Official Documents Updated 2026 18+

Privacy Policy 1337x – Our Commitment to Protecting Malaysian Players' Personal Data

At 1337x, your privacy is not merely a legal obligation – it is a moral responsibility we uphold steadfastly. This document transparently explains how we collect, use, and protect your personal data as a registered player on our platform.

 Contents of This Privacy Policy
Data We Collect
Purpose of Data Use
Data Sharing with Third Parties
Security & Data Protection
Your Rights as a User
Use of Cookies

The Six Pillars of 1337x Privacy Protection

The core principles that govern how we manage your personal data

256-Bit SSL Encryption

All data transmitted between your device and 1337x is protected with 256-bit SSL encryption – the same standard used by Malaysia's leading banking institutions. This means your personal information and payment details via Touch 'n Go, GrabPay, DuitNow, and FPX cannot be intercepted or read by unauthorised parties.

No Sale of Data to Third Parties

1337x has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you – we use it solely to ensure the best and safest gaming experience for you on our platform.

Full Control in Your Hands

You have the full right to access, correct, download, or request the deletion of your personal data at 1337x at any time. We provide an easy-to-use data management portal and a 24/7 support team ready to assist with any requests relating to your personal data.

Data Minimisation

We only collect data that is strictly necessary to provide the services you request at 1337x. No excess data is collected on the basis that it might be useful someday. Every data point we collect has a clear and legitimate purpose, in line with the principle of data minimisation.

Data Retention Period Limits

Your personal data at 1337x is not stored indefinitely. We maintain a clear retention policy — data is only kept for as long as necessary for the stated purpose or as required under Malaysian law. Once that period expires, data is securely and permanently deleted.

Immediate Data Breach Notification

In the event of any security incident involving members' personal data 1337x – even though the actual risk is very low – we are committed to notifying affected members within 72 hours and taking immediate remedial action in accordance with Malaysian legal requirements.

Last updated: 1 January 2026  |   Bahasa Melayu (ms-MY)

Welcome to the Privacy Policy of 1337x. This document clearly and transparently explains how the platform 1337x at 1337x.win collects, uses, stores, and protects your personal data as a registered member or visitor to our website. We encourage you to read this document in full. By using the platform 1337x, you agree to the practices outlined in this Privacy Policy.

1 Introduction & Scope of This Policy

1337x is an online entertainment platform operating in Malaysia, catering exclusively to Malaysian players aged 18 and above. In the course of our operations, we act as the data controller for all personal information you provide to us during registration, platform use, or any communication with our team.

This Privacy Policy applies to all users of the platform 1337x includes:

  • Visitors to 1337x.win who have not registered an account.
  • Individuals who are in the process of registering a new account.
  • Registered members who actively use the platform.
  • Former members who have closed their accounts but whose data is still retained within the period prescribed by law.
 Important Note

Privacy Policy 1337x is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We take this responsibility seriously and consistently strive to go beyond the minimum requirements of the law.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an account or use the platform 1337x, we may collect the following data:

  • Identity Information: Full name as on MyKad, Malaysian identity card number (MyKad), date of birth, gender.
  • Contact Information: An active Malaysian phone number, personal email address, and residential address in Malaysia.
  • Financial Details: Bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes.
  • Verification Documents: A copy of your MyKad or passport, proof of address (recent utility bill or bank statement), and a selfie holding your identification document for KYC purposes.
  • Account Information: Username, encrypted password, language preferences and notification settings.

2.2 Automatically Collected Data

When you use the platform 1337x, our systems automatically record certain technical information, including:

  • Your device's IP address at the time of login and throughout your gaming session.
  • Device type, operating system (Android, iOS, Windows), and web browser version used.
  • Gaming activity history, including bets placed, winnings, and session duration.
  • Transaction history including date, time, amount, and deposit or withdrawal method.
  • Access logs and technical diagnostic data for troubleshooting purposes.
  • Cookie data and similar tracking technologies – further details in Section 10.
 Your Data Security

All data mentioned above is encrypted in transit using 256-bit SSL and stored on secure servers protected by multi-layered firewalls. Access to your personal data within the internal systems of 1337x is restricted solely to staff who genuinely require that access for legitimate operational purposes.

3 How We Use Your Personal Data

1337x uses the personal data collected for the following legitimate and specific purposes:

Purpose of Use Data Used Legal Basis
Account registration & verification Name, email address, phone number, MyKad Contractual agreement
Processing deposits & withdrawals E-wallet / bank details, transaction history Contractual agreement
Identity verification (KYC) MyKad, selfie, proof of address Legal obligation
Fraud prevention & anti-money laundering IP address, transaction history, device data Legal obligation
Customer support & complaint resolution Account information, communication history Contractual agreement
Platform improvement & analytics Anonymised usage data Legitimate interests
Marketing communications (with consent) Email address, phone number Consent

1337x does not use your personal data for any purposes beyond those stated above without first obtaining your additional consent.

