1winn Privacy Policy

1Introduction and Scope

This Privacy Policy applies to personal information processed through the 1winn website, player accounts, casino and sports betting services, payment channels, customer support, promotions, and responsible gambling controls. It applies whether you visit from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or another location.

References to “you” or “your” mean the visitor or registered player. References to “1winn”, “we”, “our”, or “us” mean the operator responsible for the platform. By using 1winn, you acknowledge the practices described in this policy. Where consent is required for a specific activity, 1winn will seek it separately.

The platform is intended only for players aged 21 and above. 1winn does not knowingly offer gambling services to minors. Information indicating that a user is underage may result in immediate restriction, investigation, and account closure.

2Personal Data We Collect

1winn collects information that you provide directly, data generated through account activity, and technical information created when you use the platform. Depending on your interaction with 1winn, this may include:

• Identity data: legal name, date of birth, nationality, identification details, photographs, and verification results;
• Contact data: residential address, email address, mobile number, and communication preferences;
• Account data: username, encrypted credentials, security settings, account status, and responsible gambling limits;
• Financial data: deposit and withdrawal records, masked payment details, MYR transaction values, and payment ownership evidence;
• Gaming data: slots played, live dealer activity, EPL or Liga Super Malaysia bets, stakes, odds, outcomes, bonus use, and session history;
• Technical data: IP address, browser, device type, operating system, language, approximate location, login time, and security logs;
• Support data: live chat transcripts, email correspondence, complaint records, and documents submitted to resolve an enquiry.

3How Information Is Collected

Information is collected when you create or update a 1winn account, verify your identity, deposit through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong, request a withdrawal, claim a promotion, contact support, or use a responsible gambling tool.

1winn also collects information automatically through server logs, cookies, fraud-detection controls, and similar technologies. In limited circumstances, information may be received from payment processors, identity verification providers, game suppliers, security services, or public sources where legally permitted and necessary to confirm accuracy or prevent misuse.

4Purposes of Data Processing

1winn processes personal information for the following legitimate operational and compliance purposes:

• Creating, administering, securing, and supporting your 1winn account;
• Confirming that players are aged 21 or above and completing identity verification;
• Processing deposits, withdrawals, refunds, and transaction investigations;
• Providing casino games, sports betting, live football markets, bonuses, and loyalty features;
• Preventing fraud, collusion, money laundering, payment abuse, account takeover, and technical exploitation;
• Responding to support enquiries, complaints, privacy requests, and account disputes;
• Applying deposit limits, cooling-off periods, self-exclusion, and other player-protection controls;
• Improving platform stability, mobile usability, game navigation, and service performance;
• Meeting international licensing, legal, regulatory, audit, and record-keeping obligations.

1winn does not sell personal information. Data is not processed for a purpose that is materially incompatible with the reason it was collected unless a lawful basis permits the new use or you are appropriately informed.

5Legal Bases for Processing

Depending on the activity and applicable privacy framework, 1winn may process data because it is necessary to perform the agreement with you, comply with a legal obligation, protect legitimate interests, establish or defend legal claims, protect vital interests, or act on valid consent.

Legitimate interests may include protecting 1winn and its players from fraud, maintaining network security, understanding platform performance, resolving disputes, and communicating relevant service information. Where 1winn relies on legitimate interests, those interests are assessed against your privacy rights.

If processing relies on consent, you may withdraw that consent for future activity. Withdrawal does not affect processing already completed and does not prevent continued processing where another lawful basis applies.

6Cookies and Similar Technologies

1winn may use cookies, local storage, pixels, and related technologies to maintain secure sessions, remember preferences, measure performance, prevent duplicate logins, identify suspicious behaviour, and improve navigation. Some cookies are essential because the platform cannot function securely without them.

Optional analytics or preference technologies may be controlled through available browser or platform settings. Disabling essential cookies can prevent login, interrupt account verification, or stop payment and gaming functions from operating correctly.

Cookie records may include a device identifier, session reference, timestamp, selected language, viewed pages, and security status. They do not replace the identity checks required before sensitive account actions.

