Privacy Policy i1mega — Your Data Protection

01 Introduction and Scope of Privacy Policy

I1mega is an online entertainment platform operating in Malaysia, offering a wide range of games including online slots, fish shooting games, and various other interactive entertainment. We understand that your trust is our most valuable asset, and that trust begins with responsible handling of your personal data.

This Privacy Policy applies to all users who access or use the i1mega platform via our website at i1mega.vu or through the downloadable mobile app. It covers all personal data we collect, store, process, and share in connection with the use of our services.

By registering an account at i1mega, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we encourage you to contact us before continuing to use our platform.

02 Personal Data We Collect

I1mega collects several categories of personal data as you interact with our platform. This data is collected directly through registration and platform usage, as well as automatically through technologies such as cookies and server logs.

Data Category	Example Information	Source of Collection
Personal Identity	Full name, identification card number, date of birth, gender	Account registration, KYC process
Contact Information	Email address, phone number, residential address	Account registration, user profile
Financial Data	Payment methods, transaction history, deposit limits	Deposit and withdrawal activity
Technical Data	IP address, device type, web browser, operating system	Automated server logs
Usage Data	Game history, session duration, favourite games	In-platform activity
Communication Data	Support chat records, emails to our team	Customer support interactions

03 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. i1mega does not use your data for any purpose other than those stated below unless you have given explicit additional consent.

• Account management: To create, verify, and maintain your account at i1mega, including the login process and account security.
• Service delivery: To allow you to access all games, make deposits and withdrawals, and enjoy all features of our platform.
• Identity verification (KYC): To comply with legal requirements related to anti-money laundering and user age verification.
• Customer support: To provide effective assistance when you contact our support team via live chat or email.
• Platform security: To detect and prevent fraud, illegal activity, and platform abuse.
• Service improvement: To analyse usage patterns and improve the overall user experience.
• Promotional communications: To keep you informed about promotions, exclusive offers, and platform updates — only if you have opted in to receive them.
• Legal compliance: To fulfil the legal and regulatory obligations applicable to our operations.

04 Legal Basis for Data Processing

I1mega processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the purpose of processing, the legal bases we rely on include:

• Consent: For marketing communications and non-essential cookie usage, we require your explicit consent beforehand.
• Contract performance: Processing required to provide the services you have requested and to fulfil the terms of our user agreement.
• Legal obligation: Processing required to comply with legal obligations such as PDPA, AML laws, and KYC requirements.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, and service improvement where these interests do not override your fundamental rights.

05 Data Sharing With Third Parties

I1mega does not sell or rent your personal data to third parties. However, in certain circumstances, we may share your data with the following parties for limited and lawful purposes:

• Payment providers: Required transaction information is shared with certified payment providers such as DuitNow, FPX, and e-wallet providers to process your deposits and withdrawals.
• Game software providers: Basic game session data may be shared with game software providers for technical purposes and game result verification.
• Cloud services and infrastructure: Data is stored on servers operated by trusted cloud service providers with equivalent data protection standards.
• Legal authorities: When required by law, court order, or a lawful request from a law enforcement agency.
• Fraud prevention services: Limited technical information may be shared with fraud detection systems to protect the security of your account and the platform as a whole.

06 Data Retention Period

I1mega retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. In general, the retention periods are as follows:

• Active account data: Retained for the duration your account remains active and in use.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's AML and tax legal requirements.
• KYC and identity verification data: Retained for 5 years after account termination or as required by the relevant authorities.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

07 Data Security and Protection Measures

I1mega invests seriously in security infrastructure to ensure your personal data is always protected. Our technical and organisational measures include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols
• Data encryption at rest for all sensitive information
• Strict role-based access control (RBAC) for internal staff
• Regular security audits by independent third parties
• 24/7 threat monitoring with immediate incident response
• Two-factor authentication (2FA) for access to our internal systems
• Data security training programme for all i1mega staff
• A comprehensive and tested data breach response plan

While we take all reasonable precautions, no system can guarantee absolute 100% security. In the event of a security incident involving your data, we will notify you within the timeframe required by applicable law.

08 Your Rights as a Data Subject

In line with Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data at i1mega:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days, with prior notice to you.

09 Cookies and Tracking Technologies

I1mega uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They allow us to recognise you on subsequent visits and personalise your experience.

We use three main categories of cookies:

• Essential cookies: These cookies are required for core platform functions such as login authentication and session security. They cannot be disabled without affecting platform functionality.
• Performance cookies: Help us understand how users interact with the platform through anonymised analytics data for service improvement purposes.
• Optional cookies (marketing): Used to display relevant promotions and offers based on your interests and usage patterns. You may opt out of this type of cookie.

You can manage your cookie settings through your web browser options at any time. Please note, however, that disabling essential cookies may affect the functionality of certain parts of our platform.

10 Privacy Policy Amendments

I1mega reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes that significantly affect how we handle your personal data will be communicated via a prominent notice on our platform or through your registered email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date of the latest version of this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Continued use of the i1mega platform after any amendments take effect will be considered your acceptance of the revised terms. If you do not agree with the changes, please contact us or close your account before the changes take effect.