Privacy Policy Data Protection i1m

I1m is fully committed to protecting the privacy of every user on our platform. We understand that your personal data is a trust placed in us, and we take that responsibility very seriously.

This Privacy Policy provides a comprehensive overview of our data collection and management practices — covering the types of data we collect, the purposes for which it is used, how we protect it, and the rights you hold as a user. This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

We do not sell, rent or disclose your personal data to third parties for marketing purposes without your permission. This is our promise to every i1m user in Malaysia.

I1m only collects personal data that is genuinely necessary to provide a safe, efficient, and legally compliant service. We do not collect irrelevant or excessive information.

Data You Provide Directly

• Registration Information: Full name, Malaysia phone number, email address, date of birth and chosen password
• KYC Verification Documents: MyKad copy (front and back), selfie with MyKad, proof of address such as a utility bill or bank statement
• Financial Information: Bank account number, bank name and payment method details for deposit and withdrawal purposes
• Communications: Any messages, complaints, or inquiries submitted via live chat, email, or other support channels

Automatically Collected Data

• Technical Data: IP address, browser type, operating system, screen resolution and device information
• Activity Data: Pages visited, games played, session duration, clicks and in-platform interactions
• Location Data: Approximate location based on IP address for geographic compliance purposes
• Cookie Data: Session cookies, preference cookies and unique identifiers to enhance user experience

Data Type Summary

Every piece of data collected by i1m has a clear and legitimate purpose. We do not use your data for unrelated purposes without first obtaining your additional consent.

• Account Management: Creating, verifying and securely managing your user account
• Transaction Processing: Processing deposits, withdrawals and all financial transactions quickly and accurately
• Identity Verification: Completing the KYC process to ensure the safety of all users and meet legal requirements
• Platform Security: Detecting and preventing fraud, money laundering, duplicate accounts and suspicious activity
• Customer Support: Answering enquiries, resolving issues and providing the technical support needed
• Service Improvement: Analysing usage patterns to improve platform quality, speed and user experience
• Legal Compliance: Meeting PDPA, AML and other regulatory compliance obligations
• Service Communications: Sending account notifications, system updates and important security information

I1m does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where your data may be shared with certain parties in your interest or as required by law.

Parties That May Receive Your Data

• Payment Service Providers: DuitNow, FPX, Touch 'n Go, GrabPay and Boost — solely for processing your financial transactions
• Game Providers: Licensed gaming companies that provide content on our platform — only the limited data required for game functionality is shared
• Third-Party KYC Services: A licensed identity verification platform that securely processes your KYC documents
• Legal Authority: Government agencies, law enforcement bodies or courts when required by Malaysian law
• Professional Advisors: Accountants, lawyers or auditors in the context of business advice strictly governed by professional confidentiality

I1m consistently invests in the latest security technologies to ensure your personal data is always protected from unauthorised access, theft, or misuse. Security is not an add-on for us — it is the foundation of how we operate.

Security Layers We Apply

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 — the same security standard used by Malaysia's leading banking institutions
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 encryption
• Two-Factor Authentication (2FA): An additional security layer that can be enabled to protect your account from unauthorised access
• 24/7 Security Monitoring: A real-time threat detection system that monitors for any unusual activity around the clock
• Periodic Penetration Testing: Independent security audits are conducted regularly to identify and patch vulnerabilities before they can be exploited
• Internal Access Controls: i1m staff can only access data required for their role, with all access logged and monitored

The i1m platform uses cookies and similar tracking technologies to enhance user experience, ensure account security, and understand our platform usage patterns. We use these technologies responsibly and transparently.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, active sessions and security. These cookies cannot be disabled as they are critical to platform operations
• Preference Cookies: Saving your preferences such as language, display theme and game settings for a more personalised experience
• Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement. This data is collected in aggregate and does not identify individuals
• Security Cookies: Used to detect suspicious login attempts, unusual activity patterns and to protect your account from unauthorised access

I1m retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymised.

• Active Account Data: Retained for the entire duration your account is active and in use on the i1m platform
• Financial Transaction Records: Retained for 7 years after the transaction occurs, in line with Malaysian financial and tax legal requirements
• KYC Documents: Retained for 5 years after account closure or the date the document was submitted, whichever is later
• Security Logs: Retained for 2 years for fraud investigation and security compliance purposes
• Communication Data: Retained for 3 years for customer support reference and dispute resolution
• Inactive Account: Account data that has been inactive for 24 months will be reviewed and may be deleted in accordance with internal procedures

As an i1m user and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clear and enforceable rights over your personal data. We fully respect and facilitate the exercise of these rights.

• Right of Access: You have the right to request and obtain a copy of the personal data we hold about you at any time
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request a prompt correction
• Right to Withdraw Consent: You may withdraw consent for specific processing at any time without affecting the validity of prior processing
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time
• Right to Portability: You may request your data in a machine-readable format for transfer to another platform
• Right to Complain: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you are dissatisfied with how we handle your data

The i1m platform is exclusively for adults aged 18 and above. We take the privacy and protection of children and minors very seriously and have strict measures in place to prevent underage access.

• All registrants are required to confirm they are 18 years of age or older during the registration process
• The KYC verification process includes date of birth verification via official MyKad documents
• I1m does not knowingly collect any personal data from individuals under the age of 18
• If we discover that data of an underage minor has been collected without our knowledge, the account in question will be closed immediately and the data deleted

I1m reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, current legal requirements, or service improvements. Any changes made will be communicated to you through the following channels:

• Email Notifications: Sent to your registered email address at least 7 days before changes take effect
• In-Platform Notifications: Direct notifications on your account dashboard when you log in
• Website Announcement: Update the "Effective Date" at the top of this page

Your continued use of the i1m platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our team is ready to assist you.

The i1m Data Protection Officer (DPO) can be reached via:

• Email: [email protected] (response within 1–2 business days)
• Live Chat: Reach us via the chat icon at the bottom right corner of the i1m platform (24/7)
• Mailing Address: i1m Platform, Kuala Lumpur, Malaysia

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Commissioner under the Ministry of Communications and Digital Malaysia.