

7Data Retention Period

I1cash retains your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data — retained for as long as your account remains active on the i1cash platform.
• Financial transaction records — retained for a minimum of 7 years after the transaction date, in accordance with Malaysian financial regulatory requirements.
• KYC Documents — retained for a minimum of 5 years after account termination for legal compliance purposes.
• Customer support communication log — retained for 2 years for dispute resolution purposes.
• Cookie & Session Data — validity period depends on the type of cookie; please refer to Section 9 for further details.

When data is no longer needed, it will be securely deleted or anonymised in accordance with PDPA-compliant data deletion procedures.

8Your Personal Data Rights

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal information i1cash holds about you:

To exercise any of the rights above, please contact our Data Protection Officer at privacy@i1cash.com. We will endeavour to respond to all valid requests within a reasonable timeframe, not exceeding 21 business days.

9Cookies & Tracking Technologies

I1cash uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

9.1 Cookies We Use

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Analytics Cookies — Helps us understand how users interact with the platform in order to improve the overall user experience.
• Functional Cookies — Remembering your settings and preferences, such as interface language and game selections.
• Marketing Cookies — Used to display relevant offers and promotions. You can disable these cookies without affecting the core functionality of the platform.

9.2 Managing Cookie Settings

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the i1cash platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

10Cross-Border Data Transfers

In certain circumstances, your personal information may be transferred to, stored in, or processed in countries other than Malaysia — for example, when the cloud servers we use operate across multiple global locations to ensure platform stability and performance.

In all cases of cross-border data transfers, i1cash ensures that:

• Transfers are made to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA.
• Binding data processing agreements are in place between i1cash and data recipients to ensure your information remains protected.
• Only data necessary for operational purposes is transferred, in line with the principle of data minimisation.

11Children's & Minors' Privacy

The i1cash platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from any individual under the age of 18.

If you believe we may have inadvertently collected information from a minor, please contact us immediately at privacy@i1cash.com and we will take immediate steps to delete that information from our systems.

Parents and guardians concerned about their children's internet use are encouraged to install appropriate parental control software and actively monitor their children's online activity.

12Changes to the Privacy Policy

I1cash reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Whenever material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent notice on the i1cash platform for at least 7 days before the changes take effect.
• Sending a notification to your registered email address for any significant changes.

We encourage you to review this Privacy Policy periodically to stay informed about how your information is protected. Continued use of the i1cash platform after any changes take effect constitutes your acceptance of the updated policy.

13Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how i1cash handles your personal data, please do not hesitate to reach out to us:

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. An initial response will be provided within 3 business days, with full resolution targeted within 21 business days.