1xroll Privacy Policy

1Introduction

This Privacy Policy (hereafter "Policy") is published by 1xroll (hereafter "the Platform", "we", "us" or "our"), the operator of the online gaming and sports betting website accessible at https://1xroll.cam (hereafter "the Site"). This Policy applies to all individuals who visit, register with or use the Platform in any capacity, including players from Malaysia and other jurisdictions in which the Site is accessible.

1xroll is committed to handling personal data in a transparent, lawful and proportionate manner. This Policy sets out what personal data we collect, the purposes for which we process it, with whom we share it, how long we retain it and what rights you hold in relation to your own data.

By using the Site, creating an account or interacting with any 1xroll service, you confirm that you have read and understood this Policy. This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy.

2Definitions

The following defined terms apply throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, telephone number, identity document details, IP address and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion or combination with other data.
• "Controller" — 1xroll, which determines the purposes and means of processing Personal Data on the Platform.
• "Data Subject" — the natural person to whom Personal Data relates; in the context of the Platform, this is typically the Player or Site visitor.
• "Third Party" — any person, entity or system outside of 1xroll that receives or has access to Personal Data in accordance with this Policy.
• "KYC" — Know Your Customer verification procedures, including identity, age and payment ownership confirmation.
• "Cookies" — small text files placed on a user's device by the Site for functional, analytical and security purposes.

3Data We Collect

1xroll collects Personal Data across the following categories depending on how you interact with the Platform:

4How We Collect Personal Data

5Data Processing

1xroll processes Personal Data for the following purposes:

• Account management: Creating, maintaining and administering your player account, including authentication and security monitoring.
• KYC and age verification: Confirming that you are aged 21 or above and verifying your identity and payment method ownership before processing withdrawals.
• Payment processing: Facilitating deposits and withdrawals via accepted Malaysian and international payment channels, and maintaining accurate transaction records.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, money laundering, unauthorised account access and other forms of abuse.
• Responsible gambling: Identifying patterns of play that may indicate problem gambling behaviour and administering voluntary self-exclusion, deposit limits and cooling-off requests.
• Legal and regulatory compliance: Meeting obligations imposed by our operating licence, including anti-money laundering (AML) requirements, record-keeping mandates and responses to lawful regulatory enquiries.
• Service improvement: Analysing Usage Data and Technical Data to improve platform performance, game navigation and payment user experience.
• Marketing communications: Where you have opted in, sending promotional updates, bonus notifications and product information. You may withdraw consent to marketing at any time through your account settings or by contacting support.
• Customer support: Responding to enquiries, resolving disputes and managing complaints.

6Legal Bases for Processing

1xroll relies on the following legal bases to process Personal Data:

• Contractual necessity: Processing is required to perform the contract between 1xroll and you as a registered player, including account creation, payment processing and game access.
• Legal obligation: Processing is necessary to comply with obligations arising from 1xroll's operating licence, AML legislation and other applicable regulatory requirements.
• Legitimate interests: Processing is necessary for 1xroll's legitimate interests in fraud prevention, platform security, abuse detection and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: Where 1xroll relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7Third-Party Disclosure

1xroll does not sell your Personal Data. We may share Personal Data with third parties only in the following circumstances:

8Cookies and Tracking Technologies

The 1xroll Site uses cookies and similar tracking technologies. These serve the following functions:

• Strictly necessary cookies: Required for core Site functions including session authentication, account security and payment flow continuity. These cannot be disabled without affecting Site usability.
• Analytical cookies: Used to understand how users interact with the Site — which pages are visited most frequently, where users encounter difficulties and how Site performance can be improved. Data is aggregated and does not identify individual users.
• Functional cookies: Remember user preferences such as language settings and previously visited game categories to improve browsing continuity.
• Security cookies: Help detect and prevent unusual access patterns, login attempts from unrecognised devices and potential fraudulent activity.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Analytical and functional cookies may be disabled without preventing basic access to the Site.

9Data Retention

1xroll retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of five years following account closure or the last account activity, in line with standard AML and gaming licence record-keeping requirements.
• KYC and verification documents: Retained for the period required by applicable AML regulations following the last transaction or account closure.
• Customer support communications: Retained for up to three years from the date of the communication or until the related matter is fully resolved.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.
• Technical and Usage Data: Typically retained in identifiable form for up to 24 months; thereafter aggregated or deleted.

Following the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

10Data Security

1xroll implements appropriate technical and organisational security measures to protect Personal Data from unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for data transmitted between your browser or app and our servers
• Encryption of Personal Data and KYC documents held in our storage systems
• Role-based access controls ensuring Personal Data is accessible only to authorised personnel with a specific operational need
• Two-factor authentication options for player accounts and mandatory multi-factor controls for internal administrative systems
• Regular security assessments and vulnerability testing of Platform infrastructure
• Incident response and data breach notification procedures

Despite these measures, no internet-based system can guarantee absolute security. You are encouraged to maintain strong, unique passwords for your 1xroll account and to enable any available account security features.

11User Rights

Subject to applicable law and certain regulatory limitations, you hold the following rights in relation to your Personal Data held by 1xroll:

To exercise any of these rights, please contact 1xroll using the details in Section 15. We may request reasonable verification of your identity before acting on a data subject request.

12Children and Minors

1xroll is strictly an adult platform. Access to and use of the Site is permitted only for individuals aged 21 years and above. 1xroll does not knowingly collect Personal Data from any person under the age of 21. If we become aware that a minor has submitted Personal Data or registered an account, that account will be immediately suspended, any deposited funds will be returned in line with our verification procedures, and the associated Personal Data will be deleted.

KYC verification procedures are specifically designed to detect and prevent minors from accessing the Platform. If you believe that a minor may have registered on 1xroll, please contact us immediately using the details in Section 15.

13Cross-Border Data Transfers

As an internationally licensed Platform serving users including those based in Malaysia, 1xroll may transfer and process Personal Data in jurisdictions outside Malaysia. These may include countries where our servers are hosted, where our KYC or payment service providers operate, or where our licensing authority is based.

Where Personal Data is transferred to countries that may not provide an equivalent level of data protection, 1xroll takes reasonable steps to ensure appropriate safeguards are in place through contractual mechanisms, processor agreements or equivalent protections, in accordance with applicable international data transfer standards.

14Amendments to This Policy

1xroll reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. The revised Policy will be published on this page with an updated effective date at the top.

Where changes are material, 1xroll will endeavour to notify registered players by email or by prominent notice on the Site prior to the changes taking effect. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically. If you do not agree with any update to this Policy, you should cease using the Platform and may request account closure by contacting our support team.

15Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how 1xroll has handled your Personal Data, please contact us through the following channel:

1xroll will acknowledge formal data subject requests within a reasonable period and respond fully within a timeframe consistent with applicable data protection obligations. We may request proof of identity to process your request securely and to prevent unauthorised data disclosure.

For matters related to responsible gambling, self-exclusion or account-level spending controls, please visit the Responsible Gambling page or contact our support team directly.