One win's Six Privacy Commitments to You
These are the data protection standards we uphold for every one win Malaysia player
1 Introduction & Policy Scope
Welcome to the one win Malaysia Privacy Policy. This document ("Policy") describes the personal data processing practices implemented by one win Malaysia ("one win", "we", "platform") in relation to the collection, use, disclosure, and protection of your personal information as a user of our platform.
This Privacy Policy applies to all players who register for or use one win's services, including the website, mobile app, and any official one win communication channels. By using the one win platform, you consent to the collection and use of your personal information in accordance with this Policy.
Legal Basis: This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data protection in Malaysia. one win complies with all seven PDPA principles set out in the Act.
We believe privacy is more than a legal obligation — it is a core value of one win. Your trust in our platform depends greatly on your confidence that your personal data is handled with respect, transparency, and accountability. That is our commitment to every Malaysian player who chooses one win.
2 Personal Data We Collect
One win collects various types of information depending on how you interact with our platform. The following are the main categories of data collected:
2.1 Registration Information
- Full name as per official documents
- Malaysian mobile number
- Email address
- Date of birth (for age verification)
- Encrypted passwords
2.2 Identity Verification (KYC) Information
- Copy of MyKad or Malaysian passport
- Copy of bank statement (for payment account verification)
- Biometric information (only where required for advanced verification)
2.3 Financial & Transaction Data
- Deposit records via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX
- Withdrawal records and beneficiary account information
- Transaction and betting history
- Account balance and fund movements
2.4 Technical & Usage Data
- IP address and approximate geographical location
- Device type, operating system, and browser
- Login records and session duration
- Pages visited and in-platform actions
- Cookie data and similar tracking technologies
Important Note: one win does not store players' full credit/debit card details or bank account numbers. All payments are processed directly by licensed payment providers that comply with PCI-DSS standards. We only retain encrypted transaction references.
| Data Category | Example | Mandatory? | Deleted After |
|---|---|---|---|
| Account Information | Name, email address, phone number | Yes | Account closure + 7 years |
| KYC Documents | MyKad, bank statements | Yes (withdrawals) | Account closure + 7 years |
| Transaction Data | Deposits, withdrawals | Yes | 7 years (audit requirement) |
| Usage Data | Login, session, IP | Automatic | 90 days |
| Marketing Cookies | Advertising preferences | Optional | 30 days (deletable) |
3 Purposes for Using Your Personal Data
One win uses your personal data for lawful, specific, and transparent purposes. We do not process data in any way that is inconsistent with the original purpose of collection unless you provide fresh consent. The following are the primary purposes for which your data is used:
3.1 Platform Operations & Services
- Creating and managing your player account
- Processing deposits and withdrawals via e-wallets and local FPX
- Providing access to games and Sports Betting (Super League football, EPL, badminton, cricket, e-sports)
- Managing bonuses, promotions, and VIP programmes
- Ensuring the platform's technical performance
3.2 Legal Compliance & Security
- Player identity and age verification (must be 18 years of age or older)
- Prevention of fraud, money laundering, and illegal activities
- Meeting financial audit and reporting requirements
- Responding to lawful directions from legal authorities
3.3 Service Improvements
- Analysing usage patterns to enhance the player experience
- Developing new features and games relevant to Malaysian players
- Personalising content and offers based on your preferences
3.4 Communications
- Sending transaction notifications and game results
- Account security alerts and platform updates
- Promotional offers and bonuses (only if you have agreed to receive marketing communications)
- Responding to customer support enquiries
4 Data Sharing & Disclosure
One win takes a highly cautious approach to sharing players' personal data. We do not disclose your personal information to any third party except in the following defined circumstances:
4.1 Licensed Service Providers
Personal data may be shared with service providers who assist us in operating the platform, including:
- Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks — for processing your financial transactions
- Game Provider: Gaming software companies that supply slots, Live Casino, and other games — only the technical session data required is shared
- Cloud Services: Server infrastructure providers that store data in secure, encrypted environments
All these third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements.
