Data Protection Policy
Last Updated: 1 January 2026

One win Privacy Policy – Malaysian Player Data Protection

At One Win, your privacy is not an empty promise — it is a genuine commitment we uphold every single day. This Policy clearly explains how we collect, use, protect, and respect your personal data as a member of our platform.

Your Data Is Safe With Us

One Win applies the highest data security standards to protect the personal information of over 1.2 million members in Malaysia.

SSL 256-bit No Data Selling Secure Servers Protected KYC Regular Audits

One Win's Six Privacy Commitments to You

The core principles governing how One Win manages the personal data of Malaysian players

Top-Grade Encryption

All data transmitted between your device and our servers One Win is protected by 256-bit SSL encryption — the same technology used by Malaysia's leading banks such as Maybank and CIMB. This means sensitive information such as your IC number, bank account details, and passwords cannot be read by any unauthorised third party.

No Sale of Personal Data

One Win has never and will never sell, rent, or transfer your personal data to third-party advertisers or data brokers. Your data belongs to you — we only use it for purposes you have explicitly consented to and for the legitimate operation of the platform.

Full Control in Your Hands

You have the full right to access, correct, download, or request the deletion of your personal data from our systems One Win. All requests will be processed within 30 calendar days. Log in to your account or contact our support team to submit a request.

Minimum Data Collection

We only collect data that is strictly necessary to provide our services One Win to you. This "data minimisation" principle means we do not collect information that is unrelated to account operations, financial transaction processing, or meeting legal compliance requirements.

Physical & Digital Security

Your data is stored in data centres protected by multi-layered physical security and advanced cybersecurity systems. Access to member personal data One Win restricted to staff who genuinely require access to carry out their duties, with all access logged and audited on a regular basis.

Immediate Breach Notification

In the unlikely event of a data breach that may affect your personal information, One Win committed to notifying affected members within 72 hours of detecting the incident, along with guidance on protective measures to take.

1

Introduction

This Privacy Policy ("Policy") is published by One Win (onewin.plus) and applies to all users, members, and visitors of our platform. We understand how important privacy is to you — especially in the context of an online gaming platform where financial transactions and sensitive personal data are involved.

This Policy explains our data collection and management practices in a clear, straightforward manner — not in convoluted legal language. We believe you have every right to know exactly what happens to your information.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Guide One Win. By using our platform, you agree to the terms of this Privacy Policy.

2

Types of Personal Data We Collect

One Win collects several categories of personal data depending on your interactions with our platform:

Data Category Sample Information Basis for Collection
Identity Data Full name, IC number (MyKad), date of birth, gender Contractual necessity & KYC
Contact Data Email address, phone number, residential address Contractual necessity
Financial Data E-wallet accounts (Touch 'n Go, GrabPay, DuitNow), bank accounts (Maybank, CIMB), transaction history Contractual & legal requirements
Technical Data IP address, device type, web browser, operating system, cookies Legitimate interest (security & improvement)
Gaming Data Betting history, favourite games, win/loss statistics Contractual & responsible gaming requirements
Communication Data Live chat records, support emails, user feedback Legitimate interest (customer support)

We do not collect or process special categories of sensitive data — such as biometric data, medical records, or religious beliefs — unless explicitly required by applicable law.

3

Purpose of Data Use

The personal data we collect is used exclusively for the following purposes:

  • Service provision: Processing account registrations, verifying identities, and handling deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX
  • Security and fraud prevention: Detecting and preventing unauthorised access, fraud, and suspicious activity
  • Legal compliance: Meeting AML (Anti-Money Laundering), KYC, and reporting requirements to the relevant authorities
  • Customer support: Resolving enquiries, complaints, and support requests
  • Product improvement: Analysing usage patterns to improve the platform's user experience
  • Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support
  • Marketing communications: Sending information about promotions, bonuses, and special events — only if you have consented to receive such communications

One Win will not use your data for any purpose not stated here without first obtaining your fresh consent.

4

Third-Party Data Sharing & Disclosure

One Win does not sell your personal data to anyone. However, to operate the platform effectively, we need to share certain data with carefully selected third parties:

  • Payment processors: Payment service providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks require relevant transaction data to process your deposits and withdrawals
  • Game providers: Game providers we work with may receive anonymous player ID numbers, without full names, for technical purposes
  • IT and security services: Technical vendors who assist us in maintaining and securing the platform infrastructure
  • Relevant authorities: When lawfully required under Malaysian law, a court order, or a directive from a competent authority

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for specific, limited purposes. We conduct regular security assessments of all our third-party vendors.