4 Legal Basis for Data Processing

Every personal data processing activity carried out by 1337x has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

  • Contractual Agreement: Data processing necessary to fulfil the agreement between you and 1337x, such as processing financial transactions and managing your account.
  • Legal Obligation: Processing required to comply with legal obligations imposed on 1337x, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements under Malaysian law.
  • Legitimate Interests: Processing necessary for legitimate interests 1337x or third parties, such as preventing fraud, enhancing platform security, and analysing usage patterns to improve our services.
  • Consent: For certain processing activities such as marketing communications, we rely on the explicit consent you have provided. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

5 Data Sharing with Third Parties

1337x does not sell or rent your personal data to third parties. However, in the course of operating the platform, we may share your personal data with the following limited categories of third parties, all of whom are subject to strict data protection agreements:

5.1 Technical Service Providers

IT infrastructure service providers, payment solution providers (including processors for Touch 'n Go, GrabPay, DuitNow, FPX), cybersecurity service providers, and gaming software vendors. All such providers are bound by data processing agreements requiring them to protect your data to the same or higher standard that we maintain at 1337x.

5.2 Regulatory Bodies & Authorities

We may be required under Malaysian law to disclose certain information to the relevant authorities, such as the police, Bank Negara Malaysia's Financial Intelligence Department (BNM), or a court of competent jurisdiction. Such disclosures will only be made where there is a valid legal obligation, and we will endeavour to notify you where permitted to do so.

5.3 Within the Corporate Group

In certain situations, 1337x may share data with related entities within our group of companies for legitimate operational purposes and service improvement. All entities within the group are subject to consistent privacy policies and the same data protection standards.

 Protection Guarantee

In all of the above data sharing scenarios, 1337x ensures that appropriate confidentiality and data protection agreements are in place before any of your personal data is shared. No data is shared beyond what is necessary for the stated purposes.

6 Cross-Border Data Transfers

Operations 1337x is based in Malaysia and we prioritise storing data within infrastructure located in Malaysia or in regions with an equivalent level of data protection. However, in certain operational circumstances, your personal data may be processed at locations outside Malaysia – for example, when utilising cloud computing services from internationally accredited providers.

When international data transfers occur, 1337x ensures adequate protection through the following mechanisms:

  • Use of internationally recognised standard contractual clauses to ensure consistent data protection.
  • Selecting service providers that operate exclusively in jurisdictions with data protection laws recognised as equivalent or stricter.
  • Conducting a transfer impact assessment prior to executing any new international data transfer.

7 Data Security Measures

Protecting your personal data is a core technical and operational priority at 1337x. We implement multiple layers of comprehensive security protection:

7.1 Technical Security

  • Data Encryption in Transit: TLS 1.3 protocol with 256-bit SSL certificates ensures all data transmitted between your web browser and the platform 1337x cannot be intercepted.
  • Static Data Encryption: Sensitive data stored in our databases, including financial details and identification information, is encrypted using AES-256 encryption.
  • Multi-Layered Firewall: Platform infrastructure 1337x is protected by a multi-layered firewall system that prevents unauthorised external access.
  • DDoS Protection: Our Distributed Denial of Service protection system ensures continuous platform availability for legitimate members.
  • 24/7 Monitoring: Our cybersecurity team monitors the platform in real time to detect and respond to any threats or suspicious activity.

7.2 Access Controls

  • Access to members' personal data within internal systems is restricted to staff who genuinely require it to carry out their job responsibilities (principle of least privilege).
  • All staff 1337x who have access to personal data are required to sign confidentiality agreements and undergo regular data protection training.
  • A comprehensive audit log system records all access to sensitive data for monitoring and accountability purposes.
 Shared Responsibility

Although 1337x takes all reasonable steps to protect your data, account security is a shared responsibility. You can help safeguard your data by using a strong password, enabling two-factor authentication, and never sharing your login credentials with anyone.

8 Data Retention Period

1337x does not store your personal data indefinitely. We maintain a strict data retention policy that specifies how long each category of data is kept:

  • Active Account Data: Retained for the duration your account remains active on the platform 1337x plus 7 years after account closure, in accordance with Malaysian financial legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with the Companies Act 2016 and AML regulations in Malaysia.
  • KYC Documents: Retained for 5 years after the business relationship ends, in line with AML/CFT compliance requirements.
  • Support Communication Logs: Retained for 2 years from the date of last interaction, for reference and the resolution of any disputes that may arise.
  • Technical Data & System Logs: Retained for a maximum of 90 days for security purposes and technical troubleshooting.
  • Marketing Data (with consent): Retained until you withdraw your consent or submit a deletion request.

Once the stipulated retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have a range of rights that you may exercise in relation to your personal data held by 1337x:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request, in a readily readable format.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. We will update the information within 14 days of receiving your request.

Right to Erasure

You may request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose or when you withdraw your consent. This is subject to any legal retention obligations.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal data – for example, during the period in which the accuracy of the data or the lawfulness of its processing is under review.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, machine-readable format that can be transferred to another data controller, where technically feasible.

