I1m Privacy Policy – Personal Data Protection Our Members

I1m collects your personal information through several channels when you register an account, use our services, or interact with the platform via the i1m website or mobile app. The following are the categories of information we collect:

Identity Information:

• Full name as per identity card or passport.
• Date of birth and gender.
• Identity card number (MyKad) or passport number.
• Photo of identity card or other identity document (for the KYC process).
• Selfie or facial photo for KYC verification (if required).

Contact Information:

• Active email address used for registration.
• Mobile phone number.
• Residential address (if required for premium account verification).

Financial Information:

• Bank account number and bank name for withdrawal processing.
• Digital wallet information (Touch 'n Go, GrabPay, etc.) where applicable.
• Records of deposit and withdrawal transactions on the i1m platform.

Platform Usage Information:

• Gaming and wagering activity records (game type, bet amount, results).
• Login history including date, time, and approximate location.
• IP address and device information (device type, operating system, browser version).
• Platform interaction data such as pages visited and session duration.

Every piece of information we collect has a clear and specific purpose. i1m does not use your data arbitrarily. The following are the primary purposes for data use:

I1m will not use your data for any purpose beyond those listed above without obtaining your consent first. Should we need to use your data for a new purpose, you will be informed and given the option to withdraw your consent.

I1m understands that the confidentiality of your personal information is of utmost importance. We do not sell, rent, or disclose your personal information to third parties for marketing purposes without your consent. However, there are limited situations where sharing information is necessary:

Trusted Service Providers: i1m works with selected third-party service providers such as payment processors, game platform providers, and cloud service providers to operate our platform. These providers may only access the data necessary to carry out their specific functions and are bound by strict confidentiality agreements with i1m.

Legal Requirements: i1m may be required to disclose your information to relevant authorities when mandated by law, such as financial intelligence units, regulatory bodies, or courts. In such situations, we will only disclose the information required and will notify you if permitted by law.

Security Protection: In cases involving fraud, money laundering, or serious security threats, i1m reserves the right to share relevant information with the appropriate authorities or related platforms for investigation and legal action.

Change of Business Ownership: In the event of a merger, acquisition, or sale of i1m assets, user data may be transferred to the new entity. In such situations, you will be notified in advance and the receiving party will be bound by the same or equivalent Privacy Policy.

Protecting your personal data from unauthorised access, loss, misuse, or disclosure is a top priority at i1m. We continuously invest in robust security infrastructure to ensure optimal protection.

The technical security measures we implement include:

• 256-bit SSL/TLS Encryption for all data communications between users and our servers.
• Data at-rest encryption for all sensitive information stored in our database.
• Two-Factor Authentication (2FA) available to all member accounts as an additional layer of security.
• 24/7 security monitoring by our cybersecurity team to detect and respond to threats promptly.
• Penetration testing periodically by independent third parties to identify and address system vulnerabilities.
• Role-based access control (RBAC) ensuring staff can only access data relevant to their job responsibilities.
• Comprehensive audit logs for every access to sensitive data for accountability purposes.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the highly unlikely event of a data breach that could affect your rights and freedoms, i1m will notify you without undue delay in accordance with applicable legal requirements.

I1m uses cookies and similar tracking technologies to enhance your experience on our platform, understand how the platform is used, and deliver relevant content to you. The following are the types of cookies we use:

• Essential Cookies: These cookies are mandatory for core platform functions such as login, session security, and navigation. They cannot be disabled.
• Performance Cookies: Helping us understand how members interact with our platform through anonymous data collection on pages visited and actions taken.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings to deliver a more personalised experience.
• Analytics Cookies: Used to analyse aggregated platform usage patterns to help us improve our services. This data is not used to identify you individually.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the i1m platform.

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal information held by i1m:

• Right of Access: You have the right to request a copy of the personal information we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If any information we hold is inaccurate or incomplete, you have the right to request a correction. You may also update basic information directly through your account dashboard.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained for a specified period to comply with legal obligations.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain circumstances, such as during a dispute investigation.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format for transfer to another service provider, where applicable.

To submit any request related to your data rights, please contact the i1m support team via live chat or our official email. We will endeavor to process all valid requests promptly and within the timeframe required by law.

I1m retains your personal information only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal and regulatory requirements. Retention periods vary by data type:

• Active account information: Retained for the duration your account is active and for the required period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure or after the business relationship ends, whichever is later.
• Security and access logs: Retained for 2 years for security investigation and audit purposes.
• Customer support communication data: Retained for 3 years for reference and service improvement purposes.
• Marketing data: Retained until you withdraw consent or close your account, whichever comes first.

Once the retention period expires, data will be securely deleted or anonymized using approved procedures, ensuring it cannot be recovered or reused.

The i1m platform may contain links or integrations with third-party websites or services such as game providers, payment processors, or social media platforms. i1m's Privacy Policy does not cover the privacy practices of these third parties.

When you follow links to external websites or use third-party services integrated with the i1m platform, you are subject to their own privacy policies. i1m is not responsible for the content, privacy practices, or security of those third-party websites.

We recommend reading the privacy policy of every third-party website or service you use before sharing any personal information with them.

The i1m platform is intended solely for adult users aged 18 and above. We do not knowingly collect or process personal information from children or minors.

If we identify that personal information has been collected from an individual under 18 years of age without valid parental or guardian consent, we will take immediate steps to delete that information and close the account in question.

If you have reason to believe that a minor has registered or used the i1m platform, please contact our support team immediately so that appropriate action can be taken promptly.

I1m reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational reasons.

When we make significant amendments, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a clear notice on the platform's home page for at least 7 days.
• Sending email notifications to all registered members informing them of key changes.
• In cases of highly significant amendments that require renewed consent, we will ask you to actively accept the new terms before you can continue using the platform.

Continued use of the i1m platform after amendments are published constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the i1m privacy team is ready to assist you:

When contacting us regarding a data request, please include the following to help us process it promptly: your full registered name, i1m account number, type of request being submitted, and your preferred contact method for our reply. We are committed to handling every privacy request thoroughly, transparently, and in a timely manner.