Privacy Policy 1mwin – Our Commitment to Malaysian Players

This Privacy Policy describes how 1mwin — an online betting platform accessible at 1mwin.best — collect, process, store, and protect the personal data of users who register and use our services. It applies to all Malaysian players using the 1mwin platform, whether via web browser or mobile app.

By registering a 1mwin account or continuing to use the platform after this policy's effective date, you consent to 1mwin processing your personal data as described in this document. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

This policy covers all the ways 1mwin interacts with your personal data — from the moment you first visit the site, throughout your time as an active member, through to data deletion after you close your account.

1mwin operates on a data minimisation principle — we only collect information that is genuinely necessary to provide a safe, fair, and seamless betting experience to Malaysian players. Below are the categories of data we collect:

Data you provide directly:

• Registration data: Full name (as per MyKad), active Malaysian phone number, password (stored in encrypted hash form — never in plain text), and date of birth for age verification.
• Identity verification (KYC) data: A copy of your MyKad or other identity document, a selfie for facial verification where required, and proof of Malaysian residential address in certain cases.
• Financial data: Bank account numbers, e-wallet details (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay), or FPX information you register for deposit and withdrawal purposes.
• Support communications: The content of messages you send to the 1mwin support team via Live Chat or email, including any attachments or screenshots you share.

Automatically collected data:

• Log and technical data: IP address, browser type, device operating system, screen resolution, access time and date, and pages visited during your session.
• Activity data: Full betting history, deposit and withdrawal records, games played, session times, and interactions with 1mwin platform features.
• Cookie data: Information stored via cookies and similar tracking technologies. Further details are available in the Cookie Usage section below.
• Location data: General location based on IP address for regional verification and account security purposes — not your precise GPS location.

Every piece of data 1mwin collects has a clear and legitimate purpose. Below is a detailed explanation of how your personal data is used in the operation of the 1mwin platform:

Further explanation of primary data uses:

• Fraud detection and account security: 1mwin uses log data, IP addresses, and activity patterns to identify suspicious login attempts, multiple account usage, bonus abuse, and potentially fraudulent activity. This is to protect you and all other 1mwin players.
• AML legal compliance: As a responsibly operated betting platform, 1mwin is required to retain certain transaction records and conduct necessary checks in accordance with internationally recognised anti-money laundering principles.
• Personalised marketing (with your consent): If you chose to receive marketing communications from 1mwin during registration, we may send you notifications about promotions relevant to your gaming interests — for example, EPL sports offers if you frequently use the football betting section. You may withdraw this consent at any time.

1mwin processes your personal data on a valid legal basis in every instance. Understanding these bases helps you see why we require certain data and what happens if you choose not to permit its collection or use.

• Contract performance: When you create a 1mwin account, we enter into a contractual agreement with you. Processing data such as registration details, financial information, and transaction history is strictly necessary for us to fulfil those contractual obligations — including processing deposits via DuitNow or GrabPay, crediting winnings, and providing customer support. Without this data, we cannot deliver our services.
• Legitimate interests: We have a legitimate business interest in processing activity data for fraud prevention, platform security, and usage analytics that help us improve the experience for all Malaysian players. This interest does not override your privacy rights, and we always balance it with appropriate protective measures.
• Consent: For non-core processing activities such as marketing communications, the use of non-essential cookies, and participation in enhanced analytics programmes, we rely on your explicit consent. You are free to grant or withhold this consent, and may withdraw it at any time without affecting your continued use of your 1mwin account.
• Legal obligation: In certain circumstances, 1mwin is legally obligated to process and retain specific data — for example, financial transaction records for AML compliance purposes, or to disclose information to authorities when ordered by a court or competent regulatory body.

1mwin does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is a commitment we do not compromise on. However, in the course of operating the platform, there are limited situations where data must be shared with specific parties directly involved in delivering services to you.

Parties that may receive your data and the purposes for doing so:

• Payment service providers: When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the necessary transaction information is shared with the respective provider to process the payment. These providers have their own privacy policies and are bound by industry payment security standards.
• Game software providers: To provide live casino, slots, and poker games, 1mwin works with recognised game software providers. The minimum data needed to enable gameplay (an anonymised player ID and balance) is shared with them. These providers do not have access to your real name or financial information.
• Identity verification service providers: For KYC purposes, 1mwin may use third-party identity verification services that comply with high security standards. Data shared is limited to what is required for verification and is not used by these providers for any other purpose.
• Legal authorities: 1mwin will disclose required data to Malaysian or international authorities if mandated by a valid court order, in the context of a related financial crime investigation, or to meet AML reporting obligations. We will notify you of any such disclosure unless prohibited by law.

1mwin does not use third-party advertising networks that track users across websites for targeted advertising purposes. We do not integrate social media plugins that collect your data without your knowledge and consent.

Protecting the personal data of Malaysian players is 1mwin's top technical and operational priority. We invest seriously in security infrastructure that meets and exceeds the standards of the international online betting industry.

