This Privacy Policy explains how we1wen collects, uses, stores, and protects your personal information when you use the we1wen platform, services, and website at we1wen.best. This document applies to all we1wen members and platform users in Malaysia.
We1wen is fully committed to protecting the privacy of our members. We operate in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and take our responsibilities as a data controller seriously. By registering for or using the we1wen platform, you agree to the collection and use of information as described in this Privacy Policy.
Key Summary: we1wen does not sell, rent or disclose your personal data to third parties for marketing purposes. Your data is used solely to provide platform services, process MYR transactions, maintain account security and comply with Malaysian legal requirements.
01
Personal Information We Collect
We1wen collects various types of information depending on how you use our platform. All data collection is carried out on a minimum-necessity basis — we only collect what is genuinely required to deliver our services safely and effectively.
Information you provide directly:
- Full name as stated on your Malaysian identification document (MyKad or passport)
- Email address and Malaysian mobile number
- Date of birth (for 18+ age verification)
- MyKad or passport copy (for the KYC process)
- Payment account details for methods such as Touch 'n Go eWallet, GrabPay, DuitNow, or your FPX banking account number
- Account password (stored as an encrypted hash — we have no way of reading your password)
Automatically collected information:
- IP address and device type used
- Web browser type and version
- Pages visited and session duration
- Gaming activity and transaction logs (required for winnings verification and dispute resolution)
- General geolocation data (state/city) for regional verification and legal compliance
Note: we1wen does not collect biometric data, medical information, or any other category of sensitive personal data unless specifically required by Malaysian law for compliance purposes.
02
How we1wen Collects Personal Data
We1wen collects personal data through a number of defined channels. We ensure all collection methods are transparent and that you are always aware of what data we collect.
- Registration Form: When you first create a we1wen account, you will be asked to provide the basic information required.
- KYC Process: During identity verification, you will be asked to upload a copy of your Malaysian identification document.
- Gaming Activity: Our systems automatically record gaming activity, betting and transaction history for platform integrity purposes and dispute resolution.
- Support Communication: When you contact our support team via live chat, WhatsApp or email, the content of those communications may be retained for quality control and issue resolution purposes.
- Cookies & Web Technologies: The we1wen website uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. Further details are set out in Section 8.
Fraud Warning: we1wen will never ask for your password, PIN, or full credit card details via email, SMS, or Live Chat. If you receive such a request claiming to be from we1wen, please do not comply and report it to us immediately at support@we1wen.best.
03
Purpose of Personal Data Use
We1wen uses collected personal data solely for legitimate, stated purposes. We do not use your data for any purpose unrelated to the provision of platform services or legal obligations.
How your data is primarily used:
- Account Management: Creating, verifying and managing your we1wen account, including the login process and security verification.
- Transaction Processing: Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking.
- KYC Verification & Compliance: Meeting Malaysian legal requirements including age verification, fraud prevention, and anti-money laundering obligations.
- Platform Security: Detecting and preventing fraudulent activity, collusion, bot usage, and other security threats against the platform and its member community.
- Dispute Resolution: Investigating and resolving any complaints or disputes related to gameplay or transactions.
- Product Improvement: Analysing aggregated and anonymised usage patterns to improve we1wen platform features and user experience.
- Service Communications: Sending important notifications regarding your account, security, terms changes, and platform updates.
- Marketing Communications: With your consent only — sending you information about we1wen bonuses, promotions, and the latest offers.
04
Sharing Personal Data With Third Parties
We1wen does not sell or rent members' personal data to any third party. However, there are limited situations where we1wen may need to share certain data with specific parties solely to enable our services to operate or to comply with applicable laws.
Parties that may receive limited data from us:
- Malaysian Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions receive only the minimum information required to process transactions in MYR. This data is governed by the respective provider's privacy policy.
- Technical Service Provider: Companies providing technical infrastructure, cloud computing, or cybersecurity services to we1wen are bound by strict confidentiality agreements and may only process data in accordance with our instructions.
- Malaysian Authorities: we1wen will disclose data when required by Malaysian law, a valid court order, or an authorised law enforcement agency — after verifying the legitimacy of the request.
