Privacy Policy

Introduction

1winbet operates the online sports betting and casino entertainment platform accessible at 1winbet.casa. In the course of providing our services to registered players — including players across Malaysia from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — we collect, process, and store certain personal data. This Privacy Policy describes our practices with respect to that data, including the categories of information we collect, the purposes for which it is used, the parties with whom it may be shared, and the rights available to you as a data subject.

1winbet is committed to handling personal data in a manner consistent with applicable international data protection standards and the expectations of our player community. We do not sell personal data to third parties. We do not use personal data for any purpose beyond what is set out in this Policy unless we have obtained your explicit consent to do so.

This Policy applies to all personal data collected through the 1winbet website, any associated mobile interfaces, customer support interactions, and any other touchpoints through which players interact with our platform.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, email address, mobile number, identity document number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means 1winbet, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Subject" means the individual to whom Personal Data relates — in this context, you, the registered player or site visitor.
• "Third Party" means any individual or entity that is not the Data Subject or 1winbet.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer compliance process, including copies of government-issued identity documents and proof of address.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation functions.
• "Platform" means the 1winbet website, mobile interfaces, and all associated digital services.

Data We Collect

We collect Personal Data in several ways: directly from you when you register an account, interact with our platform, or contact our support team; automatically through your use of the Platform; and, in limited circumstances, from third-party verification and fraud prevention service providers.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity verification purposes. We do not collect data from individuals we know to be under 21 years of age.

How We Process Your Data

We use the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your registered account, including authentication, password resets, and account preference settings.
• Identity Verification & Compliance: To carry out KYC checks required under our gaming licence obligations, verify your age and identity, and comply with anti-money laundering (AML) regulations.
• Transaction Processing: To process deposits and withdrawals in MYR via your chosen payment method — including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong — and to maintain accurate financial records.
• Service Delivery: To provide access to sports betting markets (including Liga Super Malaysia, EPL, and UFC), live casino games, slots, and all other platform features you use.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and improve our support quality.
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, money laundering, unauthorised account access, and other unlawful activity.
• Responsible Gambling: To honour self-exclusion requests, enforce deposit and session limits, and monitor gameplay patterns that may indicate problem gambling behaviour.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the performance and features of our Platform.
• Marketing Communications: To send you promotional offers and updates relevant to your interests, where you have consented to receive such communications. You may opt out at any time via your account settings.
• Legal Obligations: To comply with applicable legal requirements, regulatory directions, court orders, or requests from competent authorities.

Legal Basis for Processing

We process your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with AML regulations, gaming licence conditions, KYC obligations, and other applicable legal requirements.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, security monitoring, and platform improvement — provided that such interests are not overridden by your rights and interests.
• Consent: Processing carried out with your explicit consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

1winbet does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients where strictly necessary:

• Payment Processors: Malaysian payment service providers including Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX operators, as well as partner banks (Maybank, CIMB, Public Bank, Hong Leong), solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist in verifying your identity and assessing fraud or money laundering risk.
• Game Software Providers: Licensed game studios and live casino operators whose titles appear on our Platform, where transmission of game session data is technically required.
• IT & Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory & Legal Authorities: Gaming regulators, law enforcement agencies, financial intelligence units, and courts where we are legally required or permitted to make disclosure.
• Professional Advisors: Lawyers, auditors, and compliance consultants, under binding professional confidentiality obligations.

All third parties with whom we share Personal Data are contractually required to process it solely for the agreed purpose, to maintain appropriate security standards, and to handle data in accordance with applicable data protection law.

Cookies & Tracking Technologies

The 1winbet Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, to analyse how the Platform is used, and to support security functions. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Enable personalisation features such as remembering your preferred language setting, stored username, and display preferences.
• Analytical Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, time on page, and navigation paths. This data helps us improve the Platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including repeated failed login attempts and unusual session behaviour.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may limit functionality or affect your experience on the Platform. We do not use cookies to build advertising profiles or to track your activity across third-party websites.

Data Retention

We retain Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process or the closure of the associated account, whichever is later.
• Financial Transaction Records: Retained for a minimum of seven (7) years to comply with financial record-keeping requirements.
• Gameplay & Betting Logs: Retained for up to three (3) years following the relevant betting or gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Transcripts: Retained for up to two (2) years following the resolution of the relevant support interaction.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

Data Security

1winbet implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data categories including KYC documents and financial records.
• Two-factor authentication (2FA) available for all registered accounts.
• Role-based access controls that restrict internal access to Personal Data to authorised personnel on a need-to-know basis.
• Regular penetration testing, vulnerability assessments, and security audits conducted by qualified cybersecurity professionals.
• Automated monitoring for suspicious activity, including unusual login patterns and transaction anomalies.
• Incident response procedures that include breach notification processes in accordance with applicable regulatory requirements.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Your Rights

Subject to applicable data protection law, you have the following rights with respect to your Personal Data held by 1winbet. To exercise any of these rights, please contact our Data Protection team using the details in Section 14.

We will respond to all verifiable data subject requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly. We may require you to verify your identity before processing any request.

Please note that certain rights are subject to limitations where processing is required to comply with a legal obligation (such as AML record-keeping) or where the exercise of the right would adversely affect the rights and freedoms of others.

Minors & Age Restriction

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate consent, we will take immediate steps to delete that data and close the associated account. We rely on registrants to provide accurate date of birth information and conduct age verification through our KYC process to enforce this requirement.

Registered players are strictly prohibited from sharing their account credentials with or allowing access to any minor. If you have reason to believe that a minor has accessed our Platform or registered an account, please contact us immediately at [email protected].

Third-Party Services

The Platform may, from time to time, reference third-party service providers in a functional capacity — such as payment processors (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay) and game content providers. These third parties operate under their own privacy policies and data handling practices, which are separate from and independent of this Privacy Policy.

1winbet is not responsible for the privacy practices of any third-party service provider. Where data is shared with a third party for a specific processing purpose (as described in Section 6), we ensure that appropriate contractual protections are in place. However, we encourage you to review the privacy policies of any third-party services that you interact with independently.

Policy Amendments

1winbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how your Personal Data is being handled. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 1winbet processes your Personal Data, or if you wish to exercise any of the rights described in Section 10, please contact our Data Protection team using the details below:

Where you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.