Personal Data Protection
At 1 Winbet, your privacy is more than a legal obligation — it is a responsibility we take seriously every day. This page clearly and transparently explains how we collect, use, store and protect the personal data of all our Malaysian players.
Six core data protection principles we uphold every day to keep your personal information safe
All data transmitted between your device and 1 Winbet's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banks such as Maybank and CIMB. This means your personal information and payment details cannot be intercepted by third parties during transmission.
Your personal data is stored on servers protected by high-level encryption, strict access controls, and continuous monitoring. Only 1 Winbet staff who have been granted specific authorisation and have a legitimate operational need may access your data — and every access is recorded in a comprehensive audit log.
1 Winbet fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your personal data is collected and processed on a clear legal basis, for stated purposes, and with your consent obtained lawfully at the point of registration.
1 Winbet has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data is only shared with parties necessary for platform operations — such as payment providers and game providers — and only to the extent required for those purposes.
As a 1 Winbet member, you have the right to access, correct, delete, or restrict the processing of your personal data. You may also withdraw your consent to receive marketing communications at any time, with no penalty or impact on your gaming account.
1 Winbet only sends communications you have opted in to receive. All promotional emails and notifications include a clear and easy-to-use unsubscribe option. We do not use your data for third-party advertising, and we do not share email lists with any external advertisers.
When you interact with the platform 1 Winbet, there are various types of personal data that you provide to us directly. This data collection is necessary for us to deliver a secure, fair and fully functional service to you as a Malaysian player.
Full name as per MyKad or passport, date of birth, MyKad or passport number, Malaysian nationality, and identity document images submitted during the KYC process.
Email address, active Malaysian mobile number and, in certain cases, current residential address for KYC verification purposes.
Account information used for deposits and withdrawals, including your Touch 'n Go, GrabPay, Boost, ShopeePay or DuitNow e-wallet account number, or your bank account number for FPX transactions via Maybank2u or CIMB Clicks. Full card numbers are not stored in our systems.
Gaming history, betting records, deposits and withdrawals, current VIP level, claimed bonuses, and any feedback or complaints you have submitted to the 1 Winbet support team.
In addition to the data you provide directly, 1 Winbet also automatically collects certain data when you access our platform. This data is used for security, service improvement, and fraud detection purposes:
1 Winbet uses collected personal data solely for legitimate, stated purposes. The following are the primary purposes for which your data is used:
All personal data processing carried out by 1 Winbet has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the context, the applicable legal basis may be your consent given at registration, contractual necessity to provide the services you requested, legal obligations imposed on our platform, or legitimate interests in operating a safe and responsible business.
1 Winbet may use your email address and phone number to send communications about promotions, new bonuses, exclusive VIP offers, and platform updates — but only if you have given explicit consent to receive such communications during registration or through your account settings. Every promotional email we send includes a working and easy-to-use unsubscribe link. Withdrawing your marketing consent will not affect your access to the 1 Winbet platform or its core services.
1 Winbet does not sell, rent, trade, or disclose your personal data to third parties for their own marketing or commercial purposes. This is an unwavering commitment and forms the foundation of the trust we have built with our Malaysian player community.
In the course of operating the platform, 1 Winbet may need to share your personal data with the following categories of third parties, but only to the extent necessary for the stated purposes:
Every third party that receives players' personal data 1 Winbet are required to sign a data processing agreement that sets out their obligations to protect the data and use it only for the specified purposes. They are not permitted to use your data for their own purposes or disclose it to any third party without our written authorisation.
1 Winbet implements a comprehensive range of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, or loss. These measures include 256-bit SSL encryption for all data transmissions, encryption of data stored in our databases, strict role-based access controls for internal staff, automated 24/7 security monitoring, and regular penetration testing conducted by qualified third parties.
Beyond infrastructure-level protections, 1 Winbet also implements dedicated security features to protect individual player accounts. These include two-factor authentication (2FA) that you can enable from your account settings, detection of suspicious login activity based on unusual IP or location changes, automatic email notifications for password or account detail changes, and the option to review and terminate active sessions on other devices.
