Privacy Policy — How 1mgame Handles Your Data

1mgame ("we", "us", "our", "the Platform") operates the online gaming website at https://1mgame.cam. This Privacy Policy sets out how we collect, use, disclose and safeguard the personal data of individuals ("you", "User", "Player") who visit, register on or use the platform and its associated services.

We recognise that the privacy of our players — including the large number of users based in Pakistan and other markets — is of fundamental importance. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using 1mgame.

By registering an account, depositing funds, placing a bet, using the live casino or otherwise interacting with the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers and financial information.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data (i.e., 1mgame).
• "Data Processor" — any third party that processes Personal Data on behalf of 1mgame pursuant to written instructions.
• "KYC Data" — identity and age verification documents submitted by a Player in compliance with the platform's Know Your Customer requirements.
• "Cookies" — small text files placed on your device by the platform or third-party services to track sessions, preferences and analytics.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including financial account details and government-issued identification numbers.

1mgame acts as the Data Controller in respect of the Personal Data collected through the platform. The operator is responsible for determining how and why your data is processed, and for ensuring that processing is carried out lawfully, fairly and transparently.

All data processing activities are conducted in accordance with the operator's licensing obligations and applicable privacy and data protection legislation in the jurisdiction(s) in which the platform is licensed and operated.

If you have any questions, concerns or requests relating to the processing of your personal data, please contact us using the details set out in Section 17 of this Policy.

We collect the following categories of personal data:

We collect Personal Data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC, making a deposit, contacting support or updating your account profile.
• Automated Collection: Technical and gameplay data collected automatically as you interact with the platform, including through cookies, log files and session tracking technologies.
• Third-Party Sources: Identity verification data returned by KYC service providers; fraud signals from payment processors; geolocation data from IP resolution services.
• Payment Providers: Confirmation data received from payment processors (including mobile wallet services and banking partners referenced in the platform's cashier) when you make a deposit or withdrawal. Note that 1mgame does not receive full payment-method credentials — only transaction identifiers and confirmation statuses.

We process your Personal Data for the following purposes:

• Account Management: Creating, maintaining and securing your account; processing login requests; enforcing the one-account-per-player rule.
• Identity & Age Verification: Verifying that you meet the minimum age requirement (18+, or the higher minimum required by the operator's license jurisdiction) and that your identity is genuine.
• Transaction Processing: Processing deposits and withdrawals; maintaining accurate account balance records in PKR; confirming payment-method ownership.
• Legal & Regulatory Compliance: Fulfilling the operator's obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT) and responsible gambling regulations.
• Fraud Prevention & Security: Detecting and investigating suspicious activity; preventing account takeovers; identifying and blocking prohibited conduct as defined in the platform's Terms & Conditions.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling; applying self-exclusion requests and limit changes; enforcing cooling-off periods.
• Customer Support: Responding to queries, complaints and dispute resolution requests; maintaining records of support interactions.
• Platform Improvement: Analysing aggregated usage data to improve performance, fix bugs and develop new features.
• Marketing Communications: Sending promotional emails and platform notifications, where you have opted in and not subsequently opted out.

Where applicable data protection law requires a lawful basis for processing, we rely on the following:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions agreement with you — including account management, transaction processing and support.
• Legal Obligation: Processing required to comply with the operator's legal obligations, including KYC, AML/CFT, responsible gambling monitoring and record-keeping requirements under the applicable license.
• Legitimate Interests: Processing carried out for the operator's legitimate business interests, including fraud prevention, platform security, dispute resolution and analytics — where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific and informed consent — principally, marketing communications. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting support.

We do not sell your personal data. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• KYC & Identity Verification Providers: Third-party services that verify identity documents and screen for sanctions, politically exposed persons (PEPs) and adverse media.
• Payment Processors: To facilitate deposits and withdrawals. Data shared is limited to what is required to complete the transaction.
• Game Providers & Studio Operators: Game platform providers may receive anonymised session data for the purpose of game delivery and RNG certification. No personally identifiable data is shared with game studios beyond what is technically required.
• Fraud Prevention Services: Specialist fraud-detection platforms that assess transaction and behaviour risk signals.
• Regulatory Authorities: We may be required to disclose Player data to regulators, law enforcement agencies or courts in response to a lawful request, court order or legal obligation. We will notify you where permitted by law.
• Professional Advisers: Legal, accounting and auditing advisers under obligations of confidentiality.
• Business Transfers: In the event of a merger, acquisition or sale of substantially all of the operator's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party processors are required to process Personal Data only in accordance with the operator's written instructions and are contractually bound to apply appropriate security measures.

