One Bet Privacy Policy – Personal Data Protection Commitment for Malaysian Players

Welcome to the Privacy Policy one bet. This document forms part of our commitment to the transparency and trust we have built with the Malaysian player community since 2018.

When you register and use the one bet platform — whether to bet on the Malaysia Super League, play at a live casino, try the latest slots, or place a wager on a Mobile Legends e-sports match — you are entrusting us with some of your personal information. We do not take that trust lightly.

This Privacy Policy clearly and transparently outlines:

• What personal data we collect from you.
• The purposes for which that data is used.
• Who data may be shared with and under what circumstances.
• How we protect your data from unauthorised access.
• What rights you have regarding your personal data, and how to exercise them.

This policy applies to all users of the one bet platform, including website visitors, registered members, and former members whose data remains in our systems. By continuing to use one bet's services, you agree to the terms of this Privacy Policy.

One bet collects personal data from you through several different methods. Below are the full details of the types of data we collect:

A. Data You Provide Directly:

• Registration Data: Full name, Malaysian phone number, email address, date of birth, and the password you set when registering your one bet account.
• Identity Verification (KYC) Data: A copy of your identity card (MyKad), proof of address, and other information required for the Know Your Customer process.
• Financial Data: Bank account number, e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), or DuitNow details linked to your account for deposit and withdrawal purposes.
• Communication Data: The content of messages you send to our customer support team via live chat or email.

B. Automatically Collected Data:

• Device & Technical Data: IP address, web browser type, device type, operating system, screen resolution, and other technical information automatically transmitted by your device.
• Platform Activity Data: Login records, betting history, game history, deposit and withdrawal transactions, and general account activity.
• Cookies & Tracking Data: Information collected through cookies, pixels and similar tracking technologies to enhance the user experience and analyse platform performance.

One bet uses collected personal data solely for the following legitimate and stated purposes. We do not use your data for any other purpose without first obtaining your additional consent:

• Account Management: Creating, verifying, managing, and securing your one bet account. This includes the login process, two-factor authentication, and password recovery.
• Transaction Processing: Processing your deposits and withdrawals securely and accurately via supported Malaysian payment methods.
• KYC and AML Compliance: Meeting the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements set by regulatory authorities.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to you.
• Platform Security: Detecting and preventing fraudulent activity, system abuse, and security threats that may affect you or other players.
• Service Improvement: Analysing usage patterns to understand how players use the platform and drive continuous improvements.
• Service Communications: Sending important notifications regarding your account, changes to terms, security issues, and critical service information.
• Marketing (with consent): Sending information about one bet promotions, bonuses, and offers — only if you have opted in to receive marketing communications.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and provide appropriate support.

Your personal data is stored on secure servers with multi-layered protection. We use cloud service providers that hold internationally recognised security certifications.

Data Retention Period:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure, in accordance with Malaysian legal requirements.
• Financial Transaction Data: Retained for 7 years in compliance with applicable Malaysian accounting and AML legal requirements.
• Log & Activity Data: Retained for 2 years for security and dispute resolution purposes.
• Customer Support Data: Retained for 3 years from the date of last interaction.
• Cookies Data: Session cookies expire immediately when you close your browser. Persistent cookies are stored for the duration specified in our cookie settings, typically no longer than 12 months.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. In some cases, data may be anonymised and retained for analytical purposes in a form that cannot be linked back to your identity.

One bet does not sell your personal data. We only share data in the following circumstances, and only to the extent necessary:

• Payment Service Providers: Data required to process your transactions is shared with payment processors such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX-supported banks. Such sharing is limited strictly to the data needed to complete the transaction.
• Game Providers: Minimal technical data is shared with third-party game providers (such as Evolution Gaming and Pragmatic Play) that supply gaming content on our platform.
• Legal Authorities: one bet may be required to disclose data to Malaysian authorities (such as the police or courts) when mandated by law, court order, or in connection with a financial crime investigation.
• Technical Service Providers: Certain data is shared with technical service providers (cloud hosting, IT support) who operate under strict confidentiality agreements with one bet.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to notification to users.

All third parties that receive data from one bet are contractually bound to protect that data to a standard at least equivalent to the protection we provide.

The one bet platform uses cookies and similar tracking technologies to enhance the user experience and understand how players use our services. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies (Required): These cookies are necessary for core platform functions such as login sessions, security, and language preferences. Without them, the platform will not work properly. These cookies cannot be disabled.
• Performance & Analytics Cookies: We use analytics tools to collect data on how the platform is used — including the most visited pages, time spent in each section, and errors encountered. This data is used in aggregate form to improve the platform.
• Functional Cookies: These cookies remember your preferences — such as language, display currency, and other settings — to provide a more personalised experience.
• Marketing Cookies (with consent): If you consent, we use these cookies to display relevant one bet advertisements and offers to you.

You can manage your cookie preferences through your web browser at any time. However, disabling certain cookies may affect the functionality of the one bet platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by one bet. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, send a written request to support@onebet-play.net with the subject line "Personal Data Rights Request". Please include your one bet account number and sufficient identity verification. one bet will respond within 21 days of receiving a complete request.

One bet applies multiple layers of technical and organisational safeguards to protect your data from unauthorised access, misuse, loss, or damage:

• Data Encryption in Transit: All communications between your device and one bet's servers are protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as passwords and financial information is stored in encrypted form using robust hashing algorithms.
• Strict Access Controls: Only one bet staff with a legitimate business need are permitted to access user data. Access is monitored and logged for audit purposes.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for your account as an additional layer of security.
• 24/7 Security Monitoring: Our systems are continuously monitored to proactively detect and address security threats.
• Regular Penetration Testing: We conduct regular security audits with independent third parties to identify and address vulnerabilities.

While we take every reasonable precaution, no digital system is 100% secure. In the event of a data breach affecting your data, one bet will notify you within 72 hours of becoming aware of the incident, in line with industry best practices.

In some cases, your personal data may be transferred to or processed in countries other than Malaysia — for example, when we use cloud services or international software providers whose servers are located outside Malaysia.

When such data transfers occur, one bet ensures that:

• The recipient country or entity provides an adequate level of data protection.
• Appropriate data transfer agreements are in place, including internationally recognised standard contractual clauses.
• Data transfers occur only to the extent necessary to provide services to you.

One bet does not transfer your personal data to countries that lack adequate data protection without first putting in place appropriate contractual safeguards.

The one bet platform is intended solely for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover or suspect that personal data has been collected from a person under the age of 18, we will take immediate steps to:

• Immediate suspension of access to the account in question.
• Permanently deleting all associated personal data from our systems.
• Reversing all transactions that have taken place on that account.

If you are a parent or guardian and believe your underage child has registered an account on one bet, please contact us immediately at support@onebet-play.net and we will respond promptly.

One bet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or new technological developments.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this document.
• Sending email notifications to all active registered members.
• Displaying a prominent notice on the one bet platform homepage for at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we manage your data. Continued use of the one bet platform after any changes to this Privacy Policy take effect will be considered acceptance of those changes.

For any enquiries, concerns, or requests relating to this Privacy Policy or how one bet handles your personal data, please contact us through the following channels:

• Email: support@onebet-play.net (with the subject line "Privacy Policy Enquiry")
• Live Chat: Via the one bet platform, available 24/7
• Target Response Time: Within 2 business days for general enquiries, and within 21 days for formal data rights requests.

The one bet customer support team communicates in Bahasa Malaysia and is ready to help you understand your rights and how to exercise them. No question is too small — we welcome any feedback that helps us improve our privacy practices.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection, Ministry of Communications and Digital Malaysia which is the PDPA regulatory authority in Malaysia.