Last updated: 1 January 2026  |  Version 3.1

Privacy Policy we1wen –
Personal Data Protection for Malaysian Players

We1wen takes your privacy very seriously. This policy transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please take a moment to read through it.

Effective: 1 January 2026
Compliant with Malaysia's PDPA 2010
SSL 256-bit Encryption
Official Language: Bahasa Melayu

We1wen's Privacy Commitment to Malaysian Players

Six core principles that underpin how we1wen protects your personal data

Malaysia PDPA Compliance

We1wen fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) – the principal legislation governing personal data protection in Malaysia. Every data processing activity we carry out has a clear legal basis that is valid under Malaysian law.

Bank-Grade Encryption

All data transmitted between your device and we1wen's servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions. Sensitive data such as MyKad information and payment details are stored in fully encrypted format.

No Sale of Data to Third Parties

We1wen has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — we1wen uses it solely for the purposes explicitly stated in this Privacy Policy.

Full Control in Your Hands

As a we1wen member, you have the right to access, correct, delete, and object to the processing of your personal data at any time. All data-related requests will be handled within 14 business days by our dedicated privacy team.

Data Minimisation

We1wen only collects data that is strictly necessary to provide our services. We do not retain data for longer than required by Malaysian law or legitimate operational needs. Data that is no longer needed is securely deleted in accordance with established procedures.

Timely Breach Notification

In the event of any data breach affecting your personal information, we1wen is committed to notifying you and the relevant authorities within the timeframe stipulated by Malaysia's PDPA. We will not conceal any security incident that affects your privacy rights.

Key Summary: This Privacy Policy explains how we1wen collects and uses your personal data when you register and use our platform. By creating a we1wen account, you consent to the processing of your personal data as described in this policy.

This policy is written in Bahasa Melayu as the official version in accordance with Malaysia's PDPA requirements. In the event of any conflict between another language version and the Bahasa Melayu version, the Bahasa Melayu version shall prevail.

1

Introduction & Scope of the Privacy Policy

We1wen ("we", "platform", "we1wen.xyz") is the data controller responsible for processing our members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy is an official document that sets out our privacy practices in a comprehensive and transparent manner.

This policy applies to all personal data we collect through:

  • Our official website at we1wen.xyz and all associated subdomains.
  • The we1wen mobile app (where available) for iOS and Android devices.
  • Your interactions with our customer support team via live chat, email, and Telegram.
  • Any direct communication between you and we1wen in the context of your use of the platform.

This policy does not apply to third-party websites that may be linked from our platform. we1wen is not responsible for the privacy practices of those external sites, and we encourage you to review their privacy policies separately.

Data Controller Responsibilities: As a data controller under Malaysia's PDPA, we1wen is responsible for ensuring that all processing of member personal data is carried out lawfully, fairly, transparently, and securely. For enquiries regarding this policy, please contact our privacy officer at support@we1wen.xyz.
2

Personal Data We Collect

We1wen collects personal data necessary to provide our services safely and effectively. We categorise the data we collect as follows:

Identity Data Full name, MyKad number, date of birth, gender, Malaysian mobile number, and email address.
Contact & Address Data Malaysian residential address, postcode, state, and contact details for verification purposes.
Financial & Payment Data eWallet account details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and FPX bank account information for deposits and withdrawals.
Gaming Activity Data Betting records, games played, wins and losses, gaming sessions, and complete transaction history.
Technical & Device Data IP address, device type, operating system, web browser, access logs, and platform usage data for security purposes.
Communications Data Records of customer support conversations, feedback, complaints, and any written communications between you and we1wen.

We1wen may also collect data you provide voluntarily when filling in feedback forms, participating in contests or promotions, or communicating with our team. You are not required to provide any data beyond what is needed to open an account, but choosing not to do so may limit your access to certain we1wen services.

Sensitive Data: we1wen does not collect sensitive personal data such as health information, religious beliefs, or political affiliations, except where specifically required to comply with responsible gambling obligations and with your explicit consent.
3

How We Use Your Personal Data

We1wen uses your personal data only for legitimate purposes that have been stated before or at the time of collection. The following are the primary purposes of our data processing, along with the relevant PDPA legal bases:

Purpose of Processing Legal Basis (PDPA)
Identity verification & account registration Contractual compliance
Processing of deposits & withdrawals Contractual compliance
KYC Compliance & Anti-Money Laundering Legal obligations
Provision of customer support services Legitimate interest / contract
Fraud detection & platform security Legitimate interest
Responsible gambling programme management Legal obligation / public interest
Marketing & promotional communications (with consent) Your consent
Platform usage analysis for improvement purposes Legitimate interest

For marketing communications – including promotional offers, new bonuses, and product updates – we will only send such communications if you have given explicit consent at the point of registration or subsequently through the communication preferences settings in your account. You may withdraw this consent at any time by updating your preferences in your we1wen account or by contacting our support team.

Automated Decision-Making: we1wen uses automated systems for fraud detection and risk assessment purposes. Where an automated decision materially affects your rights – such as an account suspension – you have the right to request a human review of that decision by contacting our support team.
4

Data Sharing with Third Parties

We1wen does not sell, rent, or trade your personal data to any party for marketing purposes. However, in the course of operating the platform, we1wen may need to share your personal data with the following limited categories of third parties:

  • Payment Processors: Service providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX processors receive the transaction data necessary to process your deposits and withdrawals. They are bound by their own privacy policies and strict confidentiality agreements with us.
  • Game Providers: Companies such as Pragmatic Play, Microgaming, NetEnt, and Spadegaming receive pseudonymous player IDs for the technical purpose of operating games. Your full name or personal details are not shared with them.
  • IT & Security Service Providers: Technical vendors who help us operate, maintain, and secure the we1wen platform. They are only permitted to access data necessary to perform their tasks and may not use it for any other purpose.
  • Regulatory Bodies & Authorities: Relevant Malaysian authorities, including the Department of Personal Data Protection, financial investigation units, and law enforcement agencies, where required by law or a valid court order.
  • Independent Audit Body: eCOGRA and iTech Labs receive anonymised game statistics for the purposes of fairness auditing and certification. This data contains no personal information that could identify any individual.

Every third party that receives data from we1wen is bound by a data processing agreement ensuring they protect your data to a standard no lower than the Malaysian PDPA. we1wen remains accountable for the processing of your personal data even when it is processed by third parties on our behalf.

No Transfer of Data Outside Malaysia Without Safeguards: Should any transfer of personal data outside Malaysia be required (for example, to servers of international game providers), we1wen ensures such transfers are made only to countries or entities that provide a level of data protection equivalent to Malaysia's PDPA.
5

We1wen Data Security Measures

We1wen continuously invests in data security to protect your personal information from unauthorised access, disclosure, alteration, or destruction. The following are the protection layers we have in place:

256-Bit SSL Encryption

All communications between your device and we1wen's servers are encrypted using TLS 1.3 with 256-bit key length — the highest security standard used by Malaysia's leading banks.

Encrypted Database

Sensitive data such as MyKad information and bank account details are stored in databases encrypted using AES-256. Even in the event of a physical breach, the data cannot be read without the encryption key.

Two-Factor Authentication (2FA)

Your we1wen account is protected by two-factor authentication via OTP to your Malaysian mobile number. This ensures that even if your password is exposed, no one else can log in without access to your phone.

Real-Time Monitoring

Our security monitoring system operates 24/7 to detect suspicious activity, unauthorised access attempts, and any anomalies in account usage patterns that may indicate fraud.

Employee Access Controls

Only authorised we1wen employees who have undergone strict background checks have access to member personal data. Access is granted strictly on a need-to-know basis.

Data Backup & Recovery

Your data is automatically backed up to multiple secure server locations. Tested disaster recovery procedures ensure continuity of service and data protection even in the event of a technical emergency.

Shared Responsibility: While we1wen implements comprehensive security measures, data security also depends on your own actions. We encourage you to use a strong, unique password, never share your login credentials with anyone, and notify us immediately if you suspect your account has been compromised.
6

Data Retention Period

We1wen does not retain your personal data for longer than is necessary for the stated purposes, or beyond the period required under Malaysian law. This "minimum retention" principle is a core part of our commitment to data privacy.

Data Category Retention Period Reason
Financial transaction records 7 years Malaysian legal requirements (AMLA)
Identity verification (KYC) data 5 years after account closure Anti-money laundering requirements
Gaming & betting records 3 years Dispute resolution & auditing
Customer support logs 2 years Service quality & complaint resolution
Marketing data (with consent) Until consent is withdrawn Consent-based
Security & technical logs 12 months Security threat detection

Once the retention period has ended, we1wen will securely delete or anonymise your personal data using methods that ensure it cannot be recovered. For anonymised data (where all personal identifiers have been removed), we may retain aggregated statistical data for business analysis purposes indefinitely.

