Protected under PDPA 2010

One Win Malaysia Privacy Policy – Member Personal Data Protection

At One Win, your privacy is more than a legal formality — it is our moral responsibility to every player who entrusts us with their information. This document clearly explains how we collect, use, store, and protect your personal data.

Last Updated: 1 January 2026
Our Level of Data Protection
SSL Encryption256-bit
PDPA Compliance100%
Security AuditAnnual
Stored Data EncryptionAES-256
Two-Factor Authentication (2FA)Available

A summary of the protections you receive as a member One Win

Encrypted Data

SSL 256-bit & AES-256 for all data

Not Sold

Your data is not sold to any party

PDPA 2010

Compliant with Malaysia's Personal Data Protection Act

Fully Confidential

Passwords and financial data are never disclosed

Right of Access

You can review and update your data at any time

Right to Delete

Request data deletion by contacting support

Six core pillars of our privacy commitment One Win to every Malaysian member:

Bank-Grade Encryption

All data transmitted between your device and our servers One Win is encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by Malaysia's leading banks.

TLS 1.3 + AES-256

Malaysia PDPA 2010 Compliant

Privacy Policy One Win is designed and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are fully respected under local law.

PDPA 2010

Fund & Data Segregation

Your financial data — including deposit records via Touch 'n Go, DuitNow, and GrabPay — is stored in an isolated server environment, separate from the company's general operational data.

Full Isolation

Strict Internal Access Controls

Only authorised personnel may access members' personal data, and only to the minimum extent required to carry out their duties. All access is logged and audited.

Minimisation Principle

Rapid Breach Notification

In the event of any data breach affecting your account, One Win will notify you within 72 hours via your registered email address.

72-Hour Notice

Regular Security Audits

Security system One Win undergoes an independent audit at least once a year. Audit findings are acted upon promptly to ensure data protection standards remain current at all times.

Annual Audit
1

Introduction & Scope of This Policy

This Privacy Policy is published by One Win Sdn. Bhd. ("One Win", "we") and explains our practices regarding the collection, use, disclosure, storage, and protection of your personal data when you use our online Sports Betting and casino platform at One Win.

We are committed to protecting the privacy of every member who registers and plays at One Win. Your trust is our most valuable asset, and we take this responsibility seriously. Whether you've just signed up to bet on the Malaysia Super League or the EPL, play live blackjack, or try your hand at e-sports – your privacy always comes first.

By using the One Win, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

This Privacy Policy should be read together with the Terms & Conditions One Win. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall take precedence.

2

Personal Data We Collect

One Win only collects data necessary to deliver our services safely and efficiently. The following are the categories of data we collect:

Data Category Sample Information Primary Purpose
Identity InformationFull name, MyKad/passport numberKYC verification, fraud prevention
Contact InformationMalaysian phone number, email addressAccount communications, OTP, notifications
Financial DataDeposit/withdrawal records, e-walletTransaction processing, auditing
Platform Activity DataBetting history, game preferencesService improvement, support
Technical DataIP address, device type, browserSecurity, fraud prevention
Cookie DataLogin sessions, language preferencesA better user experience

How We Collect Data

Directly From You: Information you provide when registering an account, submitting KYC documents, contacting customer support, or completing a feedback form.

Automatically: Technical data such as IP address, device type, operating system, and platform usage patterns are collected automatically when you use One Win.

From Third Parties: In certain cases, we may receive information from payment service providers such as Touch 'n Go, DuitNow, GrabPay, or Boost to verify your transactions.

Through Cookies and Similar Technologies: Cookies and tracking pixels are used to understand how you interact with our platform and to improve your experience. Further details are provided in Section 6.

3

How We Use Your Data

One Win uses your personal data solely for legitimate purposes directly related to the provision of our services. We never use your data for any purpose you have not consented to.

Account Management: To create, verify, and manage your account One Win yours. This includes the KYC process, Malaysian phone number verification, and account security maintenance.

Financial Transaction Processing: To process deposits via Touch 'n Go, DuitNow, GrabPay, FPX, Boost, and ShopeePay, and to handle withdrawals to your bank account or e-wallet securely and accurately.

Betting Services Provision: To deliver a personalised betting experience — recommending leagues you may be interested in, displaying the latest odds for Malaysia Super League or EPL matches, and providing a clear view of your betting history.

Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any conduct that violates our Terms & Conditions One Win.

Service Communications: To send you important account-related notifications such as deposit confirmations, security alerts, policy change notices, and responses to customer support enquiries. These communications are non-marketing and cannot be opted out of.

Marketing Communications (With Consent): With your consent, we send you information about promotions One Win, new bonuses, special offers for major sporting events, and product updates. You can opt out of marketing emails at any time via the unsubscribe link.

Legal Compliance: To comply with legal obligations applicable to One Win, including PDPA 2010, anti-money laundering laws (AMLA), and directives from relevant authorities.

One Win we do not make fully automated decisions (without human involvement) that materially affect you based on data processing, except for automated KYC verification that is standard in the industry. You have the right to request a human review of any automated decision that affects your account.

4

Personal Data Sharing

One Win never sells your personal data to any third party. We only share data in the following limited circumstances:

Payment Service Provider: To process your transactions, the necessary information is shared with providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and banks including Maybank and CIMB. These providers are bound by strict confidentiality agreements.

Platform Technology Providers: Game software providers, cloud infrastructure, and security tools used by One Win may process certain data as part of the services they provide. All such providers are bound by strict data processing agreements.

Legal Authority: One Win is required to disclose data when mandated by law, court order, or a valid request from a Malaysian law enforcement agency. We will notify you of any such request unless prohibited from doing so by law.

In the Event of Business Restructuring: If One Win involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction. You will be notified in advance and your rights will remain fully protected.

All third parties receiving members' personal data One Win must sign a Data Processing Agreement (DPA) confirming that they meet the same or higher data protection standards that we uphold.

5

Data Security Measures

One Win implementing multiple layers of technical and organisational safeguards to keep your data secure at all times.

Technical Safeguards
  • TLS 1.3 encryption for data in transit
  • AES-256 encryption for stored data
  • Two-factor authentication (2FA) available
  • Web application firewall (WAF)
  • Round-the-clock 24/7 threat monitoring
Organisational Protection
  • Mandatory privacy training for all staff
  • Role-based access control (RBAC)
  • Annual independent security audit
  • Data incident response plan
  • Breach notification within 72 hours

Although One Win while we take all reasonable steps to protect your data, no security system is 100% foolproof. You are also responsible for keeping your account secure by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6

Cookies & Tracking Technologies

One Win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Cookie TypeStatusPurposeDuration
Essential Cookies Mandatory Session login, CSRF security, language preferences Session / 30 days
Analytics Cookies Optional Understanding how you use the platform to drive improvements 12 months
Functional Cookies Optional Saving your preferences and displaying your chosen odds format 6 months

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality. One Win.

One Win does not use third-party advertising cookies or social media tracking pixels that collect cross-site data without your knowledge.

7

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by One Win:

1
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests are processed within 14 business days.

2
Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction. Please contact support One Win with supporting evidence.

3
Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

4
Right to Object to Marketing

You may object to the use of your data for direct marketing purposes at any time through your account settings or via email.

5
Right to Erasure

In certain circumstances, you may request the deletion of your data. Please note the legal obligations that require us to retain certain records.

6
Right to Lodge a Complaint

If you feel our response is unsatisfactory, you may lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).

To exercise any of the rights above, please contact us by email at support@onewin-jit.com with the subject line "Data Rights Request", specifying the right you wish to exercise along with your identity verification. One Win will respond within 14 business days.

8

Data Storage & Retention Period

Active Account Data: For as long as your account One Win remains active, we retain all data necessary to provide our services safely and efficiently.

After Account Closure: Financial and transaction records are retained for 7 years following account closure in compliance with AMLA legal obligations. Data no longer required for legal purposes will be deleted after 12 months.

Security Logs: Technical security logs are retained for 24 months for incident investigation and fraud prevention purposes.

Marketing Data: Information used for marketing communications will be deleted within 30 days of you withdrawing your consent.

9

Cross-Border Data Transfers

One Win operates primarily in Malaysia and prioritises storing data in data centres located in Malaysia or within the Asian region that meet equivalent data protection standards.

Where data needs to be transferred outside Malaysia (for example, for technical support from international software vendors), One Win ensures adequate protection through standard contractual agreements or by confirming that the recipient is located in a country recognised as having an equivalent level of data protection.

Sensitive financial data such as transaction records for deposits made via DuitNow, Touch 'n Go, or FPX are always stored in a certified environment and are never held outside strictly controlled areas.

10

Children's Privacy

Platform One Win is intended strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe we have collected data from an underage individual, please contact us immediately at support@onewin-jit.com and we will take prompt action to delete that data.

11

Amendments to This Privacy Policy

One Win reserves the right to amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. Material amendments will be communicated to members via their registered email address at least 14 days before taking effect.

Continued use of the platform One Win after the effective date of the amendment will be considered acceptance of the revised policy. The "Last Updated" date at the top of this page reflects the most current version of this policy.

12

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how One Win handling your personal data, please contact us through the following channels:

Email
support@onewin-jit.com
Response within 1–2 business days
Live Chat
Within the One Win platform
Available 24/7, response < 3 minutes
Mailing Address
One Win Sdn. Bhd.
Kuala Lumpur, Malaysia
🔒

Your Data Is Safe with One Win

We are committed to protecting your privacy to the highest standards. With 256-bit SSL encryption, PDPA 2010 compliance, and a strict no data-selling policy, you can play at One Win safely and with confidence.

Register now and enjoy a safe, fair, and exciting betting experience.

Data not sold
PDPA 2010 Compliant
256-bit SSL Encryption
Bahasa Melayu