Privacy Policy 1121 — Malaysian User Data Protection

At 1121, we understand that your trust is our most valuable asset. When you choose to play with us at 1121.one, you entrust us with your personal information — and we take this responsibility very seriously.

This Privacy Policy is written to give you a complete and honest picture of our data handling practices. We have written this document in plain language because we believe every user deserves to know exactly what happens with their information — not just receive vague answers.

1121 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Our commitment to privacy goes beyond legal obligation — it is a core value we uphold in every business decision we make.

This Privacy Policy applies to all services, products, and platforms operated by 1121, including the website 1121.one, the 1121 mobile app, and all our official communication channels. It covers every interaction you have with us — from your first visit to our website through to after you close your account.

This Policy also explains your rights as a data subject under Malaysia's PDPA, including the right to access, correct, and request deletion of your personal data under certain circumstances. We want you to know that these rights are real and enforceable — not just promises written on paper.

If you use our services through third-party platforms or access 1121 content through other non-standard channels, this Privacy Policy may not cover the data collection practices of those platforms. We recommend reading each platform's privacy policy separately.

We only collect data that is genuinely necessary to provide our services safely and effectively. Below is a summary of the types of data we collect:

Your personal data is collected through several different channels, depending on how you interact with the 1121 platform:

• Account Registration: When you register a new account, you provide your identity and contact information directly to us.
• KYC Verification: During the identity verification process, you will be asked to upload a copy of a valid identification document.
• Financial Transactions: Every time you make a deposit or submit a withdrawal request, we record the relevant transaction details for compliance and security purposes.
• Platform Usage: Technical and behavioural data is collected automatically through cookies, server logs, and industry-standard tracking technologies.
• Support Interactions: When you contact our support team via live chat or email, those conversations are recorded for training and service improvement purposes.
• Third-Party Information: In certain cases, we may receive information from identity verification service providers or fraud prevention agencies we use as part of our KYC process.

We do not purchase, rent, or acquire data lists from third-party data brokers for marketing purposes. The data we hold is data you have provided to us directly or that was generated through your use of our services.

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you use. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your user account so you can log in and access all platform features.
• Transaction Processing: Processing deposits, withdrawals, bonuses, and all financial activity in your account accurately and securely.
• Identity Verification (KYC): Complying with legal obligations to verify user identity in order to prevent money laundering, fraud, and other unlawful activities.
• Platform Security: Detecting and preventing unauthorised access, fraud, system exploitation, and other security threats to your account and our platform.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing timely intervention where necessary.
• Service Improvement: Analysing usage data in aggregate (not individually) to understand how users interact with our platform and make relevant improvements.
• Service Communications: Sending important notifications related to your account, including transaction confirmations, security alerts, and policy updates.
• Customer Support: Resolving enquiries, complaints, and technical issues you report to our support team.

1121 does not sell, rent, or trade with your personal data. This is a core principle that has never changed since we were established. However, in operating the platform, we share data with a limited number of parties in the following circumstances:

• Payment Providers: Required transaction information is shared with licensed payment providers to process your deposits and withdrawals. All our payment providers are bound by strict confidentiality agreements.
• Game Providers: Usernames and game records are shared with the relevant game providers only to the extent necessary to deliver the gaming experience to you.
• KYC Verification Services: Identity documents are shared with recognised identity verification service providers for verification purposes only.
• Fraud Prevention Agency: In cases of suspected fraud, relevant information may be shared with recognised fraud prevention agencies in Malaysia.
• Authorities: Where required by law, court order, or direction from a legitimate law enforcement agency, we will disclose the necessary information.
• Merger or Acquisition: Should 1121 be involved in a business merger or acquisition, user data may be transferred to the successor entity provided that equivalent privacy policy standards are maintained.

We continually invest in the latest security infrastructure to keep your data safe. The technical and organisational measures we have implemented include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 1121 servers is encrypted using the latest SSL/TLS protocols — the same technology used by major banks in Malaysia.
• Stored Data Encryption: Sensitive data stored in our databases, including identity and financial information, is encrypted using internationally recognised encryption algorithms.
• Internal Access Controls: Only 1121 staff with legitimate operational requirements are permitted to access user personal data. All access is logged and monitored.
• Two-Factor Authentication: Our internal systems use multi-factor authentication to prevent unauthorised access by both external and internal parties.
• Regular Security Audits: Our platform undergoes regular independent penetration testing and security audits to identify and address potential vulnerabilities.
• 24/7 Monitoring: Our automated monitoring system operates at all times to detect suspicious activity and respond promptly to identified threats.

While we take all reasonable precautions, no system in the world can guarantee absolute security. We strongly encourage you to also take responsibility for your account's safety — particularly by using a strong password and never sharing your login credentials with anyone.

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable laws and regulations in Malaysia.

• Active Account Data: While your account is active, we retain all data necessary to provide our services to you.
• After Account Closure: Account and transaction records are retained for a minimum of 7 years after account closure, in accordance with Malaysian legal requirements relating to financial compliance and anti-money laundering.
• KYC Data: Identity verification documents are retained for the period stipulated by applicable law — typically 5 to 7 years after the business relationship ends.
• Communication Logs: Customer support records are retained for 2 years from the date of last interaction for reference and service improvement purposes.
• Marketing Data: If you withdraw your marketing consent, we will stop using your data for promotional purposes within 30 days, though it may still be retained for other legitimate purposes.

The 1121 platform uses cookies and similar tracking technologies to enhance your experience, ensure platform security, and analyse our service performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand how users interact with our platform in aggregate — for example, which pages are most frequently visited and where users encounter difficulties. This information is used solely to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, bot abuse, and other security threats.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If you find that your data is inaccurate or outdated, you have the right to request a correction. We recommend updating your profile information directly through your account settings for basic changes.
• Right to Withdraw Consent: For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Object: You may object to the use of your data for specific purposes, including direct marketing.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.

To exercise any of the above rights, please contact us at [email protected] by clearly stating your request. We may need to verify your identity before processing your application in order to protect your account security.

The 1121 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. All registration applications are required to confirm that the applicant has reached the stipulated minimum age.

If we determine that personal data of an underage individual has been collected without proper age verification, we will immediately take the following steps:

• Suspending the account in question pending completion of the investigation
• Deleting all associated personal data from our systems
• Returning any funds held in the account via an appropriate method
• Reporting the incident to the relevant authorities if required by law

Parents or guardians who have reason to believe that a child under their care has registered an account on our platform are urged to contact us immediately at [email protected].

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technology we use, or applicable legal requirements. Each new version will carry an updated "Last Updated" date at the top of this document.

For significant changes that may affect your privacy rights, we will provide more prominent notice through:

• In-platform notifications displayed upon login
• Email to your registered email address
• Notification banners on our website

Continued use of the 1121 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, please discontinue use of our platform and contact us to discuss account closure options.

If you have any questions, concerns, or wish to exercise your data rights, please contact our Privacy Officer through the following channels:

• Privacy Email: [email protected] (include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 on the 1121 platform — select "Privacy & Data" when starting a conversation
• FAQ: Frequently asked questions about privacy can be found on the FAQ us

We are committed to responding to all privacy-related enquiries within 3 working days. For official requests concerning data rights under the PDPA, the response period is 21 days from the date a complete request is received.