We1wij Privacy Policy – Malaysia Player Data Protection

1.Introduction

This Privacy Policy ("Policy") describes how we1wij ("Platform", "we", "us") collects, uses, stores, discloses, and protects your personal data when you use our online gaming platform at we1wij.best, including the website, mobile application, and all related services.

We1wij is committed to protecting the privacy of all our players in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection legislation. This Policy forms part of your overall agreement with we1wij and should be read together with Terms & Conditions us.

By registering an account or using the we1wij platform, you confirm that you have read and understood this Privacy Policy and agree to the data handling practices described herein. If you do not agree with any part of this Policy, please discontinue use of our platform.

2.Personal Data We Collect

We1wij collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Registration & Identity Data:

• Full name as stated on your Malaysian identity card (MyKad)
• Email address and mobile phone number
• Date of birth for age verification
• Account password (stored as an unreadable hash)
• National identification number (for KYC requirements when applicable)

Financial & Payment Data:

• E-wallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
• Bank account information for withdrawals via FPX (Maybank2u, CIMB Clicks)
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Financial transaction records for AML compliance purposes

Platform Usage Data:

• Gaming history and betting records
• IP address and device information
• Geographic location data (state/city within Malaysia)
• Login and logout activity logs
• Account settings preferences and responsible gaming limits

Communications Data:

• Records of conversations with our customer support team
• Emails and messages you send to we1wij
• Feedback and reviews you provide about the platform

3.How We Use Your Personal Data

We1wij uses the personal data collected for the following purposes:

We1wij will not use your personal data for any purpose other than those stated above without first obtaining your consent. If we wish to use your data for a new purpose, we will notify you and obtain the necessary consent.

4.Legal Basis for Data Processing

We1wij processes your personal data on one or more of the following legal bases in accordance with Malaysia's PDPA 2010:

• Contract Performance: Processing is necessary to manage your account, handle transactions, and provide the services you have registered for;
• Legal Obligations: Processing is necessary to comply with Malaysian law, including KYC, AML, and financial reporting requirements;
• Legitimate Interests: Processing is necessary for platform security, fraud prevention, and service improvement purposes;
• Consent: For purposes such as marketing communications, we rely on the consent you provided at registration or at a later date.

You have the right to withdraw your consent for any processing that relies on consent at any time. Withdrawal of consent will not affect the validity of any processing that was carried out prior to the withdrawal.

5.Data Sharing & Disclosure

We1wij does not sell, rent, or trade our players' personal data to any third party. However, we may share your personal data with the following parties under limited and controlled circumstances:

• Service Providers: Companies that assist us in operating the platform, including IT infrastructure providers, payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX), and gaming software providers. All service providers are bound by strict data protection agreements;
• Statutory Authorities: When required by Malaysian law, court orders, or directions from competent authorities, including AML and CTF compliance requirements;
• Gambling Regulatory Authority: Information required for licensing, audit, and regulatory compliance purposes;
• Independent Audit Partner: For game fairness certification and platform security audit purposes, required information may be shared in a non-identifiable form.

6.Cookies & Tracking Technology

We1wij uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies: Collecting information on how players use our platform (pages visited, time spent, links clicked) to help us improve the platform. All data is collected anonymously;
• Functional Cookies: Storing your preferences such as language, display settings, and game choices to provide a more personalised experience;
• Analytics Cookies: We use analytics tools to understand overall platform usage patterns for the purpose of service improvement.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the we1wij platform.

7.Data Security Measures

We1wij implements a range of technical and organisational security measures to protect players' personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption of Data in Transit: All data transmitted between your device and we1wij's servers is protected with TLS 1.3 protocol and 256-bit SSL encryption;
• Encryption of Data at Rest: Sensitive data stored on our servers, including passwords and financial information, is stored in encrypted form;
• Access Controls: Access to player personal data is restricted to staff who require it to carry out their official duties, and all access is logged for audit purposes;
• 24/7 Monitoring: Our IT security team continuously monitors our systems and networks to detect and respond to security threats;
• Regular Security Audits: We conduct regular internal and external security audits to identify and address potential vulnerabilities;
• Two-Factor Authentication: The 2FA feature is available to all we1wij player accounts as a recommended additional layer of security.

While we take all reasonable steps to protect your data, no security system can guarantee absolute protection. We encourage players to take their own precautions as well, such as using a strong, unique password and enabling 2FA.

8.Data Retention Period

We1wij retains players' personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account is active or as long as necessary to provide services to you;
• Financial & Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements;
• KYC & Identity Verification Data: Retained for the duration of the active account plus 5 years after account closure for AML compliance purposes;
• Support Communication Logs: Retained for 2 years from the date of last interaction;
• Closed Account Data: Following account closure, data that is no longer required will be deleted or anonymised within 90 days, subject to retention obligations prescribed by law.

9.International Data Transfers

In the course of operating our platform, players' personal data may be processed or stored in countries other than Malaysia. This may occur when we engage cloud services or technical service providers operating outside Malaysia.

In all cases of international data transfers, we1wij ensures:

• The recipient country or organisation provides a level of data protection that is equivalent to or exceeds Malaysia's PDPA standards;
• Appropriate data transfer agreements have been put in place with the receiving parties;
• Additional technical safeguards are implemented to ensure data security during transfer.

10.How to Exercise Your Data Protection Rights

To exercise any of your data protection rights as set out in this Privacy Policy, you may:

• Contacting the we1wij support team via live chat within the platform (available 24/7);
• Sending an email to support@we1wij.best with the subject line "Data Protection Request";
• Clearly stating the type of right you wish to exercise and your account information for identity verification.

We1wij will respond to data protection rights requests within the following timeframes:

• Data access: 21 business days from the date the request is received;
• Data correction: 14 working days;
• Data deletion: 30 business days (subject to statutory retention obligations);
• Objection to processing: 14 working days.

In some cases, we may need to verify your identity before processing your request to ensure the security of your data. This is a standard protective measure taken in your best interest.

11.Changes to This Privacy Policy

We1wij reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page;
• Sending email notifications to all active we1wij members;
• Displaying in-platform notices to inform players of important changes;
• In cases of significant changes, we may request that you reconfirm your consent.

Continued use of the we1wij platform after a change notification is considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12.Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy or the way we1wij handles your personal data, please reach out to us through the following channels:

• Email: support@we1wij.best
• Live Chat: Available 24/7 within the we1wij platform
• Response Time: We aim to respond within 2 minutes for live chat and within 24 hours for email

Our team communicates in both Bahasa Melayu and English. For privacy and data protection matters, your request will be handled by our trained staff responsible for data compliance.

If you are dissatisfied with how we1wij has handled your data protection request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body.