Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by 1betwin ("1betwin", "we", "us", "our"), the operator of the online sports betting and casino gaming platform accessible at https://1betwin.cam and any associated subdomains or mobile interfaces. It sets out how we collect, use, store, share, and protect the personal data of individuals ("Users", "you") who register for or use our services.

1betwin is committed to handling personal data responsibly, in a manner consistent with internationally recognised data protection principles. By registering an account with 1betwin or otherwise using our platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, email address, date of birth, identification number, IP address, and financial details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, 1betwin acts as the Data Controller in respect of User data.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller in accordance with the Controller's instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which you signify acceptance of the Processing of your Personal Data.
• "KYC" means Know Your Customer identity verification procedures conducted pursuant to international anti-money-laundering standards.
• "Cookies" means small text files placed on your device by the platform to store session or preference information.

3 Data We Collect

The categories of Personal Data that 1betwin collects and Processes in connection with the provision of our services are set out in the table below:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) except where required by applicable law or where you voluntarily provide such information in the context of a responsible gambling self-exclusion request.

4 How We Collect Your Data

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you through: account registration forms; KYC verification submissions (including identity documents); deposit and withdrawal requests; customer support interactions; and the completion of any surveys, feedback forms, or promotional entries.

4.2 Automatically During Platform Use

When you access and use the 1betwin platform, certain Technical and Usage Data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, browser type, device identifiers, pages visited, and session duration. See Section 8 (Cookies & Tracking) for full details.

4.3 From Third-Party Sources

We may receive Personal Data about you from third-party service providers engaged in payment processing (such as FPX, DuitNow network operators, Maybank, CIMB, Public Bank, Hong Leong Connect, and e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay), identity verification agencies, fraud detection services, and industry-standard KYC database providers. All such third parties are required to handle your data lawfully and to share only what is necessary for the described purpose.

5 Legal Basis for Processing

1betwin relies on the following legal bases for Processing your Personal Data:

• Contractual Necessity: Processing is necessary to perform the contract between you and 1betwin — i.e., to operate your account, accept bets, process deposits and withdrawals, and provide customer support.
• Compliance with Legal Obligations: Processing is required to comply with international KYC, AML, and responsible gambling obligations imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, sustainable platform — including fraud prevention, security monitoring, and product improvement — where such interests are not overridden by your fundamental rights and interests.
• Consent: Where Processing is based on consent (for example, marketing communications), you may withdraw that consent at any time by updating your preferences within your account settings or by contacting our support team.

6 How We Use Your Personal Data

1betwin uses the Personal Data we collect for the following purposes:

• To create, verify, and manage your player account;
• To process financial transactions including deposits and withdrawals via Malaysian payment channels;
• To conduct KYC identity verification and age verification (21+ minimum) as required by our licensing obligations;
• To monitor transactions for anti-money-laundering (AML) compliance and report suspicious activity where required by law;
• To deliver customer support via live chat and email;
• To detect and prevent fraud, cheating, collusion, and other prohibited activities;
• To operate and enforce our responsible gambling programme, including monitoring for problem gambling indicators and facilitating self-exclusion requests;
• To send transactional communications (account confirmations, deposit receipts, withdrawal notifications, security alerts);
• To send marketing communications where you have provided your consent — you may opt out at any time;
• To conduct analysis and improve the quality, security, and functionality of the platform;
• To comply with any applicable legal obligations or regulatory requirements.

7 Data Sharing & Disclosure

1betwin does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: Banks and e-wallet operators (including those supporting FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, and GrabPay) to process your financial transactions;
• Identity Verification Agencies: Third-party KYC and AML screening providers engaged to verify your identity and comply with our licensing requirements;
• Technology & Infrastructure Providers: Cloud hosting, security monitoring, and software service providers who Process data on our behalf under strict data processing agreements;
• Regulatory & Law Enforcement Authorities: Where we are legally obliged to disclose information to our licensing authority, financial intelligence units, or law enforcement agencies in connection with fraud, money laundering, or other criminal investigations;
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or restructuring, your Personal Data may be transferred to successor entities, subject to notice to affected users.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you access the 1betwin platform. They allow the platform to recognise your browser, store session state, remember your preferences, and collect usage analytics.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function — session management, login authentication, and security tokens. These cannot be disabled without preventing platform use.
• Functional Cookies: Remember your preferences such as language settings, interface layout, and deposit method selections to improve your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the platform. This data is used solely to improve the quality and performance of our services.
• Security Cookies: Support fraud detection systems, identify suspicious device patterns, and flag potentially unauthorised access attempts.

8.3 Managing Cookies

You may control cookie settings through your browser's built-in privacy settings. Please note that disabling strictly necessary cookies will prevent you from using the platform. Disabling functional or analytics cookies may affect platform performance and your user experience.

9 Data Retention

1betwin retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention guidelines apply:

• Account & Identity Data: Retained for the duration of your account plus a minimum of five (5) years after account closure, to comply with AML and KYC record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in line with international AML standards;
• Communications Data: Retained for up to three (3) years from the date of the last communication, or longer if relevant to an open dispute or legal matter;
• Technical & Usage Data: Retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained in aggregate form indefinitely for analytical purposes;
• Marketing Preference Data: Retained until you withdraw consent or request deletion, unless a longer period is required by law.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

10 Data Security

1betwin implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive data fields including financial details and identity document copies;
• Role-based access controls limiting employee access to Personal Data strictly to those with a need-to-know function;
• Multi-factor authentication requirements for all administrative platform access;
• Regular independent penetration testing and vulnerability assessments;
• Real-time intrusion detection systems and automated security event alerting;
• Comprehensive security incident response procedures with defined notification timelines.

While we implement all reasonable security precautions, no system connected to the internet can be guaranteed to be entirely secure. You are responsible for maintaining the security of your own account credentials and for notifying us immediately of any suspected unauthorised access.

11 Your Rights in Respect of Your Personal Data

Subject to applicable law and our legitimate interests in maintaining secure platform operations, you have the following rights in respect of the Personal Data we hold about you:

To exercise any of the above rights, please contact us using the details provided in Section 16. We will acknowledge all valid requests within five (5) business days and aim to fulfil them within thirty (30) days. We may require identity verification before processing any request.

12 International Data Transfers

As an internationally licensed platform, 1betwin may transfer Personal Data to countries outside Malaysia for storage, Processing, or service delivery purposes. Such transfers may include jurisdictions where data protection laws differ from those in Malaysia.

Where Personal Data is transferred internationally, 1betwin implements appropriate safeguards including standard contractual clauses and binding data processing agreements with all recipients, to ensure that your data receives an equivalent level of protection regardless of where it is Processed.

13 Children & Minors

The 1betwin platform is strictly for adults aged 21 years and above. We do not knowingly collect, store, or Process Personal Data belonging to individuals under the age of 21. All account registrations are subject to identity and age verification. If we become aware that an account is held by an individual under 21, we will immediately close the account, return any deposits, and securely delete associated Personal Data.

If you believe that a minor has registered an account on our platform, please contact us immediately using the details in Section 16.

14 Third-Party Links & Services

The 1betwin platform may contain references or links to third-party payment providers and services (such as Maybank2u, CIMB Clicks, and Touch 'n Go eWallet). 1betwin is not responsible for the privacy practices of any third-party services and we encourage you to review the privacy policies of any external platforms you access. This Privacy Policy applies solely to data Processed by 1betwin in connection with the provision of our own services.

15 Amendments to This Policy

1betwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where amendments are material, we will notify registered Users by email to the address associated with their account and update the "Last updated" date at the top of this page.

Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

16 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or our data practices, please contact the 1betwin data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the platform — the fastest way to reach us.
• Email: [email protected] — please include "Privacy Request" in the subject line for data-related enquiries.

We will acknowledge all privacy-related written enquiries within five (5) business days and endeavour to resolve them within thirty (30) days. Complex requests may take longer, in which case we will keep you informed of the expected timeline.