we1win Privacy Policy

Introduction

we1win ("we1win," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the we1win platform, including the website, games, betting services, and all associated features (collectively, the "Platform").

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the circumstances in which we may share it with third parties, the security measures we apply, and the rights available to you in respect of your personal data. This Policy applies to all users of the we1win Platform regardless of the device or method of access.

By registering a we1win account or using the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

Data Controller

For the purposes of applicable data protection legislation, we1win is the data controller in respect of personal data collected through the Platform. we1win determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Questions or requests regarding data protection may be directed to the we1win data protection contact identified in Section 15 of this Policy.

Personal Data We Collect

we1win collects personal data in the following categories:

Registration and Identity Data:

• Full legal name, date of birth, nationality, and gender.
• Email address, mobile telephone number, and residential address.
• Username and encrypted password.

Identity Verification (KYC) Data:

• Copy of government-issued photo identification document (e.g., Malaysian MyKad, passport, driver's licence).
• Proof of address documentation (e.g., utility bill, bank statement).
• Proof of payment method ownership where required.
• Facial verification data where required by our identity verification provider.

Financial and Transaction Data:

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references.
• Partial payment instrument identifiers (e.g., masked account numbers).
• Betting and gaming activity records including wagers placed, outcomes, and account balance history.

Technical and Usage Data:

• IP address, device type, operating system, and browser type.
• Session timestamps, pages visited, and features accessed within the Platform.
• Geolocation data at the country and region level derived from IP address.
• Cookie identifiers and similar tracking technology data as further described in Section 9.

Communications Data:

• Records of communications between you and the we1win support team via live chat or email, including the content of those communications.
• Responses to surveys or feedback requests where you have chosen to participate.

How We Use Your Personal Data

we1win processes personal data for the following purposes:

• Account management: Creating and maintaining your we1win account, authenticating your identity at login, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals, crediting and debiting your account in accordance with your betting and gaming activity, and providing access to the full range of Platform features.
• Identity verification and KYC: Verifying your identity in compliance with our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under our licensing framework.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities. Monitoring login patterns and flagging unusual account access for security purposes.
• Regulatory compliance: Meeting our obligations to the licensing authority under which we1win operates, including reporting requirements and record-keeping obligations.
• Customer support: Responding to your enquiries, resolving account issues, and processing responsible gaming requests including limit applications and self-exclusion.
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators and, where appropriate, initiating responsible gaming interventions in accordance with our licensing requirements.
• Marketing communications: Where you have provided consent, sending promotional emails, bonus notifications, and personalised offers. You may withdraw consent at any time by using the unsubscribe mechanism in any marketing email or by contacting support.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offering.

Legal Basis for Processing

we1win processes personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the services you have contracted for by registering a we1win account.
• Legal obligation: Processing necessary to comply with AML, CTF, and KYC obligations under our licensing framework and applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement where we1win's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications where you have provided express consent.

Third-Party Disclosure

we1win does not sell, rent, or trade your personal data to third parties. We may share personal data with third parties in the following circumstances:

• Payment processors: Sharing transaction data with payment service providers (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency processors) to the extent necessary to process deposits and withdrawals.
• Identity verification providers: Sharing identity document data with our third-party KYC and AML compliance service providers for verification purposes.
• Game providers: Sharing the minimum necessary data with certified game software providers to enable gameplay and resolve game disputes.
• Regulatory authorities: Disclosing data to our licensing authority, law enforcement agencies, or other governmental bodies where required by law, court order, or regulatory direction.
• Service providers: Sharing data with third-party service providers who process data on our behalf (e.g., cloud hosting, email delivery, analytics) under contractual data processing agreements that restrict their use of your data.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the we1win business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

International Data Transfers

The we1win Platform operates under an international licensing framework, and your personal data may be stored and processed in jurisdictions outside Malaysia. Where personal data is transferred internationally, we1win takes steps to ensure that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection law.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Malaysia as described in this Policy.

Data Retention

we1win retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Specific retention periods include:

• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Account data: Retained for the duration of your account and for a minimum of two (2) years following permanent account closure.
• Customer support communications: Retained for two (2) years from the date of the last communication in a case.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised unless retention is required by a specific legal obligation that overrides the standard period.

Cookies & Tracking Technologies

we1win uses cookies and similar technologies (including pixel tags and local storage) to operate and improve the Platform. The categories of cookies we use are:

• Essential cookies: Necessary for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that help detect and prevent fraudulent access. These cookies cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect aggregated, anonymised information about how users interact with the Platform, enabling us to identify and resolve performance issues and improve user experience.
• Functional cookies: Store your preferences (e.g., language, game lobby view settings) to personalise your experience on return visits.
• Marketing cookies: Used, where consent is given, to deliver personalised promotional content and measure the effectiveness of marketing campaigns. You may withdraw consent at any time through your browser cookie settings.

You can control cookie storage through your browser settings. Disabling cookies may affect certain Platform features, including session persistence and personalised settings.

Your Data Rights

Subject to applicable law and the conditions of our licensing obligations, you have the following rights in respect of personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Note that AML and KYC record-keeping obligations may require us to retain certain data notwithstanding an erasure request.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances while a dispute is resolved.
• Right to data portability: Where processing is based on consent or contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact we1win via the details in Section 15. we1win will respond to valid rights requests within thirty (30) days of receipt. we1win may request verification of identity before processing a rights request.

Children and Minors

The we1win Platform is strictly for individuals aged 21 and above. we1win does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at registration and at the KYC stage prior to withdrawal processing.

If we1win becomes aware that personal data has been collected from an individual under the age of 21, the account will be terminated, data will be deleted to the extent not required to be retained by regulatory obligations, and any deposited funds will be returned through appropriate channels.

If you believe that we1win may have inadvertently collected data from a minor, please contact us immediately using the details in Section 15.

Security Measures

we1win implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive personal data and financial records stored at rest.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Intrusion detection and continuous security monitoring of the Platform infrastructure.
• Regular penetration testing and security audits by independent third-party specialists.
• Two-factor authentication options for user accounts.

Notwithstanding these measures, no method of data transmission or storage over the internet is entirely secure. we1win cannot guarantee the absolute security of personal data but will notify affected users and relevant authorities in the event of a data breach that poses a risk to your rights and interests, in accordance with applicable breach notification obligations.

Information for Malaysian Users

Malaysian players accessing the we1win Platform should be aware that Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in commercial transactions in Malaysia. we1win takes steps to ensure that its data handling practices align with the principles established under the PDPA, including the principles of general, notice and choice, disclosure, security, retention, data integrity, and access.

Malaysian users have the right to access and correct their personal data held by we1win. Requests for access or correction may be submitted to the contact details in Section 15. we1win may charge a reasonable administrative fee for processing access requests where permitted by law.

Policy Amendments

we1win reserves the right to amend this Privacy Policy at any time. Material amendments will be communicated to registered users via the email address on record prior to the amendment taking effect. The date of the most recent revision is displayed at the top of this Policy. Continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.

Contact Us

For all privacy-related enquiries, data access requests, or data protection concerns, please contact we1win at:

Email: [email protected]  (plain text — copy and paste to contact us)

Please include your registered username and a clear description of your request. we1win will acknowledge receipt within two (2) business days and respond substantively within thirty (30) days.