Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how 1play ("we", "us", "our", "the Platform"), operating the online casino and sports betting platform at https://1play.cam, collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the 1play Platform and its associated services.

1play is committed to safeguarding the privacy of all Users. We process personal data in accordance with applicable data protection legislation and the principles of transparency, proportionality, purpose limitation, and data security. This Policy applies to all data processing activities carried out in connection with your use of the 1play Platform, whether accessed via desktop or mobile browser.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, all of which form part of the contractual relationship between you and 1play.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3Categories of Personal Data We Collect

1play collects personal data across several categories depending on how you interact with the Platform. The table below sets out the categories of data we collect and the context in which they arise.

4How We Collect Personal Data

We collect personal data through the following means:

4.1 Direct Collection

Data you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal using Malaysian payment methods including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Public Bank, or Hong Leong Connect, contacting our support team, or participating in any promotion.

4.2 Automated Collection

Technical and behavioural data collected automatically when you access and use the Platform, including data collected via cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for our full Cookies Policy.

4.3 Third-Party Sources

Identity and fraud-risk data may be received from authorised KYC and identity verification service providers, fraud prevention agencies, and, where legally required, government or regulatory bodies. Data from these sources is used only for the purposes of verifying your identity and complying with anti-money laundering obligations.

5How We Use Your Personal Data (Data Processing)

1play processes your personal data for the following specific purposes. Each purpose is matched to a lawful basis, which is described in Section 6.

• Account Management: Creating, maintaining, and administering your 1play Account, including processing logins, account settings, and two-factor authentication.
• Payment Processing: Facilitating deposits via Malaysian payment platforms and processing withdrawal requests to your verified payment method in MYR.
• Identity Verification (KYC): Verifying your age (21+), identity, and payment method ownership in compliance with our terms and applicable obligations.
• Anti-Money Laundering (AML): Monitoring transactions for suspicious activity, conducting due diligence checks, and reporting to relevant authorities where legally required.
• Customer Support: Responding to your inquiries, resolving complaints, and maintaining records of support interactions for quality assurance.
• Responsible Gambling: Monitoring wagering behaviour for signs of problem gambling and administering self-exclusion, deposit limits, and cooling-off requests.
• Platform Security: Detecting and preventing fraud, unauthorised account access, and other security threats using technical and behavioural data analysis.
• Service Improvement: Analysing aggregated, anonymised usage patterns to improve the Platform's features, game offering, and user experience.
• Marketing Communications: Sending you relevant promotional offers, bonus notifications, and seasonal campaigns where you have consented to receive such communications. You may opt out at any time.
• Legal Compliance: Meeting our obligations under applicable law and cooperating with regulatory and law enforcement authorities where required.

6Legal Basis for Processing

All processing of personal data by 1play is carried out on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 1play — most importantly, to operate your Account, process payments, and deliver the Platform's services.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC, AML obligations, and regulatory reporting duties.
• Legitimate Interests: Processing serves 1play's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Where you have given explicit, informed consent to a specific processing activity — such as receiving marketing communications — we will rely on that consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

7Data Sharing & Third-Party Disclosure

1play does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: Payment gateways and financial institutions facilitating your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Connect, and cryptocurrency networks.
• KYC & Identity Verification Partners: Authorised third-party service providers that assist in verifying your identity and age as part of our KYC and AML compliance programme.
• Fraud Prevention Agencies: Specialist organisations that help us identify and prevent fraudulent activity, where we have a legitimate interest to do so.
• Technology Service Providers: Cloud hosting, data storage, analytics, customer support software, and cybersecurity providers who process data on our behalf as Data Processors under data processing agreements.
• Regulatory and Law Enforcement Authorities: Government agencies, financial intelligence units, and law enforcement bodies where we are legally required to disclose personal data.
• Professional Advisers: Lawyers, auditors, and accountants where disclosure is necessary for the exercise of their professional services and subject to professional confidentiality obligations.

All third-party Data Processors engaged by 1play are required to implement appropriate technical and organisational measures to protect your personal data and to process it only on 1play's documented instructions.

8Cookies & Tracking Technologies

The 1play Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session state, analyse usage patterns, and support fraud detection mechanisms.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security cookies that detect fraudulent use. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised information about how Users navigate the Platform — which pages are visited most frequently, session duration, and error logs. This data is used to improve the Platform's design and performance.
• Functional Cookies: Remember your preferences such as language settings, game display options, and deposit method defaults to provide a more personalised experience.
• Marketing & Targeting Cookies: Used only where you have consented, to record visits and enable the delivery of relevant promotional content. You may withdraw consent for marketing cookies at any time by adjusting your browser settings or contacting our support team.

You can manage or disable most cookies through your browser settings. Note that disabling strictly necessary cookies may impair your ability to access and use the Platform.

9Data Security

1play implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Two-factor authentication (2FA) available and strongly encouraged for all Player Accounts.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular internal security audits and vulnerability assessments.
• Incident response procedures to detect, contain, and remediate data security breaches in a timely manner.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 1play will notify you without undue delay via your registered email address, and will take immediate steps to contain and remediate the breach.

10Data Retention

1play retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account's active status plus a post-closure period required for legal and regulatory compliance.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, as required by standard financial record-keeping and AML obligations applicable in the Malaysian context.
• KYC & Identity Documents: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in line with anti-money laundering compliance requirements.
• Customer Support Records: Chat transcripts and support tickets retained for a minimum of three (3) years for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the period during which you remain subscribed, plus a reasonable post-unsubscribe period sufficient to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting anonymised data sets may be retained indefinitely for aggregated analytics and reporting purposes.

11Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by 1play. You may exercise any of these rights by contacting our support team at [email protected].

We will respond to all verifiable data subject requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for the delay.

12Third-Party Links & External Services

The 1play Platform may contain references to third-party payment services — such as Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow, and similar Malaysian financial service providers — that operate under their own privacy policies and terms of service. When you initiate a transaction through any of these third-party payment gateways, you will be subject to that provider's own privacy practices.

1play is not responsible for the privacy practices or the content of any third-party services. We encourage you to review the privacy policies of any third-party service providers you use in connection with your 1play Account, including your bank or e-wallet provider.

13Children's Privacy and the 21+ Requirement

The 1play Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. The minimum age for gambling services on 1play is 21 years, in keeping with internationally recognised standards for responsible online gambling.

If you believe that a minor has accessed or registered on the 1play Platform, please contact us immediately at [email protected] so that we may take appropriate action.

14Amendments to This Privacy Policy

1play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. The effective date at the top of this page will be updated whenever the Policy is revised.

Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — we will notify you in advance via the email address registered to your Account and/or by displaying a prominent notice on the Platform. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how 1play protects your information.

15Contact Us — Data & Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about how 1play handles your personal data, please contact our support team through the following channels. All privacy-related enquiries will be handled with the appropriate level of care and confidentiality.

• Live Chat: Available 24/7 directly on the Platform at https://1play.cam — for urgent privacy concerns, state "Privacy Enquiry" at the start of your chat session.
• Email: [email protected] — please use the subject line "Privacy Request — [Your Username]" for data subject rights requests.
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and resolve verifiable data subject rights requests within 30 days.
• Languages: Privacy enquiries may be submitted in English, Bahasa Melayu, or Chinese. All responses will be issued in English.

1play serves players throughout Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, Kota Kinabalu, and Kuching. Our support team is available around the clock to assist with any data and privacy matters.