7Sharing and Disclosure

1winn may share limited personal information with vetted service providers where necessary to operate the platform. Recipients may include hosting companies, cybersecurity specialists, game suppliers, identity verification services, customer support systems, auditors, and payment processors supporting MYR or digital asset transactions.

These recipients may access only the information reasonably required for their assigned task and are expected to apply confidentiality and security obligations. 1winn may also disclose information where required by law, an international licensing authority, a valid court order, or a lawful fraud or financial crime investigation.

If ownership or control of the platform changes, relevant information may be transferred as part of the transaction, subject to suitable confidentiality, security, and lawful processing protections.

8International Data Transfers

Online gaming services may rely on systems, suppliers, or authorised personnel located outside Malaysia. As a result, personal information may be processed in jurisdictions with privacy laws that differ from Malaysian standards.

Where international transfers occur, 1winn applies reasonable safeguards appropriate to the circumstances. These may include contractual data protection clauses, access limitations, encryption, due diligence, and transfer risk assessments. Only information necessary for the relevant service should be transferred.

9Data Security

1winn uses layered technical and organisational measures designed to protect personal information against loss, misuse, alteration, unauthorised access, and disclosure. Safeguards may include encrypted transmission, controlled administrative access, monitoring, logging, network protection, staff confidentiality requirements, and incident-response procedures.

No online system can guarantee absolute security. You must therefore use a unique password, protect your device, sign out on shared equipment, and avoid sending passwords or complete payment credentials through unsecured chat. Notify 1winn promptly if you suspect unauthorised access.

A confirmed data incident will be assessed and managed under applicable legal and operational requirements. Where notification is required and appropriate, affected users or relevant authorities will be informed.

10Data Retention

Personal information is retained only for as long as reasonably necessary for the purpose of collection and to meet contractual, security, anti-fraud, dispute, tax, audit, international licensing, and legal obligations. Different categories of data may therefore have different retention periods.

Closing a 1winn account does not always result in immediate deletion. Identity records, transaction histories, self-exclusion information, complaint files, and security logs may need to remain available for a lawful period. After the relevant period ends, information is securely deleted, anonymised, or isolated from ordinary operational access.

11Your Privacy Rights

Subject to applicable law and necessary identity verification, you may have the right to request access to personal information held by 1winn, correction of inaccurate data, deletion, restriction, objection, a portable copy, or information concerning relevant processing.

Rights are not absolute. A request may be limited where data must be retained for payment records, fraud prevention, self-exclusion enforcement, legal claims, security, or licensing obligations. 1winn will explain a refusal or restriction where reasonably possible and legally permitted.

To submit a privacy request, contact support through live chat or use the plain-text email address [email protected]. Include your username and a clear description of the request, but do not send a password or complete identity number in an unsecured message.

12Marketing Preferences

Where permitted, 1winn may communicate information about platform features, casino content, sports markets, bonuses, or service updates. Promotional communication is subject to applicable consent and preference requirements.

You may change available marketing preferences or ask support to stop optional promotional messages. Operational communications relating to account security, payment status, verification, legal changes, responsible gambling, or service interruption may still be sent because they are necessary to administer the account.

13Responsible Gambling and Sensitive Data

Information connected with responsible gambling may include deposit limit requests, cooling-off periods, self-exclusion, support conversations, risk indicators, and account interventions. 1winn processes this information to protect players, enforce restrictions, and meet responsible gaming obligations.

Self-exclusion records may be retained after account closure to prevent a restricted player from reopening an account. These records are handled with heightened care and are available only to personnel or providers who need them for player protection, compliance, or security.

14Policy Updates and Contact Us

1winn may update this Privacy Policy to reflect legal, technical, operational, payment, or security changes. The revised version will be published on this page with an updated effective date. Material changes may also be communicated through the platform where appropriate.

Questions, complaints, and privacy rights requests may be directed to 1winn support through live chat or the plain-text email address [email protected]. Please provide sufficient detail for the request to be understood and allow reasonable time for identity verification and review.