We1wim Privacy Policy – How We Protect the Personal Data of Malaysian Users

We1wim is an online entertainment and betting platform operating in Malaysia, accessible at https://we1wim.click. This Privacy Policy applies to all users who register an account, use any of our services, or visit the we1wim website.

As a personal data controller under Malaysia's Personal Data Protection Act 2010 (PDPA), we1wim takes full responsibility for ensuring that the personal data we collect and process is protected in accordance with the standards set by applicable Malaysian law.

This Privacy Policy clearly outlines:

• The types of personal data we collect from we1wim users.
• The purpose and legal basis for the collection and processing of that data.
• How we protect your data from unauthorised access.
• Your rights as a data subject under Malaysia's PDPA.
• How to contact us for any privacy-related enquiries or requests.

This policy forms part of the overall agreement between you and we1wim, and should be read together with Terms & Conditions us.

We1wim collects various types of personal data depending on how you interact with our platform. Below is a comprehensive table of the data categories we collect:

We1wim collects users' personal data through the following methods:

• Account Registration: When you register a new account with we1wim, you provide basic identity information directly, including your name, Malaysian phone number, and date of birth.
• Identity Verification (KYC): When additional identity verification is required, you may be asked to upload supporting documents such as a MyKad or a recent bank statement.
• Financial Transactions: Every deposit made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and every withdrawal to your Malaysian bank account, generates a transaction record that is automatically stored.
• Gaming Activity: All gaming activity on the we1wim platform — from Sports Betting on the Malaysia Super League and EPL, jackpot slots sessions, to Live Casino games and poker — is automatically recorded for game integrity and compliance purposes.
• Cookies & Tracking Technologies: The we1wim website uses cookies and similar technologies to automatically collect technical and usage behaviour data.
• Customer Support: When you contact the we1wim support team via live chat or email, those communications are recorded for service quality and reference purposes.
• Third-Party Sources: In certain cases related to AML compliance or identity verification, we1wim may receive data from approved identity verification service providers.

We1wim uses the personal data collected solely for the following purposes:

• Account Management: Creating, maintaining, and managing your we1wim user account, including identity verification and access control.
• Transaction Processing: Processes deposits and withdrawals in Malaysian Ringgit (MYR) via local Malaysian payment methods supported by we1wim.
• Service Provision: Allows you to access and use all games and services available on the we1wim platform.
• Customer Support: Providing effective technical assistance and customer support whenever you need help.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and other security threats on the we1wim platform.
• Legal Compliance: To meet Malaysia's legal and regulatory obligations, including AML and CFT requirements.
• Responsible Gambling: Identifying gaming patterns that may indicate problem gambling and providing appropriate assistance to users who need it.
• Platform Improvements: Analyses aggregated usage data (not individual-level) to improve the design, features, and performance of the we1wim platform.
• Marketing Communications: Sending promotions, special offers, and we1wim-related updates — but only to users who have given their consent to receive such communications.

We1wim processes users' personal data on valid legal bases under Malaysia's PDPA 2010:

• Consent: For most data processing activities, we rely on the consent you provided when registering your we1wim account. You have the right to withdraw this consent at any time, though doing so may affect your ability to use certain services.
• Contract Performance: Processing that is necessary to fulfil the service contract between you and we1wim — such as processing financial transactions and managing your account.
• Legal Obligation: Processing required to comply with applicable Malaysian law, including AML requirements, identity verification, and reporting obligations to relevant authorities.
• Legitimate Interest: Processing necessary for the legitimate interests of we1wim or third parties, such as fraud prevention, ensuring platform security, and service improvement — provided these interests do not override your rights and interests as a user.

We1wim is committed to never selling or renting users' personal data to any party. That said, in the course of operating the platform, we may need to share data with certain parties under limited circumstances:

• Payment Service Providers: To process deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, we are required to share the minimum necessary transaction information with the relevant payment service providers. These providers maintain their own privacy policies and security standards.
• Technical Service Providers: Companies providing hosting, cybersecurity, and technical support services to we1wim may have limited access to data as necessary to deliver those services. All such providers are bound by strict confidentiality agreements.
• Malaysian Regulatory Authority: Where required by Malaysian law or a court order, we1wim may be obliged to disclose users' personal data to the relevant authorities, including the police, Bank Negara Malaysia, or other law enforcement agencies.
• Identity Verification Provider: For KYC and AML compliance purposes, we may use approved and regulated third-party identity verification services operating in Malaysia.

We1wim continuously invests in data security infrastructure to protect our users' personal information. The key security measures we have in place include:

• Data Encryption in Transit: All data transmitted between your device and we1wim's servers is protected by 256-bit TLS/SSL encryption. This applies to all communications, including logins, transactions, and gaming activity.
• Data Encryption at Rest: Sensitive data stored in we1wim's databases is also encrypted using strong cryptographic algorithms to prevent unauthorised exposure even in the event of physical access to the servers.
• Internal Access Controls: Access to user personal data within the we1wim organisation is restricted to staff with a legitimate business need, based on the principle of least privilege. All access is automatically logged and monitored.
• 24/7 Security Monitoring: we1wim's security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: we1wim conducts regular internal and external security audits to ensure our data protection systems remain effective against current threats.
• Two-Factor Authentication (2FA): we1wim supports two-factor authentication for user accounts, providing an additional layer of security beyond just a password.

We1wim retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. General data retention periods are as follows:

• Active Account Data: For as long as your we1wim account remains active, all account data and activity records are retained to enable us to provide services to you.
• Financial Transaction Records: All deposit and withdrawal records in MYR are retained for seven (7) years after the transaction date, as required under Malaysian financial regulations.
• Identity Verification (KYC) Data: Identity documents such as MyKad copies are retained for five (5) years after account closure, in line with Malaysia's AML requirements.
• Support Communication Logs: Customer support chat logs are retained for two (2) years for reference and quality control purposes.
• Technical Data & System Logs: Technical data and system logs are retained for twelve (12) months for security and troubleshooting purposes.

Once the applicable retention period expires, we1wim will securely delete or anonymise the data so that it can no longer be linked to any specific individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a we1wim user have the following rights in relation to your personal data:

The we1wim website uses cookies and similar tracking technologies to enhance user experience and gather aggregated usage statistics. The types of cookies we use are as follows:

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the we1wim platform. Please note that security and session cookies cannot be disabled as they are essential to protecting your account.

We1wim is an exclusive platform for individuals aged 21 years and above. We take the protection of children's privacy very seriously and do not knowingly collect personal data from underage individuals.

Steps we1wim takes to prevent access by underage individuals:

• Date of birth verification is mandatory during account registration.
• Identity verification (KYC) requiring valid documents such as a MyKad for transactions above certain thresholds.
• Continuous monitoring to detect signs of underage use.
• Immediate account termination without balance refund if a user is found to be under 21 years of age.

If you believe an underage individual has registered an account on we1wim, please contact us immediately at support@we1wim.click and we will take action without delay.

We1wim reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable Malaysian legal requirements, or changes to we1wim's services.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notices to the email address registered to your we1wim account.
• For changes that materially affect your rights, providing at least 30 days before the changes take effect.

Continued use of the we1wim platform after any policy changes are published constitutes your acceptance of the updated policy.