We1wn Privacy Policy – Your Personal Data Protection

This Privacy Policy ("Policy") explains how we1wn ("we", "Platform") collects, uses, stores, and protects your personal information when you use our website, mobile app, and all services we offer.

We are fully committed to protecting the privacy of every member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. By using the we1wn platform, you agree to the collection and use of your information as described in this Policy.

If at any time you have questions about how we handle your data, our privacy team is ready to assist via in-platform support.

We1wn collects your personal information through three main channels: information you provide directly, information collected automatically, and information from licensed third parties.

The data we collect is used exclusively for the following purposes and nothing beyond that:

• Account operations — registering and managing your member account, processing financial transactions, and providing access to all games.
• Identity verification — meeting KYC and AML (anti-money laundering) requirements mandated by regulatory bodies.
• Platform security — detecting and preventing fraud, unauthorised access, and suspicious activity on your account.
• Responsible gaming — monitoring wagering patterns to identify signs of problem gambling and take appropriate action.
• Customer support — resolving complaints, responding to enquiries, and ensuring a smooth user experience.
• Platform improvements — analysing usage data in aggregate and anonymised form to improve platform performance and features.
• Communication — sending important notifications regarding your account, promotions (if you have opted in), and policy updates.

We1wn processes your personal data on the following grounds recognised under Malaysia's PDPA:

• Contract performance — data processing necessary to provide the platform services you have registered for.
• Legal compliance — fulfilling regulatory obligations, including KYC, AML, and reporting requirements to relevant authorities.
• Legitimate interest — detecting fraud, ensuring platform security, and protecting the interests of ourselves and other members.
• Consent — for marketing communications and non-mandatory data use, we act only on your explicit consent.

We1wn does not sell your personal data. We only share your information in the following limited circumstances:

• Service providers — licensed payment processors, KYC providers, cloud hosting services, and analytics companies bound by strict data protection agreements.
• Legal requirement — where required by a court, regulatory body, or competent authority under Malaysian law.
• Fraud prevention — sharing with trusted industry bodies or other platforms to prevent and detect fraudulent activity across platforms.
• Business transfers — in the event of a merger or acquisition, members will be notified in advance and their rights will be fully protected.

We invest seriously in security infrastructure to ensure your data remains protected at all times. The technical and organisational measures we implement include:

• Data in transit is encrypted using TLS 1.3 for all communications between your device and our servers.
• Stored data is encrypted using AES-256 — the same standard used by financial institutions and governments.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of security.
• An intrusion detection system (IDS) that monitors suspicious activity 24 hours a day, 7 days a week.
• Regular security audits by independent teams to identify and address any vulnerabilities.
• Access to members' personal data is restricted to employees who require it solely to carry out their responsibilities.

We1wn retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. Our retention guidelines are as follows:

• Active account data — retained for the duration your account is active and for 5 years after account closure to meet legal obligations.
• Financial transaction records — retained for 7 years in accordance with financial and tax regulatory requirements.
• Security logs — retained for 12 months to allow investigation of security incidents if necessary.
• Marketing data — deleted within 30 days after you withdraw consent or request erasure.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be associated with you.

As a we1wn member, you have the following rights regarding your personal data. All requests can be made through your account settings or by contacting our support team:

We1wn will respond to all privacy rights requests within 30 days from the date of receipt.

The we1wn platform uses cookies and similar tracking technologies to enhance the user experience and ensure account security. The cookies we use fall into three categories:

• Essential cookies — required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional cookies — storing your preferences such as language settings, theme, and game preferences to personalise your experience.
• Analytical cookies — collecting anonymised usage data to help us understand how the platform is used and make improvements.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the full functionality of the platform.

The we1wn platform is intended for adult users aged 18 and above. We not intentionally collecting or processing any personal data from individuals under the age of 18.

If we find that a minor's data has been collected inadvertently, we will take immediate action to delete that data and close the relevant account. Parents or guardians who believe their child has used this platform are encouraged to contact us promptly.

We1wn reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

Any material changes will be communicated to members via email or in-platform notification at least 14 days before the amendment takes effect. Continued use of the we1wn platform after the effective date constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following methods:

We are committed to responding to all privacy enquiries within 5 business days.