Right to Object

You may object to the processing of your personal data where it is carried out on the basis of legitimate interests or for direct marketing purposes. We will honour such objections unless there are overriding legal grounds.

 How to Exercise Your Rights

To exercise any of the rights above, please submit a written request to the data protection team at 1337x at [email protected] with the email subject line "Privacy Rights Request". Please include your full name and registered phone number for identity verification. We will respond within 14 days and fulfil the request within 21 business days. If your request cannot be fulfilled, we will clearly explain the reasons why.

10 Cookies & Tracking Technologies

Platform 1337x uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse usage patterns in aggregate. The following are the types of cookies we use:

Essential Cookies

These cookies are required for the platform's core functionality 1337x and cannot be disabled. These include session cookies that keep you logged in during your playing session, security cookies that protect against CSRF attacks, and cookies that remember your language preference.

Analytics Cookies

We use analytics cookies to understand how members use the platform 1337x – which pages are visited most frequently, how long users spend on them, and where users encounter difficulties. This information helps us continuously improve the platform. Analytics data is collected in aggregate form and cannot be linked to any specific individual.

Preference Cookies

These cookies store your personal preferences on the platform 1337x such as display settings, favourite games, and notification preferences, so you don't have to reconfigure them each time you log in.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the platform and your gaming experience at 1337x.

11 Children's Privacy

Platform 1337x is restricted to individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from a minor, we will promptly delete that data and close the associated account.

Parents or guardians who are concerned that their underage child may have registered on the platform 1337x are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

12 Privacy Policy Updates

1337x reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, Malaysian legal requirements, or relevant industry developments. When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending email notifications to all registered members 1337x outlines the key changes made.
  • Displaying a prominent update notice on the platform's main page for at least 14 days following any material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the 1337x after any changes take effect will be considered acceptance of the updated version of the Privacy Policy.

13 Contact Us about Privacy

If you have any questions, concerns, or complaints regarding how 1337x handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

  • Email: [email protected] (please mark the subject line as "Data Privacy Enquiry")
  • Website: 1337x.win
  • Support Language: Malay and English
  • Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

If you are dissatisfied with our response to any privacy-related complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body for data protection in Malaysia. JPDP's contact information is available on the official website of the Ministry of Communications Malaysia.

FAQ – 1337x Privacy Policy

Unsure about how we handle your data? We've tried to clear things up here

No. 1337x does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes without your explicit consent. Your data may be shared with technical service providers who support the platform's operations (subject to strict data protection agreements), or with Malaysian authorities where a legitimate legal obligation exists. In all such cases, data sharing is limited strictly to what is necessary and is protected by appropriate contractual safeguards.

Send an email to [email protected] with the subject line "Data Access Request" from your account's registered email address. Include your full name and registered phone number for identity verification purposes. Our team will verify your identity and provide the requested data within 21 business days from the date of verification. Data will be delivered in a suitable and secure format to your registered email address. No fee is charged for the first data access request made within any 12-month period.

The security of your financial information is an absolute priority for 1337x. All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) are protected with 256-bit SSL encryption during transmission. Your bank account or e-wallet details are stored in AES-256 encrypted format and used solely for processing the deposits and withdrawals you request. We do not store full credit card details, and our systems comply with international payment security standards.

Yes, you may request the deletion of your personal data by emailing [email protected]. However, please note that complete deletion may not be possible in all circumstances. 1337x is required under Malaysian law to retain certain financial records for a minimum of 7 years, and KYC documents for 5 years after the end of a business relationship, in compliance with AML/CFT requirements. Records subject to these legal retention obligations cannot be deleted upon request. All other data not covered by such obligations will be deleted or anonymised within 30 days of a valid request.

When you close your 1337x account, your active account data will be anonymised or separated from active operating systems within 30 days. However, financial records and KYC documents will be retained in accordance with the periods prescribed by Malaysian law (7 years for financial records, 5 years for KYC). This is a mandatory requirement independent of company discretion. Once the mandatory retention period ends, all your data will be permanently and securely deleted from all 1337x systems.

1337x only sends you marketing communications if you have given your consent during registration or through your account settings. You may opt out of marketing emails at any time by clicking the "Unsubscribe" link in any email we send, or by updating your communication preferences in your account settings. Withdrawing your marketing consent will not affect transactional emails such as deposit confirmations, withdrawal notifications, and account security information, which will continue to be sent as part of 1337x's core service.

Other Important Related Documents

Please also read these documents for a full understanding of your rights and responsibilities at 1337x

Your Data Is Safe at 1337x – Register with Confidence!

Your privacy and security are our priority. Create your 1337x account today and enjoy over 1,200 premium games with deposits starting from as low as RM20.

256-bit SSL · No data sharing · Malaysian payment methods · 24/7 support

Platform for players aged 18 and above only. Play responsibly.

Bahasa Melayu