Privacy Policy

This policy explains what information the platform collects while you use it, why that information is needed, who it may be shared with and what you can ask for in relation to it.

Where a retention period or a legal detail is set out in the operator’s own document, that document is the authoritative version. The rest of the platform is on the We1Win Malaysia site.

What Data We Collect

Four categories, all of them arising from the way the account actually works.

  • Registration data. Username, password, mobile number and real name, supplied on the signup form.
  • Payment data. The bank account or e-wallet linked for deposits and payouts, together with the record of each transaction.
  • Activity data. Bets, stakes, game sessions, bonus claims and the balance history attached to them.
  • Technical data. Device type, browser or app version, connection details and session records, collected automatically when the platform is used.

Correspondence with support is retained as well, including anything you attach to a conversation such as a payment screenshot.

Why Data Is Processed

Six purposes, and each one maps to something visible in the account.

  1. Operating the account. Creating it, authenticating logins and keeping the balance accurate.
  2. Processing payments. Crediting deposits and sending payouts to the linked method.
  3. Verification. Confirming identity and the ownership of a payment method before a payout, under the platform’s KYC and AML rules.
  4. Fraud prevention. Detecting duplicate accounts, bonus abuse and unauthorised access.
  5. Support. Answering questions about an account, which requires seeing what happened on it.
  6. Responsible gaming. Applying deposit limits, cooling off periods and self-exclusions.

Marketing messages are sent where you have agreed to receive them, and that agreement can be withdrawn without affecting the account itself.

Sharing With Third Parties

Data is shared only where the service cannot work without it.

  • Payment providers. The wallet, bank or crypto service handling a transaction receives what it needs to complete that transaction.
  • Game and betting providers. The studio or sportsbook engine running a session receives the data needed to run it, such as a session identifier and stake information.
  • Technical service providers. Hosting, security and support tools used to operate the platform.
  • Authorities. Where disclosure is required by law or by a lawful request from a competent authority.

Personal data is not sold. Where a provider processes data on the operator’s behalf, it is expected to do so under contract and for that purpose only.

Cookies and Tracking

The platform uses cookies and similar technologies, in three broad groups.

  • Essential cookies. Keep you signed in, hold the session together and protect against certain attacks. The site cannot function without them.
  • Functional cookies. Remember preferences such as language or layout so they do not reset on every visit.
  • Analytics cookies. Measure how the site is used in aggregate, which pages load slowly and where sessions break.

Cookies can be blocked or deleted in the browser settings, and mobile devices offer their own advertising controls. Blocking essential cookies will prevent you from staying signed in, so in practice the site becomes unusable rather than merely less convenient.

How Data Is Protected

On the platform side: connections are encrypted, access to account data is limited to staff who need it for support and verification, and payment credentials are handled by the payment provider rather than stored in the game account.

On your side, three things matter more than anything the operator can do. Use a password that is not reused anywhere else, sign out on devices that are not yours, and reach the site from a verified address rather than a forwarded link, since a copied login page defeats every protection listed above. The verified list is on the official site check page.

No system is absolutely secure, and any policy claiming otherwise is overstating it. What can be said is that the sensitive parts, payments and credentials, are the parts held furthest from the game account itself.

Your Rights and Requests

Four requests can be made through support at any time.

  1. Access. Ask what data is held about your account.
  2. Correction. Ask for inaccurate details to be corrected. Changes to the real name attached to payouts are subject to verification, since that field controls where money can be sent.
  3. Withdrawal of marketing consent. Stop promotional messages without closing the account.
  4. Deletion. Ask for the account and its data to be deleted, subject to any records the operator is legally required to keep.

Requests are made through the support chat, and the response time for each type is set out in the operator’s own document rather than promised here.

Data Retention and Policy Updates

Account and transaction records are retained while the account is open and for a period after closure, because financial and anti money laundering rules require operators to keep them. The specific periods are published by the operator in its own document.

This policy may be updated as the platform or the applicable rules change. The current version is the one published on the site, and continued use of the account after an update constitutes acceptance of it.

The related documents are the terms and conditions and the KYC and AML policy, both linked from the footer.

Updated: