Updated: January 2026 Version 2.4

1win Casino Malaysia Privacy Policy – Player Data Protection

Your privacy is our priority. This document transparently explains how 1win casino collects, uses, stores, and protects the personal information of registered Malaysian players on our platform.

256
SSL Encryption Bits
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
MY Legal Compliance

Introduction

1win casino takes the protection of personal data seriously. This Privacy Policy has been developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. It applies to all players who register, browse, or use any services on the 1win casino platform.

By registering an account on 1win casino or continuing to use this platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use our platform. Should you have any questions, our customer support team is available via email at support@1wincasino-win.com or through the in-platform live chat.

We update this Privacy Policy from time to time to reflect changes in how we handle data or changes in applicable law. The date of the most recent update is displayed at the top of this document. Players are encouraged to check this page periodically.

Our Commitment: 1win casino never sells, rents, or trades players' personal data to any third party for marketing purposes without your explicit consent. Your data belongs to you.

Contents of This Privacy Policy

How We Protect Your Privacy

Six core practices we follow to keep your data secure at 1win casino at all times.

Industry-Grade Encryption

All data transmitted between your device and 1win casino's servers is protected using 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. No sensitive data is ever transmitted in plain text.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access controls and regularly updated firewalls, and monitored around the clock by our security team to detect any suspicious activity.

Restricted Internal Access

Only 1win casino staff who require access to your data in order to carry out their authorised duties are permitted to do so. All staff undergo data protection training and are bound by strict confidentiality agreements.

No Data Sales

1win casino does not and will never sell players' personal data to any external party for marketing or other commercial purposes. Your data is used solely for the purposes set out in this Privacy Policy.

Malaysian PDPA Compliance

Our Privacy Policy and data handling practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). Malaysian players have the right to access, correct, and request the deletion of their personal data.

Regular Security Audits

Our data security infrastructure undergoes regular independent audits to identify and address any vulnerabilities before they can be exploited, ensuring your data protection remains at the highest standard.

1. What Personal Data We Collect

1.1 Information You Provide Directly

When you register an account or use 1win casino's services, you provide us with the following information directly:

  1. Identity information: Full name, date of birth, Malaysian identification card number (MyKad).
  2. Contact information: Email address, Malaysian mobile number, residential address.
  3. Financial information: Details of payment methods used — including e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) and bank account information (Maybank, CIMB and others via FPX) registered for deposits and withdrawals.
  4. Verification documents (KYC): A copy of your MyKad, proof of address, bank statement, or other payment proof requested during the identity verification process.
  5. Communication information: Records of conversations with the customer support team via live chat or email.

1.2 Information Collected Automatically

While you are using the 1win casino platform, our systems automatically collect technical information necessary to ensure the platform operates correctly and securely:

  1. Device data: Device type, operating system, smartphone model, screen resolution.
  2. Browsing data: IP address, web browser type and version, pages visited on the platform, session duration, and links clicked.
  3. Gaming data: Betting history records, games played, amounts wagered, and winnings received.
  4. Transaction data: Complete deposit and withdrawal history, including dates, times, amounts, and payment methods used.
  5. General location data: Country and city based on IP address, used to ensure the platform is accessed from permitted regions.
Data Category Example Information Requirements
Identity Name, MyKad, date of birth Required for registration
Relationship Email, phone number, address Required for active accounts
Finance E-wallet accounts, bank accounts Required for transactions
Technical IP address, device type, browser Collected automatically
Games Betting history, winnings Collected automatically
Communication Support chat records When you contact us

2. How We Collect Your Data

1win casino collects your personal data through the following channels:

  1. Registration form: Information you enter directly when registering a new account on the platform.
  2. KYC process: Identity verification documents you uploaded during the account verification process or when requested by our team.
  3. Financial transactions: Information shared via payment providers (such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX) when you make a deposit or withdrawal.
  4. Platform usage: Technical and gaming data collected automatically through server systems and cookie technology while you use the platform.
  5. Get in touch with us: Information you provide when interacting with our customer support team via live chat or email.
  6. Permitted third-party sources: In certain cases, we may receive information from third-party identity verification service providers who assist us in confirming the accuracy of the details you have submitted.

3. Purposes for Using Your Personal Data

The personal data we collect is used solely for legitimate purposes as outlined below. 1win casino does not use your data for any other purpose without your consent or a valid legal basis.

3.1 Account Management and Services

  1. Creating and managing your player account on the 1win casino platform.
  2. Verifying your identity and confirming that you meet the eligibility requirements to use the platform, including the minimum age verification of 18 years.
  3. Processing deposits, withdrawals, and all other financial transactions on your account in Malaysian Ringgit (MYR).
  4. Providing customer support services and resolving any issues or complaints you raise.

