1xlite Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") is issued by 1xlite ("1xlite", "we", "us", or "our") and applies to all personal information collected from individuals ("you", "your", or "data subject") who access, register on, or use the 1xlite platform, including the website at 1xlite.biz and all associated services, applications, and game products offered thereunder.

1xlite is committed to protecting the privacy and personal data of all Filipino players and platform visitors. This Policy describes what personal data we collect, why we collect it, how it is processed and stored, with whom it may be shared, how long it is retained, and the rights available to you under applicable Philippine data protection law.

By accessing or using any part of the 1xlite platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of the platform and contact us to close your account.

Data Controller

For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations, 1xlite acts as the personal information controller in respect of all personal data collected through the 1xlite platform.

As data controller, 1xlite determines the purposes and means of processing personal data collected from Filipino players and visitors. Where 1xlite engages third-party service providers to process personal data on its behalf (such as payment processors, KYC verification providers, and game software suppliers), such parties act as personal information processors under 1xlite's instructions and are bound by data processing agreements that require them to maintain adequate data protection standards.

Personal Data We Collect

1xlite collects the following categories of personal data in connection with the operation of the platform:

3.1 Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Philippine mobile number (Globe, Smart, DITO) or email address
• Username and encrypted password
• Province or city of residence (e.g., Metro Manila, Cebu, Davao, Quezon City)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's licence, UMID)
• Proof of address documentation
• Selfie or liveness verification image
• Source of funds declaration (for enhanced due diligence cases)

3.3 Financial Transaction Data

• GCash mobile number or PayMaya account reference
• Bank account details for BDO, BPI, Metrobank, and other linked bank transfers
• Deposit and withdrawal transaction history in Philippine Pesos
• Transaction timestamps and payment method identifiers

3.4 Gaming Activity Data

• Game session history, bet amounts, game outcomes, and win/loss records
• Bonus redemption history and wagering progress
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion records)

3.5 Technical and Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser version
• Session logs including login timestamps and activity patterns
• Cookie and tracking technology data (see Section 7)

3.6 Communications Data

• Content of customer support interactions via live chat
• Email correspondence with the 1xlite support team
• Records of SMS notifications sent to your registered mobile number

How We Use Your Personal Data

1xlite processes personal data for the following specific purposes:

• Account creation and management: To establish and administer your 1xlite account, verify your identity, and maintain accurate records.
• Age verification: To confirm that you meet the 21+ age requirement prior to enabling access to real-money gaming services, as required by PAGCOR-aligned responsible gaming standards.
• Payment processing: To facilitate deposits to and withdrawals from your 1xlite account wallet using GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• Anti-money laundering (AML) compliance: To meet obligations under Republic Act No. 9160 (Anti-Money Laundering Act), including customer due diligence, transaction monitoring, and suspicious transaction reporting where required.
• Responsible gaming: To monitor gaming behaviour, enforce deposit limits and self-exclusion restrictions elected by users, and identify patterns that may indicate problem gambling.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other forms of misconduct on the 1xlite platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of support delivered to Filipino players.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregate usage patterns, optimise game performance, and develop new features and game categories on the 1xlite platform.
• Legal and regulatory compliance: To fulfil any legal obligations or regulatory requirements imposed on 1xlite by applicable Philippine law or regulatory direction.

Legal Bases for Processing

In accordance with the Data Privacy Act of 2012 and its implementing rules, 1xlite relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and 1xlite — specifically, to operate your account, process payments, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AML obligations under RA 9160, data retention requirements, and regulatory reporting obligations.
• Legitimate interests: 1xlite processes certain data (including device data and security logs) on the basis of legitimate interests in securing the platform, preventing fraud, and improving services, where such interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent (such as marketing communications), you retain the right to withdraw that consent at any time by contacting 1xlite support or using the opt-out mechanism in communications.

