1xbad Privacy Policy — Our Commitment to Protecting Your Data

1xbad's privacy policy applies to our website, mobile app, and all related services. It takes effect from the moment you register, log in, or use any of our services.

This policy explains what data we collect, why we collect it, how we protect it, and what you can do with your data. 1xbad believes data protection is not just a legal obligation — it is an ethical responsibility to our members.

This policy has been developed in accordance with international data protection standards. If you have any questions, feel free to contact our support team at any time.

1xbad collects data through various means. The types of data and their purposes are detailed below:

1xbad never collects unnecessary information. We will never ask for your religious beliefs, political views, or health details.

1xbad uses the data it collects only for specified purposes. No information is used beyond those stated purposes.

• Account Management: For registration, login, and identity verification.
• Payment Processing: To process deposits, withdrawals, and transaction confirmations.
• Customer Support: To resolve issues and provide assistance to members.
• Security monitoring: To detect fraud, multiple accounts, and suspicious activity.
• Responsible Betting: To detect unusual betting patterns and alert the member.
• Legal Obligations: To share necessary information upon request from tax authorities or regulatory bodies.
• Service improvement: To improve platform performance and enhance the user experience.

1xbad may share your information with third parties in limited circumstances and for specific reasons. These situations are detailed below:

• Payment providers (bKash, Nagad, Rocket): Only the information necessary to complete a payment is shared. Payment providers also operate under their own privacy policies.
• KYC Verification Services: Approved third parties may be used for identity verification. They receive your data solely for that verification purpose.
• Law Enforcement: We may be required to disclose data under a court order or valid legal request. In such cases, the member will be informed — unless prohibited by law.
• Anti-Money Laundering Regulator: Suspicious transactions are reported in compliance with international AML (Anti-Money Laundering) regulations.

1xbad uses industry-standard security technology to protect your data. Below is an overview of our security framework:

• SSL/TLS Encryption: Every data transfer on the website and app is protected with 256-bit SSL encryption.
• Database Encryption: Stored data remains encrypted at all times — it cannot be read directly on the server.
• Two-Factor Authentication (2FA): An extra layer of security is available to add to your account.
• Intrusion Detection: An automated system monitors unusual login attempts and access patterns 24/7.
• Regular security audits: Third-party cybersecurity specialists conduct regular system audits.
• Staff Training: Staff who have access to customer data undergo strict security training.

Should a security incident occur despite all precautions, 1xbad will notify the affected member by email within 72 hours and take the necessary remedial steps.

You can also take steps to secure your own account — use a strong password, never share it with anyone, and avoid logging in on public Wi-Fi.

1xbad uses cookies on its website and app. Cookies are small text files stored in your browser that help improve your experience on future visits. We use the following types of cookies:

You can manage cookies through your browser settings. However, disabling essential and security cookies may affect the proper functioning of the site.

As a 1xbad member, you have the following rights over your personal data:

To exercise any of these rights, email support@1xbad.my or reach out via live chat. We will respond within 30 days.

1xbad does not retain data longer than necessary. Retention periods vary depending on the type of data:

• Account & identity information: For the duration of the active account and up to a maximum of 5 years after closure (as required by law).
• Financial Transaction Records: Up to 7 years (in accordance with international financial regulations).
• Betting History: For the duration of the active account and up to 3 years after closure.
• Support conversations: Up to 2 years for dispute resolution purposes.
• Cookies & Session Data: At the end of each session or within a maximum of 30 days.
• Marketing Preferences: Until the member opts out or the account is closed.

At the end of the retention period, data is securely deleted or anonymized — so that no individual can be identified from it.

1xbad is strictly an 18+ platform. Collecting or processing personal data from minors is completely against 1xbad's policy.

1xbad regularly invests in age verification and tests new technologies. To learn more about responsible betting, visit our Responsible Gaming Page View.

For any questions, requests, or complaints regarding this privacy policy:

1xbad reviews this Privacy Policy on a regular basis. If significant changes are made, you will be notified via your registered email and through a notice on the platform.