3.2 Security & Compliance

  1. Detecting and preventing fraud, money laundering, and other unlawful activities on the platform.
  2. Ensuring compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable laws.
  3. Fulfilling reporting obligations to the relevant authorities when required by law.
  4. Maintaining audit records required for compliance purposes and dispute resolution.

3.3 Platform Improvements and User Experience

  1. Analysing platform usage patterns to identify areas for improvement and enhance the overall user experience.
  2. Testing new features and monitoring system performance to ensure the platform runs smoothly.
  3. Personalising content and game recommendations based on your preferences and playing history.

3.4 Marketing Communications (with your consent)

  1. Sending you information about relevant promotions, bonuses, and new offers at 1win casino — only where you have given consent to receive marketing communications.
  2. Sending important notifications related to your account, such as deposit confirmations, withdrawal notices, and policy updates.
  3. You may withdraw your consent to receive marketing communications at any time through your account settings or by contacting our customer support team.

We only use your data for the purposes stated above. Should we need to use your data for a new purpose that differs from those stated, we will notify you in advance and seek your consent where required.

4. Sharing Data with Third Parties

1win casino does not sell or trade players' personal data. However, in the course of operating the platform, we may share your data with certain third parties in the following circumstances:

4.1 Authorized Service Providers

We work with third-party service providers who help us operate the platform. These include:

  1. Payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks that support FPX — to process your deposits and withdrawals.
  2. Identity verification service providers: Third parties that assist us in verifying player identity during the KYC process.
  3. Technology infrastructure providers: Companies that provide the server, database, and cybersecurity services used by our platform.
  4. Gaming software providers: Game development companies that supply the slots, live casino, and other gaming products available on our platform.

All third-party service providers are bound by data protection agreements that prohibit them from using your data for any purpose other than what has been specified in their agreement with us.

4.2 Legal Requirements

We may disclose your personal data to the relevant authorities if required to do so under Malaysian law or by court order, including for the purposes of financial crime investigation, legal compliance verification, or the protection of public interest.

4.3 Protection of Rights and Security

In cases involving fraud, serious misconduct, or threats to the security of the platform or other players, we may share relevant data with law enforcement authorities or security investigators.

5. Data Security & Protection

1win casino continuously invests in security infrastructure to ensure your personal data is protected at all times. Key security measures we have in place include:

  1. 256-bit SSL Encryption: All data communications between your device and our servers are encrypted using the highest-grade TLS/SSL protocols, incorporating all current best practices.
  2. Multi-layered access controls: Access to player data within our internal systems is restricted to authorised personnel only, and all access is logged for audit purposes.
  3. Two-factor authentication (2FA): We encourage players to enable 2FA on their accounts as an added layer of protection against unauthorized access.
  4. Real-time threat monitoring: Our systems are monitored 24 hours a day, 7 days a week to detect and respond to any intrusion attempts or suspicious activity.
  5. Independent security audits: Our security infrastructure and practices undergo regular independent assessments by third-party security experts.
  6. Data segregation: Player data is kept separate from platform operational data to minimise the risk of exposure in any security incident.

Incident Notification: In the event of any data breach affecting your personal information, 1win casino will notify you within a reasonable timeframe once the breach has been confirmed, in accordance with Malaysia's PDPA requirements and applicable incident notification standards.

6. Use of Cookies

Like most online platforms, 1win casino uses cookies and similar tracking technologies to enhance user experience and gather analytics data. Cookies are small text files stored on your device when you visit our platform.

6.1 Types of Cookies We Use

  1. Essential cookies: Required for the platform to function properly. This includes session cookies that keep you logged in during an active session and security cookies that help detect and prevent unauthorised access. These cookies cannot be disabled.
  2. Performance cookies: Helps us understand how players interact with the platform — which pages are visited most, where players spend the most time, and which areas may be experiencing technical issues.
  3. Functional cookies: Remembering your preferences such as language settings, display configurations, and login details to deliver a more comfortable and personalised experience.
  4. Analytics cookies: Used to collect aggregated, anonymised data on platform usage patterns to help us make informed decisions about platform improvements.

6.2 Managing Your Cookie Preferences

You can control and manage cookie usage through your web browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note, however, that disabling essential cookies may affect the functionality of the 1win casino platform, and you may be unable to log in or use certain features fully.

7. Data Storage and Retention Period

1win casino retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.

