Privacy Policy 1bit — Your Data Protection

1. Introduction and Scope of This Policy

1bit ("we", "Platform", "company") is committed to protecting the personal information of all users who access and use our online gaming platform at https://1bit.wine. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This policy applies to all information we collect when you visit our website, register an account, make a deposit or withdrawal, use any game or platform feature, and interact with our customer support team. It also covers data we collect through the 1bit mobile app, available for download on Android and iOS devices.

We review and update this Privacy Policy from time to time. Any significant changes will be communicated to registered users via email or in-platform notification before taking effect. Your continued use of our platform after such notice constitutes your acceptance of the updated policy.

2. Personal Information We Collect

We collect two main categories of information: information you provide directly, and information collected automatically when you use our platform.

2.1 Information You Provide Directly

• Full name as shown on official identity document
• Date of birth and identification card number (MyKad) or passport
• Active email address and mobile phone number
• Current residential address
• Payment method details (bank account number, bank name, e-wallet)
• Selfie and a copy of your identity document for the KYC process
• Any information you provide to our customer support team

2.2 Information Collected Automatically

• IP address and geographic location (city/state level)
• Device type, operating system, and browser version
• Game session data including play time, bets, and results
• Deposit and withdrawal transaction history
• Account activity logs and login records
• Cookie data and other tracking technologies (further details in Section 5)

Data Categories	Example	Primary Purpose	Legal Basis
Identity Data	Name, IC number, date of birth	KYC verification, AML compliance	Legal obligation
Contact Data	Email, phone, address	Account communications, support	Contract performance
Financial Data	Bank accounts, transaction records	Payment processing, audit	Legal obligation
Technical Data	IP address, device, cookies	Security, UX improvement	Legitimate interest
Gaming Data	Betting history, active sessions	Responsible gaming, audits	Contract performance

3. How We Use Your Information

1bit uses collected data for specific, legitimate, and transparent purposes. We will not use your data for any other purpose without obtaining your consent first.

3.1 Account Management and Services

Your data is used to create and manage your platform account, process registration, verify your identity through KYC, and ensure you have full access to all 1bit platform features including deposits, withdrawals, and gaming.

3.2 Financial Transaction Processing

Your financial information is required to securely process deposits and withdrawals, verify ownership of your payment method, meet financial reporting requirements, and prevent fraud and money laundering (AML). All financial transactions are processed through fully encrypted channels.

3.3 Platform Security

Technical data and account activity are continuously analysed to detect and prevent unauthorised access, fraud, bonus abuse, and other cybersecurity threats. Our real-time monitoring system helps maintain a safe and fair gaming environment for all players.

3.4 Product Improvement and User Experience

Anonymised usage data is used to understand playing habits, identify popular features, and make data-driven decisions to improve platform performance, loading speed, and the overall user experience.

3.5 Marketing Communications

With your consent, we send promotional information, bonus offers, and platform news via email or push notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.

4. Data Sharing and Disclosure

1bit does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are certain circumstances where we need to share your information with trusted parties:

4.1 Third-Party Service Providers

We work with third-party service providers that support our platform operations, including licensed payment processors, KYC service providers, ISO 27001-certified cloud service providers, anonymised analytics platforms, and licensed game software providers. All providers are bound by strict data confidentiality agreements and are only permitted to use your data for purposes specified by 1bit.

4.2 Legal and Regulatory Requirements

We may be required to disclose your data to the relevant authorities when mandated by Malaysian law, court order, or a legitimate request from a regulatory body. In each such case, we will endeavour to notify you in advance unless prohibited by law.

5. Cookies and Tracking Technologies

1bit uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve performance and usability.
• Functional Cookies: Remember your preferences such as language, currency denomination, and display settings.
• Analytics Cookies: Helps us understand overall traffic patterns and platform usage — this data is anonymised before analysis.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of our platform.

6. Data Security Measures

Protecting your data is 1bit's highest priority. We implement multiple layers of technical and organisational safeguards to keep your information secure at all times:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption of sensitive data at rest
• Role-based access control (RBAC) — only authorised staff may access specific data
• Regular internal security audits and independent penetration testing
• 24/7 threat monitoring with real-time anomaly detection system
• Tested and documented incident response procedures
• Mandatory data security training for all 1bit staff

While we take all reasonable measures, no system in the world can guarantee 100% absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within 72 hours as required by law.

7. Your Rights as a Data Subject

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our data protection team via the 1bit platform live chat. We will process your request within 14 working days. For more complex cases, this period may be extended to up to 30 days with written notice to you.

8. Data Retention Period

1bit retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Throughout the period your account is active and for several years after account closure for legal compliance purposes.
• Financial transaction records: Minimum 7 years after the transaction as required by Malaysian anti-money laundering law.
• KYC documents: Minimum 5 years after the business relationship ends.
• Customer support communication logs: 3 years from the date of last interaction.
• Anonymous analytics data: No time limit applies as this data cannot be attributed to any individual.

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard methods.

9. Child Protection

The 1bit platform is strictly for adults aged 18 and above. We do not intentionally collect or process personal data of minors. Should we discover that a child's data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the associated account.

If you suspect that a minor has registered an account on our platform, please contact our support team immediately so that appropriate action can be taken.

10. How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the 1bit Data Protection Officer (DPO) through the following methods:

• Live Chat: Available 24/7 within the 1bit platform — the fastest way to get a response.
• Email: [email protected] (response within 2 working days).

We are committed to handling every privacy complaint seriously and fairly. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia appointed under PDPA 2010.