1cinta Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how 1cinta ("the Platform", "we", "us", "our") collects, uses, discloses, and safeguards personal data provided by or obtained from registered Members and visitors to 1cinta.asia ("you", "your"). This Policy applies to all interactions with 1cinta, including account registration, use of games and betting services, customer support, and general website browsing.

By registering an account or using the 1cinta platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

1cinta is committed to responsible and transparent data handling. We do not use your personal data for purposes beyond those disclosed in this Policy, and we do not sell your data to third parties for their own commercial purposes.

Data Controller

The data controller responsible for your personal data collected through the 1cinta platform is the Operator — the entity holding the international gaming authority licence under which 1cinta operates. The Operator determines the purposes for which and the means by which personal data is processed.

For all privacy-related queries, requests to exercise data rights, or complaints regarding the handling of your personal data, please contact the 1cinta Data Protection team via the support channels described in Section 14 of this Policy.

Personal Data We Collect

1cinta collects personal data through several channels. The categories of data we collect include, but are not limited to:

Where personal data is required by law or by the terms of our gaming licence (such as KYC identity data), failure to provide it will prevent us from establishing or maintaining your Account or processing withdrawals.

How We Use Your Personal Data

1cinta uses the personal data we collect for the following purposes:

• Account Registration and Management: To create, administer, and maintain your 1cinta account, verify your identity, and authenticate your logins.
• Service Delivery: To provide access to games, sports betting, promotions, and all other platform features to which you are entitled as a Member.
• Financial Processing: To process deposits and withdrawal requests, verify payment instrument ownership, and maintain accurate transaction records.
• KYC and Fraud Prevention: To verify your identity and age, detect and prevent fraudulent activity, money laundering, collusion, and abuse of bonus systems.
• Customer Support: To respond to support queries, resolve disputes, and maintain records of support interactions for quality and training purposes.
• Responsible Gaming Compliance: To implement responsible gaming controls, monitor for signs of problem gambling, and comply with regulatory requirements relating to player protection.
• Legal and Regulatory Compliance: To fulfil obligations under our gaming licence, respond to lawful requests from regulatory authorities and law enforcement, and maintain records as required by applicable law.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance, usability, and security of the 1cinta platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant platform updates, subject to your communication preferences and applicable law. You may opt out of marketing communications at any time.

Legal Bases for Processing

1cinta processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Member Agreement, including account management, game access, and financial transactions.
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering legislation, and other applicable laws — including KYC identity verification and responsible gaming record-keeping.
• Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your data protection rights — including fraud detection, platform security, and platform improvement analytics.
• Consent: Where we rely on your consent to process personal data (such as for certain marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences within your account settings or contacting support.

Data Sharing and Disclosure

1cinta does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial use. We may share your personal data with third parties only in the following circumstances:

• Gaming Software Providers: Game providers (such as live casino studios and slot developers) may receive gameplay data necessary to deliver the relevant game service. These providers operate under contractual obligations to handle data securely and for no purpose beyond service delivery.
• Payment Processors: Financial data is shared with payment service providers (including eWallet operators such as Touch n Go and Boost, and banking institutions including Maybank and CIMB) solely for the purpose of processing authorised transactions.
• Identity Verification Services: KYC documentation may be processed by authorised third-party identity verification service providers under strict data processing agreements.
• Regulatory Authorities: We may be required by law or by our gaming licence to disclose personal data to regulatory bodies, gaming authorities, or law enforcement agencies upon receipt of a lawful request.
• Anti-Money Laundering Compliance: Where required by applicable law, we may disclose transaction data and identity information to financial intelligence units or equivalent authorities.
• Fraud Prevention Networks: With fraud prevention and detection services, where required to protect the platform and its Members from financial crime.

All third-party data processors engaged by 1cinta are subject to contractual data protection obligations consistent with applicable privacy law.

Cookies and Tracking Technologies

1cinta uses cookies and similar tracking technologies (including web beacons and session tokens) to operate the platform, maintain your authenticated session, and improve your experience. The categories of cookies we use include:

• Essential Cookies: Required for platform functionality, including session management and authentication. These cannot be disabled without disrupting your ability to use 1cinta.
• Performance Cookies: Used to collect anonymised usage data to help us understand how Members navigate the platform and where technical improvements are needed.
• Fraud Detection Cookies: Used to identify unusual access patterns, detect account takeover attempts, and flag suspicious login behaviour.
• Preference Cookies: Used to remember your platform settings, such as language and display preferences.

