Privacy Policy —i1cinta

1. Introduction

This Privacy Policy ("Policy") is issued by i1cinta ("Company", "Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at i1cinta.cam. It applies to all persons ("User", "Member", "you") who visit, register on, or otherwise interact with the Platform.

i1cinta is committed to processing personal data responsibly and transparently. This Policy describes the categories of personal data we collect, the purposes for which it is processed, the legal grounds on which such processing rests, the parties with whom data may be shared, the measures we take to protect it, and the rights available to you as a data subject.

By accessing the i1cinta Platform, creating a Member account, or continuing to use our services after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and i1cinta.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, and deletion.
• "Data Subject" means the natural person to whom Personal Data relates — in the context of this Policy, primarily registered Members of i1cinta.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — i.e., i1cinta.
• "Data Processor" means a third party that processes Personal Data on behalf of i1cinta under a contractual arrangement.
• "KYC" (Know Your Customer) means the identity and age verification process required by our licensing obligations before full account privileges are activated.
• "Cookies" means small text files placed on a User's device for session management, analytics, and platform functionality purposes.

3. Data Controller

i1cinta acts as the Data Controller in respect of all Personal Data processed in connection with the operation of the Platform. As Data Controller, i1cinta determines the purposes and means of processing and bears primary responsibility for ensuring that all processing activities comply with applicable data protection standards under our international licensing framework.

For all privacy-related queries, requests, and complaints, Members may contact our Data Protection contact via the details set out in Section 15 of this Policy.

4. Data We Collect

i1cinta collects Personal Data across the following categories:

4.1 Identity & Registration Data

• Full legal name Required
• Date of birth (for 21+ age verification) Required
• Malaysian Identity Card number (MyKad) or equivalent national identification Required for KYC
• Residential address Required
• Nationality Required
• Profile photograph (where submitted for KYC) Required for KYC

4.2 Contact Data

• Email address Required
• Mobile phone number Optional

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, methods)
• Payment method details — e-wallet account numbers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow; bank account details for FPX transfers via Maybank, CIMB, Public Bank, or Hong Leong; cryptocurrency wallet addresses for VIP Elite members
• Account balance history and wagering activity logs

4.4 Technical & Device Data

• IP address and geolocation data (country/region level)
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and in-platform navigation patterns

4.5 Communications Data

• Records of support chat conversations and email correspondence
• Complaint and dispute records
• Responses to promotional communications where applicable

5. How We Collect Data

i1cinta collects Personal Data through the following means:

• Directly from you — during account registration, KYC submission, deposit and withdrawal transactions, support interactions, and promotional participation.
• Automatically — via cookies, session tracking technologies, and server logs when you access and navigate the Platform.
• From third-party service providers — including payment processors, identity verification partners, and fraud detection services that share data with us under contractual data processing agreements.

6. Data Processing & Purpose

The table below summarises the primary purposes for which i1cinta processes Personal Data and the corresponding data categories involved:

7. Legal Basis for Processing

i1cinta processes Personal Data on the following legal grounds, as applicable to each processing activity:

• Contractual Necessity: Processing required to fulfil the Member Agreement — including account creation, payment processing, KYC verification, and support services.
• Legal Obligation: Processing required to comply with applicable licensing, anti-money laundering, and responsible gambling obligations imposed by our licensing authority.
• Legitimate Interests: Processing conducted in pursuit of i1cinta's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by the rights of the Data Subject.
• Consent: Processing for promotional communications and non-essential cookies, where explicit consent has been provided and is capable of being withdrawn at any time.

8. Data Sharing & Disclosure

i1cinta does not sell, rent, or trade Personal Data to any third party for commercial purposes. Personal Data may be shared only in the following limited circumstances:

• Payment Processors: Financial transaction data is shared with our payment provider partners — including those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels — to the extent necessary to process deposits and withdrawals.
• Identity Verification Partners: KYC documentation is processed by accredited third-party identity verification service providers under strict data processing agreements.
• Fraud & Risk Management Providers: Technical and behavioural data may be shared with fraud detection partners to identify and prevent prohibited conduct on the Platform.
• Licensing Authority: i1cinta may be required to disclose Personal Data and transaction records to our licensing authority upon lawful request as a condition of our operating licence.
• Legal and Regulatory Authorities: Personal Data may be disclosed to competent authorities where i1cinta is legally compelled to do so by court order, regulatory directive, or applicable law.
• Business Transfers: In the event of a merger, acquisition, or sale of the Platform's business assets, Personal Data held by i1cinta may be transferred as part of that transaction, subject to equivalent data protection commitments being maintained by the acquiring entity.

