Privacy Policy a1one – Personal Data Protection for Malaysian Players

This Privacy Policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and related data protection legislation. a1one, as the data controller, is responsible for ensuring that all personal data collected is processed in accordance with the data protection principles established under Malaysian law.

This policy covers all forms of data processing carried out by a1one, including collection during registration, during platform use, during financial transaction processing, and during interactions with our customer support team.

We encourage you to read this document carefully and to contact us if you have any questions or concerns about how we manage your personal data. Your privacy is not merely a legal obligation to us — it is a core value we uphold.

A1one collects several categories of personal data for specific purposes. Below is a detailed breakdown of the types of data we collect:

In the context of the a1one online betting platform, the financial information we collect includes details related to Malaysian payment methods you use, such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking. Your full account numbers or eWallet passwords are not stored in our systems — only transaction confirmations are recorded.

The personal data we collect is used solely for the purposes stated and will not be used for any other purpose without your additional consent. Below are the primary purposes for which your data is used:

• Account Management: Creating and managing your a1one account, including the registration process, identity verification (KYC), and password management.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian local payment methods, recording transaction history and issuing receipts.
• Platform Security: Detecting and preventing fraud, multi-account usage, money laundering, and other unlawful activities on the a1one platform.
• Customer Support: Responding to enquiries, resolving technical issues, processing complaints, and providing assistance to members across multiple communication channels.
• Platform Improvements: Analysing usage patterns to improve platform features, enhance user experience and develop new products.
• Marketing Communications: Sending information about a1one promotions, bonuses, and the latest offers — only where you have given consent to receive such communications.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including financial reporting requirements and anti-money laundering compliance.

A1one is firmly committed to ensuring that your personal data will never be sold, rented, or shared with any third party for their own commercial purposes. However, there are limited circumstances in which we may need to share your data:

• Payment Service Providers: To process deposit and withdrawal transactions via Malaysian eWallets and online banking, the required transaction information is shared with accredited payment gateway providers under strict confidentiality agreements.
• Technology Service Providers: We engage third-party services for server hosting, platform analytics and cybersecurity. All providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond what is specified.
• Competent Authorities: a1one may be required to disclose information to legal authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
• Business Transfer: In the event of a merger, acquisition or sale of company assets, user data may be transferred to the new entity. You will be notified in advance of any such changes.

Data security is a1one's top priority. We have implemented a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption: All communications between your browser and a1one's servers are encrypted using the latest TLS/SSL protocols, ensuring that no third party can intercept or read the data transmitted.
• Firewall & Network Security: a1one's infrastructure is protected by enterprise-grade firewall systems and intrusion detection systems that monitor and block unauthorised access attempts in real time.
• Internal Access Controls: Access to user data within the a1one organisation is restricted to staff who require it strictly on a need-to-know basis. All access is logged and audited regularly.
• Regular Security Testing: a1one conducts regular penetration testing and security vulnerability assessments to identify and address any potential risks.
• Secure Data Storage: Sensitive data is stored in encrypted format on servers protected by strict physical and digital security controls.

While a1one takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% secure. We encourage you to use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.

The a1one platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform usage patterns. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences — such as language, display settings, and game preferences — so you don't have to reconfigure them every time you use the platform.
• Analytics Cookies: Helping us understand how users interact with the a1one platform — which pages are visited most often, which features are used most, and where potential technical issues may arise.
• Security Cookies: Helping to identify and prevent suspicious activity such as unauthorised login attempts or account access from unusual locations.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the a1one platform.

A1one retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. Retention periods vary depending on the type of data:

• Active Account Data: Retained for as long as your account remains active on the a1one platform.
• Financial Transaction Data: Retained for a minimum of 7 years as required under Malaysian financial and tax legislation.
• KYC Data (Identity Verification): Retained for a minimum of 5 years after account closure in accordance with anti-money laundering compliance requirements.
• Platform Activity Log: Retained for 12 months for security and dispute resolution purposes.
• Customer Support Records: Retained for 2 years after case resolution for reference and service improvement.
• Marketing Data: Retained until you withdraw consent or close your account, whichever comes first.

Once the specified retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a user of the a1one platform and a data subject under Malaysian data protection law, you have the following rights regarding your personal data:

The a1one platform is not designed for and cannot be used by any individual under the age of 18. We do not knowingly collect personal data from minors.

Every a1one account registration requires age and identity verification. If we determine that data has been collected from an individual under 18 years of age, we will promptly delete that data and close the account without notice.

A1one reserves the right to amend, update or replace this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements or technological developments.

When we make material changes to this Privacy Policy, we will notify you via:

• In-platform notifications on a1one when you are logged in
• Email to the address registered to your account
• Updates the "Last Updated" date at the top of this document

Your continued use of the a1one platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns or complaints about how a1one handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels:

• Data Protection Email: privacy@a1one.app
• General Customer Support: support@a1one.app
• LiveChat: Available 24/7 on the a1one platform
• Frequently Asked Questions: Visit the a1one FAQ for answers to frequently asked questions

We are committed to responding to all privacy-related enquiries within 5 business days. For requests requiring specific action, such as data access or deletion, the processing period is 21 working days from the date a completed request is received.