we1 | Privacy Policy and Personal Data Protection

1. Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how we1 ("Platform", "we") collects, uses, stores, discloses, and protects your personal data when you register for, access, or use the we1.biz platform and all related services.

By registering an account or using any part of the we1 platform, you consent to the collection and processing of your personal data as described in this Policy. If you disagree with any aspect of this Privacy Policy, please stop using the we1 platform immediately and contact us to close your account.

Legal Basis: The we1 Privacy Policy is built entirely on Malaysia's Personal Data Protection Act 2010 (Act 709). We adhere to the seven core principles set out in the Act — the General Principle, Notice & Choice Principle, Disclosure Principle, Security Principle, Data Integrity Principle, Access Principle, and Data Transfer Principle.

This policy covers all data collected through the we1.biz website, any mobile applications we may offer, email and message communications, customer support interactions, and all other online services provided by we1.

2. Personal Data We Collect

We1 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and the sources from which it is gathered:

2.1 Data You Provide Directly

Registration Information: Full name, Malaysian phone number, date of birth, email address, and your chosen password.
Identity Verification Information: A copy of your Malaysian Identity Card (MyKad) or passport when requested for KYC (Know Your Customer) verification.
Financial Information: Registered payment method details such as your Touch 'n Go account number, GrabPay, DuitNow, Boost, ShopeePay, FPX, or bank account details required to process deposits and withdrawals.
Communications: Messages, emails or conversation records you send to the we1 customer support team.

2.2 Automatically Collected Data

Platform Usage Data: Betting history, game types accessed, wager amounts, wins and losses, and complete transaction history.
Technical Data: IP address, web browser type and version, device type (smartphone, tablet, desktop), operating system, and screen resolution.
Session Data: Login and logout times, session duration, pages visited within the platform, and navigation patterns.
Location Data: Geographic location derived from your IP address for regional verification and regulatory compliance purposes. we1 does not collect precise GPS data from your device without explicit consent.
Cookie Data: Information collected through browser cookies and related tracking technologies as described in Section 9 of this Policy.

Data Category	Example	Requirements
Identity	Name, date of birth, MyKad	Required
Contact	Phone number, email	Required
Finance	Payment method, transaction history	Required
Technical	IP, device, browser	Automatic
Usage	Game history, bets	Automatic
Communication	Customer support records	Choice

3. Purposes for Use of Personal Data

We1 uses your personal data solely for lawful, clearly stated purposes. We will not use your data for any other purpose without notifying you and obtaining your consent beforehand. The primary purposes for which we use your data are as follows:

Account Management: Creating, verifying, and maintaining your we1 account; confirming your identity at login; processing password recovery requests.
Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX; processing winnings withdrawals; maintaining transaction records as required for legal compliance.
Regulatory & Legal Compliance: Meeting KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements; complying with regulatory authority directives; maintaining audit records as required by law.
Platform Security: Detecting and preventing fraud, bonus abuse, and cybersecurity threats; monitoring for suspicious account activity; protecting the integrity of the platform for all users.
Customer Support: Responding to your enquiries and complaints; resolving disputes; providing technical support; maintaining interaction records for quality monitoring.
Service Improvement: Analysing platform usage patterns on an aggregated basis to improve the interface, performance, and overall user experience.
Service Communications: Sending important notifications relating to your account, changes to our Terms & Conditions or Privacy Policy, and security-related information.
Marketing (with Consent): Sending promotional information, bonus offers, and the latest we1 updates only to members who have given their explicit consent to receive marketing communications.

You may withdraw your consent to receive marketing communications at any time by contacting we1 customer support or using the "unsubscribe" link in our marketing emails. Withdrawing marketing consent does not affect your core account services.

4. Data Sharing with Third Parties

We1 understands that your trust depends on how we manage data sharing. We maintain a strict policy in this regard. we1 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes.

However, there are limited circumstances in which we1 may need to share certain data with specific parties for legitimate reasons:

Payment Service Providers: Required transaction information is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and the FPX platform to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and Bank Negara Malaysia regulations.
Game Software Providers: Minimum necessary game information is shared with third-party game software providers to operate the casino and sports games available on the we1 platform. These providers do not receive your full identity details.
Identity Verification Companies: For KYC processes, we may engage certified third-party identity verification services that comply with all applicable data protection requirements.
Regulatory Authorities & Law Enforcement: we1 will disclose the necessary data to Malaysian authorities when required to do so by law, court order, or official directive from a regulatory body.
Auditors & Legal Advisors: To the limited extent required for financial audits, compliance assessments, or legal advice, with all parties bound by professional confidentiality obligations.

International Data Transfers: Some of our service providers may operate outside Malaysia. In such cases, we1 ensures that any cross-border data transfers comply with Malaysian PDPA requirements and are governed by data processing agreements that provide protections equivalent to those afforded in Malaysia.