4.2 Legal Requirements
One win may disclose your personal information when required by law, court order, or direction from a legitimate Malaysian authority. In such circumstances, we will notify you in advance where permitted by law.
What We Do NOT Do: one win never sells your data to advertisers, does not share data for third-party marketing purposes, and does not disclose data to other companies within the group without a legitimate operational need. This is our absolute commitment.
5 Security & Data Protection
One win continuously invests in security infrastructure to ensure your personal data is protected at all times. The following are the technical and organisational security measures we have implemented:
5.1 Technical Security Measures
- Encryption in Transit: All communication between your device and our servers is encrypted using TLS 1.3 / SSL 256-bit
- Deposit Encryption: Sensitive data stored in our databases is encrypted using AES-256
- Two-Factor Authentication (2FA): Additional protection for account logins and large withdrawals
- 24/7 Monitoring: 24/7 threat detection and intrusion prevention systems
- Regular Backups: Data is automatically backed up to secure, geographically separate locations
5.2 Organisational Security Measures
- Access to players' personal data is restricted to staff who genuinely require it (principle of least privilege)
- All staff undergo regular data security training
- Internal and external security audits are conducted on a regular basis
- Clear and tested incident response procedures
Shared Responsibility: While one win takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.
6 Your Rights as a Data Subject
Under Malaysia's PDPA, you have certain rights regarding your personal data, and one win is committed to upholding them. Below are those rights and how you can exercise them:
How to Exercise Your Rights: Submit a written request to support@onewin-bangla.com with the subject line "Data Rights Request – [Your Name]". Please include your account number and a copy of your identification for verification. We will respond within 14 business days.
7 Cookies & Tracking Technologies
One win uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.
You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the one win platform.
8 Data Retention Period
One win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal requirements. Our retention policy is as follows:
- Active Account Data: Retained for as long as your one win account remains active
- Data After Account Closure: Basic account information and transaction records are retained for 7 years after account closure for financial audit requirements, legal compliance, and resolution of any potential claims
- KYC Documents: Retained alongside account records for 7 years after account closure
- Technical & IP Logs: Retained for 90 days, then automatically deleted
- Marketing Cookies: Expires after 30 days or can be deleted at any time by the player
- Customer Support Communications: Retained for 3 years for reference and dispute resolution purposes
Once the retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to any individual.
9 Child Protection
The one win platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that a child under their care has registered on this platform are urged to contact us immediately at support@onewin-bangla.com.
one win uses a multi-layer age verification system, including KYC document verification, to ensure all players meet the minimum age requirement. We treat the protection of minors as a serious social responsibility.
10 Privacy Policy Amendments
One win reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. When material amendments are made:
- The "Last Updated" date at the top of this document will be revised
- Notice of any amendments will be prominently displayed on the platform's homepage for a minimum period of 30 days
- For significant amendments, active players will be notified via email or in-platform notification
Continued use of the one win platform after any amendments to the Privacy Policy are published will be deemed acceptance of the revised terms. If you do not agree to the changes, you have the right to close your account and request deletion of your personal data.
11 Contact Us – Privacy-Related Enquiries
For any enquiries, concerns, or requests relating to personal data and the one win Privacy Policy, please contact us via:
When contacting us regarding privacy matters, please clearly state: (1) the type of request (access, correction, deletion, etc.), (2) your one win account number, and (3) sufficient identity verification details. This helps us process your request more quickly and accurately.
Related documents: Terms & Conditions | Responsible Gaming | Frequently Asked Questions
Your Data is Safe with one win
We take your privacy seriously. Register a free one win account today and enjoy a safe, fair, and responsible online gaming experience — with the assurance that your personal data is protected at all times.
For 18+ only · Compliant with Malaysia's PDPA 2010 · SSL 256-bit