Privacy Policy we1ein –
Your Data Security is Our Priority

This we1ein Privacy Policy applies to all users who access or use our platform via the we1ein.com website, our mobile application (where available), or any of our other official channels. It covers all personal data we collect directly from you as well as data collected automatically through your use of the platform.

We1ein acts as the data controller for all personal information collected through our platform. This means we bear full responsibility for ensuring your data is processed in a lawful, fair, and transparent manner in accordance with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy covers:

• The types of personal data we collect and how we collect it
• The purpose and legal basis for processing your data
• Parties that may receive your data
• Your data retention period
• Your rights as a data subject
• How to contact us regarding privacy

We1ein collects various types of personal data depending on your interactions with our platform. The following are the main categories of data we collect:

Data We Do Not Collect: we1ein does not directly collect credit/debit card numbers. All payments are processed through third-party PCI-DSS certified secure payment gateways. We also do not collect biometric data such as fingerprints or facial scans.

We1ein uses your personal data only for lawful, stated purposes. The following are the primary purposes for which your data is processed:

• Account Management: To create, verify, and maintain your member account on the we1ein platform.
• Service Delivery: To give you access to all games and services offered at we1ein, including slots, baccarat, roulette, Sports Betting, and lottery.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to manage your winnings withdrawals.
• Identity Verification (KYC): To comply with anti-money laundering (AML) legal requirements and ensure our platform remains free from illegal activity.
• Customer Support: To respond to enquiries, resolve issues, and provide technical support via live chat or email.
• Platform Security: To detect and prevent fraud, account misuse, and suspicious activity on our platform.
• Marketing Communications: To send you information about we1ein promotions, bonuses, and exclusive offers that may interest you (subject to your consent).
• Analytics & Improvement: To analyse usage patterns and continually improve the user experience on the we1ein platform.
• Legal Compliance: To comply with any applicable legal obligations, regulations, or court orders.

We only process your data where a valid legal basis exists — whether that is your consent, performance of a contract, a legal obligation, or the legitimate interests of we1ein that do not override your rights and freedoms.

We1ein does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, we may share your data in the following limited circumstances:

• Trusted Service Providers: We work with trusted third-party companies to support our platform's operations — including payment gateway providers (Touch 'n Go, GrabPay, DuitNow), licensed gaming software providers, cloud infrastructure providers, and analytics services. All these parties are bound by strict confidentiality agreements and may only use your data for the specified purposes.
• Statutory Authorities: We may disclose your data to law enforcement agencies, regulatory bodies, or courts where required by Malaysian law or a valid court order.
• Fraud Prevention: In cases of suspected fraud or money laundering, we may share the necessary information with relevant agencies such as Bank Negara Malaysia or the Royal Malaysia Police.
• Business Transfer: In the event of a merger, acquisition or asset transfer involving we1ein, user data may be transferred as part of that transaction. You will be notified in advance and your rights will remain protected.

All data sharing is carried out with appropriate safeguards and only to the extent necessary for the stated purposes. we1ein ensures that every recipient party upholds data protection standards equivalent to or higher than our own.

We1ein implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser and we1ein's servers are protected with the highest-grade SSL/TLS encryption, ensuring that data in transit cannot be intercepted by any third party.
• Stored Data Encryption: Sensitive data, including financial information and verification documents, is stored in encrypted form using AES-256 standards.
• Two-Factor Authentication (2FA): we1ein offers two-factor authentication to add an extra layer of security to your account.
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorised access attempts.
• Internal Access Controls: Access to users' personal data by we1ein staff is restricted to those who require it to carry out their duties, and all access is logged and audited on a regular basis.
• Security Testing: we1ein conducts regular penetration testing and vulnerability assessments to identify and address any security weaknesses.

We1ein uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the we1ein platform. For marketing cookies, you may withdraw your consent at any time via your account settings.

As a we1ein user based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact us by email at support@we1ein.com with the subject line "Privacy Rights Request". We will process your request within 30 calendar days. We may need to verify your identity before doing so.

We1ein retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including meeting any legal, accounting, or reporting requirements. The following are general guidelines for our data retention periods:

• Active Account Data: For as long as your account remains active and you continue using we1ein's services.
• Financial Transaction Data: Minimum 7 years from the transaction date, in accordance with Malaysia's financial and tax legal requirements.
• KYC Verification Documents: Minimum 5 years after account termination, in line with AML legal requirements.
• Gaming & Betting Logs: A minimum of 2 years for dispute resolution and audit purposes.
• Support Communication Records: 3 years after the last interaction.
• Marketing Data (with consent): Until you withdraw your consent.

Once the required retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained for statistical and analytical purposes.

The we1ein platform is intended solely for individuals aged 18 years and above only. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that we have collected data from a minor without proper age verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on our platform are urged to contact us immediately at support@we1ein.com.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Email: support@we1ein.com
• Email Subject: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 3 business days for general enquiries; 30 days for formal rights requests
• Live Chat: Available 24/7 via the we1ein platform

We1ein reserves the right to update this Privacy Policy at any time. Any material changes will be communicated to you via an in-platform notice or email to your registered address at least 14 days before the changes take effect, unless an immediate update is required for legal or security reasons.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. Your continued use of the we1ein platform after any changes are published constitutes your acceptance of the updated policy.