We1wi Privacy Policy for Malaysia Member Data Protection

01 Introduction

We1wi ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy ("Policy") clearly explains how we collect, use, store, disclose and protect your personal information when you register, log in or use any part of the we1wi platform — whether through our website, mobile app or any of our official channels.

This policy applies to all users of the we1wi platform, including general visitors, registered members, and VIP account holders. By continuing to use our platform, you confirm that you have read and agreed to this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

This policy should be read together with the Terms and Conditions and Responsible Gaming Policy we1wi which forms part of your overall agreement with us.

02 Data We Collect

We1wi collects various types of information depending on how you interact with our platform. The table below summarizes the main data categories we collect:

We only collect data necessary for legitimate purposes and do not collect excessive or irrelevant information. Sensitive data such as biometric information is not collected unless specifically stated and with your consent.

03 How We Use Your Data

We1wi uses collected information solely for legitimate and necessary purposes in operating the platform. The following are the primary purposes for which your data is used:

• Account management — registration, identity verification (KYC), maintenance and security of your account.
• Transaction processing — process deposits, withdrawals and any financial transactions within the platform.
• Service delivery — allows you to access the casino, sports betting, Live Casino and all features of the we1wi platform.
• Customer support — respond to inquiries, resolve complaints and provide technical support.
• Platform Security — detect and prevent fraud, money laundering and illegal activities.
• Legal compliance — fulfill regulatory obligations and report to authorities when required by law.
• Personalise your experience — deliver promotions, bonuses and relevant content based on your gaming habits.
• Platform improvements — analyze aggregated usage data to improve platform performance and user experience.

We1wi will not use your data for any purpose beyond what is stated here without first obtaining your consent or without a valid legal basis.

04 Data Sharing & Disclosure

We1wi does not sell, rent or disclose your personal data to third parties for commercial purposes. However, under certain legitimate circumstances, your data may be shared with the following parties:

• Payment service providers — such as FPX, Touch 'n Go eWallet and other providers that process your transactions. They are bound by strict confidentiality agreements.
• Game software providers — technology partners that provide games within our platform, who receive only the data necessary for game operations.
• Identity verification services — third parties that assist us in verifying member identities during the KYC process.
• Regulatory authorities — where required by law, court order or direction from a competent authority.
• Fraud prevention services — to detect and prevent illegal activity within the platform.

All third parties who receive your data are bound by strict data protection agreements and are not permitted to use that information for any other purpose. we1wi remains accountable for how your data is handled by third parties we appoint.

05 Data Security

Protecting your personal data is we1wi's highest priority. We implement comprehensive technical and organisational security measures to prevent unauthorised access, loss, destruction, or disclosure of your data.

• Data encryption in transit — all communications between your device and our servers are protected by 256-bit SSL/TLS encryption.
• Data encryption at rest — sensitive data stored in our databases is encrypted using industry-recognized encryption standards.
• Strict access controls — access to member data is restricted to authorized personnel only, based on the minimum necessary job requirements.
• 24/7 Monitoring — our security systems monitor platform activity around the clock to detect any anomalies or cyber threats.
• Regular security audits — we conduct regular penetration testing and security audits by independent experts.
• Two-factor authentication (2FA) — available to all member accounts as an additional layer of protection.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

06 Cookies & Tracking Technologies

We1wi uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance and maintain the security of your login sessions.

Types of cookies we use:

• Essential Cookies — required for core platform operations such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — collect information about how you use the platform to help us improve functionality and site speed.
• Functional Cookies — save your preferences such as language and display settings for a more personalized experience.
• Analytics Cookies — helps us understand aggregated usage patterns for platform improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality. we1wi does not use cookies to track your activity on external websites.

07 Your Rights as a Member

As a we1wi member, you have the following rights regarding your personal data under the Malaysia Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact our privacy team via live chat or support email. We will process your request within 30 business days. In complex cases, this period may be extended with notification to you.

08 Data Retention

We1wi retains your personal data only for as long as necessary to fulfill the purposes stated in this Policy or as required by applicable laws and regulations.

• Active account data — retained for the duration your account is active and for a reasonable period following account closure.
• Financial transaction data — retained for a minimum of 7 years for legal compliance and anti-money laundering (AML) audit purposes.
• KYC Data — retained for the period specified by the relevant regulatory authority, typically no less than 5 years.
• Support communication logs — retained for 3 years for reference and dispute resolution.
• Analytics cookie data — deleted or anonymized within 13 months from the date of collection.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. Please note that in some cases we may need to retain your data for longer if there is an ongoing dispute, investigation, or legal requirement.

09 Changes to Privacy Policy

We1wi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data management practices, new legal requirements or platform improvements.

When material changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying prominent notices within the platform to inform members of any changes.
• Sending notifications via registered email for significant changes.

You are encouraged to review this page periodically to stay informed about how we protect your privacy. Continued use of the we1wi platform after any amendments constitutes acceptance of the updated Policy.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the we1wi Privacy Officer through the following channels:

We1wi is committed to addressing all privacy-related complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory authority.