Data Protection & Privacy
Your privacy matters to us. This Privacy Policy explains exactly what personal data win1 collects, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold in relation to your data. Please read this document carefully before using the win1 platform.
Privacy at a Glance
These cards summarise the most important privacy points. The full legal policy follows below — please read the complete document for all details.
We collect personal data you provide during registration (name, date of birth, email, contact number), KYC documents (MyKad or passport, proof of address), payment information, and gameplay activity logs. We also collect technical data like IP addresses and device identifiers automatically.
Your data is used to operate your account, process deposits and withdrawals, verify your identity under our KYC obligations, comply with anti-money laundering requirements, deliver customer support, and where relevant, send you relevant promotional communications you have opted into.
win1 does not sell your personal data. Limited data sharing occurs with our payment processors (Touch 'n Go, DuitNow, FPX, etc.), identity verification providers, and our licensing regulator where required. All third-party processors are bound by data protection obligations.
All data transmitted between your device and win1's servers is encrypted using TLS 1.3. Personal data at rest is stored in encrypted databases with access controls limited to authorised personnel only. We conduct regular security assessments to identify and address vulnerabilities.
You have the right to access your personal data, request corrections to inaccurate records, request deletion of data we are no longer required to retain, withdraw consent for marketing communications, and request a copy of your data in a portable format.
win1 uses essential cookies required for platform operation, analytical cookies to understand aggregate usage patterns, and preference cookies to remember your settings. We do not use third-party advertising tracking cookies. You can manage cookie preferences in your browser settings.
This Privacy Policy (hereinafter "the Policy" or "this Policy") is published by win1 (hereinafter "win1", "we", "us", or "the Company"), the operator of the online gaming and sports betting platform accessible at https://win1.click (hereinafter "the Platform" or "the Website"). This Policy describes how win1 collects, processes, stores, and shares personal data in connection with the operation of the Platform.
win1 is committed to protecting the privacy and personal data of all users, including registered Players and visitors to the Website. We recognise that players accessing win1 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other parts of Malaysia trust us with sensitive personal and financial information. That trust is not taken lightly. We process personal data only for legitimate, clearly defined purposes and implement appropriate technical and organisational measures to keep that data secure.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, each of which contains additional provisions relevant to how your information is used in the context of your use of the Platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, or online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Data Subject" | Any living individual whose personal data is processed by win1, including registered Players and Website visitors. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. win1 is the Data Controller in respect of all personal data processed through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of win1, under written agreement and subject to win1's instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a specified purpose. |
| "KYC Documents" | Identity and address verification documentation submitted by Players, including Malaysian MyKad, passport, driver's licence, and utility bills or bank statements. |
3.1 win1 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, win1 determines the purposes for which personal data is collected and the means by which it is processed.
3.2 win1 operates under an international online gaming licence from a recognised offshore jurisdiction. The Platform is not regulated by any Malaysian government authority. Notwithstanding this, win1 is committed to processing personal data in a manner consistent with internationally recognised data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable, and broader principles of data minimisation, purpose limitation, storage limitation, and data security.
3.3 For all enquiries, data access requests, or complaints relating to the processing of your personal data, please contact our Data Protection contact point at [email protected].
When you register an account, make deposits or withdrawals, contact customer support, or participate in promotions, you may provide the following categories of personal data:
When you access the Platform, we automatically collect certain technical data including:
win1 may receive supplementary information about you from third-party identity verification providers engaged for KYC compliance purposes, payment processors processing your transactions (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency network providers), and fraud prevention services. This data is used solely for the purposes described in this Policy.
win1 processes personal data on the following legal bases:
| Legal Basis | When Applied |
|---|---|
| Contractual Necessity | Processing required to perform our obligations under the Terms & Conditions, including operating your account, processing deposits and withdrawals, and delivering gaming services. |
| Legal Obligation | Processing required to comply with our obligations under our gaming licence, including KYC identity verification, anti-money laundering (AML) checks, responsible gambling requirements, and regulatory reporting. |
| Legitimate Interests | Processing necessary for win1's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests. |
| Consent | Processing for purposes where we have obtained your explicit prior consent, specifically in relation to direct marketing communications. Consent may be withdrawn at any time. |
win1 uses your personal data for the following purposes:
7.1 win1 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is strictly limited to what is necessary to operate the Platform and comply with our legal obligations.
7.2 We may share your personal data with the following categories of recipients:
8.1 win1 operates under an international gaming licence and utilises infrastructure including servers, payment processors, and verification services that may be located outside of Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia.
8.2 Where personal data is transferred internationally, win1 implements appropriate safeguards to ensure that the data receives a level of protection consistent with internationally recognised standards. These safeguards include contractual data processing agreements with third-party processors incorporating standard data protection clauses.
