Updated: January 2026 256-bit SSL

Your Data Protection & Privacy

We1win Privacy Policy – Data Protection for Malaysian Players

Your privacy is our priority. This document clearly and transparently explains how we1win collects, uses, stores, and protects your personal information as a member of our platform. We have written this policy in plain, straightforward language — so you know exactly what happens with your data, without having to guess.

10 Key Sections PDPA Compliance No Data Sales
Our Privacy Commitment
Data Encryption 256-bit SSL
Sale of Data to Third Parties Never
Legal Compliance Malaysia PDPA
Right to Data Access Available to You
Data Retention Period Minimum Necessary
Register Securely
256
SSL Encryption Bits
0
Sale of Data to Third Parties
10
Privacy Policy Sections
24/7
Security Monitoring

6 Ways we1win Protects Your Privacy

Your trust is our most valuable asset. This is we1win's genuine commitment to every member's privacy.

256-bit SSL Encryption at Every Level

Every bit of data transmitted between your device and our servers we1win protected by 256-bit SSL encryption — the same level used by Malaysia's major banks. This means your login credentials, card details, and transaction history cannot be intercepted by any third party.

No Sale or Rental of Data

we1win has never and will never sell, rent, or trade your personal data to advertisers, data brokers, or any unrelated third parties. Your data belongs to you — we only use it for the purposes you explicitly consented to at the time of registration.

Full Control in Your Hands

You have the right to access, amend, and request the deletion of your personal data held by we1win at any time. All such requests are processed within 14 business days. You can also manage your marketing communication preferences directly from within your account.

Full PDPA Malaysia Compliance

we1win operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All collection, processing, and storage of our members' personal data adheres to the principles set out under the PDPA, providing you with robust legal protection as a user.

Data Segregation & Restricted Access

Your personal data at we1win stored in isolated server environments and accessible only to employees who require such access to perform their duties. All access to sensitive data is logged and regularly audited by our internal security team.

Marketing Communications Control

You can choose the types of communications you wish to receive from we1win — promotional emails, in-app notifications, or SMS. Every marketing communication includes an easy-to-access unsubscribe link. We respect your preferences and will not send you unwanted communications.

Each time you load a page we1win, registering an account, making a deposit via Touch 'n Go eWallet or DuitNow, or simply chatting with our support team, there is data moving behind the scenes. This data underpins your account security, smooth financial transactions, and a personalised gaming experience.

At we1win, we understand that your trust in us is not something to be taken lightly. Personal information — your name, phone number, transaction records — is sensitive data that you have entrusted to us. This Privacy Policy was written not merely to satisfy legal requirements, but as a genuinely readable explanation that any ordinary Malaysian player can understand, without needing a law degree.

By using the platform we1win, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform. For any enquiries, the support team at we1win available to assist via live chat 24/7.

This Privacy Policy is to be read together with Terms & Conditions we1win. These two documents together form the foundation of the agreement between you and our platform.

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by we1win ("we", "Platform") and applies to all users and members who access or use the we1win platform via we1win.express or any related mobile applications we provide.

This Policy covers all types of personal data processing we carry out in the context of providing our services to you, including but not limited to:

  • Registration and account management
  • Processing deposits and withdrawals via Malaysian eWallets and FPX
  • Provision of games and Sports Betting
  • Bonus management, promotions, and VIP programmes
  • Customer support communications
  • Identity verification (KYC) and anti-money laundering prevention
  • Platform usage analytics for service improvement

we1win operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). As a responsible data controller, we take all reasonable steps to ensure your personal data is handled securely, transparently, and in accordance with the purposes you have consented to.

2Types of Personal Data We Collect

we1win collects your personal data through several means — information you provide directly when registering or contacting us, data collected automatically as you use the platform, and in some cases, data from legitimate third-party sources.