7

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by we1wen. We respect and facilitate the exercise of these rights:

Right to Access Your Data

You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 14 working days of receiving a valid request. A reasonable nominal fee may be charged for excessive or repeated requests.

Right to Rectification

If you find that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. Simple updates (such as a phone number) can be made directly in your account, while changes to key identity information require verification through our support team.

Right to Erasure ("Right to be Forgotten")

In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute – we may be unable to fulfil an erasure request if the data is required to comply with a legal obligation, resolve a dispute, or enforce a valid agreement.

Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. Your objection will be acted on promptly and we will stop using your data for the purpose you have objected to, unless there are compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where the processing of your data is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal. Consent can be withdrawn via your account settings or by contacting our support team.

To exercise any of the above rights, please submit your request in writing to our privacy team at support@we1wen.xyz, stating the type of request along with your full name and we1wen account number. We will verify your identity before processing the request to protect your privacy from unauthorised parties.

Complaint to the Department of Personal Data Protection: If you are dissatisfied with how we1wen has handled your personal data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the body responsible for enforcing the PDPA in Malaysia.
8

Cookies & Tracking Technologies Policy

We1wen uses cookies and similar tracking technologies to enhance your experience on our platform, ensure account security, and understand how our platform is used. The following are the categories of cookies we use:

You can manage and delete cookies through your web browser settings. Please note that deleting or blocking essential cookies may affect the functionality and security of the we1wen platform. Optional cookies can be managed through the cookie settings panel available within our platform.

9

Protection of Children's Data

We1wen is an online betting platform intended exclusively for individuals aged 21 and above. We do not knowingly collect, store, or process the personal data of anyone under the age of 21.

During registration, we require age verification via MyKad details. If we discover that we have inadvertently collected personal data from someone under the age of 21, we will take immediate steps to:

  • Closes any linked accounts immediately.
  • Deleting all personal data belonging to that individual from our systems.
  • Returning any deposited funds to the original payment method.
  • Reporting the incident to the relevant authorities where necessary.

We encourage parents and guardians to install parental control software on devices used by children to prevent access to online betting platforms. If you suspect a child is using the we1wen platform, please notify us immediately at support@we1wen.xyz.

Child Protection Commitment: we1wen takes child protection extremely seriously and has a dedicated team responsible for monitoring and handling all related cases. Reports received will be acted upon within 24 hours.
10

Changes to This Privacy Policy

We1wen may update this Privacy Policy from time to time to reflect changes in our privacy practices, relevant Malaysian laws, or the services we offer. The "Updated" date at the top of this page will always show the date of the latest version of the Privacy Policy.

For material changes — that is, changes that significantly affect how we collect or use your personal data — we are committed to:

  • Sending an email notification to your registered email address at least 14 days before the changes take effect.
  • Displaying a clear notice on the we1wen platform when you log in.
  • In some cases, seeking your consent again before continuing to process data under the updated terms.

For changes that are clarificatory or technical in nature and have no material impact on your privacy rights, we may update this document without individual notification. We encourage you to review this page periodically to stay informed about our privacy practices.

11

Contact we1wen's Privacy Officer

We1wen has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with the Malaysian PDPA and handling any privacy-related enquiries or complaints from our members.

For any enquiries, rights exercise requests, or complaints relating to this Privacy Policy or how we handle your personal data, please contact us via:

Privacy Email
support@we1wen.xyz  (Please state "PDPA Privacy Enquiry" in the email subject line)
Live Chat 24/7
Available within the we1wen platform in Bahasa Melayu – response within 2 minutes
Response Time
PDPA rights requests: 14 working days  |  General enquiries: 24 hours

We handle all privacy enquiries with care and confidentiality. Your identity will be verified before any personal information is shared or modified, to ensure your privacy rights are not compromised by unauthorised parties.