8.3 By registering and using the win1 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.
9.1 win1 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus 5 years following account closure, to meet AML and licensing record-keeping requirements. |
| KYC Documents | Duration of account plus 5 years following account closure, in accordance with anti-money laundering obligations under our gaming licence. |
| Transaction Records | Minimum 5 years from the date of each transaction, as required by standard AML record-keeping obligations. |
| Customer Support Communications | 3 years from the date of the communication, for dispute resolution and service improvement purposes. |
| Responsible Gambling Records | Duration of any self-exclusion period plus 5 years following expiry, to prevent re-registration during exclusion periods. |
| Technical and Log Data | Up to 12 months from collection, unless required longer for security incident investigation. |
| Marketing Preferences | Until consent is withdrawn or account is closed, whichever is earlier. |
9.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
10.1 win1 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and remember your preferences. A cookie is a small text file placed on your device by a website when you visit it. Cookies themselves do not contain personally identifiable information, but in conjunction with other data they may allow win1 to identify you.
10.2 The following categories of cookies are used on the win1 Platform:
| Cookie Type | Purpose | Can Be Disabled |
|---|---|---|
| Essential | Required for the Platform to function. These include session management cookies, authentication tokens, and security cookies that prevent cross-site request forgery. The Platform cannot operate without these. | No — disabling will prevent login |
| Analytics | Used to understand aggregate usage patterns, measure which pages are visited, how long sessions last, and which features are most used. Data is aggregated and not linked to individual users. | Yes — via browser settings |
| Preference | Remember your display preferences, language settings, and responsible gambling notification settings between sessions. | Yes — preferences will reset each visit |
| Security | Assist in detecting fraudulent login attempts, device fingerprinting for account security, and flagging suspicious patterns. | No — required for account protection |
10.3 win1 does not use third-party advertising or behavioural targeting cookies. Your browsing activity outside of win1 is not tracked. You can manage or delete cookies through your browser settings at any time, though disabling essential cookies will prevent normal operation of the Platform.
In connection with the personal data we hold about you, you hold the following rights. To exercise any of these rights, please contact us at [email protected] or via live chat. We will respond to all valid requests within thirty (30) days of receipt.
You have the right to request a copy of the personal data win1 holds about you, along with information about how it is processed, where it is stored, and who it has been shared with.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Some corrections (e.g., date of birth) may require documentary evidence.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that data subject to regulatory retention obligations (e.g., AML records) cannot be deleted until the retention period expires.
In certain circumstances, you may request that we restrict processing of your personal data — for example, while a dispute about data accuracy is being investigated.
Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
You have the right to object to processing based on legitimate interests, and to withdraw consent for processing based on consent (including marketing communications) at any time without affecting the lawfulness of prior processing.
12.1 win1 may send you promotional emails, SMS messages, and in-platform notifications regarding bonuses, game launches, sporting events (such as EPL fixtures, Liga Super Malaysia, UFC events), and relevant platform updates where you have given your prior consent to receive such communications.
12.2 You may withdraw consent for marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; (b) adjusting your notification preferences in your Account settings; or (c) contacting our support team at [email protected] with a request to opt out. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
12.3 win1 does not sell or transfer your contact information to third-party marketers. Marketing communications you receive from win1 are sent exclusively by win1 and relate solely to the win1 Platform.
13.1 The win1 Platform is strictly not available to any person under the age of twenty-one (21). win1 does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or attempt to use the Platform.
13.2 If win1 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, that account will be immediately suspended, all personal data associated with the account will be deleted as soon as practically possible, and the matter will be reported to the appropriate regulatory authority.
13.3 If you are the parent or guardian of a minor and believe that your child has registered an account on win1, please contact us immediately at [email protected] so that we can take prompt action.
14.1 win1 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
14.2 Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be completely secure. While win1 makes every effort to protect your data, you transmit information to win1 at your own risk. We encourage all players to use strong, unique passwords for their accounts.
15.1 The win1 Platform may contain references to third-party payment processors and service providers by name (such as Touch 'n Go, DuitNow, Maybank, etc.) for informational purposes. These references are made in the context of payment method descriptions and do not constitute endorsements of those parties' privacy practices.
15.2 If you navigate to a third-party payment gateway or service in connection with making a deposit or withdrawal, that third party's own privacy policy will govern the collection and use of any personal data you provide directly to them. win1 has no control over and accepts no responsibility for the privacy practices of third-party service providers accessed via external links.
16.1 win1 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy is always accessible at https://win1.click/privacy-policy.
16.2 Where amendments are material — meaning they significantly affect how your personal data is used or your rights in relation to that data — win1 will notify registered Players via email and/or on-site notification at least fourteen (14) days before the amendments take effect, where practically possible.
16.3 Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amendments, you must stop using the Platform and request account closure.
17.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact win1 through the following channels:
17.2 win1 takes all privacy complaints seriously. Upon receipt of a formal complaint, we will acknowledge it within five (5) business days and aim to provide a substantive response within thirty (30) calendar days. Where an investigation requires additional time, we will notify you of the delay and provide an estimated resolution date.
Your Data, Your Rights
We've designed win1's data practices around respect for players. Your information is collected only for what's needed, protected with industry-standard security, and never sold. Ready to explore the platform? For players aged 21 and above only.
Play responsibly. win1 is for entertainment purposes only. For players aged 21 and above only. Malaysian players are responsible for compliance with local laws.