Data You Provide Directly:

  • Identity information: Full name, date of birth, gender, nationality, identity card or passport number
  • Contact information: Malaysian phone number, email address, residential address
  • Account credentials: Username and password (stored in encrypted form — we cannot read your password)
  • Financial information: eWallet account numbers (Touch 'n Go, GrabPay, DuitNow), bank details for withdrawals via FPX
  • Verification documents: Copies of your identity card, utility bills, or other KYC documents requested during the verification process

Automatically Collected Data:

  • Technical data: IP address, browser type, operating system, device type, screen resolution
  • Usage data: Pages visited, session time and duration, games played, login frequency
  • Transaction data: Deposit and withdrawal history, betting history, bonuses claimed
  • Location data: General location based on IP address (not precise GPS location)
  • Cookie data: Session cookies, preference cookies, and analytics cookies (see Section 9)
Data Categories Example Primary Purposes
Identity Name, IC, Date of Birth KYC Verification, Security
Contact Phone, Email Communications, Support
Financial EWallet, Bank Account Deposits, Withdrawals
Usage IP, Device, Session Security, Analytics
Transactions Deposit History, Betting Financial Records, Audit

3How We Use Your Data

we1win only uses your personal data for legitimate, stated purposes. Below is a detailed breakdown of each use:

  • Account management and verification: Processing your registration, verifying your identity through KYC, and ensuring the security of your account on we1win.
  • Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and other Malaysian payment methods, as well as withdrawals to your account.
  • Provision of gaming services: Allows you to access and enjoy all games on we1win — slots, live casino, poker, table games, fishing games, and Sports Betting including the Malaysia Super League and EPL.
  • Bonus and promotions management: Processing bonus eligibility, calculating weekly cashback, managing the VIP programme, and sending you relevant promotional information.
  • Customer support: Addressing your enquiries, resolving technical or financial issues, and providing assistance via live chat, email, or other channels.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, or use of the platform in violation of our terms.
  • Platform improvements: Analyses aggregated usage patterns to improve the user experience, identify technical issues, and develop useful new features.
  • Legal compliance: Meeting our obligations under Malaysia's PDPA, anti-money laundering legislation, and relevant regulatory authority requirements.

Important: we1win does not use your data to make automated decisions that materially affect your rights or interests without human involvement. Any significant risk assessments or account-related decisions are reviewed by qualified team members.

4Legal Basis for Data Processing

Under Malaysia's PDPA and recognised data protection practices, we1win only processes your personal data when there is a valid legal basis for doing so. The following are the bases we rely on:

  • Your consent: For marketing communications and non-essential cookie use, we ask for your explicit consent. You may withdraw this consent at any time through your account settings.
  • Contract performance: Processing necessary for us to deliver the services you request — such as processing deposits or managing your account — is carried out on the basis of contractual necessity.
  • Legal obligations: Certain data processing, such as KYC records and transaction history, is required to fulfil our obligations under applicable Malaysian law.
  • Legitimate interests: We process certain data on the basis of our legitimate interests, such as platform analytics to improve our services and security measures to prevent fraud — provided these interests do not override your fundamental rights.

If you'd like to know the specific legal basis for any particular data processing activity, you're welcome to reach out to the support team we1win and we will provide a detailed explanation.

5Sharing Data with Third Parties

we1win does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. Full stop. That said, there are specific situations where we need to share your data with others as part of delivering our services:

  • Payment service providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, we are required to share the necessary transaction information with the relevant payment operators. These providers are bound by strict confidentiality agreements.
  • Game providers: Providers such as Evolution Gaming, Pragmatic Play, and SA Gaming receive session data required to enable gameplay. This data is limited strictly to what is needed for game operations.
  • KYC service providers: To verify your identity, we may use recognised third-party verification services. All such providers are held to privacy standards equal to or higher than our own.
  • Regulatory authorities: Where required by law or court order, we may be obligated to disclose certain information to the relevant authorities in Malaysia.
  • Technical infrastructure providers: The server hosting, cybersecurity, and analytics services we use may process some of your data as part of their technical operations — all bound by strict data processing agreements.

In all of the above cases, we1win shares only the minimum data necessary for that specific purpose. All our third-party partners are bound by contractual agreements requiring them to protect your data and use it only for authorised purposes.

6we1win Data Security Measures

Protecting your data is more than a technical obligation — it is a responsibility we take personally. we1win continuously investing in security infrastructure to ensure your data remains protected at all times.

  • Encryption in transit: All data transmitted between your browser or app and the servers we1win protected by TLS protocols with 256-bit SSL encryption. This means that even if someone were to intercept your network traffic, the captured data would be completely unreadable.
  • Encryption at rest: Sensitive data such as passwords (stored as irreversible hashes), financial information, and KYC documents are stored in encrypted form within our databases.
  • Role-based access control: Only employees we1win with a legitimate work requirement may access members' personal data. All access is logged, and any unusual access is detected automatically.
  • 24/7 security monitoring: Our monitoring systems are always active, watching for threats such as suspicious login attempts, DDoS attacks, or activity indicating a data breach.
  • Regular security audits: we1win conducting regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
  • Employee training: All staff we1win who handle customer data receive regular privacy and data security training.