Technical security measures implemented by 1mwin:

• Data encryption in transit: All communications between your browser or app and 1mwin's servers are protected by TLS 1.3 with AES-256 encryption — also known as 256-bit SSL. This ensures that no third party can intercept or eavesdrop on your data as it travels across the internet.
• Data encryption at rest: Sensitive data such as financial information and identity documents is stored in encrypted form in 1mwin's database. Your password is never stored in plain text — it is processed through a one-way cryptographic hash function that cannot be reversed.
• Role-based access control: Only 1mwin staff with a legitimate business need may access user data, and that access is limited to the minimum data required for their role. All access to sensitive data is logged and monitored.
• Two-factor authentication (2FA): 1mwin provides and actively encourages the use of 2FA for all accounts. By enabling 2FA, you add an extra layer of security ensuring that even if your password is compromised, no one can access your 1mwin account without the verification code from your device.
• Continuous threat monitoring: 1mwin's systems are monitored around the clock to detect any abnormal activity or intrusion attempts. Our cybersecurity team responds to threats in real time.
• Regular security testing: 1mwin conducts regular penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system in the world can guarantee 100% protection at all times. We continuously strengthen our defences and encourage you to practise good cybersecurity hygiene on your end as well.

1mwin uses cookies and similar tracking technologies to keep the platform running smoothly and deliver the best experience for Malaysian players. This section explains the types of cookies we use, their purpose, and the control options available to you.

Types of cookies used at 1mwin:

• Mandatory Essential Cookies
  Required for core platform functionality — including login sessions (keeping you signed in during a session), CSRF security (preventing cross-site request forgery attacks), and platform synchronisation cookies that ensure correct display. These cookies cannot be disabled as the platform will not function without them.
• Functional User Preference Cookies
  Storing your preferences such as interface language, favourite bet types, and display settings. This allows 1mwin to remember your preferences between sessions so you do not have to reconfigure them each time you log in.
• Analytics Analytics Cookies (with consent)
  Where you have given consent, we use anonymised analytics data to understand how players interact with the 1mwin platform — which pages are visited most, where users encounter difficulties, and which features are most popular. This data helps us continuously improve the user experience.

Your cookie controls: You can manage cookies through your browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note, however, that disabling essential cookies will affect the functionality of the 1mwin platform. For preference and analytics cookies, you may withdraw your consent at any time via your 1mwin account settings without impacting core platform functionality.

1mwin does not retain your personal data any longer than necessary. Retention periods are determined by the original purpose of data collection and any applicable legal obligations. The following is a general guide to the data retention periods we apply:

• Active account data: For the duration of your 1mwin membership, all account data is retained to enable us to provide services to you.
• Data after account closure: After you close your 1mwin account, basic personal data (name, phone number, email) is retained for a maximum of 2 years for reference purposes in the event any dispute arises following account closure.
• Financial transaction records: Deposit, withdrawal, and related transaction records are retained for 7 years in line with financial industry practice for AML compliance and internal audit purposes. This includes payment records made via Touch 'n Go eWallet, DuitNow, GrabPay, and other methods.
• Security logs: System logs used for fraud detection and security are retained for 12 months and then deleted or anonymised.
• Customer support communications: Communication records with the 1mwin support team are retained for 3 years to allow reference should the same issue arise again.

As a Malaysian player who has entrusted 1mwin with your personal data, you hold important rights that we fully respect. Below is a list of rights you may exercise at any time:

To exercise any of the rights above, please contact us by email at support@1mwin.best stating the right you wish to exercise and your account details for identity verification purposes. We will respond within 30 days and notify you if additional time is required.

1mwin strictly prohibits the use of its platform by individuals under the age of 18. We do not knowingly collect or process personal data of children or minors.

If you are a parent or guardian and believe that your child under the age of 18 has registered a 1mwin account using inaccurate information or without your consent, please contact us immediately at support@1mwin.best. We will review and close the account without delay, delete all associated data, and return any funds remaining in the account to you as the legal guardian.

1mwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or new technologies we adopt. When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the 1mwin platform homepage for a minimum period of 14 days.
• For highly material changes that significantly affect your privacy rights, we will send you a direct notification via your registered phone number or email address.

Continued use of the 1mwin platform after the effective date of an updated policy will be considered acceptance of those changes. If you do not agree with the updated policy, you have the right to close your account before it takes effect.

If you have any questions, concerns, or complaints regarding how 1mwin handles your personal data, or if you wish to exercise any of the rights described in the Your Rights section, please contact us through one of the following channels:

• Privacy email: support@1mwin.best — please include "Data Privacy Enquiry" in the subject line to ensure your message is handled by the right team. Typical response time is 2 to 4 business hours.
• Live Chat: Available 24/7 in Bahasa Melayu via the Live Chat button in your 1mwin account. For straightforward privacy inquiries, this is the fastest way to get an answer.
• FAQ: Many frequently asked privacy questions are answered on the Frequently Asked Questions us.

We are committed to responding to every privacy inquiry seriously and thoroughly. If you feel our response is unsatisfactory, you have the right to lodge a complaint with the relevant data protection regulatory authority in your country.