All third-party Data Processors engaged by i1cinta are required to process Personal Data only for the specified purposes and in accordance with documented data processing agreements that impose data protection obligations no less stringent than those contained in this Policy.

9. Data Retention

i1cinta retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable licensing and legal obligations. The following general retention periods apply:

• Active Member accounts: Personal Data is retained for the full duration of active account membership.
• Closed accounts: Following account closure, core identity and transaction records are retained for a minimum of five (5) years in accordance with anti-money laundering and licensing requirements.
• KYC documentation: Retained for a minimum of five (5) years post account closure or last transaction, whichever is later.
• Support and communications records: Retained for a minimum of three (3) years from the date of the interaction.
• Technical / session logs: Typically retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

10. Security Measures

i1cinta implements a comprehensive range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the i1cinta Platform.
• Encrypted storage of sensitive personal and financial data at rest, using industry-standard encryption protocols.
• Access controls ensuring that Personal Data is accessible only to authorised personnel with a documented need to access it for legitimate processing purposes.
• Two-factor authentication options for Member accounts to reduce the risk of unauthorised access.
• Regular security assessments and penetration testing conducted by qualified information security professionals.
• Segregated player fund accounts ensuring that Member balances are held separately from operational funds.

While i1cinta takes all reasonable measures to protect your Personal Data, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their account credentials and should contact support immediately if they suspect that their account has been compromised.

11. Cookies & Tracking Technologies

i1cinta uses cookies and similar technologies to enable core platform functionality, maintain session state, and gather analytics data that helps us improve the user experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the operation of the Platform, including session management, login state, and security functions. These cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Members navigate and use the Platform, enabling us to identify usability improvements. These are deployed with appropriate consent mechanisms.
• Preference Cookies: Used to remember Member settings such as language preference, display options, and previously viewed content.
• Fraud Prevention Cookies: Technical identifiers used by our risk and fraud management systems to identify anomalous activity patterns.

Members can manage non-essential cookie preferences through their browser settings. Disabling certain cookies may affect the functionality of some Platform features.

12. User Rights

Subject to applicable law and our licensing obligations, Members have the following rights in respect of their Personal Data held by i1cinta:

• Right of Access: You may request a copy of the Personal Data i1cinta holds about you.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations such as AML retention requirements.
• Right to Restriction: You may request that processing of your Personal Data be restricted in certain circumstances while a complaint or query is under review.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your Personal Data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing conducted on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for promotional communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team using the details in Section 15. We will respond to all verified rights requests within 30 days of receipt. We may require identity verification before processing a rights request.

13. Minors & Age Verification

i1cinta is strictly an adult platform. Our services are not directed at, and may not be used by, persons under the age of 21 years. We do not knowingly collect Personal Data from persons under 21.

All Members are required to complete KYC verification before withdrawal privileges are activated, which includes age verification against a valid Malaysian Identity Card (MyKad) or equivalent government-issued identification document. Any account found to be held by a person under 21 will be immediately suspended and the matter handled in accordance with our licensing obligations.

If you believe that i1cinta has inadvertently collected Personal Data from a person under the age of 21, please contact us immediately so that appropriate action can be taken.

14. Policy Amendments

i1cinta reserves the right to update or amend this Privacy Policy at any time. Where changes are material — particularly those that affect how your Personal Data is collected, used, or shared — we will provide advance notice via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this Policy. Continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should discontinue use of the Platform and contact support to close your account.

15. Contact Us

For all privacy-related queries, data subject rights requests, complaints, or concerns regarding this Policy or i1cinta's data processing practices, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the on-platform live chat widget — including public holidays.
• Response Time: Privacy-related email enquiries are acknowledged within 2 business hours. Formal data subject rights requests are handled within 30 calendar days.

When submitting a data subject rights request, please include your registered email address and, where possible, your Member account username to assist us in verifying your identity and locating your records efficiently.