Given the global nature of online gaming infrastructure, your Personal Data may be transferred to and processed in countries other than your country of residence. This includes countries where the operator's servers, KYC providers, payment processors and game-studio partners are located.

Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses, data processing agreements and other recognised transfer mechanisms under applicable law.

1mgame uses cookies and similar tracking technologies to operate, analyse and improve the platform. The following categories of cookies may be used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your logged-in state and security tokens. They cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to understand how Players use the platform — which pages are visited, how long sessions last and where errors occur. Data is aggregated and does not directly identify individuals.
• Functional Cookies: Store your language preference, notification settings and other personalisation choices so you do not have to re-enter them on each visit.
• Marketing Cookies: May be used to track the effectiveness of marketing campaigns. These are only placed where you have given consent, and you may withdraw consent via your browser settings or account preferences.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the platform. We do not respond to "Do Not Track" browser signals at this time, as there is no consistent industry standard for such signals.

We retain Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting and regulatory obligations. Specific retention periods are guided by the following principles:

• Active Account Data: Retained for the duration of the account's active status.
• KYC & Identity Documents: Retained for a minimum period after account closure as required by the operator's licensing obligations and applicable AML regulations (typically five years or as mandated by the applicable regulator).
• Financial Transaction Records: Retained for a minimum of five years after the date of the transaction for AML and audit purposes.
• Gameplay Records: Retained for the period required for dispute resolution and responsible gambling monitoring.
• Support Communications: Retained for a minimum of three years from the date of the interaction.
• Marketing Consent Records: Retained for as long as is necessary to demonstrate compliance with consent obligations.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Subject to applicable law and the operator's regulatory obligations, you have the following rights in respect of your personal data:

To exercise any of these rights, please submit your request via the Help Center or contact us at the details provided in Section 17. We will respond within a reasonable timeframe. We may need to verify your identity before processing certain requests.

We implement a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration and disclosure. These include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers.
• Industry-standard password hashing algorithms for stored credentials.
• Role-based access controls limiting internal access to Personal Data on a need-to-know basis.
• Continuous monitoring and intrusion detection on platform infrastructure.
• Optional two-factor authentication (2FA) available to all registered Players.
• Regular security assessments and vulnerability testing.

While we take every reasonable precaution to safeguard your data, no system is completely immune to breach. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected Players in accordance with applicable legal requirements.

1mgame is strictly for adults aged 18 and over, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect or process Personal Data from individuals below the applicable minimum age.

If we become aware that Personal Data has been collected from an individual below the minimum age, we will delete that data and close the associated account immediately. Any winnings generated through an underage account will be voided and forfeited.

Parents and guardians are encouraged to use parental control tools and to monitor internet usage to prevent minors from accessing gambling platforms. If you believe a minor has registered on 1mgame, please contact us immediately via the support channels set out in Section 17.

The 1mgame platform may contain references to or integrations with third-party services, including game providers, payment processors and analytics tools. This Privacy Policy applies only to data processed by 1mgame as the Data Controller.

Third-party services operate under their own privacy policies and data practices, for which 1mgame is not responsible. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the platform.

We reserve the right to update this Privacy Policy at any time. Where changes are material, we will provide notice via a platform notification or email to the address registered on your account, where practical.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically. Your continued use of the platform following any update constitutes your acknowledgement of the revised Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through the following channels:

• Data Enquiries Email: [email protected] (plain text — this address is not a clickable link).
• Live Chat: Available directly within the platform during support operating hours.
• Help Center: Submit a support ticket through the platform's Help Center for non-urgent data requests. We aim to acknowledge all data requests within five working days and to respond fully within thirty calendar days.

If you are not satisfied with our response to a data request or complaint, you may have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction in which the platform is licensed.