We1wen Privacy Policy – Personal Data Protection for Malaysian Members

We1wen collects your personal information across several different contexts. Below are the categories of information we collect and why they are needed for our platform to operate.

Information you provide directly:

• Registration information: Full name, date of birth, Malaysian identity card number (MyKad), email address, mobile phone number and the password you chose when registering your we1wen account.
• Payment information: The bank account or eWallet details you use for deposits and withdrawals — including the account holder name, account number, and the name of your bank or eWallet provider (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u or CIMB Clicks). We do not store credit or debit card numbers directly — all transactions are processed through a secure payment gateway.
• Identity verification documents: A copy of your Malaysian MyKad or passport, which we may request as part of the account verification process (KYC — Know Your Customer), as required under international betting operation standards.
• Support communications: Records of live chat conversations, emails and any other communications you send to the we1wen support team.

Automatically collected information:

• Platform usage data: Betting records, game history, deposit and withdrawal transactions, and your account activity on the we1wen platform.
• Technical data: IP address, web browser type, device type (mobile phone, laptop, tablet), operating system, screen resolution, and language settings.
• Location data: General location based on your IP address for security and compliance purposes — we do not track your device's GPS location.
• Cookies and session data: Information collected through cookies and similar tracking technologies to enhance your platform experience. Further details are provided in Section 5.

We1wen uses collected information solely for the purposes stated below. We do not use your data for anything outside the scope of operating our betting platform.

• Service provision: Managing your account, processing deposits and withdrawals via your chosen Malaysian payment method, recording bets and winnings, and enabling access to all we1wen platform features.
• Identity verification: Verifying your age and identity as required by responsible betting compliance standards. This is a protective measure to prevent underage individuals from accessing the platform.
• Security and fraud prevention: Detecting and investigating suspicious activity, unauthorised access attempts, duplicate account usage, and any form of fraud or money laundering.
• Platform improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the design, performance, and features of the we1wen platform.
• Member communications: Sending account-related notifications, security updates, transaction information, policy changes and — if you have opted in — the latest we1wen promotional offers and bonus information.
• Customer support: Providing effective and relevant assistance when you contact our support team, by referencing your account history and past interactions to resolve issues more efficiently.
• Legal compliance: Meeting the reporting and compliance obligations set by relevant authorities under our operating licence jurisdiction.

We1wen does not use your personal data to make automated decisions that materially affect your rights without human involvement in the evaluation process.

We1wen does not sell or trade member personal data to any third party. However, there are certain situations where we need to share information with specific parties to keep the platform operating safely and efficiently.

Third parties that may receive your data:

• Payment processors: Payment gateways and financial service providers that process DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX transactions. These providers receive only the minimum information necessary to process a transaction — they have no access to your betting history or any other account details.
• Game software providers: Software companies that supply live casino games, slots, and betting products to we1wen. They may receive anonymised account identifiers for technical purposes, but not your personally identifiable information.
• IT service providers: Companies that provide the server infrastructure, cybersecurity systems, and technical support services used by we1wen. They are bound by strict confidentiality agreements.
• Regulatory authority: Betting regulatory bodies or legal authorities that require information for compliance purposes, fraud case investigations, or valid court orders. We provide only the minimum information required by the order or legal obligation.

All third parties with whom we share data are required to sign data processing agreements obligating them to handle your information to the same security standards we uphold. we1wen remains accountable for how your data is used by third parties operating on our behalf.

We1wen takes data security seriously because we understand that lapses in this area can have real consequences for our members' lives and finances. Below are the concrete security measures we have put in place to protect your personal data.

• Transmission encryption: All communications between your device and we1wen's servers are protected by TLS 1.3 with 256-bit encryption. This means that even if someone were to intercept your network traffic, they would be unable to read the information transmitted.
• Storage encryption: Sensitive data such as passwords is never stored in plain text — it is processed using one-way cryptographic hash functions that cannot be reversed.
• Internal access controls: Only we1wen staff who require access to specific data to carry out their authorised duties are permitted to do so. All access to the member database is logged and monitored automatically.
• 24/7 threat monitoring: Our cybersecurity team monitors the platform around the clock to detect any suspicious activity, intrusion attempts or system anomalies.
• Regular penetration testing: we1wen conducts regular security assessments (penetration testing) carried out by independent third-party security specialists to identify and address any vulnerabilities before they can be exploited.
• Data backup: Account and transaction data is automatically backed up at frequent intervals to a location that is physically separate from the primary servers, ensuring rapid data recovery in the event of any technical incident.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. You also play an important role by using a strong password, enabling two-factor authentication (2FA) on your we1wen account, and never sharing your login credentials with anyone.

The we1wen platform uses cookies and similar tracking technologies to keep the platform running smoothly and to enhance your experience. Below are the types of cookies we use and their respective purposes.

You can manage cookies through your web browser settings. However, disabling essential cookies will affect the functionality of the we1wen platform. Note that analytics and functional cookies can be turned off without affecting your ability to log in and play normally.

As a we1wen member, you have certain rights regarding the personal data we collect and process. we1wen respects these rights and provides straightforward mechanisms for you to exercise them.

We1wen retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy — or as long as required by law and betting compliance obligations.

• Active account data: For as long as your we1wen account remains active, we retain all your registration information, transaction history and betting records.
• After account closure: When your account is closed (whether voluntarily or otherwise), we retain financial transaction records for a minimum of 5 years as required under international financial compliance standards. These records are not accessible for marketing purposes or shared with third parties without a valid legal basis.
• Support communications: Support conversation records are retained for 2 years for quality control purposes and to assist in resolving any disputes that may arise.
• Analytics data: Anonymised platform usage data (with no personal identifiers) may be retained for a longer period for trend analysis and product improvement purposes.

Once the designated retention period expires, your personal data will be securely deleted or anonymised using procedures that ensure it cannot be recovered.

If you have any questions, concerns or requests regarding we1wen's Privacy Policy or how we handle your personal data, please reach out to us through the following channels.

• Privacy email: support@we1wen.click — please include "Privacy Enquiry" in your email subject line for faster processing
• Live chat: Accessible directly within the we1wen platform, 24 hours a day, 7 days a week in Bahasa Malaysia
• Response time: We aim to respond to all privacy-related enquiries within 5 business days

We1wen will update this Privacy Policy from time to time to reflect changes in our practices, the products we offer, or applicable legal requirements. When significant changes are made to this policy, we will notify all active members via their registered email address at least 7 days before the changes take effect.