- Auditors & Professional Advisors: In the context of business audits or legal advice, professional advisors may be granted limited access to relevant data, subject to their professional confidentiality obligations.
Written Guarantee: we1wen has never sold and will never sell member data to data brokers, third-party marketing companies or any other commercial entity for marketing, profiling or any purpose unrelated to the direct provision of we1wen services.
05
Data Security Measures
We1wen takes member data security seriously. We employ multiple layers of technical and procedural protection to keep your data safe from unauthorised access, loss, or accidental disclosure.
Technical security measures we implement:
- AES-256 Encryption: All stored data is encrypted with AES-256 — the same standard used by banks and financial institutions in Malaysia.
- Latest TLS/SSL: All communications between your device and we1wen's servers are secured with the latest TLS protocols to prevent data interception.
- Two-Factor Authentication (2FA): we1wen offers 2FA on all accounts for an added layer of security at login.
- 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect suspicious activity and unauthorised access attempts.
- Internal Access Controls: Member data is accessible only to staff who have been granted specific authorisation based on their role, with a full audit log maintained for every access.
- Regular Security Testing: Our servers and application code undergo regular penetration testing and vulnerability scanning.
Important: While we1wen takes all reasonable steps to protect your data, no system in the world is 100% risk-free. You also play an important role in your account's security — use a strong password, enable 2FA and never share your login credentials with anyone.
06
Personal Data Retention Period
We1wen does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. Our retention policy is as follows:
| Data Type |
Retention Period |
Reason |
| Basic Account Information |
Throughout active account + 7 years |
Malaysian legal requirements |
| MYR Transaction Records |
7 years from the transaction date |
Tax & Anti-Money Laundering Act |
| KYC Documents |
5 years after account closure |
Malaysian AML/KYC Compliance |
| Game Activity Logs |
2 years from the date of activity |
Dispute resolution |
| Support Communication Logs |
3 years from the date of communication |
Quality control & reference |
| Non-Essential Cookie Data |
Up to 24 months or until deleted |
Platform Analytics |
Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process follows methods that meet NIST SP 800-88 standards.
07
Your Rights as a we1wen Member
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have specific rights regarding the personal data we hold about you. we1wen respects and actively supports the exercise of all these rights.
How to Exercise Your Rights: To submit any request relating to your privacy rights, email we1wen's Data Protection Officer at support@we1wen.best with the subject line "PDPA Privacy Rights Request", along with your full name, registered phone number, and the type of request. We will verify your identity before processing the request.
08
Cookies & Tracking Technologies
The we1wen website uses cookies and similar tracking technologies to improve the user experience, analyse platform performance, and maintain session security. The types of cookies we use are as follows:
These cookies are required for the platform's core functions — session login, CSRF security, and page navigation. The platform cannot operate properly without them and they cannot be disabled.
Helps us understand how members use the platform — most visited pages, time spent, and technical issues encountered. This data is aggregated and anonymised — no individual is identified.
Saves your interface preferences — such as language, display settings, and notification options — so you don't have to reconfigure them each time you log in.
You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies may affect the functionality of the we1wen platform.
The we1wen platform is exclusively for individuals aged 18 years and above. we1wen strictly does not knowingly or intentionally collect, store, or process personal data of individuals under the age of 18.
All new account registrations go through a mandatory age verification process. Should we1wen discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and close the associated account.
To Parents & Guardians: If you have reason to believe that your child who is under the minimum age has registered a we1wen account, please contact us immediately at support@we1wen.best. We will investigate promptly and take immediate action to safeguard the child's well-being.
10
Changes to This Privacy Policy
We1wen reserves the right to update this Privacy Policy from time to time in line with changes to Malaysian law, technology, or our business practices. Members will be notified of any material changes through:
- Email notification to all registered members at least 14 days prior changes take effect
- In-platform notification upon next login
- Update the "Last Updated" date at the top of this document
Continued use of the we1wen platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes, you have the right to close your account before the effective date.
Contact our Data Protection Officer: For any questions, concerns, or requests relating to this Privacy Policy, please contact us at support@we1wen.best with the subject line "Privacy Policy Inquiry". We are committed to responding to all inquiries within 5 business days.