Privacy Policy
Privacy Policy for 1win-asia.my
This Privacy Policy explains how 1win-asia.my and the wider 1win platform collect, use, store and protect information from players in Malaysia. By creating an account or browsing this site, you agree to the practices described here. Because our audience here is based in Malaysia, this policy is written with reference to the Personal Data Protection Act 2010 (PDPA), Malaysia’s main private-sector data protection law, rather than a European-style framework, even though some of the underlying practices look similar.
What Information We Collect
Running an account safely and processing transactions requires a limited set of information:
- Identity details, such as full name and date of birth, used to confirm age and identity.
- Contact information, including email address and phone number, for account verification and communication.
- Payment details connected to deposits and withdrawals, covering card, e-wallet or crypto wallet information depending on the method chosen.
- Technical data, such as IP address, device type and browser information, used to secure logins and flag unusual activity.
- Activity data, including game history, betting activity and bonus usage.
Some of this comes from you directly, through registration forms, KYC documents and support tickets. Some is generated automatically as you use the platform, through session logs and analytics events.
Analytics, Logs and Site Usage
Like most platforms of this size, 1win-asia.my uses analytics tools to understand which pages are visited, how long sessions last, and where technical errors occur. This is generally aggregated and used to improve site performance and content. It sits separately from your account activity data, which is retained for compliance and security reasons rather than marketing analysis.
Cross-Border Data Processing
1win operates internationally, and, strictly speaking, some data processing — such as hosting, fraud checks or customer support tooling — may take place outside Malaysia. The PDPA restricts transferring personal data outside Malaysia unless the receiving location offers a comparable standard of protection, the transfer falls under a recognised exception, or you have given consent as part of using the platform. Creating an account and using cross-border services such as international payment processors or crypto wallets involves this kind of data flow by design.
Forms and Communications
Contact forms, live chat transcripts and support tickets are stored so a conversation can be picked up later without repeating yourself, and so support quality can be reviewed. Where marketing messages are sent, an option to opt out is included.
Third-Party Services
Certain functions rely on third parties: payment processors that handle transactions, identity-verification providers that confirm KYC documents, and analytics or hosting providers that keep the site running. These providers receive only the information needed to perform their function and are expected to handle it under their own confidentiality and security obligations. Personal data is not sold to marketing companies or unrelated third parties.
How Long Data Is Kept
Account and transaction data is retained for as long as an account is active, and for a further period afterward to meet anti-fraud, audit and financial record-keeping requirements common across the iGaming industry. Data no longer needed for these purposes is deleted or anonymised in the ordinary course of business.
Children’s Data
1win-asia.my and the 1win platform are intended for adults aged 18 and over. The platform does not knowingly collect personal data from minors, and age verification is part of the KYC process during withdrawals and account checks. If we become aware that an account belongs to someone under the minimum age, the account is subject to restriction while the matter is reviewed.
Security Measures
Payment and account data are protected using encryption during transmission, and access to sensitive systems is restricted to authorised personnel. Not glamorous, but necessary. No method of storing or transmitting data online is completely risk-free, but reasonable technical and organisational safeguards are applied to reduce that risk, in line with the security principle set out under the PDPA.
Your Rights and How to Make a Request
What can you actually do if a detail in your account is wrong? Individuals in Malaysia generally have rights under the PDPA to access the personal data held about them, request correction of inaccurate data, and, in certain circumstances, limit further processing. These work a little differently from the EU’s GDPR: PDPA rights are exercised by sending a written request to the data user, in this case 1win, rather than through an automatic erasure-by-default model some readers may know from other regions. To make a request, contact support with enough detail to verify your identity and account. Requests are reviewed and responded to within a reasonable timeframe.
Changes to This Policy
This policy is reviewed periodically and may be updated to reflect new features, new third-party providers, or changes in applicable law. The version published on this page is always the current one. Continued use of the site after an update means the revised policy applies to you.
Contact
Questions about this policy or about your personal data can be directed to support through the channels available in your account, or to [email protected] for enquiries not tied to a specific account.