Privacy Policy x1bet – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy is issued by x1bet, a sports betting and online casino entertainment platform operating at https://x1bet.express. We understand that your trust depends not only on a great gaming experience, but also on the confidence that your personal information is handled responsibly and transparently.

This document explains in detail how x1bet collect, store, use, and protect your personal data. It also outlines the rights you hold regarding your personal data and how you may exercise those rights.

By registering an account or using any part of the platform x1bet, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

x1bet collect various types of data depending on how you interact with our platform. The following are the categories of data we collect:

For the identity verification (KYC) process required for certain players or when withdrawal amounts exceed a specified threshold, x1bet may request additional documents such as a copy of your MyKad or a recent bank statement. These documents are handled in strict confidence and retained only for as long as required for legal compliance purposes.

x1bet uses collected personal data solely for legitimate purposes directly related to platform operations and player services. The primary purposes for data use are as follows:

• Account operations: To create and manage player accounts, verify identity, process logins, and maintain the security of your account at all times.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and withdrawals to registered accounts. Transaction records are also required for accounting and legal compliance purposes.
• Service provision: To ensure you can access and use all x1bet platform features, including Sports Betting, slots, Live Casino, lottery, and e-sports.
• Age and eligibility verification: To verify that players meet the minimum age requirement of 18 years and satisfy all other eligibility criteria set out in our Terms & Conditions.
• Service communications: To send important notifications regarding your account, lottery draw results, withdrawal status, OTP verification, and relevant policy updates.
• Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, and any security threats that could harm players or the platform.
• Responsible gaming: To monitor gaming patterns and identify early signs of problem gambling for players who use the self-control features in their account.
• Platform improvements: To analyse usage patterns in aggregate (not at the individual level) in order to improve platform design, speed, and the overall user experience.
• Legal compliance: To fulfil legal and regulatory obligations applicable to the platform's operations within Malaysia's jurisdiction.

x1bet does not use player personal data for third-party marketing, commercial profiling unrelated to the platform, or any other purpose not stated in this policy without the player's explicit consent.

x1bet does not sell or disclose players' personal data to third parties for marketing purposes. However, there are limited circumstances where we need to share data with certain parties to ensure the smooth operation of the platform:

• Payment service providers: Payment gateways and e-wallet providers (such as Touch 'n Go and GrabPay operators) receive the transaction data necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game providers: Providers of slots, Live Casino, and other games — such as Evolution Gaming, Pragmatic Play, and PG Soft — receive the session data necessary to deliver games to you. These providers maintain their own privacy policies that comply with industry standards.
• Technical infrastructure providers: Companies providing server hosting, cybersecurity, and analytics services may process certain data as part of their technical services to x1bet. All such providers are bound by strict data processing agreements.
• Legal authorities: x1bet will disclose personal data when required to do so by law, court order, or a lawful request from Malaysian government authorities. In such cases, we will disclose only the minimum data necessary.
• Fraud prevention: In cases involving serious fraud, money laundering, or suspected security threats, x1bet reserves the right to share relevant information with the appropriate authorities or industry partners for investigation purposes.

x1bet continuously invests in security infrastructure to ensure players' personal data remains protected at all times. The key security measures we have in place include:

• 256-bit SSL encryption: All communications between your browser or app and x1bet's servers are encrypted using TLS 1.3 with a 256-bit key length. This means your data cannot be read or intercepted while in transit.
• Encrypted password storage: x1bet account passwords are never stored in plain text. We use modern one-way hashing algorithms with a unique salt value for each account, making it virtually impossible to reverse-engineer even if stored data is accessed without authorisation.
• Two-factor authentication (2FA): Players are encouraged to enable two-factor authentication via SMS OTP for an added layer of security at login. This means that even if someone else knows your password, your account remains protected.
• 24/7 activity monitoring: Our automated monitoring system detects unusual login patterns or activity and will trigger a security review or temporary suspension where necessary.
• Data segregation: Player funds are held in accounts that are kept separate from the company's operational accounts. Player personal data is likewise stored in isolated environments with strict access controls.
• Regular security audits: The x1bet platform undergoes regular security audits conducted by independent third parties to identify and address any security vulnerabilities before they can be exploited.

While we take all reasonable precautions, no digital security system can offer an absolute 100% guarantee. You also play an important role in keeping your account secure — never share your password, use a strong and unique password, and always log out on shared devices.

Platform x1bet uses cookies and similar tracking technologies to enhance the user experience and enable certain platform functions to work correctly.

• Essential cookies: Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how players use the platform — which pages are visited most frequently, page load times, and errors encountered. This data is gathered in aggregate and does not identify individual users.
• Functional cookies: Remembering your preferences and settings — such as your preferred payment method, game display settings, and notification preferences — to deliver a more personalised experience.
• Analytics cookies: Helps us understand overall platform usage patterns for continuous improvement. We use analytics services that comply with data privacy standards.

You can manage cookie preferences through your web browser settings. Please note that disabling essential cookies may affect platform functionality and your gaming experience. By browsing the platform x1bet is considered consent to the use of cookies as described above.

As a player x1bet, you have the following rights regarding the personal data we hold about you. These rights may be exercised by contacting our support team at support@x1bet.express:

To exercise any of the above rights, please contact us at support@x1bet.express with your account name and the details of your request. We will process your request within a reasonable timeframe and may require identity verification before doing so for security purposes.

x1bet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are general data retention guidelines:

• Active account data: Retained for the duration your account remains active, plus the required period following account closure for legal compliance purposes (typically 5 years).
• Financial transaction records: Records of deposits, withdrawals, and bets are retained for a minimum of 5 years from the transaction date, in line with accounting and anti-money laundering legal requirements.
• Support communication records: Conversations with the support team are retained for 2 years for reference and dispute resolution purposes.
• Cookie data: Session cookies expire when you close your browser. Persistent cookies are stored for the duration specified in their respective cookie settings, typically between 30 days and 12 months.
• KYC documents: Identity verification documents are retained for the period required under anti-money laundering legislation, typically 5 years after the business relationship ends.

Once the relevant retention period has expired, personal data will be securely deleted or anonymised. Fully anonymised data is no longer considered personal data and may be retained indefinitely for statistical analysis purposes.

Platform x1bet integrates certain third-party services essential to operations, including game providers such as Evolution Gaming, Pragmatic Play, and PG Soft, as well as payment gateways for processing transactions in MYR.

When you interact with games or services delivered by these third-party providers, certain data may be processed directly by them in accordance with their own privacy policies. x1bet select partners that uphold high standards of privacy and security; however, we are not responsible for the privacy practices of third-party services that are outside our direct control.

x1bet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we manage personal data. Any amendments will be published on this page along with the new effective date.

For material amendments — changes that significantly affect your privacy rights or how we use your personal data — we will notify affected players via in-platform notification or email at least 14 days before the changes take effect.

Continued use of the platform x1bet after the amendment's effective date will be considered acceptance of the updated Privacy Policy terms. If you do not agree with the changes, please contact us to close your account before they take effect.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our privacy team:

• Email: support@x1bet.express (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available on the platform after logging in, 24 hours a day
• Response time: We aim to respond to privacy-related enquiries within 72 hours