1xlite Casino – Privacy Policy

1. Introduction

1xlite ("we", "us", "our") operates an online casino and sports betting platform accessible at 1xlite.bio ("Platform") and is regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR"). As a PAGCOR-regulated operator, 1xlite is subject to Philippine data privacy law and associated regulatory requirements governing the handling of personal data belonging to Filipino players and other users.

This Privacy Policy describes: what personal data 1xlite collects from you; why we collect it; how we use and store it; with whom we share it; how long we retain it; and what rights you have over your personal data under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

Please read this Policy carefully. If you do not agree with any part of this Policy, you should discontinue use of the 1xlite Platform.

2. Data We Collect

1xlite collects personal data in the following categories, depending on how you interact with the Platform:

Registration and Identity Data:

• Full legal name, date of birth, and nationality
• Philippine residential address
• Email address and mobile phone number (Philippine number)
• Government-issued identification documents provided for KYC verification (e.g., PhilSys National ID, UMID, Passport, Driver's License, SSS/GSIS ID)
• Selfie or facial image submitted for identity verification purposes where required

Financial Data:

• GCash or PayMaya mobile wallet information (phone number and registered account name)
• Bank account details for BDO, BPI, Metrobank, or other supported Philippine banks where bank transfer is selected
• Transaction history, deposit amounts, withdrawal requests, and associated timestamps

Gaming Activity Data:

• Game session history, bet amounts, game outcomes, and win/loss records
• Bonus usage, wagering activity, and responsible gaming tool interactions

Technical and Device Data:

• IP address, device type, operating system, browser version, and unique device identifiers
• Geolocation data (approximate, derived from IP address)
• Session timestamps, page interaction data, and navigation patterns within the Platform

Communications Data:

• Records of live chat sessions, support tickets, and emails exchanged with 1xlite's customer support team
• Survey responses and feedback submitted voluntarily

3. How We Use Your Data

1xlite processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 1xlite account, process deposits and withdrawals, and provide access to Platform features.
• Identity Verification (KYC/AML): To verify your identity and age in compliance with PAGCOR requirements and Republic Act No. 9160 (Anti-Money Laundering Act), as amended.
• Service Delivery: To provide casino games, live dealer services, sportsbook functionality, bingo, and all other Platform features.
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, unauthorised account access, and abuse of the Platform or promotional offers.
• Regulatory Compliance: To fulfil reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, administer deposit and loss limits, enforce self-exclusion periods, and refer at-risk players to appropriate resources.
• Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance.
• Communications: To send transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about 1xlite offers and events.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve the 1xlite Platform experience for Filipino players.

4. Legal Basis for Processing

1xlite processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Performance of a Contract: Processing necessary to deliver the services you have registered for and agreed to under the 1xlite Terms and Conditions.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AML laws, tax obligations, and orders of competent Philippine authorities.
• Legitimate Interests: Processing necessary for 1xlite's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: For marketing communications and any processing not otherwise covered by the above bases. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

1xlite does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for each purpose:

• Payment Processors: GCash, PayMaya, and banking partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity documents and biometric data solely for the purpose of regulatory-mandated verification.
• Game Providers: Licensed third-party game suppliers receive pseudonymous session data necessary to deliver game services. Full identity data is not shared with game providers.
• Regulatory Authorities: PAGCOR, AMLC, the National Privacy Commission, and other Philippine government agencies may receive data as required by law, court order, or regulatory directive.
• Fraud Prevention Services: Industry fraud prevention networks may receive anonymised or pseudonymised risk indicators to facilitate cross-platform detection of fraudulent activity.
• Professional Advisers: Legal, accounting, and compliance advisers who are bound by professional confidentiality obligations.

All third parties with whom 1xlite shares personal data are required by contract to maintain appropriate security standards and to use the data only for the specified purpose.

6. Cookies and Tracking Technologies

1xlite uses cookies, web beacons, and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your 1xlite account. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymised data about how users navigate the Platform (pages visited, time on page, error logs). Used to improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, last game played, and display preferences to personalise your 1xlite experience.

You may control cookie settings through your browser. Note that disabling cookies beyond strictly necessary ones may affect certain Platform features. 1xlite does not use third-party advertising or tracking cookies that share your data with external advertising networks.

7. Data Retention

1xlite retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for a minimum of 5 years from account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with Philippine AML and tax record-keeping requirements.
• Customer Support Records: Retained for 3 years from the date of the support interaction.
• Technical Logs: Retained for up to 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Security Measures

1xlite implements technical and organisational measures appropriate to the risk level of the data processed. These include:

• TLS 1.2 or higher encryption for all data transmitted between your device and 1xlite servers
• Encryption at rest for sensitive data, including identity documents and financial records
• Role-based access controls ensuring that staff access to personal data is limited to what is required for their role
• Multi-factor authentication for administrative access to systems containing personal data
• Regular security assessments and penetration testing by qualified third parties
• Incident response procedures with NPC notification timelines compliant with the Data Privacy Act

While 1xlite takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for keeping your 1xlite login credentials confidential and for notifying us immediately of any suspected unauthorised access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 1xlite:

• Right to Be Informed: To be notified of the purposes and legal basis for which your data is collected and processed.
• Right of Access: To obtain a copy of the personal data 1xlite holds about you, subject to identity verification.
• Right to Rectification: To request correction of inaccurate or incomplete personal data in your 1xlite account.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary, subject to overriding retention obligations under PAGCOR and AML regulations.
• Right to Object: To object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Data Portability: To receive a copy of data you have provided to 1xlite in a structured, machine-readable format.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact 1xlite's Data Protection Officer via [email protected]. Requests will be acknowledged within 3 business days and fulfilled within 15 business days, consistent with NPC guidelines.

10. Children and Minors

The 1xlite Platform is strictly for individuals aged 21 years and above. 1xlite does not knowingly collect personal data from persons under the age of 21. If we become aware that data from an underage user has been collected, we will immediately close the associated account and delete all related personal data. If you believe a minor has accessed the 1xlite Platform or provided personal data, please contact us immediately at [email protected].

11. International Data Transfers

1xlite primarily processes and stores your personal data within the Philippines. Where data is transferred to third-party service providers outside the Philippines — for example, cloud infrastructure providers or certified identity verification services — such transfers are conducted under contractual protections equivalent to the standards required by the Data Privacy Act of 2012, and only to countries or entities that provide adequate data protection guarantees.

12. Changes to This Privacy Policy

1xlite may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory requirements. The "Last updated" date at the top of this page will reflect the date of the most recent revision. For material changes, registered players will be notified via email or in-platform notice at least 7 days before the changes take effect. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or 1xlite's handling of your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• Live Chat: Available 24/7 via the 1xlite Platform
• Messenger and Viber: Available 24/7

Our support team operates on Philippine Standard Time and aims to respond to all privacy-related enquiries within 3 business days.