In the event of a security incident involving players' personal data, 1 Winbet has established incident response procedures in place. We will notify affected players within a reasonable timeframe once an incident is confirmed, and will take immediate steps to limit damage and prevent recurrence. Material incident reports will be submitted to the relevant authorities in accordance with legal requirements.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this privacy policy 1 Winbet, you have the following rights in relation to your personal data. We are committed to respecting and facilitating the exercise of these rights:
| Your Rights | Description | How to Apply |
|---|---|---|
| Right of Access | Requesting a copy of the personal data we hold about you | Email or live chat |
| Right to Rectification | Correcting inaccurate or incomplete data | Account settings or support |
| Right to Erasure | Requesting data deletion when it is no longer needed | Email support |
| Right to Restrict Processing | Restricting how we use your data in certain circumstances | Email support |
| Right to Withdraw Consent | Withdraw marketing consent at any time | Unsubscribe links or account settings |
| Right to Complain | Filing a complaint with Malaysia's data protection authority | Through the Department of Personal Data Protection |
1 Winbet will respond to all user rights requests within 30 business days of receipt. In more complex cases, this period may be extended to 60 days, with notice provided to you. Certain rights may be limited in circumstances where data is required to comply with legal obligations or to protect legitimate legal claims.
Cookies are small text files stored on your device when you visit the platform 1 Winbet. Cookies help us recognise you when you return, remember your preferences and keep your login session secure. Without certain cookies, core platform functions — such as staying logged in as you navigate between pages — will not work properly.
| Cookie Types | Purpose | Period | Status |
|---|---|---|---|
| Session Cookies | Maintaining your login session while using the platform | Expires when the browser is closed | |
| Security Cookies | Detecting suspicious activity and preventing session fraud | 30 days | |
| Preference Cookies | Remembering your language, display settings and game preferences | 1 year | |
| Analytics Cookies | Understanding how players use the platform in order to drive improvements | 2 years | |
| Performance Cookies | Monitoring game performance and detecting technical issues | 90 days |
You can manage or disable cookies through your web browser settings. Most modern browsers — including Chrome, Firefox, Safari and Edge — allow you to view, delete or block cookies from specific websites. Please note that disabling required cookies may affect the functionality of the platform 1 Winbet — you may be unable to stay logged in or access certain platform features. Optional cookies can be disabled without affecting the platform's core functionality.
1 Winbet retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with legal obligations. As a general rule, active account data is retained for the duration your account remains active plus 5 years after account closure — this is required to comply with anti-money laundering (AML) legal requirements and to resolve any disputes that may arise.
When you close your account 1 Winbet you and request data deletion, we will delete or anonymise your personal data that is no longer required for legal obligations within 30 days of your request being confirmed. Data that must be retained for legal purposes, such as financial transaction records, will be securely archived and will no longer be used for regular operational purposes.
In operating the platform 1 Winbet, some of your personal data may be processed or stored outside Malaysia — particularly when using services from game providers or technology infrastructure providers based in other countries. When this occurs, we ensure that such data transfers are carried out with adequate protections through recognised mechanisms, including standard data processing agreements, appropriate contractual clauses, and verification that the recipient country maintains data protection standards equivalent to or higher than those required under Malaysia's PDPA.
You have the right to obtain information about any cross-border data transfers relating to your data by contacting the support team 1 Winbet via email or live chat. We will provide the relevant information within a reasonable timeframe.
Platform 1 Winbet is intended for users aged 18 and above. We do not knowingly collect or process personal data from individuals under 18. Our registration process includes age verification, and any account found to belong to an underage individual will be closed immediately and all related data deleted.
If you have reason to believe that someone under the age of 18 has registered an account at 1 Winbet, please contact our support team immediately. We take the protection of children's privacy seriously and will act promptly to resolve any such situation.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how 1 Winbet handling your personal data, please contact us through the following channels:
We encourage you to contact us directly before filing a complaint with the authorities — we are committed to resolving any privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
Answers to the most frequently asked questions by Malaysian players regarding privacy and data protection