5. Data Security & Protection

The security of our members' personal data is we1's highest priority. We continuously invest in security infrastructure to ensure your data remains protected at all times. Our technical and organisational security measures include:

256-bit SSL/TLS Encryption: All communications between your device and we1's servers are encrypted using 256-bit SSL/TLS protocols — the same standard used by Maybank2u and Malaysia's leading banks.
Data-at-Rest Encryption: Sensitive data such as passwords (stored as one-way hashes), payment details, and identity documents are kept in encrypted form on our servers.
Tiered Access Controls: Access to member data is restricted on a strict need-to-know basis. Staff may only access data relevant to their job responsibilities, and all access is logged in detail.
Two-Factor Authentication: Our internal systems use two-factor authentication to prevent unauthorised access even in the event that an administrator password is compromised.
24/7 Monitoring: we1's infrastructure is continuously monitored for security threats and suspicious activity.
Regular Security Audits: we1 conducts regular internal and external security audits by certified cybersecurity professionals to identify and address potential vulnerabilities.
Financial Data Segregation: Player account balances are held separately from the company's operating funds and kept in protected accounts.

While we1 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a serious data breach, we will notify you and the relevant authorities within the timeframe required by law.

6. Data Retention Period

We1 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or to comply with applicable legal requirements.

Active Account Data: Retained for the duration your we1 account remains active, and for as long as required after account closure for legal compliance purposes.
Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and anti-money laundering legal requirements.
Identity Verification Documents (KYC): Retained for the duration of the active account and for a minimum of five (5) years after account closure.
Security Logs: Retained for twelve (12) months for the purpose of security incident detection and investigation.
Customer Support Records: Retained for three (3) years for reference and service improvement purposes.
Marketing Data: Retained until you withdraw your marketing consent or close your account.

Once the retention period has lapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

7. Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010, you have certain rights regarding your personal data held by we1. We are committed to helping you exercise these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request that we correct or update it.

Right to Erasure

You may request the deletion of your personal data, subject to any applicable legal retention requirements.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.

Right to Data Portability

You may request the data you have provided to us in a machine-readable format for transfer to another service.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time.

How to Exercise Your Rights: To exercise any of the rights above, please contact the we1 Data Protection Officer by email at privacy@we1.biz or through our customer support Live Chat. Please include your full name, account number, and the nature of your request. We will acknowledge receipt within 3 business days and provide a full response within 21 business days.

8. Cookies & Tracking Technologies

We1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

Essential Cookies (Required): These cookies are required to operate the platform's core functions, including login authentication, session management and security. The we1 platform cannot function properly without them.
Preference Cookies: Allowing the platform to remember your preferences — such as language, display settings, and game selections — to improve ease of use.
Analytics Cookies: Helps us understand how members interact with our platform in aggregate — most frequently visited pages, average time on platform and similar metrics. This information is used to improve the we1 platform.
Security Cookies: Used to detect and prevent fraudulent activity, automated bots, and other security threats.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the we1 platform. Essential cookies cannot be disabled without impacting your ability to use the platform.

we1 does not use third-party cookies for advertising or cross-site tracking purposes. Our analytics cookies process only aggregated data that cannot be used to identify any individual.

9. Privacy Specifics for Mobile Users

Many we1 members access the platform via their smartphones. We understand that mobile devices store more personal and sensitive information than a typical computer, which is why we take additional measures to protect the privacy of we1's mobile users:

The we1 mobile web platform is optimised with the same security controls as the desktop version — with no compromise on data protection.
We1 does not request access to your device's camera, microphone, contacts list, or GPS data. Only permissions genuinely necessary for platform functionality will be requested.
Automatic login sessions have a set expiry period to prevent unauthorised access in the event you forget to log out.
We recommend enabling your device's lock screen features (PIN, fingerprint, or facial recognition) to prevent unauthorised access to your we1 account if your phone is lost or stolen.

10. Children's Privacy Protection

The we1 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we discover that data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered an account on we1 while underage, please contact us immediately at privacy@we1.biz so that we may take the appropriate action.

11. Changes to This Privacy Policy

We1 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any significant changes will be communicated to you via an in-platform notification or an email to the address registered on your account.

The "Last Updated" date shown at the top of this page always reflects the date the current version of this Privacy Policy came into effect. We encourage you to review this page periodically to stay informed about how we protect your data. Continued use of the we1 platform following any changes constitutes acceptance of the updated Privacy Policy.

Our commitment: If there are any significant changes to how we use your personal data — especially changes that affect your rights — we will seek your renewed consent before those changes take effect. We will not retroactively change how we use your data without your consent.

12. Contact we1's Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we1 handles your personal data, we encourage you to reach out to us directly. We are committed to addressing all enquiries with seriousness and transparency.

You may reach we1's Data Protection Officer through the following channels:

Privacy Email: privacy@we1.biz (for privacy-related enquiries and data rights requests)
General Support Email: support@we1.biz
Live Chat: Available 24/7 via the we1.biz platform in Bahasa Melayu

We aim to respond to all privacy enquiries within 7 working days and to resolve more complex requests within 21 working days as stipulated by Malaysia's PDPA. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

This Privacy Policy forms part of the we1 Terms & Conditions and should be read alongside the Terms & Conditions us. For information on responsible gambling and self-exclusion tools, please visit the Responsible Gambling us. We sincerely appreciate your trust in we1 and are committed to upholding that trust through transparent and responsible privacy practices.

Privacy Policy we1 – Protecting Your Personal Data

We1's Six Core Privacy Principles

Malaysia PDPA Compliance

Minimum Data Collection

No Sale of Data to Third Parties

Industry-Grade Security

Right of Access & Data Correction

Full Transparency on Data Usage