Official Policy

We1win Privacy Policy – Member Personal Data Protection

We1win prioritises the security and privacy of your data. This document transparently explains how we collect, use, and protect the personal information of every member in Malaysia.

Updated: January 2026

Data Encryption

256-bit SSL

Security Audit

Every Quarter

Your Data Controls

Full & Live

Privacy Support

24/7 Live Chat

Quick Summary: we1win only collects information that is genuinely necessary, does not sell your data to third parties, and gives you full control over your own personal information.

1. Introduction & Scope of This Policy

We1win ("Platform", "we") takes the responsibility of protecting personal data seriously. This Privacy Policy clearly explains how we collect, store, use, and protect the personal information you provide when registering or using the we1win platform.

This policy applies to all users of the we1win platform, including those who browse our website, use the we1win mobile app, or interact with any of our services. By using our platform, you agree to the data collection and usage practices described in this document.

We adhere to the data protection principles established under the Malaysian Personal Data Protection Act 2010 (PDPA), and we are committed to ensuring your information is handled in a transparent, lawful, and fair manner at all times.

Important: If you do not agree with this Privacy Policy, please stop using the we1win platform. Continued use of the platform constitutes full acceptance of this Policy.

2. Information We Collect

We1win only collects information that is strictly necessary to provide a safe, fair, and regulatory-compliant service. The following are the categories of information we collect:

A) Information You Provide Directly

  • Full name, date of birth, and gender upon account registration.
  • Email address and mobile number for verification and communication.
  • Residential address and identification number for KYC verification.
  • Copies of identity documents (ID card, passport) uploaded for identity verification.
  • Bank account or digital wallet details for processing deposits and withdrawals.

B) Information Collected Automatically

  • IP address, device type, operating system, and browser version used.
  • Activity log data including login times, pages visited, and session duration.
  • General location data based on IP address (not precise GPS location).
  • History of gaming activity, betting, deposits, and withdrawals on the platform.

C) Information from Third Parties

  • Identity verification data from approved KYC service providers.
  • Transaction information from payment processors such as FPX, DuitNow, and e-wallet providers.
  • Fraud prevention data from trusted third-party security verification services.
Data Category Primary Purposes Legal Basis
Identity & Contact Account verification, communications Contract & Compliance
KYC Documents Age & identity verification Legal Obligations
Financial Information Deposit & withdrawal processing Contract & Compliance
Technical Data Security & Platform Improvement Legitimate Interest
Game History Services, audit & compliance Contract & Legitimate Interests

3. How We Use Your Information

Every piece of information we collect is used for legitimate and transparent purposes. we1win does not use your personal data for purposes unrelated to the services you use. The following are the primary purposes for data use:

  • Account management: Creating, verifying, and maintaining your member account, including the mandatory KYC process.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions promptly and securely.
  • Platform security: Detecting and preventing fraud, money laundering, and any suspicious or non-compliant activity.
  • Service communications: Sending important notifications regarding your account, transactions, and service updates that directly affect you.
  • Customer support: Helping you resolve any technical issues, transaction disputes, or account-related queries.
  • Responsible gaming: Monitoring gameplay activity patterns to identify signs of problem gambling and offer appropriate assistance.
  • Regulatory compliance: Meeting reporting and record-keeping obligations set by the relevant authorities.
  • Platform improvement: Analysing usage data in aggregate (without identifying individuals) to enhance the user experience.
Marketing Communications: we1win only sends promotional communications to you if you have given consent during registration or through your account settings. You may withdraw this consent at any time via the notification settings in your account.

4. Information Sharing & Disclosure

We1win does not sell, rent, or trade member personal information to any third party for marketing or commercial purposes. We only share data in the following limited situations:

  • Payment processors: Transaction details shared with FPX, DuitNow, Touch 'n Go eWallet, Boost, and cryptocurrency processors solely to complete your financial transactions.
  • KYC & identity verification providers: Identity documents to be reviewed by approved third-party identity verification service providers bound by strict confidentiality agreements.
  • Game service providers: Minimum information required by game providers (such as player ID) to ensure smooth gameplay. These providers do not receive your financial or full identity information.
  • Legal obligations: When required by a court order, regulatory authority directive, or lawful law enforcement investigation.
  • Critical interest protection: In cases where there is a threat to the security or integrity of our platform or members.

All third parties that receive your data are bound by strict data processing agreements and must comply with security and confidentiality standards equal to or higher than our own.