Sharing Personal Data with Third Parties

1xlite does not sell, rent, or otherwise transfer your personal data to third parties for their independent marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

• Payment service providers: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), and partner banks (BDO, BPI, Metrobank) to process your financial transactions.
• Identity verification (KYC) providers: Third-party services that assist 1xlite in verifying the identity and age of account holders as required by responsible gaming and AML compliance standards.
• Game software providers: Certified game suppliers (including but not limited to Pragmatic Play, PG Soft, Habanero, and Jili Games) who may receive pseudonymised session data necessary to deliver and audit game outcomes.
• IT infrastructure and cloud service providers: Providers of hosting, data storage, content delivery, and cybersecurity services engaged by 1xlite to operate the platform.
• Regulatory and law enforcement authorities: Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement where 1xlite is legally required or compelled to disclose information.
• Professional advisors: Legal, accounting, and audit firms engaged by 1xlite in the ordinary course of business, subject to professional confidentiality obligations.

Cookies and Tracking Technologies

The 1xlite platform uses cookies and similar tracking technologies to operate core platform functions, remember your session preferences, and analyse how Filipino players interact with the site. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function. These enable login sessions, maintain your authenticated state, and support the security functions of the 1xlite account system. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings and game lobby filter configurations to provide a more personalised experience on return visits.
• Analytics cookies: Collect aggregated, pseudonymised data on page visits, session duration, game category engagement, and navigation patterns to help 1xlite improve the platform. This data does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional communications and measure the effectiveness of 1xlite marketing activities, where you have consented to receiving such communications.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 1xlite platform.

Data Security

1xlite implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 1xlite's servers
• AES-256 encryption for personal data stored in 1xlite's database systems
• Multi-factor authentication controls for administrative access to data systems
• Regular penetration testing and vulnerability assessments conducted by independent security professionals
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Audit logging of all access to and modifications of personal data records
• Incident response procedures for detecting and reporting personal data breaches in compliance with the Data Privacy Act of 2012

In the event of a personal data breach that is likely to result in harm to your rights and freedoms, 1xlite will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, as required by applicable Philippine data protection law.

Data Retention

1xlite retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any minimum retention periods imposed by applicable law. The following indicative retention periods apply:

• Account data and KYC records: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required for AML compliance under RA 9160.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable Philippine financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years for audit and dispute resolution purposes.
• Customer support communications: Retained for a maximum of three (3) years from the date of the communication, unless a longer period is required for an ongoing dispute or legal proceeding.
• Marketing preferences and consent records: Retained for the duration of the account relationship or until consent is withdrawn.
• Device and technical logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173) and its implementing rules, Filipino players and data subjects have the following rights with respect to their personal data held by 1xlite:

To exercise any of the above rights, please contact 1xlite's Data Protection Officer via the contact details provided in Section 14. 1xlite will respond to verified data subject requests within thirty (30) calendar days of receipt. Identity verification may be required before requests are actioned. Where a request is particularly complex or numerous, the response period may be extended by a further thirty (30) days with written notice to the requesting party.

If you are not satisfied with 1xlite's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Children and Minors

The 1xlite platform is strictly restricted to individuals who are 21 years of age or older. 1xlite does not knowingly collect personal data from persons under the age of 21.

If 1xlite becomes aware that personal data has been collected from a minor, the affected account will be immediately suspended, all associated personal data will be securely deleted, and any funds in the account will be handled in accordance with applicable law. If you believe that a minor has registered on the 1xlite platform, please notify 1xlite immediately via the contact details in Section 14.

Cross-Border Data Transfers

In the course of operating the 1xlite platform, personal data may be transferred to and processed in countries outside the Philippines — for example, where game software providers, cloud hosting services, or KYC verification providers operate their systems in other jurisdictions.

Where such transfers occur, 1xlite ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards required by the Data Privacy Act of 2012, including contractual clauses that impose equivalent data protection obligations on the recipient. 1xlite will not transfer personal data to a foreign entity that does not provide a level of protection substantially similar to Philippine data protection standards without your explicit consent or unless required to do so by law.

Changes to This Privacy Policy

1xlite reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes to this Policy will be communicated to registered players via the email address or mobile number on file, or through a prominent notice on the 1xlite platform, at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the 1xlite platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

How to Contact 1xlite About Privacy

If you have questions, concerns, or requests relating to this Privacy Policy or 1xlite's processing of your personal data, please contact our Data Protection Officer using the following details:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.