While we take all reasonable steps, no system is 100% impenetrable. Should any security incident occur involving your data, we1win will notify you within the timeframe required by applicable law and take appropriate remedial action.

7Data Retention Period

we1win retains your personal data only for as long as it is needed for the stated purpose or as required by applicable law. Our principle is to keep data for the minimum period necessary, then delete or anonymise it securely.

  • Active account data: For as long as your account remains active on we1win, we retain all data necessary to manage your account and provide services to you.
  • Data after account closure: After you close your account, we retain transaction records and KYC information for a minimum of 7 years to fulfil our legal obligations under Malaysian anti-money laundering laws.
  • Support communication records: Live chat conversation logs and email correspondence are retained for 3 years for dispute resolution and service improvement purposes.
  • Technical log data: Access logs and security logs are retained for 12 months for security incident analysis purposes.
  • Marketing data: Information used for marketing communications is retained until you withdraw your consent, after which it will be deleted within 30 days.

Once the retention period has expired and there is no legal requirement to retain the data further, we1win will delete or anonymise the relevant data in a secure and irreversible manner. The data deletion process is logged and internally audited.

8Your Rights as a Data Subject

Under Malaysia's PDPA and data protection best practices, you have the following rights with respect to your personal data held by we1win. We respect all of these rights in full.

Right of Access

You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 14 business days. Log in to your account to view most of your data directly, or contact support for more comprehensive requests.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update much of this information directly in your account profile settings we1win your account, or contact support for corrections that require additional verification.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. Please note that this right is subject to our obligations to retain certain records under Malaysian law — we will inform you if any portion of your data cannot be deleted and explain why.

Right to Object & Restriction of Processing

You have the right to object to the processing of your data for specific purposes such as direct marketing. You may also request that we restrict the processing of your data in certain circumstances while a dispute is pending resolution. Such requests will be processed within 14 business days.

Right to Data Portability

For data you have provided to us based on consent or a contract, you have the right to receive that data in a machine-readable format (such as JSON or CSV). Please contact support we1win to submit a data portability request.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. Use your account settings or contact support to withdraw consent.

To exercise any of the above rights, please contact the support team we1win via live chat or email at support@we1win.express with the subject line "Privacy Rights Request". We will verify your identity before processing the request to safeguard your data security.

9Cookies & Tracking Technologies

Platform we1win uses cookies and similar tracking technologies to deliver a better experience, ensure security, and understand how players use our platform. Below is an explanation of the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note that removing essential cookies may affect certain functions of the platform we1win. For optional cookies, you can manage your preferences through our cookie settings panel, accessible from any page on the platform.

10Policy Amendments & How to Contact Us

we1win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. All material amendments will be communicated to you via:

  • Email notification to your registered email address at least 14 days before the changes take effect
  • Prominent in-platform notifications upon login
  • Updating the "Last updated" date at the top of this page

Continued use of the platform we1win after the amendment's effective date will be deemed acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before the effective date.

If you have any questions, concerns, or complaints regarding how we1win handles your personal data, please contact:

  • 24/7 Live Chat: Stay on the platform after logging in to your account we1win you
  • Privacy Email: support@we1win.express (include "Privacy Inquiry" in the subject line)
  • Response Time: Within 4 business hours for email; real-time for live chat

This Privacy Policy was last updated on: January 2026. We recommend checking this page periodically. By continuing to use we1win, you confirm that you have read and understood this Privacy Policy.

We1win Privacy Policy & Terms of Use

This Privacy Policy is to be read together with the Terms & Conditions we1win which sets out the rules governing use of the platform in full. Together, these two documents form the foundation of the agreement between you and we1win.

Read Full Terms & Conditions →
Responsible Gaming – Privacy & Self-Care Go Hand in Hand

we1win provides deposit limit tools, session time limits, and self-exclusion options that are safely and privately accessible within your account settings. Your use of these tools is completely confidential — only you can view and change these settings. The platform for individuals aged 18 and above only.

Learn More
🔒

Your Data Is Safe. Ready to Play with we1win?

Register a free account today and enjoy industry-standard data protection alongside a welcome bonus of up to RM1,000. Easy deposits via Touch 'n Go eWallet or DuitNow — secure, instant, and with your privacy fully protected.

Bahasa Melayu