we1we Privacy Policy

01 Introduction

we1we ("we", "us", "our" or the "Platform") operates the website accessible at we1we.cam and any associated services. This Privacy Policy ("Policy") describes the personal information we collect from users ("you", "your") who access or register on the Platform, and explains how that information is used, stored, shared and protected.

This Policy applies to all users of the we1we Platform, including visitors who browse without registering and registered account holders who engage with casino, sports betting or other services. By continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy must be read alongside the we1we Terms & Conditions and the Responsible Gambling policy, both of which form part of the overall agreement governing your use of the Platform.

02 Definitions

The following terms carry the meanings ascribed below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, we1we.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under contract.
• "KYC" means Know Your Customer verification, encompassing identity documents, age verification, proof of address and payment ownership confirmation.
• "Cookies" means small text files placed on a user's device that allow the Platform to remember preferences, session states and analytical data.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial details, government-issued identification numbers and health-related information.

03 Data We Collect

we1we may collect the following categories of Personal Data from users:

04 How Data Is Collected

Personal Data is collected through the following means:

• Direct submission: Information you provide when registering an account, completing KYC, initiating transactions, contacting support or updating your profile.
• Automated technologies: Cookies, web beacons, session tokens and server log files collect Technical Data and Usage Data automatically when you visit the Platform.
• Third-party payment providers: When you use Malaysian payment channels such as FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost or GrabPay, relevant transaction data may be passed to we1we by the payment gateway to confirm deposit or withdrawal status.
• Identity verification services: Third-party KYC or age-verification providers may supply identity confirmation data as part of the account eligibility process.
• Fraud prevention and security services: We may receive risk-assessment signals from third-party fraud-detection platforms to protect accounts and the integrity of the Platform.

05 Data Processing Purposes

we1we processes Personal Data for the following specific purposes:

• Account creation and management: Establishing, verifying and maintaining registered user accounts.
• Identity and age verification (KYC): Confirming that users meet the minimum age requirement of 21 years and satisfy eligibility criteria under our Terms.
• Payment processing: Executing deposit and withdrawal transactions in MYR via available payment channels and maintaining accurate financial records.
• Responsible gambling controls: Applying and monitoring self-imposed deposit limits, time-out periods and self-exclusion requests to support player welfare.
• Fraud prevention and security: Detecting and investigating suspicious activity, unauthorised account access and policy violations.
• Legal and regulatory compliance: Meeting obligations imposed by licensing authorities, anti-money-laundering requirements and applicable national laws.
• Customer support: Responding to enquiries, resolving complaints and maintaining communication records.
• Platform improvement: Analysing usage patterns to improve navigation, content and service quality.
• Marketing communications: Sending promotional messages and bonus notifications to users who have consented, with an unsubscribe option in every communication.

06 Legal Basis for Processing

we1we processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between we1we and the user, including account registration, KYC and transaction settlement.
• Legal obligation: Processing required to comply with applicable laws and licensing conditions, including anti-money-laundering verification and age checks.
• Legitimate interests: Processing conducted in furtherance of we1we's legitimate business interests — such as fraud prevention, platform security and service improvement — provided those interests do not override the user's fundamental privacy rights.
• Consent: Processing for optional purposes, such as marketing communications, where a user has given freely withdrawable consent.

07 Data Sharing & Disclosure

we1we does not sell Personal Data to third parties. We may share data in the following limited circumstances:

• Payment processors and banking partners: Financial data is shared with payment providers (including FPX network members, eWallet operators and Malaysian commercial banks) solely for transaction processing.
• KYC and identity verification providers: Identity documents may be transmitted to contracted third-party verification services for age and eligibility checks.
• Fraud and security service providers: Technical and usage data may be shared with anti-fraud platforms operating under appropriate data-processing agreements.
• Legal and regulatory authorities: we1we may disclose Personal Data to law-enforcement agencies, courts, licensing bodies or government authorities when required to do so by law, court order or regulatory instruction.
• Corporate group entities: Personal Data may be shared with affiliated entities within the we1we corporate group for the purposes described in this Policy, subject to equivalent data-protection commitments.
• Business transfers: In the event of a merger, acquisition or asset sale, Personal Data held by we1we may be transferred to the successor entity, with prior notification to affected users where practicable.

