a1one Privacy Policy

1. Scope and Definitions

This Privacy Policy applies to personal information processed in connection with a1one. “Personal information” means information that identifies, relates to, describes, or can reasonably be associated with an identifiable person. It may include information supplied directly by a user, generated through use of a1one, or received from an authorised payment or verification provider.

“Processing” includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting, deleting, or otherwise handling personal information. References to “you” or “your” mean a visitor or eligible user of a1one.

2. Information a1one May Collect

Identity and account information

a1one may collect a legal name, date of birth, username, residential address, nationality, occupation, and account identifiers. Where KYC is required, a1one may process copies or details from identity documents, proof of address, facial verification, or other evidence reasonably needed to confirm age and identity.

Contact and communication information

This category may include an email address, mobile number, preferred language, communication choices, support enquiries, complaint records, and correspondence with a1one. Support conversations may be retained to resolve requests, train authorised personnel, prevent abuse, or maintain an appropriate service record.

Payment and transaction information

a1one may process deposit and withdrawal amounts, transaction references, payment method type, account-holder details, timestamps, balance changes, and review outcomes. This can include activity involving Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, or Hong Leong. a1one should not require a complete card security code or online banking password.

Device and usage information

Technical records may include an IP address, approximate location, device type, browser, operating system, language setting, referral data, session duration, pages viewed, error logs, and security events. a1one may use this information to maintain performance, investigate unusual activity, and understand how visitors in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations use the website.

Casino, sports, and responsible-play information

Where relevant, a1one may process game history, sports market activity, stake values, results, bonus participation, loyalty status, deposit patterns, limits, cooling-off requests, and self-exclusion records. Such information may help a1one administer services and identify activity that warrants a responsible-play interaction.

3. How Personal Information Is Collected

Information may be supplied directly when a user creates an account, completes verification, requests support, changes a setting, uses an MYR payment option, or communicates with a1one. Other information may be generated automatically as users browse pages, review EPL or Liga Super Malaysia content, inspect live-casino categories, or interact with security functions.

a1one may also receive information from authorised identity-verification services, payment processors, financial institutions, fraud-prevention tools, technical providers, or other parties involved in delivering a requested feature. Information received from another source remains subject to this policy when a1one controls its processing.

4. Purposes of Data Processing

a1one may process personal information for the following purposes:

• providing and maintaining website or account functionality;
• confirming identity, age, location, and payment ownership;
• processing deposits, withdrawals, reversals, and transaction enquiries;
• preventing fraud, account misuse, collusion, unlawful activity, and security incidents;
• responding to questions, complaints, and technical support requests;
• administering promotions, bonus conditions, rewards, and loyalty tiers;
• applying deposit limits, cooling-off periods, and self-exclusion controls;
• improving a1one performance, usability, accessibility, and content relevance;
• maintaining business, audit, accounting, and dispute records; and
• meeting legal or regulatory responsibilities where applicable.

a1one may rely on consent, contractual necessity, legitimate operational interests, legal obligations, or another recognised basis depending on the information and purpose involved. Where processing depends on consent, users may withdraw that consent, although withdrawal does not invalidate processing already completed.

5. Cookies and Similar Technologies

a1one may use cookies, local storage, session identifiers, or comparable technologies to remember preferences, maintain sessions, support authentication, measure performance, detect suspicious activity, and improve navigation. Some technologies may be necessary for security or core website functionality.

Users can control certain cookies through browser settings. Disabling necessary storage may cause login, language, preference, or security features to operate incorrectly. a1one does not interpret cookie data as proof that a user has won, lost, or should place a particular bet.

6. Disclosure of Personal Information

a1one does not disclose personal information merely because it may be commercially interesting. Information may be provided to carefully selected parties where reasonably necessary for a stated purpose. Such parties may include hosting providers, security specialists, payment processors, KYC services, customer-support systems, auditors, professional advisers, or responsible-play service functions.

a1one may also disclose information when required to respond to a valid legal request, protect users, investigate fraud, enforce applicable terms, defend a legal claim, or address a serious security incident. Only information relevant to the applicable purpose should be disclosed.

If business ownership or operational control changes, information may be transferred as part of a legitimate restructuring, merger, acquisition, or asset transaction, subject to appropriate confidentiality and data-protection measures.

7. International Data Processing

Some providers supporting a1one may process information outside Malaysia. Privacy and data-protection rules can differ between countries. Where an international transfer is necessary, a1one seeks to use appropriate contractual, organisational, or technical safeguards suitable to the nature of the information and the transfer.

International processing does not remove the responsibility to use information only for authorised purposes. Access should remain limited to personnel and providers who require it for their duties.

8. Data Security

a1one applies reasonable controls intended to protect confidentiality, integrity, and availability. These controls may include access restrictions, encryption in transit, monitoring, authentication, staff procedures, backups, incident response, and supplier reviews. No internet-based system can be guaranteed completely secure, and users should take suitable precautions.

9. Data Retention

a1one retains personal information for as long as reasonably needed for the purpose for which it was collected. Retention periods can depend on account status, transaction history, verification requirements, security investigations, complaints, legal obligations, and the need to enforce responsible gambling restrictions.

Some information may remain necessary after an account becomes inactive. For example, self-exclusion records may be retained to prevent circumvention, while payment and dispute records may be kept for accounting, fraud-prevention, or claims purposes. When information is no longer needed, a1one may delete, anonymise, or securely isolate it.

10. User Rights and Choices

Depending on applicable requirements and the circumstances of a request, users may have rights concerning their personal information. Identity verification may be required before a1one responds, helping prevent information from being disclosed to an unauthorised person.

These rights are not absolute. a1one may need to retain information to complete a transaction, investigate misuse, maintain self-exclusion, respond to a claim, or meet an applicable obligation. Where a request cannot be fulfilled, a1one may explain the relevant reason.

11. Responsible Gambling and Sensitive Decisions

a1one may review account and transaction patterns to identify indicators of possible harm, unusual financial activity, age concerns, or attempts to bypass an existing restriction. A review may lead to a safer-play message, a request for information, a limit, a temporary pause, or account restriction where appropriate.

Deposit limits, cooling-off periods, and self-exclusion records may be used to enforce the user's selected protection. a1one will not remove an active restriction merely to enable access to a promotion. Further information is available through the Responsible Gambling page.

12. Information Concerning Minors

a1one is not intended for children or anyone below the applicable minimum age. Casino-style gambling is restricted to eligible adults aged 21 and above. a1one may request evidence of age and restrict access when age cannot be satisfactorily verified.

If information appears to relate to an underage person, a1one may investigate, suspend relevant functionality, and delete information where appropriate, subject to any security or legal reason requiring limited retention.

13. Changes to This Privacy Policy

a1one may revise this policy when services, security practices, payment methods, legal expectations, or data-processing activities change. The updated policy will display a revised effective date. Users should review this page periodically to remain informed about the a1one approach to privacy.

Where a change materially affects the handling of personal information, a1one may provide an additional notice through an appropriate website or account channel.

14. Contact Us

Privacy questions or requests should describe the issue clearly and identify the relevant account where necessary. Do not include a password, one-time security code, or unnecessary full payment credentials. a1one may request reasonable identity confirmation before responding to a personal-data request.