Applicable Law: This Privacy Policy and the processing of personal data by we1wen are governed by Malaysian law, in particular the Personal Data Protection Act 2010 (PDPA), the Communications and Multimedia Act 1998, and other applicable laws in force in Malaysia. Any privacy-related disputes will be resolved under the jurisdiction of Malaysian courts.
Privacy Policy Update History
Version 3.1 – 1 January 2026 Current version – Addition of cookies section
Version 3.0 – 1 July 2026 Data retention schedule update
Version 2.0 – 1 January 2023 Addition of Boost & ShopeePay as payment processors
Version 1.0 – 1 January 2020 we1wen's first Privacy Policy

A Summary of Your Privacy Rights with we1wen

These rights are guaranteed under Malaysia's PDPA and may be exercised at any time

Right to Access

Request a copy of all personal data we1wen holds about you. We will provide it within 14 working days.

Right to Rectification

Request that we correct any inaccurate or incomplete personal data held in your we1wen account.

Right to Erasure

Request the deletion of your personal data when it is no longer needed, subject to legal obligations.

Right to Object

Object to the processing of your data for specific purposes — particularly direct marketing — and we will stop immediately.

Right to Withdraw Consent

Withdraw your consent for consent-based data processing at any time, with no penalty.

Right to Lodge a Complaint with JPDP

If you are not satisfied, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

FAQ – we1wen Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at we1wen

No. we1wen does not sell or share your personal data with third parties for marketing purposes without your explicit consent. Data sharing only occurs in three strictly limited situations: first, with payment processors (such as Touch 'n Go, DuitNow, and GrabPay) required to process your transactions; second, with IT service providers that manage the technical infrastructure of our platform under strict confidentiality agreements; and third, with Malaysian authorities when required by law or a valid court order. In all cases, only the minimum necessary data is shared, and all recipients are bound by strict confidentiality obligations.

Your financial information is protected by multiple layers of security. First, all communications are encrypted using 256-bit SSL during transmission. Second, payment details such as bank account numbers are stored in a database encrypted with AES-256 — even if someone were to gain physical access to our servers, the data cannot be read without the encryption key. Third, we1wen does not store your credit card numbers or eWallet PINs — we only retain the transaction identifiers returned by payment processors. Fourth, all withdrawals can only be made to a verified account or eWallet registered in your own name, preventing any unauthorised fund transfer attempts.

You may submit a data deletion request; however, we1wen is unable to delete all data in every situation. This is because Malaysian law — in particular the Anti-Money Laundering Act (AMLA) — requires us to retain financial transaction records for 7 years. Betting records must be kept for 3 years for dispute resolution purposes. Data subject to these legal obligations cannot be deleted upon individual request. However, we will delete all other data not bound by such obligations, including communication preferences, analytics data, and any data you provided voluntarily. Once the legally required retention period expires, all data will be securely deleted or anonymised.

When your account is closed – whether at your request or due to a terms violation – your personal data is not deleted immediately. we1wen is required to retain certain records for the periods prescribed under Malaysian law. Financial and transaction records are kept for 7 years under AMLA. Identity verification (KYC) data is retained for 5 years after account closure. Gaming records are kept for 3 years. Once all retention periods have elapsed, your data will be securely deleted from our systems. During this period, access to your data is restricted to authorised personnel only and solely for legal compliance purposes.

Act immediately. First, change your we1wen account password right away via the "Forgot Password" page or your account settings. Second, contact we1wen support through the in-platform 24/7 live chat and report the situation. Our team can temporarily suspend your account to prevent any further unauthorised access. Third, review your transaction history for any unrecognised activity and report it to us. Fourth, check the security of your device and eWallet — if your we1wen password has been compromised, other passwords may be at risk as well. we1wen will investigate the incident and take appropriate action to protect your account.
we1wen's Privacy Commitment – In Compliance with Malaysia's PDPA 2010

We1wen is committed to protecting the privacy of every member in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. All data is encrypted with 256-bit SSL, stored securely, and not shared with third parties without your consent. You have full rights to access, correct, or delete your data.

For any privacy-related enquiries or to exercise your rights under the PDPA, please contact our privacy team at support@we1wen.xyz or via 24/7 live chat in Bahasa Melayu. Unresolved complaints may be escalated to the Department of Personal Data Protection (JPDP) Malaysia. For information on how we handle your betting funds, please read Terms & Conditions ours.

Your Data Is Safe with we1wen

We take your privacy seriously – from 256-bit SSL encryption to full compliance with Malaysia's PDPA. Register today and play with peace of mind, knowing your data is in responsible hands.

Full compliance with Malaysia's PDPA
256-bit SSL Encryption
No sale of data to third parties
Bahasa Melayu