08 Data Retention

we1we retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Active account data: Retained for the duration of the account relationship and for a minimum period thereafter as required by applicable law or licensing conditions.
• KYC and identity records: Retained for a minimum of five years following account closure, in line with standard anti-money-laundering guidance.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction or such other period as required by law.
• Self-exclusion records: Retained for the duration of the exclusion plus a reasonable administrative period to prevent circumvention.
• Support communications: Retained for up to three years from the date of the last interaction, unless a longer period is required for dispute resolution.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised unless an extended period is required by a specific legal obligation.

09 Security Measures

we1we implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction or alteration. These include:

• Transmission of data over encrypted connections (TLS) between user devices and Platform servers.
• Role-based access controls that limit internal access to Personal Data to authorised personnel with a demonstrated business need.
• Regular assessment of third-party data processors to confirm adequate security standards are maintained.
• Account authentication controls, including password requirements and session management designed to reduce the risk of unauthorised access.

No security system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to user rights, we1we will take prompt steps to contain the breach and notify affected users in accordance with applicable notification obligations.

Users share responsibility for account security. You should choose a strong, unique password, avoid sharing login credentials, and notify us immediately at [email protected] if you suspect unauthorised access to your account.

10 Cookies & Tracking Technologies

The we1we Platform uses cookies and similar technologies for the following purposes:

• Strictly necessary cookies: Essential for core Platform functions such as maintaining your login session, securing transactions and applying user preferences. These cannot be disabled without affecting Platform usability.
• Functional cookies: Store optional preferences such as language settings and display choices to improve user experience across sessions.
• Analytical cookies: Collect anonymised or pseudonymised usage data to help us understand how users navigate the Platform and where improvements can be made. No personally identifiable information is used in aggregate analytics reports.
• Security cookies: Assist in fraud detection by identifying unusual session patterns or access anomalies.

You may configure your browser to block or delete cookies. Disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Disabling analytical cookies will not affect your ability to access the Platform but will limit our understanding of usage patterns.

11 Your Rights

Subject to applicable law and any overriding legal obligations, you may exercise the following rights in respect of your Personal Data held by we1we:

To exercise any of the above rights, submit a written request by email to [email protected]. We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with prior notification provided.

Requests will be subject to identity verification to prevent unauthorised third-party access to Personal Data. we1we reserves the right to decline requests that are manifestly unfounded, repetitive or that would conflict with a legal or regulatory obligation.

12 Minors & Age Restriction

The we1we Platform is strictly intended for users aged 21 years and above. We do not knowingly collect, store or process Personal Data from persons under the age of 21.

Age verification is applied at the registration stage and may be supplemented by document-based KYC at any subsequent point. If we become aware that Personal Data from a person under the minimum age has been collected, we will take prompt steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has submitted Personal Data to we1we, please contact us at [email protected] and we will act promptly to investigate and remediate.

13 Policy Amendments

we1we reserves the right to update this Privacy Policy at any time to reflect changes in data-processing practices, applicable law, Platform features or the structure of our business. When material changes are made, the review date at the top of this Policy will be updated accordingly.

Where a change is considered material and likely to affect users significantly, we1we will provide notice through the Platform or by direct communication to registered account holders. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms.

Users who do not accept a material change to this Policy should discontinue use of the Platform and may request account closure by contacting support.

14 Contact Us

For all privacy-related enquiries, including data access requests, correction requests, consent withdrawal, complaints or general questions about how your Personal Data is handled, please use the contact details below:

• Email: [email protected]
• Support hours: Malaysia time, UTC+8
• Response target: Acknowledgement within 5 business days; full response within 30 calendar days.

For questions about the general terms governing your account, please review the Terms & Conditions. For information about deposit limits, self-exclusion and responsible-play tools, visit the Responsible Gambling page.