Data Type Retention Period Reason
Active account information For as long as the account remains active Service operations
Financial transaction records 7 years after transaction PDPA & tax legal requirements
KYC Documents 5 years after account closure AML legal compliance
Customer support logs 3 years Dispute resolution
Analytics data 24 months Platform improvements
Gaming records 5 years Audit and compliance

Once the specified retention period has elapsed and there is no other legal obligation requiring continued retention, your data will be securely deleted or anonymised so that it can no longer be used to identify you personally.

8. Your Rights as a Data Subject

As a registered player at 1win casino and as a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 (PDPA) with respect to the personal data we hold about you.

Right to Access Data

You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 business days of receiving your request, subject to applicable legal exemptions.

Right to Correct Data

If you believe the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update basic information through your account settings, or contact customer support for more substantial changes.

Right to Request Data Deletion

You may request that we delete your personal data under certain circumstances, such as when the data is no longer needed for its original purpose. Please note that we may not be able to fulfil this request in full if there are legal obligations requiring us to retain the data.

Right to Withdraw Consent

Where our processing of your data is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal.

Right to Lodge a Complaint

If you believe 1win casino has violated your privacy rights, you have the right to lodge a complaint directly with us or with the relevant Malaysian Personal Data Protection Commissioner. We are committed to investigating every complaint thoroughly and fairly.

Data Portability Rights

Under certain circumstances, you have the right to receive the personal data we process about you in a machine-readable format, and to transfer that data to another party if you wish.

To submit any request relating to the rights listed above, please contact us by email at support@1wincasino-win.com, clearly stating the nature of your request. We may need to verify your identity before processing it.

9. Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to, or accessed from, countries outside Malaysia where our technology infrastructure or gaming software providers are based. When such transfers occur, 1win casino ensures that adequate data protection is in place through one of the following mechanisms:

  1. Data transfer agreements that comply with Malaysia's PDPA requirements and recognised international data protection standards.
  2. Assurance that the recipient country provides a level of data protection comparable to that of Malaysia.
  3. Standard contractual clauses that bind the receiving party to uphold data protection standards equivalent to those required in Malaysia.

In all cases, data transfers are carried out only when necessary to deliver the services you use and are always subject to appropriate safeguards.


10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out to us through the following channels:

  1. Email: support@1wincasino-win.com — for written enquiries that require documentation or further reference.
  2. Live chat: Available 24 hours a day, 7 days a week, directly within the 1win casino platform for immediate enquiries.

We are committed to responding to all privacy-related enquiries within three business days. For formal requests concerning data subject rights under the PDPA, our response time is within 21 business days.

This Privacy Policy was last updated in January 2026. Players will be notified of any material changes to this policy via in-platform notifications at least seven days before the changes take effect.

FAQ – 1win Casino Privacy Policy

No. 1win casino does not share players' personal data with third-party advertising companies for marketing purposes without your explicit consent. Any marketing communications you receive from 1win casino are based on the consent you provided during registration or through your account's communication settings. You may withdraw your consent to receive marketing communications at any time.

To request a copy of your personal data, send an email to support@1wincasino-win.com with the subject line "Data Access Request – [your account number]". Please clearly state the type of data you wish to access. We may need to verify your identity before processing the request. Within 21 business days, we will provide a summary of the data we hold relating to your account in a readable format.

When you close your account, 1win casino will cease processing your data for active service purposes. However, certain data will be retained for the period required under Malaysian law — for example, financial transaction records are kept for seven years for tax compliance and anti-money laundering purposes. Once the statutory retention period expires, your data will be securely deleted or anonymized.

1win casino retains the information necessary to process transactions and verify ownership of payment methods, such as account holder names and account numbers provided. However, sensitive details such as PINs, e-wallet passwords, or full bank card numbers are never stored by us. All financial transactions are processed through secure payment gateways that comply with industry security standards.

You can manage cookie settings through your web browser's options — whether you use Google Chrome, Safari, Firefox, or another browser. Go to the "Settings" menu and navigate to the "Privacy and Security" section to manage your cookies. Please note that disabling essential cookies may affect platform functionality, including your ability to log in and play. Analytics and performance cookies can be disabled without impacting core functionality.

If you suspect your account has been accessed without your authorisation, contact the 1win casino customer support team immediately via live chat or email at support@1wincasino-win.com. We will freeze your account right away to prevent any further transactions, investigate suspicious activity based on system logs, and help you regain full control of your account. We also recommend changing the passwords of any other accounts that use the same password.

Play Safely and with Confidence at 1win Casino

Your data is protected, your privacy is respected. Register today and enjoy a wide range of casino games, Sports Betting, and jackpots with the confidence that your information is always safe with us.

Bahasa Melayu