5

Data Security Measures

Data security is an absolute priority at One Win. We implement multiple layers of technical and organisational safeguards:

  • Data encryption in transit: SSL/TLS 256-bit encryption for all communications between your browser/app and our servers
  • Data encryption at rest: Passwords are stored as non-reversible hashes; financial data is encrypted using AES-256 standard
  • Access controls: Access to internal systems requires multi-factor authentication (MFA); the principle of least privilege is strictly observed
  • Continuous monitoring: Intrusion detection system (IDS) and 24/7 suspicious activity monitoring
  • Security audits: Penetration testing by independent cybersecurity firms is conducted at least twice a year
  • Staff training: All staff One Win complete mandatory data protection training annually

While we take all reasonable steps to protect your data, no system in the world is 100% immune to cyber threats. We encourage you to take your own precautions as well, such as using a strong, unique password for your account One Win yours.

6

Data Retention Period

One Win retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by law:

  • Active account data: For as long as your account remains active and for 7 years after account closure (financial recordkeeping and AML requirements)
  • Financial transaction data: Minimum 7 years in accordance with Malaysian accounting and AML legal requirements
  • Support communication records: 3 years after case resolution
  • Technical data (server logs): 90 days in active systems, up to 1 year in encrypted archives
  • Marketing data (where permitted): Until you withdraw your consent

Once the specified retention period has passed, data will be securely deleted or anonymised so it can no longer be linked to you.

7

Your Personal Data Rights

As a member One Win, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Correct any inaccurate or incomplete data in your account at any time.

Right to Erasure

Request the deletion of your personal data in certain cases, subject to legal requirements.

Right to Restrict Processing

Request that we restrict how we use your data in certain permitted circumstances.

Right to Data Portability

Receive your data in a structured, portable format that can be transferred to another platform.

Right to Withdraw Consent

Withdraw your consent for marketing or optional data use at any time, with no penalty.

All data rights requests will be processed within 30 calendar days. To submit a request, log in to your account and navigate to Settings > Privacy, or contact us at support@onewin.plus with the subject line "Personal Data Request".

8

Cookies & Tracking Technologies

Platform One Win uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use and your preference settings:

You can manage your cookie settings through your web browser settings or contact us for assistance. Note: disabling certain cookies may affect platform functionality.

9

Child Data Protection

Platform One Win is intended for individuals aged 18 and above only. We do not accept registrations from underage individuals and do not knowingly collect personal data from children.

Should we discover that we have inadvertently collected data from a person under the age of 18, we will delete that data immediately and close the account in question. If you have information regarding such a case, please notify us promptly.

10

Cross-Border Data Transfers

In certain cases, your personal data may need to be transferred or processed outside Malaysia — for example, when we use cloud computing services or international technical infrastructure.

When such transfers occur, One Win ensure that:

  • The recipient country provides an adequate level of data protection
  • Appropriate and legally binding data transfer agreements have been finalised
  • Data is encrypted during transit
  • Transfers occur only to the extent necessary for a legitimate purpose
11

Changes to This Privacy Policy

One Win may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services.

Each time this Policy is updated, we will:

  • Updating the "Last Updated" date at the top of this page
  • Displaying in-platform notices for significant changes
  • Sending email notifications to registered members when changes materially affect their privacy rights

Continued use of the platform One Win after the effective date of the revised Policy will be considered your acceptance of those changes.

12

Contact Our Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by One Win, please contact us:

  • Email: privacy@onewin.plus
  • General Support: support@onewin.plus
  • Live Chat: Available 24/7 within the platform
  • Email Subject: Please include "Privacy Request – [Your Account Number]" in your message for a faster response

Our data protection team will respond to all privacy enquiries within 5 business days. For data deletion or access requests, we aim to resolve them within 30 calendar days.

Pages Related to Your Protection

Other important documents ensuring your experience at one win is safe, fair, and protected

🔐 Your Data Is Protected – Play with Confidence at One Win

Register a free account today and enjoy a safe gaming experience backed by industry-grade data protection and responsible gaming support.

By registering, you agree to One Win's Privacy Policy and Terms & Conditions. For players aged 18 and above only.

Bahasa Melayu