5. Data Security Measures

We1win continuously invests in security infrastructure to ensure your personal and financial data is always protected at the highest level. The technical and organisational measures we implement include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers, ensuring no third party can intercept information in transit.
  • At-rest data encryption for all sensitive data records stored in our database.
  • Two-factor authentication (2FA) available for all member accounts to add an extra layer of security during login.
  • Role-based access control ensuring only authorised personnel can access sensitive member data, with every access logged for audit purposes.
  • 24/7 security monitoring with an intrusion detection system (IDS) that actively monitors any suspicious activity in real time.
  • Periodic security audits by independent third parties every quarter to identify and address any system vulnerabilities before they can be exploited.
  • Incident response plan that has been tested to ensure a rapid response in the event of any data breach.
Shared Responsibility: Data security is a shared responsibility. You are also responsible for keeping your account password confidential and not sharing your login details with anyone.

6. Cookies & Tracking Technologies

We1win uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference cookies: Saving your personal settings such as language preference, display layout, and game preferences for convenience on future visits.
  • Analytics cookies: Helping us understand how users interact with our platform in aggregate, without identifying individuals. This data is used solely for platform improvement purposes.
  • Security cookies: Used to detect suspicious login activity, device verification, and fraud prevention.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the we1win platform. For more information, please refer to your browser's documentation on cookie management.

7. Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by us:

Right of Access

You have the right to request a copy of all personal data we hold about you, in a human-readable format.

Right to Rectification

You may request the correction of any personal information that is inaccurate, incomplete, or outdated.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal record-keeping obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing a reason.

Data Portability Right

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances, such as during a dispute over data accuracy.

To exercise any of the above rights, please contact our customer support team via live chat in the we1win app or by email at [email protected]. We will process your request within 30 business days.

8. Data Retention & Deletion

We1win retains your personal data only for as long as it is needed for the stated purposes or as required by law. The following are our data retention period guidelines:

  • Active account data: Retained for the duration your account is active and for at least 5 years after account closure for regulatory compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with applicable anti-money laundering (AML) legal requirements.
  • KYC documents: Retained for 5 years after the business relationship ends, or longer if required by authorities.
  • Customer support communication logs: Retained for 3 years for dispute reference and service improvement purposes.
  • Aggregated analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the applicable retention period expires, your data will be securely deleted or anonymised using industry-standard procedures. You may request early deletion of your data, subject to legal retention requirements that cannot be waived.

9. Privacy Policy Amendments

We1win reserves the right to update or modify this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or member feedback. Whenever a material amendment occurs, we will:

  • Publishing the latest version of the Privacy Policy on the we1win website with an updated "Last Updated" date.
  • Sending email notifications to your registered address if an amendment materially affects your privacy rights.
  • Displaying a clear notice on the platform's home page for at least 14 days before the amendment takes effect.

Continued use of the we1win platform after a Privacy Policy amendment takes effect constitutes full acceptance of the updated version. If you do not agree with the amendment, you must stop using the platform and contact us to close your account.

Privacy Enquiries: For any enquiries regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer via 24/7 live chat in the we1win app.

Why Your Data is Safe with we1win

We invest in data security because your trust is the foundation of our service.

Bank-Grade Encryption

All data transmitted and stored is protected with 256-bit SSL encryption — the same standard used by leading banking institutions worldwide. Your information cannot be read by any unauthorised party.

Integrated & Secure KYC

The we1win identity verification (KYC) process is handled through an integrated and secure system. Your documents are reviewed by certified KYC providers and are not retained longer than required by law.

Active 24/7 Monitoring

Our security monitoring system operates around the clock to detect any unusual activity on your account. If anything suspicious is detected, you will be notified immediately and your account will be protected automatically.

No Data Sales

We1win has never and will never sell, rent, or lend member personal data to advertisers, data brokers, or any third party for commercial purposes. Your data belongs entirely to you.

Full Control in Your Hands

Through your we1win account settings, you can easily manage communication preferences, view the data we hold, request corrections, or initiate the account closure and data deletion process.

Malaysia PDPA Compliance

Our Privacy Policy is designed in full compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews to ensure our standards remain current and relevant.

Join we1win with Complete Confidence

Your data is protected. Your gaming is secure. Register a we1win account today and enjoy a fair, transparent, and fully safeguarded gaming experience in Malaysia.

Register an Account – Free Download App
Bahasa Melayu