Most web browsers allow you to control cookie behaviour through browser settings. Disabling certain cookies may affect the functionality of the 1cinta platform, including the ability to maintain a logged-in session.

Data Retention

1cinta retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active Account Data: Retained throughout the lifetime of your Account and for a minimum period after closure as required by our gaming licence and applicable anti-money laundering legislation.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the date of the last transaction, in accordance with standard financial services regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years following each transaction.
• Customer Support Records: Retained for a minimum of three (3) years following resolution of the relevant support interaction.
• Technical and Usage Data: Retained in anonymised or aggregated form for analytical purposes; personally identifiable technical data is deleted or anonymised within twelve (12) months of collection.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

Data Security

1cinta implements technical and organisational measures appropriate to the nature of the data processed and the risks presented by our processing activities. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 1cinta servers;
• Encryption of sensitive data fields (including financial identifiers) at rest in our database infrastructure;
• Strict access controls limiting internal access to personal data to authorised personnel with a documented need to access that data;
• Multi-factor authentication requirements for administrative access to systems that process personal data;
• Regular security assessments and penetration testing conducted by qualified third-party specialists;
• Incident response procedures for detecting, investigating, and notifying affected parties of data security incidents where required by applicable law.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. While 1cinta takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data security incident affecting your personal data, we will notify you in accordance with applicable law.

Your Data Rights

Subject to applicable law and certain exceptions (including exceptions necessary to fulfil our gaming licence obligations), you have the following rights with respect to your personal data held by 1cinta:

• Right of Access: You may request confirmation of whether we process your personal data and, if so, a copy of that data and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request restriction of processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to Object: You may object to processing based on legitimate interests, and to direct marketing at any time.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the 1cinta Data Protection team via 24/7 live chat or the email address set out in Section 14. We will respond to all legitimate requests within thirty (30) days. In some cases we may need to verify your identity before processing your request.

Children's Privacy

The 1cinta platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted during the registration and KYC processes for precisely this reason.

If the Operator becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent, that Account will be immediately suspended and all associated personal data will be deleted as soon as reasonably practicable, subject to any legal reporting obligations that may apply.

If you are a parent or guardian and believe that a minor has created an account on 1cinta, please contact our support team immediately via live chat so we can investigate and take appropriate action.

International Data Transfers

In the course of operating the 1cinta platform, your personal data may be transferred to and processed in jurisdictions outside of Malaysia — for example, by our gaming software providers operating live casino studios, or by our infrastructure hosting providers. Where such transfers occur, the Operator takes all appropriate steps to ensure that your personal data is protected to a standard at least equivalent to that applicable in the jurisdiction of collection.

Appropriate transfer safeguards include: contractual clauses obligating the receiving party to protect the personal data in accordance with applicable privacy law; and restriction of transfers to jurisdictions that have been determined to provide an adequate level of data protection.

Changes to This Privacy Policy

1cinta reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with an updated "Last Updated" date. Where changes are material — particularly where they affect your rights or the purposes for which we use your data — we will endeavour to notify you via your registered email address or a prominent in-platform notification.

Your continued use of the 1cinta platform following publication of any amended Privacy Policy constitutes your acceptance of those changes. If you do not agree with any amendment, you should discontinue use of the Platform and may request Account closure by contacting support.

Contact Us

For any privacy-related enquiries, requests to exercise your data rights, or complaints regarding 1cinta's handling of your personal data, please contact the Data Protection team through any of the following channels:

• Live Chat: 24/7 live chat support available on the 1cinta platform (accessible after login)
• Email: [email protected] — please include "Privacy Request" in the subject line

We will acknowledge receipt of all privacy requests within five (5) business days and aim to resolve all requests within thirty (30) calendar days. Complex requests may require additional time; we will notify you if an extension is required.

This Privacy Policy was last reviewed and updated in June 2026. All prior versions are superseded by this document.